040)) [ 63.892869] capability: warning: `syz-executor2' uses deprecated v2 capabilities in a way that may be insecure 2018/03/20 23:58:26 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000140)={0x0, 0x101}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x5) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) recvfrom$ipx(r1, &(0x7f0000000180)=""/212, 0xd4, 0x2, &(0x7f0000000280)={0x4, 0x7ff, 0x3, "13a510afaee9", 0x8000}, 0x10) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @multicast1=0xe0000001}}, 0x1e) ioctl$KDDISABIO(r0, 0x4b37) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000100)=':\x00') 2018/03/20 23:58:26 executing program 2: keyctl$session_to_parent(0x12) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:26 executing program 6: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000180)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000002c0)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@ipv4_newroute={0x3c, 0x18, 0x400, 0x70bd2a, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x4, 0xfc, 0x0, 0xfd, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_PREFSRC={0x8, 0x7, @local={0xac, 0x14, 0x14, 0xaa}}, @RTA_PREFSRC={0x8, 0x7, @remote={0xac, 0x14, 0x14, 0xbb}}, @RTA_IIF={0x8, 0x1, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000004c0), &(0x7f0000000500)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f00000003c0)="8c2f13d63de1bce617cffee1cdc6a74a223a1e3a882aefc3610421a98ff8be37d51ac8c07d47785a85453145a01f5b0b16abe8200b68d34d7fdae2d2d47bad9a4c8bb39da8692124d5d956c91d12ccdf08cbffb3799eb84cfaac94e564836c65f0b747ac41ad994afaeabb12b78a3cc01f4b8596d54ae921ba240f40f1e012e1efb7aa2c2a45a9d577d47aed6a00824cf54810c14e43b5a2113d64d9b4eda8b51a0df19ba9bfa3a3c1946887f4a0fc9c550b442a0442c56ee9c569f87eeeb411b13a0bcdd4dfd85d8ecc9c92b279df6f26172e4815ee6c53fa2ba3e3e0ec402cfde2cf822eeb2008d70cfbdf11aedcadcc39") 2018/03/20 23:58:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x3, &(0x7f0000000080)={r1, r2+10000000}) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x2d) 2018/03/20 23:58:26 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$invalidate(0x15, r1) close(r0) 2018/03/20 23:58:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000040)={0x7, 0x0, [{0x5}, {0x1ff, 0x0, 0xbf}, {0xbb, 0x0, 0xffff}, {0x9, 0x0, 0x85}, {0x10000000, 0x0, 0x10000006e8}, {0x3, 0x0, 0x1}, {0xffff}]}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x80000) connect$rds(r1, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) 2018/03/20 23:58:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffd) syncfs(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:26 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) dup(r0) 2018/03/20 23:58:26 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000040)={0x0, 0x1, 0xfffffffffffffffe, 0x1, "374fd41b316b6168c0afd9f842eea93ea631be451003ccfc20af5130e263f4c7bec4c767bce1fb630bfc7e2a", 0x1ff}) 2018/03/20 23:58:26 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x2, 0x8, 0x7ff, 0x8, 0x5, 0x6}) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:26 executing program 6: r0 = open(&(0x7f00000000c0)='./file0\x00', 0x80, 0x183) getsockname$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, &(0x7f0000c91000)=ANY=[@ANYRES32], &(0x7f0000e6bffc)='GPL\x00', 0xfffffffffffffffd, 0x99, &(0x7f0000000000)=""/153, 0x41000}, 0x48) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000180)=""/192) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000280)=0x14) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x7, 0x30}, &(0x7f0000000300)=0xc) 2018/03/20 23:58:26 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400ff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:26 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f0000000140), 0xffffffffffffffc7) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) pkey_alloc(0x0, 0x1) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) r1 = gettid() r2 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000180)={@remote, @rand_addr, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [0xff, 0xff]}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e24, 0x3, 0x4e23, 0x7, 0xa, 0x80, 0x20, 0x89, r3, r4}, {0x9, 0xf61c, 0x0, 0x7, 0x6, 0x1000, 0x5df, 0x1}, {0xeb0, 0x1f, 0x100, 0x200}, 0x20, 0x6e6bb1, 0x1, 0x0, 0x2, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x1a}, 0x4d4, 0xff}, 0x2, @in6=@loopback={0x0, 0x1}, 0x3505, 0x3, 0x3, 0x4, 0x4, 0x5e0e, 0x100}}, 0xe8) accept4$inet6(r2, &(0x7f0000000600)={0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x1c, 0x80800) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f0000000e40)={"bc03734d5d41700dc0ff8b709ebb257491bf29118c41d41b2d3e01940f9643f2f65561b89701ab7bca056d530bae7ae0202040f9dc0857db22861a1c672ed9881b2501d4270865bc876ec9df2b6714ba9f7b703cb35b0f7fa4546c82083d65d4e7e61ae9739299f8e41824556c5314ac44c4d359214caf77e03b00e7c8359f7153f5fd045bfdbd09a45e038cb3b042f4f9df4adee76c7198df08f4ae00a330dbeeb217bed55fe7e69dec0f02031d6c4f4ddc5699c2fe1fd7245d575bedef5f8443ea2fcb06567d34211d6452467b8d0cf98ea4bd767c4002682e6acf896903d486730cfc11360d8c274060627c1efaccab001e46e26b817bbb95cbac496f1897d871f6394d26423f8ab47f2d9e46404d0c1b33c76e0d480480fa3f90250902bfd088fdd27f5272f24b823a0ff542be62f97b3a7c690f5ae9298727dd8f1525e5a712151cd5a7fd286b3a4887cb61de2e67221786a5c1338ec3b7cf950d1d507a1ba4092bb4fdd1b338390459b368c65ffd7566010d0a80e9ecbabfdf00000000000000005f0bcdc0dde4697b70d0cb306087116815523922f893971e5968497a55936d6a5b20ce65a938e493796fc1d49af4fc21be37c63120a604a02330c2f9715273078ab250caea1791e44a43d783d20a3f87c22b83ba5752c0e9e3c4fd8bbb1966791528141b67cd8b909b179176d66b904ef784397a4654083fd4099e1c31fc7cb3dd352d46a5b6a0c2c28306c2fc339c5ef993e3c562ce104f537f302eba1fd5ceac8a1a6d1eaaa4e96ea07c7ab6fb42a1f4796297d786fa2c06a6ec1b1e4345a70df76a004f234dc59f0b272c31f814c32a25a707735df4aee2105a9a31da6f75c715cff48e4e276e513292e13945b5966d8818fff139cd13f0f75bbcb45f2efe03b98658ee5a0dca8d4da214366206738ab6e6f047f700d1aa4959e656615c39717b0ec091c273c3866e22e9f6c5cf21c563a072ba16baecd1de44a8bbb5de70b45730aa4945fb70f338dc06bd45ac955339293005ebfe5a1fe9b42a79cf0f9b85803528185ade749926b9f66b06f84ee587c1f3245b7c8b34cbf37f29ed2965aedf6ad76656570c5c4058ecf88895f3b2fd0c51a3fc118eb121074aad2cffa2b577c704e2c62156cbe08b29bd5fdd4b4aec8c839b89792d52727502edc2f853d8010589d7376977630060971c3d8927138e7226961acf9735b8a2ff9d283262ea6d6532bcf28b93f5235d66b664a2de820f1a4feecddf4d7754f2626a371734e9df7b64812b4ac356af5a5437efdc970d5ea2afd216379ddfb3334a264b86db1a87fa522a8f7fcc328878c1096ee801faa40ad278605880e0d7e93e8dfff1841e9717d9abbe6f6e54973d411e21b6eb7b35401d650824cd32e74e051354c70ba021fa06156f666e2be51a15b28b3724eebea22ebbb07938dce3a00e"}) r6 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x8040, 0x1) kcmp$KCMP_EPOLL_TFD(r1, r5, 0x7, r0, &(0x7f00000000c0)={r6, r0, 0x7f}) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:26 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) setpriority(0x1, r0, 0x7) openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:26 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000040)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"c2752ab34500000000d809881301e710", 0x4102}) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2, 0x101000) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000140)={0x6, r0}) renameat(r1, &(0x7f0000000100)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00') ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) lseek(r2, 0x0, 0x0) 2018/03/20 23:58:27 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x40}, &(0x7f0000000180)=0x8) 2018/03/20 23:58:27 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000003d000000000000f10000000000000024908c97c4e6899396157d8737843d68a7fbd84bffa8891b3cbb9265560e505359ad94f6d954d0cbedf6e0d84b4111ea1f"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x10000, 0x0) setsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000100)=0xfffffffffffffaac, 0x2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f0000000140)={0x0, 0x90, 0x9666, 0x1, 0x0, 0x2, 0x81, 0x200, 0xf, 0x5}) 2018/03/20 23:58:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x5, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:27 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f00000000c0)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)) 2018/03/20 23:58:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0xa00, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) sched_getaffinity(r1, 0x8, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ifb0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000000c0)=r2) 2018/03/20 23:58:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r1 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000001c0)={@my=0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x103) close(r0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000100)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000140)={r3, r4}) lseek(r0, 0x0, 0x0) 2018/03/20 23:58:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000040)=ANY=[@ANYBLOB="00e90000000000001b58c3bc21b78501ee25a27c72d6837dec2e434e134e3cb0d376ae"]) 2018/03/20 23:58:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$sock_ifreq(r0, 0x8923, &(0x7f0000000040)={'bond0\x00', @ifru_mtu=0x9}) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:27 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={0x0, 0x20, 0x2, [0x271, 0x6]}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f00000001c0)={r3, 0x7fff, 0x6c, "ea823950488508836134f941528429fd8d308a7a76d3f7a7613016fcf18da691b99ea129991009b1629a5e80e08015d6d87bf861fc95b953f115865125ae589d90053f7f39cd1ec93758eae3bff8d08bc98efb96ccdcb13bede34f25f8613f23f23538cce26215123422c6a8"}, 0x74) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x1c) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000240)={'bridge0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) connect$netrom(r0, &(0x7f0000000280)=@full={{0x3, {"20be9ce6d821b9"}, 0x9}, [{"a892f282055211"}, {"d73fc40d2dbcd8"}, {"bfef838a506baf"}, {"194d4d17863b43"}, {"e85d18c6689645"}, {"6f7dd4d4b231a5"}, {"d9dc139b7d622a"}, {"d54a3ad10f7282"}]}, 0x48) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0xfffffffffffffffd, 0x4) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:27 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) 2018/03/20 23:58:27 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x4, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000080)={'bcsf0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x5, 0x2, [0x2, 0x1]}, 0xc) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030e) close(r0) 2018/03/20 23:58:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x7, 0x80000) ioctl$KDSETLED(r1, 0x4b32, 0xd63) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x2, 0x7, 0x2, 0x800}, 0x8) ioctl$TIOCLINUX4(r2, 0x541c, &(0x7f00000000c0)=0x4) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000400)=""/245) 2018/03/20 23:58:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000040)={0x0, 0xffffffff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:27 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfff, 0x80) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x8}) [ 64.878243] binder: 8993:8996 ioctl 80404509 20000400 returned -22 2018/03/20 23:58:27 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x200, 0x0) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000040)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d0000000000000095e6ff0000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) accept4$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'erspan0\x00', r2}) close(r1) 2018/03/20 23:58:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = add_key(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000100)="c5de18cdcee8d265f05549581181bc7ef93d12f87fea8562f5460fd2031e384bd7f7a20452d5483c49d6bae15f9c65aae08876f7e5311cfaf36df32dcbe349b1be8fe17268a07e363fc2ae4481c5d83748808034dfce664e98b128f2b7a42e83a94831a62d61fcacf549971658fbda1480f5aa75d5dc28b93e273fd52de6933350574cdd43e8713fdd8805eea9af663a7d46d8c389ff", 0x96, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000440)='blacklist\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000004c0)="ad69fac2cba42e54f87d81c4c214d96c7511ba7558a76f9f5b0268e0043f39d99c95263a55695f50fb8c102791f4d423378d3af6d2eebc2e2284c713b11ddef4194acac3b51ef7deb6f35d86813b22afa67700a170ea022af3327f9e71f4e913bb399a44c547f4da081fdf3cf21a", 0x6e, 0xfffffffffffffffd) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000400)=[{&(0x7f00000001c0)="5b6d7fa88802ec4d1a7b2be933d24d09eb3bb715a192c6512ef418a21bc559d8527a65418cc0033c6c14191e4fdb3bcb4e33cf33a626cab6d906948daea66bd9389b09796774a6763884742186b9b944b3625de0a6f7a4672a8a5b0fe0bfffbddae14fc20f2889e644f09764f161c7", 0x6f}, {&(0x7f0000000240)="c09d2c24ea5063d7fd4b3850baf9ac0422099eb3e21378af62f835a762e4cd888d521328b9291594d35f7c5a8e3faed014746f8929737618214b6df414f1fa62b7a3abf446f0990f20652bff96eee2dd082ace0cbf4e54399fdf2b83664117afb519848ca1ffdafa43643cf08f1fc977a43e9dba38add71e565dd0885214940534cea50ed3823070383ef22b693c52bbe9fe1d3c151bac6da1e91bd38f4fac8576960b4ced6c7fc52e69f177e6f4d331b76e93", 0xb3}, {&(0x7f0000000300)="509866bc163bafdb64a9e7c9de3dc0c7b523552f88da280f3f3387ba8acfe4b4d99f0562db8748007045c0efbcae24e076446b45272c321605c1c241d7fad9c45e97b38bc5", 0x45}, {&(0x7f0000000380)="66f9f397e820a628ce5aa36dabf184abef079cb20d5b16ab6372ec7c0b5b88625f7afd38e6a0eecbcb29c5ccf41209e70db003f05a8347f601750351655141eff4bf84", 0x43}], 0x4, r2) 2018/03/20 23:58:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x400000, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x240000, 0x0) sendto$inet(r1, &(0x7f00000000c0)="e22fc5799d263e1552f9261566bfdfdbfdffcdccfd5ba27011503fb84ea821801c7e8fe43351257fc4b587a925d8b8a645573f2101006d73cd153fcebc617e7ca0b66bac14", 0x45, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x8001}, 0x10) 2018/03/20 23:58:27 executing program 5: mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000080)=r0) preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) lseek(r0, 0x2, 0x4) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x7eb3, &(0x7f0000000040)=0x4) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:27 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0xfffffffffffffffe, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000000c0)={{r4, r5+10000000}}, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240)=0x90, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1e) tkill(r2, 0x15) 2018/03/20 23:58:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x81, 0x2800) close(r0) 2018/03/20 23:58:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:27 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f00000005c0)=0x3, 0x4) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x1ea1, r1, &(0x7f0000000080)="0600000080", 0x5, 0x0, 0x0, 0xfffffffffffffffe}]) socket$vsock_dgram(0x28, 0x2, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000600)=0x6, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc2c45513, &(0x7f0000000100)={{0xf00, 0x6, 0x5, 0x800, "8e3bec44854c10c55fa57f69ac3f812e8c6b889f47105cc48e0be540e1d026439def396a75816e0f97827a04", 0x400}, 0x1, [0xffff, 0xffffffff00000000, 0x1000, 0x6, 0x0, 0x7, 0x5, 0x80000001, 0x200, 0x1, 0x0, 0x7, 0x3135, 0x9, 0x4, 0x7f, 0xea, 0xb4b, 0x1, 0x9, 0x9, 0x5, 0x7, 0x5, 0x200, 0x401, 0x20, 0x1f, 0xddb, 0x5, 0x8, 0x0, 0x1, 0x9, 0xbe, 0x4d, 0x34, 0x0, 0x7, 0xecd, 0x81, 0x9, 0x7fffffff, 0x68bc44a6, 0x200, 0x3402, 0x401, 0x9, 0x7d, 0x5, 0x7ff, 0xdfd9, 0xf145791, 0x6, 0x5, 0x8000, 0x4, 0x5fb, 0xf8a, 0x2, 0x394926fb, 0x3, 0xfffffffffffffffe, 0xfff, 0x2, 0x5, 0x3f, 0x8, 0x9, 0xff, 0x3, 0x9, 0x7fff, 0x92, 0x7, 0x7, 0x0, 0x7f, 0xa15c, 0x4, 0x8, 0x200, 0x1, 0x7, 0x1, 0xd06, 0x716a, 0x3, 0x8, 0x3, 0x29, 0x2, 0x1f, 0x7f, 0x3, 0x3, 0x3, 0xe756, 0x7f, 0x1f, 0x80000001, 0xf44, 0x3, 0x7fffffff, 0x100000001, 0xfffffffffffffffd, 0x7, 0xa97, 0xd1, 0x9, 0xc072, 0x5, 0x5, 0xfffffffffffffff7, 0x4, 0x5, 0x6, 0x0, 0xd6, 0x2, 0x81, 0x10000, 0x3, 0x0, 0x4, 0x4, 0x2, 0x2], {r3, r4+10000000}}) 2018/03/20 23:58:27 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'irlan0\x00', {0x4, 0x2e8, 0xfff, "f0727f81420d", 0x3}}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x10000002400, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$nl_netfilter(r1, &(0x7f00000004c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000200)={0x244, 0x5, 0x2, 0x409, 0x70bd2d, 0x25dfdbfc, {0xf, 0x0, 0x3}, [@nested={0xd4, 0x5, [@typed={0x10, 0x21, @str='wlan1@\x00'}, @generic="c423cb20306703b49944110cde33935337d36b395bb10002f2712d4c7b52ba5485e0e02e55f26c89caf6d24c72a181b155e0", @generic="1e5891d00255473840fcfa9ec6baeacaba9730dc7bf1bc154e2119d2977a2a075cfb063164a35e566f1036be55943de3f9a2911a566fd60334d6ffd3dd0ef2f3781e502c6ab0387f445da3ecc4ba21060cd5fe3009e1e2a05ea93375555bbf2ad0fe6e7fbcdec25f8f849db81064a0390aefebdd76b34f6005d2131861a93000a048e79037104ae381d3e9686c1b"]}, @generic="cde9347962c0a093e2cdcf5fd0cbc2f745c7b2e3d4bbf0b4138abff778aebc0c5bffa775eb68c7a9c8f85174b7a5c15c7d6ba1100c7352403548135d1c9599be5d35f94efb4e6906df4704388b5f9909481c97d69d63688c6100632536cfbf31ab4832a1aca3", @generic="b4e48c2138d7614ce590f37177d8d2c972796625e9f24a783ba8d61eae0af561b4809fb4df8d462d6db35a681fff64626f55836af0d91c65dcb025d90271cf96939cab68e0fddfcfef3c7628626519ed67cdb5c948e8a0397ec7a42bdd1f0f264736659b9875d2855669e0594dd26ea86bfe8c7824edc6e1c70786c2d622e38dcdab90c353177c84c8117201e51e60e034726017f7c9b1c34ba6b77a0df79fb47cda639ff27cc4244e1359ca46cb8c7615356626e732933b2eeb89039d49e6529847bc70005bcaf1d172388b7110b81c48799381dd6391d1ad97b541", @typed={0xc, 0x7e, @pid=r2}, @typed={0xc, 0x1d, @pid=r3}]}, 0x244}, 0x1, 0x0, 0x0, 0x4}, 0x800) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000080)={0x1, 0x0, [{}]}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_GET_XCRS(r5, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:27 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0x800, 0x100) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x3c, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x2}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e24, 0x8001, @remote={0xfe, 0x80, [], 0xbb}, 0x2}]}, &(0x7f0000000240)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000280)={r2, 0x7ff, 0xffffffffffff4887, 0x4, 0x5, 0x2}, &(0x7f00000002c0)=0x14) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x84) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:27 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x2a9}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1, r2}) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:27 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000040)) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 2018/03/20 23:58:27 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x400000, 0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:27 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="0700000008000100554900000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x40f00}, 0x48) 2018/03/20 23:58:27 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308, r2}, @increfs_done={0x40106308, r3}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:27 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = fcntl$getown(r0, 0x9) ptrace$setregset(0x4205, r1, 0x3, &(0x7f0000000040)={&(0x7f00000000c0)="23cc3c16afdbdeffcf104a2730f952ea09a3111a0a73724dfede9511423f82b08693ce3e00a9036c451ef11c78f91494d102140de12f4071e07dd41fa94eb6771fa6209d9d31ff7cfc8c2d36ebc853421514bb5b60d5703fedcc3bdd897370b865ee889eaa95a105f7d405bf384a739b8a519dcb04d9c55f3d19b131f2d91b570c50860ed893060987844d864623f6b02afe6f8fde45bab5d2d9c7edb5e1cfe9b2b8bf1c5d", 0xa5}) close(r0) [ 65.158501] binder: 9047:9050 got reply transaction with no transaction stack [ 65.165879] binder: 9047:9050 transaction failed 29201/-71, size 56-48 line 2763 [ 65.185148] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x448600) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x6, 0x8, 0x6, 0x0, 0x0, 0x2, 0xe0f, 0x3, 0x2, 0xa4a9, 0x1, 0x4}) 2018/03/20 23:58:28 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = timerfd_create(0x7, 0x80000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) accept4(r3, &(0x7f0000000080)=@can, &(0x7f0000000100)=0x80, 0x800) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000002c0)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) setgroups(0x3, &(0x7f0000000340)=[r4, r5, r6]) 2018/03/20 23:58:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x8, 0x2, 0x5, 0xe67, 0x8000, 0xffff, 0x8, 0x7fffffff, 0x200, 0x8, 0x6, 0x4}) 2018/03/20 23:58:28 executing program 4: io_setup(0x9, &(0x7f0000000040)=0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) getsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0x4) io_submit(r0, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x2a0403) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) signalfd(r1, &(0x7f0000000000)={0x8f}, 0x8) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f00000000c0)=ANY=[@ANYBLOB="020080009400000001000000faff0000050600000055190afa000100930000000500000000000000"]) connect(r1, &(0x7f0000000180)=@in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x8001}, 0x80) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000100)={0x3f, 0x6}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e22, 0x8, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xc}}, 0x5}}, 0x2, 0x5, 0x9, "4b8c59e1fe3f1e5fed899240dcfe19487b480125d9084f26ef3d7a796d2edf24a5152bbd9211efc7cd2463fd5f09a616a9909059965f12c4b4b9df27c767b8b37dcbf6e2b51ea2a802bc5239955e2a56"}, 0xd8) unlink(&(0x7f0000000300)='./file0\x00') ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xffffffffffffff1a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) r2 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x4, 0x200) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000140)={0x4, 0x4}) 2018/03/20 23:58:28 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d00030000e9ffff9400000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000080)={0x9, [0xa3, 0x4, 0x0, 0x9, 0x1, 0xee1, 0x0, 0x10000, 0x1]}) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = socket(0x10, 0x802, 0x0) restart_syscall() write(r1, &(0x7f0000f28fe8)="220000001800070700090000be0002000a00001e000000000000080005000f80ff45", 0x22) close(r0) 2018/03/20 23:58:28 executing program 5: clone(0x1fe, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000200)) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400, 0x0) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/242}, {&(0x7f0000000100)=""/114}], 0x1ffffffffffffce5, 0x0) lseek(r0, 0x0, 0x3) shutdown(r0, 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/03/20 23:58:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)={0x10000000000002f5}) [ 65.705845] QAT: Invalid ioctl 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x880) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000040)={0x1000, 0x0, 0x10001, 0x4}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40086437, &(0x7f00000000c0)={r1, 0xffffffffffff415b}) 2018/03/20 23:58:28 executing program 5: clone(0x100000, &(0x7f0000000100)="ad13393865dc77dc125551860f97fcee25b67fecf14c449993209cf4dff8", &(0x7f0000000140), &(0x7f0000f8b000), &(0x7f0000000080)="32dd42e712361eeffa617be812be332ea5512bbb121c9d6672e2694b25635d9409374df4b1e423799736cad63ffb410653a39f7f6aa0237b8970921924e327819c30bac24fedcfea0a13c6df4bf4e924a19fc8449cbf322ef4a9a624cdc8209f181ae817e60b732a54f2d8c8e816f688c16b389d316d3d") mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) r1 = open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) lgetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='system.posix_acl_default\x00', &(0x7f0000000280)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0e05403, &(0x7f0000000180)={{0x3, 0x0, 0x4b2c, 0x0, 0x9}, 0x3, 0xffffffffffff7fff, 'id0\x00', 'timer0\x00', 0x0, 0x5, 0x4, 0x8, 0xffffffff}) r2 = gettid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001280)=0x0) kcmp(r2, r3, 0x7, r1, r1) [ 65.736245] QAT: Invalid ioctl 2018/03/20 23:58:28 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000), 0x2) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000000c0)=0x6, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) tkill(r1, 0x15) 2018/03/20 23:58:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x10000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x600103) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a45321, &(0x7f0000000080)={{0x9746, 0x1f5f}, 'port1\x00', 0x1, 0x10010, 0x2, 0x80000001, 0x1, 0xe52, 0x5, 0x0, 0x2}) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:28 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x552b, 0x42002) sendmsg$kcm(r0, &(0x7f0000006b80)={&(0x7f00000001c0)=@nl=@unspec, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="3dfd89c893199168347ade35741de0c2fa78a64ac55d810f4abb", 0x1a}, {&(0x7f0000006bc0)="eb636aa5669abc92dcc8a283c9ad2f6d253ba6632ee91c8f1b629a2eb2e5ff93ee0ae3d6370dd7d0527c0a451bfbeea5fcff8e541294e94c4d31ff18a5412a64b6cf912ced2155474ee8a8d7604d7483373fbd2720f35b222395ec1374ffa25617786994b44466d18dd246f1b1b9430301abe0d2a6670a071a1bd9d827", 0x7d}, {&(0x7f00000004c0)="3c9befc274a5ed6a41e41262026b996f1fae51761052f2a500457a4a75cbe35f129974bf5c5e864e3c6dd86f2f01ba4e0ec2af0da5016be4ea5f3c7af89a1c928fc7a770722adc1c2b748a8604bc2aeedbc4b20ae5d1d5daece799716835010ceb931a6178f4a398fa5054d812d12472534c842932f57f2777adfbed213fdc837a1e3a80ace5042bb7a3a6c06ec2a5aeb1f33386c1fc1f11b85de3f3503b165941eef707bd61ddce66f2a20b6e0a", 0xae}], 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xffffffffffffffab, 0x80}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000003c00)=ANY=[@ANYBLOB="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"]], &(0x7f0000000180)='syzkaller\x00', 0x412, 0x8292, &(0x7f0000000080)=""/153, 0x0, 0x2000000000}, 0x48) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc\x00', 0x60002, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0xaa7, @mcast2={0xff, 0x2, [], 0x1}, 0x20}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0xf93e, @local={0xfe, 0x80, [], 0xaa}, 0xd8}, @in6={0xa, 0x4e22, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x10001}], 0x74) sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000003a40)="58bec25fc5adfbade56522d5d8d6f6fe7b30b652b1eaa0129ed83aa7a5dbad7fde2546bce73a561cbb5de065304a0f3a5521cbd1a1db8b0a14defd177819502d54c2d1bf16f570262b808efe77d757a8e00f982f1bec1e2c895c4ac0fe54d2255effa3d83436993eccc3a58bb14f10073a1e3c92ad6e6fb9ebfbec2a89f623960f6b61ad72aaa23668dd1ffafa85241a4e5bfed169b4a389cf96903de1c52a0725f045c99b81e6378ab58464802b2b80b5a87d6e98322b494a14524bbfa8089fbeba9a16ef8018218021cf1deaec3f535035e7", 0xd3}, {&(0x7f0000003b40)="3ae17d73936359d4bffd8b726961e10dca159cd842bb5a32cd4fdb935ce029cc8f77cf1de5afe5c16ab43c89d0fb635c2283efa62eab0265e2df00d16ae7cbdb173a09a57d25f822502a03efe548355a777119543f3f8420c00757c68311677eda23f830fc1086763f3000f3a3955707c293258e54a2674177233275a0ee6eb628948f11a0ed77a88bd63ade92e9676b18729a9a1a5b129c91e38ddfaeaf6e865e", 0xa1}], 0x2, 0x0, 0x0, 0x4000000}, 0xa4235470b59684fd) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x400000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'sit0\x00', 0x20}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x800, 0x5, 0x2, 0x5cf, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x6, 0x0, 0x2, 0x3}}, &(0x7f00000003c0)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000002c0)={r2, 0x8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={r3, 0xc8, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x81}, @in6={0xa, 0x4e24, 0x7fffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x101}, @in6={0xa, 0x4e22, 0x5a, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, 0x9}, @in6={0xa, 0x4e20, 0xfff, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x2515}, @in6={0xa, 0x4e24, 0x1, @local={0xfe, 0x80, [], 0xaa}}, @in6={0xa, 0x4e22, 0x8, @empty, 0xa81}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000280)=0xc) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0xfffffffffffffffe) pipe(&(0x7f0000000000)={0xffffffffffffffff}) accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000040)=0x6e, 0x80800) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:28 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file1\x00', 0x0, 0x18}, 0x10) [ 65.784306] binder: 9106:9109 ioctl 40086437 200000c0 returned -22 [ 65.810395] binder: 9106:9112 ioctl 40086437 200000c0 returned -22 2018/03/20 23:58:28 executing program 4: pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) eventfd(0x80000000) socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000100)={{{@in, @in6}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast1}}, &(0x7f0000000000)=0xe8) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) fcntl$lock(r1, 0x0, &(0x7f0000000200)={0x1, 0x3, 0xfffffffffffffffb, 0x1, r3}) 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f0000000040)=0x7, 0xfffffffffffffe11) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x200000) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x2, [0x2, 0x100000001]}, 0x8) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff86, 0x4000080, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x10, r0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x440, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f00000000c0)=0x4) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000100)) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0186404, &(0x7f0000000140)={&(0x7f0000001000/0x4000)=nil, 0xfff, 0x2, 0x2, &(0x7f0000001000/0x3000)=nil, 0xba0}) 2018/03/20 23:58:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, &(0x7f0000c91000)=ANY=[], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x1000000000002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'eql\x00', 0x2000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r4, 0xc0605345, &(0x7f0000000140)={0x7a, 0x3, {0x0, 0x0, 0x3, 0x2, 0x7}}) 2018/03/20 23:58:28 executing program 4: io_setup(0x9, &(0x7f0000000040)=0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)=""/141, &(0x7f0000000000)=0x8d) io_submit(r0, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x2010}) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/03/20 23:58:28 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000040)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000040)={'raw\x00'}, &(0x7f00000000c0)=0x54) tkill(r1, 0x15) 2018/03/20 23:58:28 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000002004e22ac14141600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000002004e21ac14141000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e24ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000f470000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000"], 0x18c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="8500000008000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) write$vnet(r0, &(0x7f0000001440)={0x1, {&(0x7f0000000340)=""/4096, 0x1000, &(0x7f0000001340)=""/226, 0x3, 0x1}}, 0x68) r2 = dup(r1) ioctl$EVIOCSABS3F(r0, 0x401845ff, &(0x7f0000000040)={0x9, 0x9, 0x8, 0x8, 0x0, 0x1}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000001a40)) getsockopt$EBT_SO_GET_INIT_ENTRIES(r2, 0x0, 0x83, &(0x7f0000000080)={'broute\x00', 0x0, 0x4, 0x0, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)}, &(0x7f0000000100)=0x50) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) ioperm(0x3, 0x3, 0x7) close(r0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$KVM_S390_VCPU_FAULT(r1, 0x4004ae52, &(0x7f0000000100)=0x7) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'syzkaller1\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8200, 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000000000/0x2000)=nil, 0x2000}) 2018/03/20 23:58:28 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x0, {0x3ff, 0x8, 0xfffffffffffffff9, 0x3, 0xd05, 0x3}, 0x9, 0x1}, 0xe) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="0600000080", 0x5}]) [ 66.063189] QAT: Invalid ioctl 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x5ac, &(0x7f00000000c0)=0x2) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2c6, 0x10000) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="ecff000000000000"]) 2018/03/20 23:58:28 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000040)) [ 66.169190] QAT: Invalid ioctl 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) r1 = open(&(0x7f0000000040)='./file0\x00', 0x1, 0x44) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080)={0x7ff}, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:28 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x400000000000001, 0x2, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES64], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x41100}, 0x48) r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) write$selinux_access(r0, &(0x7f0000000040)={'system_u:object_r:vmware_device_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x33, 0x30}, 0x37) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ip6_vti0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}) tkill(r1, 0x15) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffc, r0, 0x0) 2018/03/20 23:58:28 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = mq_open(&(0x7f0000000000)='\\vboxnet0security\x00', 0x41, 0x4, &(0x7f0000000040)={0x0, 0x8abacb7, 0x1, 0x400, 0x7, 0x1, 0xffffffffffffffff, 0x83a}) read(r0, &(0x7f0000000080)=""/80, 0x50) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:28 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x50000) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40186417, &(0x7f0000000100)={0x3f68, 0x6, 0x9, 0x5, 0x2, 0xfffffffffffff528}) pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x7fffe) bind$nfc_llcp(r1, &(0x7f0000000140)={0x27, 0x0, 0x2, 0x0, 0x5, 0xfffffffffffffffa, "ce5d848bbd821cf61e6cd5dd018e86b4e76a27d3565890f0d8e6c26e9b6cf62c0c435012b420bbe686ab513bd7a5422cd48d57475f50c3af97b81f21d016f5", 0x16}, 0x58) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:28 executing program 3: openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) personality(0x400000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:28 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x83, 0x200) fgetxattr(r0, &(0x7f0000000100)=@random={'btrfs.', 'lo\x00'}, &(0x7f00000001c0)=""/51, 0x33) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000040)={0x20, 0x0, 0x10003, 0xfffffffffffffff8}) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000040)="8e6a0aacd461c202d03317a4f9a1d8ed2c12c100e880d30f6203dbabd849237e531d9c2eda090d3dad", 0x29}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa}, @in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}], 0x80) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x5, 0x6}) mknod$loop(&(0x7f0000dceff8)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x178b, 0x80) mount(&(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000040)) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40106435, &(0x7f00000000c0)={0x9, r1, 0x10003, 0x521f}) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xfffffffffffffffa, 0x11, r2, 0x0) 2018/03/20 23:58:28 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = dup(r0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000040)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast2}}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @multicast2, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bcsh0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@mpls_getnetconf={0x3c, 0x52, 0x102, 0x70bd26, 0x25dfdbfd, {0x1c}, [@NETCONFA_IFINDEX={0x8, 0x1, r2}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r3}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x5}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4) 2018/03/20 23:58:28 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) flistxattr(r0, &(0x7f0000000000)=""/27, 0x1b) sendmsg$netrom(r1, &(0x7f0000001400)={&(0x7f0000000140)=@ax25={0x3, {"408d4a5858f378"}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)="125d81f88702bbc1db0ad4d6b85f6a24880766e892b57566cdacaee8c51ca21ee8b71494be9370d1bd5eb230c5f9531460691710ea23b1388072d3bd1d6bbb961042a90504a688fae305fbef8604b8331f661edfb31b58bd3f3edd2892f1ef5824be6b56d8de7454db42da68fc3015c8e12a81583f5d17dfa699fc6c18c5a2c2b027a03c6d6678432d34fb8aae0a3fc13555eaf0048bb014a00c22250cdfef5e6c73f6c173431df0e9ff27057118cf76c6cc55be18b957cc35feebc0cece7c3fa8fea83b61a9077ea0a78f5fc43ad801b2f6688f17bb8522f235f909c32c36b61e8e5f01d36baaf3a0e50f301a62c0957886d6b217ff6b21e9274295977fca", 0xff}], 0x2, &(0x7f00000003c0)=[{0x100c, 0x1, 0x400, "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"}], 0x100c, 0x8000}, 0x800) io_setup(0x9, &(0x7f0000000040)=0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000100)=0x200, 0x4) preadv(r1, &(0x7f0000000140), 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x2, r1, &(0x7f0000000080)="0600000080", 0x5, 0x0, 0x0, 0x4, r0}]) 2018/03/20 23:58:28 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7fffffff, 0x40400) ioctl$VT_ACTIVATE(r1, 0x5606, 0x5000000) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:28 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6b042abcf63a84dee37c1e1060891081f13040da09107603da1b11b09a25fe660eaa66b12f59f5b382b38089e5076ab7b3658ed74f0efc31fa3ea369fba0a72f1707016cc72e736844efb91388f5bf53268cd687f728514b9880", 0x5a}, {&(0x7f0000000140)="3306c0fe07ad6a53c8d14abb9735f4a5617476d2554c0792b045a223ab78f864f0ed34044b0aa3d5717de095d54460f0c6e3eb550b6d2df4cd12066268cb51a882d12ece38b20b2bdfded6c8c7f035b3ed7047ddad820b8ec03708187e6faa6f1071353149adde36576a7271e2d2fb6d18e9e06bcfe19a90b7db7f7096baaead03348727c0bd8effd6843be91b2088b809561e3b2220011fcc66c411f01cffc32de6ed2b5eaa34dfd8fb54ed3ad2296c7c39113bd9612625a3ec4ea8fd0a5023ecc7d9c895715106602032775bbb32a78013a463998c54", 0xd7}, {&(0x7f0000000240)="48ee330295fbda376e0f815d3b3cdae6b848d6e364d8527974c01f00f100fcd2462466f41473440ac26ba792dabcddaed5132ee2d0ac8bf6756f5539fc4ab258b486d9d924bcf26a017f4bcfd305b67c1c8b27e7ecac30536c87710fd41cb2a630be13fdaf37f786c30ce64eaad5ad6afcaa05de00a5e489bc", 0x79}], 0x3, 0x8) close(r0) 2018/03/20 23:58:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000080)=ANY=[@ANYBLOB="000000000000000050b73101bbebc94c632ccd840aa9ac5daa0b4bb5cf482687eb76e3cb34a922c4827eab7862e5a7ff251f213834006346ad7d2d60183d0672f436b00e6594086d7e9418a5d33092f7ed6fa773151605484777cdb5760e3a7f0a32971d7fade43fd11b3e"]) 2018/03/20 23:58:28 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) tkill(r1, 0x15) 2018/03/20 23:58:28 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_inet_SIOCSIFBRDADDR(r1, 0x891a, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000000)=0x80000000, 0x4) getsockopt$inet_dccp_int(r0, 0x21, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1c3, &(0x7f0000b52fd8)) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000100)={0x0, 0x5, 0x8, 0xfffffffffffffffe, 0x1f, 0x401, 0xfff, 0x2, {0x0, @in6={{0xa, 0x4e21, 0x100}}, 0x3, 0x1, 0x4, 0x2, 0x1}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, [0x6, 0x6, 0x3, 0xa3d, 0x200, 0x7, 0x100000000, 0x6, 0x0, 0x3, 0x1ed, 0x5, 0x1, 0x9, 0x1]}, &(0x7f00000002c0)=0x100) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:29 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850037000008193ed47d00000000000000000000000000"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000040)=""/165) 2018/03/20 23:58:29 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0x1, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x9, 0x8}, 0xc) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 2018/03/20 23:58:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x4, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000001080)='/selinux/status\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000010c0)=0x5, 0x4) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000000)) fstatfs(r3, &(0x7f0000000080)=""/4096) 2018/03/20 23:58:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f00000000c0)={{0xffffffffffffffff, 0x0, 0x5, 0x2, 0x1}, 0xae1, 0xead}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x9100}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, 0x6, 0xb, 0x720, 0x70bd2b, 0x25dfdbff, {0x7, 0x0, 0x2}, [@generic="2463749baef81dc899b959b0178ba6ca7db35096075464582bc9ffd25a028685ca9785c2e8590be1445f85ba1236fd9b94405880d9f9b09663e9d6069fd544dba196fb81dd0ec58d6aba1e823416f9016ab7645a80cb6007d05eaf745c6655b6e915b58f7cd199f38724ff40e2f8f572ed4f05bc6a877b4fd43d59e99ac71cd515c0664e2abd66c927a5336c65cabd0fc47a0efc7baa96c3906a012ca696dd18dac4c86d2440ff9784e8"]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:29 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') r1 = request_key(&(0x7f0000000600)='syzkaller\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000680)='^\x00', 0xffffffffffffffff) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000005c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000080)="b319cf6bb35ddc02c9b1d25893137e92c2812c9d51dbe4c7391573a50412d224e41498b0331c8409819d09ff4f1167aeede9d3165255a8a61a6e5602e3804ebb1acf3160cb331e7adf33e37330ad9a800ab6140848d1256c9e2a6e07451b", 0x5e, r1) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)="ecd2a04e9b470a308db5eb81bf01", 0xe, 0x0) r4 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="67567ca24f849bcc4db23413e8d0ec77a0b9fe16eaa4813d1a17ded5f41df0a046a9289756f4266ecf901022c2f5f0434b40cfabe741b95dcdc26561dc6f1db87cc96201eb9c2e6801308872f57d2b5e5fb3397d7754e9bdddecf0ce239dd0ec266bff49ba8b5cd149ac421f30c9038a52f1e93054e43280c426dbe0823a2a2acd2ebf1623a63f2999f79bdf90e10d78dc1837352269caed41aaf98a06edd61f7619c3ebbdc2d7dedea1433f61c4e14b2c7840a7fe3505c5c120764326cafb2967", 0xc1, 0xfffffffffffffffc) syz_open_dev$audion(&(0x7f0000000580)='/dev/audio#\x00', 0x7, 0x40) keyctl$dh_compute(0x17, &(0x7f0000000340)={r2, r3, r4}, &(0x7f0000000380)=""/147, 0x93, &(0x7f0000000540)={&(0x7f0000000440)={'sha256-generic\x00'}, &(0x7f0000000480)="ffb36352fdbf1216a5d3453b4ad27f0d82f54772a79baa6b41dfee63fbe38eb97bad0ed3eb1d78f5560f766a3cc511eb45a09e9023d43a86ba0e345ce0ed4306de73bd514a38747373904a94f59d9a71715b64cb7a0fc27b61fa639c9bda1e49978e5b06b6c79f1219805c77cb114690249e110da7dd1e6091b610d95172fff35a10417ccea58b71b6a4e1ff78049478bc4c0e82b987a9205113e4", 0x9b}) preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cff7000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x104) r1 = open(&(0x7f0000000040)='./file0\x00', 0x40002, 0x40) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000200)={0x5, 0x0, [{}, {}, {}, {}, {}]}) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) close(r0) flistxattr(r0, &(0x7f00000000c0)=""/236, 0xec) 2018/03/20 23:58:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1, 0x98130, r0, 0x3d) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000140)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="09a2c54d0eb81799fa14730b5532a1c61b55e5862aea8fec47318699a817fb53e22a9b2369c9d12e2da01c600f21bd90a58d9ea726ab9b77999d96732fa545604e6f5917db4d2cf5d9375efc952498f957601efa70003a792ac058b2261630f9067a93fb49e2199371cda2fb9a51c2042527418b4094d50f7a7f1226d17e18bac779677776543dec8d7661ea602ddbfa4cd45a3227cc7562b8abdab2e18553dba0769531711086458e7678060876289a474f599c61421fb002939a4bb66f4def8e982d471afb3fec3bf8cbaa1b269cee660099213472f69c014412c8d34f809bc0970b09", 0xe4}, {&(0x7f00000002c0)="071f77795087ca247a92e3aec4e4e390ab2f2f4fd627f952ac0786d54273ac5fca93c32e2948c68ddc247e887d3d609b51855e4d6d82ad30e6d80b383bbe8a05b5e5a7c329", 0x45}], 0x2, &(0x7f0000000380)=[{0xb4, 0x6, 0x8, "db9554acf1cfb9f1e3b3327cd26234101c684c46e37b56b6b8dba9ed4c9b449f9b15064417be4618f670eda58b556eab72f20a8ff3aa5fdb6f092b95fec17a6be4a93dfc1ac2cae1e68eefa6e2557edab22bd0929de305e8224d660898294e8050e98ca7cb2bcd98abb0d141bf11499fa3a35534c524e0e4dbdc2984098d2cf6902223cc68c5e0affb43774f7c2fa925212c936486e5124f009380a864555046558b65df9125e6c4"}], 0xb4, 0x2000c040}, 0x80) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) lchown(&(0x7f0000000480)='./file0\x00', r1, r2) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000040)) 2018/03/20 23:58:29 executing program 4: pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x3ffe) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x9, 0x1}, &(0x7f0000000000)=0x88) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x8fc}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000001c0)={r2, 0xffffffffffffde34, 0x7, [0x6, 0x2, 0xffffffff, 0x9, 0x8, 0x503e8b0, 0x0]}, 0x16) io_setup(0xd, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$TCSETAF(r1, 0x5408, &(0x7f0000000200)={0x1, 0x2, 0x7, 0x1, 0xfff, 0x9, 0x9, 0x40, 0x0, 0x5}) 2018/03/20 23:58:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) listen(r1, 0xffffffff) io_setup(0x3f, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000000b80)=[&(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f00000009c0)="a3", 0x1}]) r3 = socket$inet(0x2, 0x80000, 0x7) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x10001, 0x3, 0x6}, &(0x7f0000000040)=0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000140)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000180)=r5) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000000c0)={r4, 0xffff, 0x30, 0x7, 0xfffffffffffffff9}, &(0x7f0000000100)=0x18) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r6, 0x5}, &(0x7f0000000200)=0x8) 2018/03/20 23:58:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r0, r0, 0x80000) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000040)=0x8000) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000080)={0x1000000000000000, 0x7001, 0x1, 0x2, 0xc}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000000c0)={0x2ff, 0x44b1, [{0x4, 0x0, 0x6}]}) 2018/03/20 23:58:29 executing program 7: r0 = getpgid(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x6d, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7fffffff, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000200), 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000080)={0x7, 0x1, 0x2}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r1, r1}) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f00000001c0)=0x5, 0x4) tkill(r2, 0x15) waitid(0x2, r2, &(0x7f00000000c0), 0x80000001, &(0x7f0000000100)) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x44, "471f2af5b2903c70ddfba2057ef13bf938c2d6038af8469f599c9d8761879a289f1fe0e1a4622bc5938d2121d8dfc6d378a4deff9cf5c696d366dad2f69ecf6f3bd1a326"}, &(0x7f0000000100)=0x4c) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000140)={r1, 0x0, 0x1000, 0xffffffff}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d00000000000000950000e8ffffff24"], &(0x7f0000001300)='GPL\x00', 0x1, 0x93, &(0x7f000000d000)=""/153}, 0x48) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x800, 0x0) fchmod(r0, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000040)={0xff, 0x9, 0x2, 0x6}, 0x6) write$selinux_access(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f724c8da639d75f089a3a78636f6e736f6c655f6465766963655f743a7330202f7573722f7362696e2f63"], 0x3a) pwritev(r0, &(0x7f00000012c0)=[{&(0x7f00000000c0)="e8de12c6d32cb640fd97b92391299bc25b2f5233c6b9678b4c9a114a5a5d29e488718c1c8e4d090019514cc96705cd894a4971bcc01f74767b752a20eaa3605065920210f03b2f128418ce64aee7eb3b11dde156bd80526f468901efc6c80216a3b3216ab8dabdc47f349caba58a57642a09c70de820daa98e32e301c6c9f152c1bffe1f1de1688945e90d435f62a4cef8712b639a58e672255d96ebc84070366e878c27f9a15ec8bacb51349b01355275007527b6d22f59e5f98dbe1984e813e6e698d66b300b1f2ac8d4c4c606251dd54715fcebc9d245994be797409e847108381c8524ed7dcfc58fc17018c5357c", 0xf0}, {&(0x7f00000001c0)="beb963c0d49eac9cc20c9acc527883241a4afbac9cf6a5e197e397fdfd9ed6c1ea4a0192b7bbf6e23f7d4c33efdcf0d026ae9415a71067e2efbe3b29171bc73ca308eff082191d829e92", 0x4a}, {&(0x7f0000000240)="5c844126f25f095b631411907c6f38a9ea7847d680a89c46a9da8476225d575847c7aa1a0876547ffabe53efc6fe098992e4fc31a3c74d0d589777ab052e49898f40877770d0a6116e5afa77bf8bccf1978afd72903fdf2f2a072de93e4208834388a9d49ab06d2885dc02478163538d211f31b1fedba4284b83e9e75eb6bb8113845208811e8c0c2375af705e6c503e6aadc532a9471727009274c14c85870faabba8c14c3c714c67eb4d0e9b21ffffe471b7e0d82282a989991e669077effbed4563d4d44acec166e1f073ea9cd987164bab59f62921a8e0c7c92596d5366451a9f33ba1a9d30124e22b14d2563799c19515c72f2f49d32f07a288248dfa64c15953ac5df0302ed38b18faf2221f98895c1f04a4619b64afc04da7baf7bfa699d257599c54d45386a7723e9ab486f31ba3f7fc4dcf2fbc0a4759653a205b326d1b55884e3115560e72e8c3746c341712da89f93430ef1b87e9d02597aa2e2d42fd1d0083807b0f41ae1ffb4ded29f3be54658a2b5830bf97cb660336482b56a4c4d3531cb6b661edcab88692044012e63d8e1a16693e66b6b1a89272243642902c6cc452c7287fb1457b8104abe82bdda32cd425e79557be8c49e3fa64626f3553f84308d1c3e1714464709a2c78244d6245d8fc8a1dfd1b4cda7e320321c19bfd324430615a2cc80a909ee95cdb5b8126f008378c72a547be2e13ac12f4bc0bcace324d531cc7a2f49664f83c522fe006a41266c1b105cc8027db068cee71110d803a4ea00e375b55a2e58b52f4bc45709441a49ee68c0e7c8ab1bce6e875d00b731dabe2e5d6cd71294824754a734d3457f9913d2297702bf48655214f909b54007c583d8c532f997a4d94d05419a689d49da81fc625eac6254258a44670bb696e6e0180d72b7eebbb2c0240d1bd3aa1f6771a69c40ff86476bdb4dc8dd0526db5ffebbd7badc0b128681e3f16cecc8e9efc0431f65387de2ebac30c2f2bb38778c78493101a34c1d4cb464ef2838f6705f61facfa0f645b2bc32655ad8ba9a06ac6f788974072cabd38eb83428b6f612fdc8c47895bbf3ccbdc23716c86172ae73d44a8d8da9194ccca34ab11d92dc2aba755d0fda560c15a27dce8383f7544da785c348317e7bcf41278e01405bdbd6777647049eefe247b38bac1b7456538ab35eb77a00a6e3a915c07f380aa0be5d2a34cf5b614de6ff94ed51fda0bcda1e0b5e9c16bf6228926e7a974b9d9ecbb58a4def3a13c137d4035445376edebfee271f17d724dcc5d05bff6df986113b266bc3e303ce172d751f54d5e733fd9902a45a92fc0d381e027ea29e9f3a0aadb66ea30dad8039791d6c0124c6d58ccea8f217d80413802a6d97ca7ec00ee7f1911a31fb552a8e69ac40b1371a5964863ba21add50de7da1de2bdc7676893c938bb813035ee4df21b5d305d21c5d3b8db2581a3b4c73aa03abed0880b9c4a2944fe0d24daff9767da77c72e971b472c2606b37819b16fe9c431f554540d86a1bb1cd60379329f64c23a261699a2b002ef0197d9be9c11f88fc36495961d386b5640e2c15e1de7c89c4d3d6efcaf8c74da1820f769bc580974d4f28a284fbb1171b346769ac738774a642d7497e6cbe66df5a744ec2afd91b663cc883810bb5e7f40870fd80981ca570ec1a6df55686c87cf119e240709539b1f766a97d1c1733089bb82ccc730fe76677c0b79798ef4aa58bf27bc2d089c12de6a90666513e1a087384144a52bff27e93220ed5dbb57ee871324f7e0d193a1c7c74be52fdf373fdad48b71e4054b50da969a5537ba017e37a63eace3afff1b837b7073f0926257d82ab399084f19cff482ddb8364fd1a20c83a034f534583ba6be16201aabae321d255f732816cb1588584b02e0b7270c82135e9abaa56922fa25a95825111132cb8edf63195c4ec46be6d6021d34635393858b9a38af7b956682e980d6dd4e1f816df0f50e1c1a639cb0dbc368c4ffecea107bfab2aff46b5ddd0d889ca3884ee559178dda29210cee1e8d3f7e76f40ab42bffafe378bc5bb316b42789614e3f2a1c065538e5794ceaf59545a39e6354e5737deec2e9ba255d10f0c552664a4d4f36b3c9f94186dd4823be07545112c41179b6b391728804e7e012b94f706ebdaac64360d852a8e5971425bf240870618483044b4466e6723a047f8df5e1966869688117af7a40d5db96c8ddcbbc7cf17955aaf4d20af6f34b9c6fdda6b668e3462b38f3dcdbce1d46b930bbb7630e6853cafb6d5a0233add34fbfb395a9efe28eb2494de8adc0c75258476f2bdeec37b36f43a79dba960c95f4f2724c46796161b7608a319f8af35d951904c8030354d3fa86a265f8e14c58f005e8490a7f1cc2ed8aad9917712e917376b0399f938ae6be18b49fd3b8e57184b4aa78e9cc35ed76891c96ac150998221364b3fd3b66602285c3ae425a4e3f741ee400b510179b5c0e442639341e52d2a7d79139d440f49422dec68af7e9aad05bcec3b3d1524c2051c0355bc997c58ebf6821bbf73ecf49ea4b6a2beec85b02acf6819839f91d074fcb7c43dc4dee467df91cea8cee279125ae1f4c8d1f406cfc2ef1ad5d0429ba995020d132df256c89cc99fea4f0f66a2318c4707d96e4929f5f9beea2e83dde3cdf73a6520d446da5f76e97282789cc5f2dfce7c84342c2cb37018e35c56267094bf6b7898b8e72ad29c11ee985e402ec55bf89db30b173b634af7635217a326dafb8300e69a4a4f2e59f701702302188455203396c543bcb9bc14ad15f19c6213210ed9824cb4786d1dfdb3c5fbb7810c2cb12427c8c82a2e941021dbdd4501894dfc8a5f7fe1a3886a900a1fa271657c0f31ba491fc605b447b1987b99a0b22fc08e897e507370fd944b7bd867d4bd03438f1b67dae7ab548c96ffb225ad69e2331e478d8bdf1474f95e4ed1e6c9af512b536693a5edf0cd0606638dc24db5a1eefa52ad542fe73517f03726e7ddf6e2ac3a9d61abf3825d83d07bb4eb73acbfb6b6d5614aa0951c4680b50266c422a814659188d11c4fb9ad804ff918f0ae30ea83dbda3da0b9f97f47d7fae1a0c5bdb56ecaad427fd5054df2a012fb11cf5c9308ea721eae22e6d97bedf88ec75a0c8b1ebdee1b86457888f8e53a5b57a6e70f213cb8bc49baaf779ae8284ce5c6dbfeda6f92d19beb9d218583c9e171b03416255059f11a6866aec4557f0b75bf27d8dc014fee803028191291c64e7b2c4f1d864493604721194e30ea46e77b2bfc1d0c1cd086abce287c311ecaafc076767e04efb4f9fc1df694605d65b45e0994c658c32b74ddcd54805a5fb887b7adf1c4be955bc0c06b79d0934a62c7046b921a8e68fd4a59ecd36045155be8fcf9fa4868d419ca87fa0469435458b98a18635275a35b2175700d25da1046d2dbc0ea7c522a707d48fbd178565f22622b4b9035b355cfd10d73991455182a969b35d7cad89ccd041b1caea52831bf89ad435ba3aae248bb38942ca5c3aa61d672955136e04f9224e5e5bc51fb7b6dd7114a76b58ba570e4e90d3ac85af73e4ecd7a86477773188a0c6e77bf102dd20a00470c2cb3d86b713c8da36e12267d223250aabae9b2ab9a2dbe9a2f2a82b4c8570f716f411d19e72d00ed3deb46dbd3499e5d0af69e59950f08ec2620070a8220dc9337922ca87d141ab216b63c2abac5d7478150a8331d185637f48a6a0239fd23bd337f07a521d674a32b791ed40389343c10a3fcc970cb47712eec2d7d3096004d8953c0aef165ec769b69057a06136c4b71a9f33f3a35ea796b74ac0710723cec3de2e5c06e7e15f1d7ebe4117027dd2a9a9850a9ffc8328b994b7c00088d8de202683a38c08668a07f10ed2d23265cfa12790c3cf95054daad5ac60135f92aa9b6c86920be749f834ca1f4945e855234fa8155e3119ee28c72a055e8ef048b3fe51214c5986f11bc6a6f2318f3d95cda150725f709a423572f4c1ab5347c3edbc968c7ce21dfa637831454de0c6f4e0e92abf9d95391cc8888160393c1aa259d376a897ff570ac3a71b9e9e87c3264f2c897fc2dc2e58ac9766c3547a079edb013929096b35d407f4a8640b88d563c4133881267fc42efb2e415cff65f3f8541382d8483654ee3c3b23da6dd4db70c7e526908ca9b1f5c70d6e8deb9d80fa832a434c5780cf78a7ac3cb2d23cebe7401aac34ea690c9e7f685125eab15dbb9f7b8f385ab03dc9ba2d0aea754fcf287c64ad671f4c0ba9ad1f3c37996a74b89bf6fb5d43da2696d8aa4cd91a8ecf6e3970be148e679aa4617e99bd466cfaa1587e8405136e08537f6d19acaec7424ec460871df28d0a50db6d49c1ebcb637250084f74fe13f9dc0c91ad9bde127c9dd65cc190afcb4079c08330e722bff46e5f39a481ceec250dc84e38f5452513c206d04aa83137c63e86b4a9f8bf3e8b34e81a690f36d5a4098f8ebace95789f124a899d63e3ab461e77f99dd4b191f8cc79b925091f9850d301dae3af1a33fed9c8037c68729927e2b09e3b938290e1a5a44008f0185eeb5c163371313897faf5739835c77d290632f8ef53dcd5720f27ba770b278608d057d136fa3f662344a17caabb5ccf6665b5dca8f0e1be7fafd40111a1b85736aad21263af94d8fba13970b5962e50e639cd2c8ff50d4a22b29e31189e1a1a7548fac2e03cdad448eacc4a02048fa40ff2300c1425d9ac379f216eeae32ba9fbf39557cd7b1c941d3133137899124394184787e13e0eae3ea5273843e3549b961539ad8aa3792c0a1518bd084e02b2e7da4ed4f3539684366dc6c057f19602b729e1052ca7db88fcd359d5398dc87fd118d97b844f6521dd3b8dcfe115194601a6aa96a83feab47885d9b6a379c39e59b5185c833b1ceb34d557ac3fac1467caa3ea8acb3dd91b46b630d12dbfcacd46b698f47df7c5ab3f36d5f7adc23e33b3fd0e27a0545e65abd5d33bf2f932a74b36cb851293f9a45a1c99b5ff8304932454a1f0ff835db599f076b927a22e61082c72e081f19a3158f52563b401edaf205fe0796942c8493609f2b9de4c89842614c7621405278c32038948da3a5e3fe2d8ac5e16fe9b297c601b861c520377b4a4a1b49404158608d6cc290fd5dced6a2af1f2d3bb589c7eacdf97f75871bb363b76b84647e9e626ac6e96410d6171ba3a5abbee9f025dc68432274875e4230d08044e4eee92a7eb6f246125ad8cdb79ad246b29202e789e7a12ea9071c5e5877a662ec68f61aaa9e6e5125b2547afc4667e6694798042fff6dc28f7e8de4b2e08299f33c4fc17a77a9f4b3a3df6a0714f4626ae4b8c3e4b52805f9410a5ea7ad17507c47405ef5d774f8c60fb19cbf71e37a669c1ad2da333e49d3267f59dba0605402b9306ed973e94b7c118bb8c4c6443a652b329322c4e69bd987b7f16b65257d0cd45183a595dc369c406d391547ee5fe5d546b4bd1d4803404370ac4a597b5544ef8bd1ad850612d27d4a9392287b7056328dd1028414781c03d26c226375780e7e1067a4e1ddef7361272e70430fe57f5211c31d0f3f6709bd1b27063eb466ee1c74c39fde7f21d0b741fdf17a260d1ca6b82b0d81e839cfb38f120f4c03406a937cf6d1dc5b356cde40d5bfac128f1d140bc6cbfc1a3ed615dd72e8a123b71ba2afdb6afc6b734198dea96740f0e55460e4cf9eb004fd8d903bcc7b84bcbca76136d6979d8216175ae57a69024681d46af297e75372ef305249972800f7abbe185ade103fbe0244a46cfc040a590d17d05af4ca4c70fc2778ce50243e458c09d175e", 0x1000}, {&(0x7f0000001240)="02451680d7ae3214c479f8242babc30f2c98b563f6ad1ec82004f89156f8c5676a8980b708ca2e194687b4d8abae560a4f0a88cf5635b265946839f6fd5935064da5fb83aded462107b1c0c3b02b3c8440d6bc44c09699fbcc93135c1dad4f355a3cd1aaf9119449", 0x68}], 0x4, 0x0) 2018/03/20 23:58:29 executing program 1: mknod(&(0x7f0000000040)='./file0\x00', 0x8040, 0x50) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7, 0x400000) ioctl$PPPIOCGMRU(r1, 0x80047453, &(0x7f00000000c0)) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0x0, {{0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x84) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$llc_int(r0, 0x10c, 0x0, &(0x7f0000000000), &(0x7f0000000100)=0x4) readlinkat(r1, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=""/192, 0xc0) io_setup(0x1000, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) get_mempolicy(&(0x7f0000000340), &(0x7f0000000380), 0x1, &(0x7f0000fff000/0x1000)=nil, 0x1) chown(&(0x7f0000000140)='./file0\x00', r3, r4) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e05411, &(0x7f00000003c0)=""/35) 2018/03/20 23:58:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x28, 0x0, @tid=r1}, &(0x7f0000044000)) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000040)=""/138) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)) 2018/03/20 23:58:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:29 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:29 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/225) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr(blowfish),wp512-generic)\x00'}, 0x58) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x94, "e3f0c7a4aa18b555dcc726f7c94c16a88d4a4f52e385fe21123337119aa8e3d9cf29d915e7209b34a97c9b015a5558750a543827c2fa81699e8834e4100956166fed38920d0e4e30eb3eddcf1b901a9c90780d122a05818e1776fbce8258eda90d2f02dfa2e9e92a1232fdce4d5a9ff4689b90117b6c178f99301a3c6088e93cc4b882ecb6a488c261bc2a59e281acc8c00305ea"}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) close(r1) setfsuid(0x0) 2018/03/20 23:58:29 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000000000002400000000e31f705800000000000000"], &(0x7f0000e6bffc)='GPL\x00', 0x4000000001, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x29) write$selinux_validatetrans(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6d61696c967a1c56c75f73706f6f6c5f743a73302073ea17e1caf067c868797374656d5f753a6f626a6563745f723a6c7f67726f745f743a7330203639202f7362696e2f6468636c69656e74000000000000000000000000"], 0x5d) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000200)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000240)=0x6) getpeername$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x14) r3 = getegid() setgid(r3) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r0, 0x50, &(0x7f0000000300)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r5, 0x4) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r4}) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000003c0)=0x8001) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r6, 0x80000, r0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0xf8, r2, 0x1, 0x8, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}}, 0x14) 2018/03/20 23:58:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00003d8f37)="18000300000001000000be5ea6cd88360000080203000008000006000e640002b90010a17e19470055040097ec67a1e2010049fc2d63e000000000001418000a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75ab4f1b8fc393d2696c0c3ba5aeae20000000000000013659c61200000000000000000000000000000", 0xc8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:29 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x10000, 0x0) ioctl$EVIOCSABS2F(r0, 0x401845ef, &(0x7f0000000140)={0x9, 0x0, 0xffffffff, 0xff, 0x6, 0x4}) pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000180)) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000001c0)={0x8, {{0x2, 0x4e22, @rand_addr=0x9}}, 0x0, 0x5, [{{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e22, @rand_addr=0x9}}, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}, {{0x2, 0x4e20, @loopback=0x7f000001}}]}, 0x30c) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x80000000, 0xaaa1, 0x9d57, @empty, 'sit0\x00'}) io_submit(r3, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0xd, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x0, r0}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f0000000080)=[{}]}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000000)) bind$netrom(r1, &(0x7f0000000240)=@ax25={0x3, {"b8cf35d4999b2d"}, 0x6}, 0x10) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) sched_rr_get_interval(r5, &(0x7f0000000200)) 2018/03/20 23:58:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/binder#\x00', 0x1) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) getresgid(&(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000300)) fchown(r0, r1, r2) fstatfs(r0, &(0x7f00000000c0)=""/176) 2018/03/20 23:58:29 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000081d000000020000000000000000000000000000"], &(0x7f0000000000)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x3f, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0x0, 0x4000008, &(0x7f0000e45ff0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xe}}, 0x3d52cdd383836c01) 2018/03/20 23:58:29 executing program 4: pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = getpgid(0xffffffffffffffff) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f00000001c0)=r2) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0)='tls\x00', 0xfffffffffffffe0a) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x81, 0x100, 0x66, 0x600}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000180)={r4}) socket$pppoe(0x18, 0x1, 0x0) io_submit(r3, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:29 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) preadv(0xffffffffffffffff, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(0xffffffffffffffff, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x7, @loopback={0x0, 0x1}}], 0x3c) 2018/03/20 23:58:29 executing program 6: getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @rand_addr}, &(0x7f0000000080)=0xc) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x404000, 0x0) recvmsg$kcm(r1, &(0x7f0000002480)={&(0x7f0000000100)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/184, 0xb8}, {&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/13, 0xd}, {&(0x7f0000002280)=""/97, 0x61}, {&(0x7f0000002300)=""/88, 0x58}, {&(0x7f0000002380)=""/140, 0x8c}], 0x7, 0x0, 0x0, 0x41d}, 0x8e2c1d86508199bb) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x2000000000000215, &(0x7f0000c91000)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x40f00, 0x0, [], r0}, 0x48) 2018/03/20 23:58:29 executing program 1: mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8) r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x100000000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000140)={0x5, 0x0, [{0x5, 0x0, 0x1}, {0x5, 0x0, 0x9}, {0x3, 0x0, 0x6}, {0x8, 0x0, 0x7}, {0x1, 0x0, 0x7}]}) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000004, 0xfffffffffffffe64) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000080)) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp\x00', 0x5) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x60c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) tkill(r1, 0x15) 2018/03/20 23:58:29 executing program 0: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x224001, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x2b2d9f63c6f0ef68) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) 2018/03/20 23:58:29 executing program 6: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @rand_addr=0x2}}, 0x8001, 0x6, 0xf4, 0x89}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000140)={r1, 0x0, 0x31, 0x6, 0x7, 0x800}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, &(0x7f0000c91000)=ANY=[], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x1000000000000}, 0x48) 2018/03/20 23:58:29 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0xac, "0eb41f782efe77fc90f7a817fdd99493a710cf602be27d45b12f916a169ea92b1408142b26afb4efd0629b0e1de2618d9cd49756106c0fbf7cba9e624a33f908af46587b60405238349e49a7117bb1cf3714999886632c8739f306c2d332fae45a50333921c478376e68bc1edb7043c62e10317502ee3578f21803d930f210316ad99ce7ef58a20cab2501e55e0ac0ed90afea7f3f28ced6a938ff9a6fbd361fb4169d922fe0abcb1fdc9cd5"}, &(0x7f0000000040)=0xb4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x40}, &(0x7f00000001c0)=0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:29 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) socket$inet6_icmp(0xa, 0x2, 0x3a) 2018/03/20 23:58:29 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:29 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) socketpair$inet6(0xa, 0x4, 0x80000001, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f0000000080)="18dbd4d0a22526b210f9fa753f1cff6fd54e3c749a59807e783422117dc534e4447b4f09516f4c54a4db6149a843ba06a10f59ddebb337a5616b976b5d78502c0d6a4963d4350d22144a4deca7647d4c05c40d4d4fc6613b94aab8ef5238a5ca8bd5904ad452756f8342ff07ab1f863f4d1ed694b09906ba", 0x78) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000030000"]) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x0, 0x9e}, &(0x7f0000000140)=0x88) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r5, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x7, 0x4, 0x4a4, 0x280, 0x280, 0x140, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000180), {[{{@arp={@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0x0, 0xffffffff, @empty, {[0x0, 0x0, 0xff, 0x0, 0xff, 0xff]}, @mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x8000, 0x8000, 0x23, 0xff, 0x9, 0x2, 'bond0\x00', 'lo\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @dev={0xac, 0x14, 0x14, 0x17}, @empty, 0xf}}}, {{@arp={@rand_addr=0x3ff, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff000000, 0xffffff00, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, 0x1f, 0x6a3f8860, 0x5, 0xe3a2, 0xff, 0x100, 'ifb0\x00', 'rose0\x00', {0xff}, {}, 0x0, 0x20}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @multicast2=0xe0000002, @broadcast=0xffffffff, 0x8}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, @rand_addr=0xfffffffffffffff7, 0x8, 0x1}}}], {{[], 0xc0, 0xe4}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4f0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000001c0)=0xa) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x7, 0xe6c}, 0x8) 2018/03/20 23:58:29 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x0, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f0000000380)=""/153, 0x0, 0x1}, 0xfffffffffffffd18) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r2, r3, r4}, 0xc) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x2041, 0x0) r6 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x3, 0x424000) fanotify_mark(r5, 0x80, 0x8000000, r6, &(0x7f00000002c0)='./file0\x00') 2018/03/20 23:58:30 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f00000000c0)="0efbeef92a4eeba9bc4a02a0f18b728236e47cf59d329615468fdce399f4728ca0f8f24e51418424f0ad5d2a4b80e4e64133d1c71067f91fae4ffcc75aabfb59a3927fb92f85b0afd4276863b3a08f82865cf0d695e670e0e4b3fb3e3513c2da08a8c9a950b602b06862e2a21aa47920c65c6beeeba59cf52f38275fe1cb048bf3c6563ec88432a22fa590e559076c1b29ab52826c47ec82518853da900ae2e922360864abd5729e4536e521e80f92a5b748204d987cd8b9773bddcdfc46a3be3483cc72933bb159ccebc18237af0e09513ca2ea3a3e6ce21cb43aa47aabe41593a8d56f2de2798d689461e4ea2b2ca67ede265fc78698f7396ec8289cad6cd4d80b05996fc599638147337325b4b60d81b520ea0ed0942f1791d209f53e106cc1ed1636c517fd312bf328e736185d693f476e449127e989835db675444359a6041e55786d92537a639de4489655caa8af85850c336d2050804011f14e256a9d2eb1a872f6555104dba057cb64649c12fac23b06bbfb7c24e7867d1feb107640528468300dec4f7f5c9e5858c686c6eac0f5d8207dae49efa6d2bec8200615213ba2d950f969d8e32a68862d6f23b2f3b98262eae2f086a12faf4d83cb13239bb9e36ed001884c3a558558bf2f89e278568b94398153b86bf82e36f57c405e5562cd9de33c73730a2cc3c5b6554ae2f9ae2c2e389bb41b6c942b6794decf867dd9b8ffebd8fff401b4584a396b62db7d054d0df4cfe7b8b1665a772584571e8faa69a5788d1b7cba30fcf0ddc9e3cfbf57402c3f049cc13530c662e61e56cd7406d2774ef05c46c52658dfe0b35ef331dc7f4e517117b2d3228e01a3ae3aa3d8a49d7faf5b1e17dc9b82e1037dc1a8a082aba746a58d6b9794b784f0c0d6f13c0aec118d483f1f6cd144b0c99fcff6b874244c7998070bfdce5866b203c2e0697d40ae07a52e5d1e170f357169b0899c7e2b796e36694abc9626a7bb4131fdba9c822cb2a1e5a0ef03125268284534eaf725d25a759d7e7c737de53a8a3414d53facca5cbeb4f5e711891390fce85b8800b54f092b28f5c593809e55c038340430b791da0e0d5361a37a4c50a371743ec5fa069867b0b96b3c9225467f0f211001d2c0a0308041849c28ddafd592606fcc4d53e0b7fafe996e6aa16b88adf862682caf5a217e2929c991aa4c124afd4c532d313ed589547f34ee807b8d2032cb3ce118bd160a7a331b560127576447258ec4888e80f04d2e6e6e8bd7418d2d698d99e16c5ea2be978abc9fba091d3f31837831a2b531c9a2ca87baf50cf975fad7c99dba0bec816f9bb3a0fc08cd6a8fef034ce275c67edd5f29018397d34db74e279e70c4886d255ceef10b20dd44f77dd789e7ae1d09887581323d789f85876f6056df47c51dda1bcbd5acc1501ed5ca17cc470a07a49cbad0513496120a962bda064873030c202d1aad0d79732ced8792a174ca94af8311f1fe1764c60c2e2234cb0820b4ea0ff1955155d06187789c950b42f4e8ec39b3d31d59f033e8c33c693090532a052b5d3420f7b66ba6a78f97654b0f3deabd543125891b98c7d7045318093ec98a09d77e27ecde689d38194ad6e7a5cfbbe18e927c857e75f4f28e343c16a9fdaa7e2b5f4b55ba104d85a9bad8e5091fd8ee5deca3bd11d7924603fbc722fffcf7effbaa686e54ff2a527a251a0fd1bdbfa4fd9d574f36aca60e2d6eb2a8008ca31a5f402c7e443f74d062f56d43fd301f01dde1dfb1e2111a4ee48f65d126cd8adbcd264ad20d6f57faacbbd9efe753c2ec33817ed86ea1ba9c15791e72756826bbacef41bae520ae88c2a5493cb1bdc0a346d5d5ee3f762ec86fb34542596b84b3966359265c98b10454f48e41a69e315e8cd7d0dc89e537c72466f2c9f7e9cffec2c7631a424bbce9788b735bb848ef98abfb8ae12fea6fd65e20717359639e8e37a182c8fa90d78dd10aeb80baf735c79bfdc5a6fb00799e0adaeb0667e753580a6b425118dfe5c03fe114f310a89619e8cccad403b373b6b15915f9633248a2800839b5080e23e57335399cab547c2bdd7b25f58e86cb673492e231194cf0dafbffc4aeb37ed134d2b6fc32984eba1188eb186d0c72a902694462cbe6bcc7aabe7d9be9cf22429ec715311b03f0705563881b57cb836a2ec44975e4db69c35ea0d37e87a6d831aa9f625b9339f44585e5ad73d98e32d7fdb061150ec51fe31d9137e1f6cb836eaca0f99af36063f4f934c8a1d2c6e21f2064aad4d506c3794c296183912da8ba01def1adfdd19b868ace14fbfa2c4ce2e8c37ed4e65ec5681db2580903555cd7f66900943c0809e6b07f35b8e68f07bff9c19d130c34a407265dec53950883781533151cdfee5321062b28c4328500a3222a6f71671e15d4f44d09c3803faa5a024d17a525374ef09dd4a691554ed0e527388c3e7866365d54aa0568045e2bbee5b10a7a8800d42e7e6d77844324a87060690fcca62f43cce670d341d27e5af853bd412a6beabfab2596623bacc0616946998f383117fadf6bffcbf76f57f6d5e454de5847a29a0ec0fbf722b5334ce75f18520a5c1fdc0ea5c6112bb81802033af21da5133ee421c1fe71e9c407e5d1523b06cac1c1eb3fc2207e9baf411eddcbdb3d9abb29c9afaccea839f133e845cf7bfc632365f757327910cfe11adbd4a58d0cbb85a41f68aff38847487a832447a9ae42eea78cbc7d14d95c157e400b13ed4fdeb9aa660393fe2dc9dc7b3f4a9d7b26df14c8be52e3ce8f42067e41e91cae9dcb2aaf0ead7fefd8eaf36aae80b922bf8bfe88d6dd273e566f8be5265db732230df86f9bfdf8526fac6304d7cac8bf9c10e16f542d38eab0c89c230a69af417d03dc4fc65cb5b33ba84485f110a9acd23b8e9e33622b2dd01843bae347dd7bd22ce3859425bde725c185f6225e097736107294937509c0c0a5d6330481ba151584a3aadaee9690de7f382bc2046c7e55e98bcf068fe03e9a5ab9e64a8399686d21cdb13140a24a3bd56732ab4da11551227525ec27507f4c2fe0ca6592e531d68f9c17aa7d3ce0ede95d13f1d88406a31a80a5873cfae7d47e12cbe830c54044a2a2529b86f146b5ac23f89d606fbec225e57c24b32cf481bff7853541288e2923b1af4f4820f8c9896e52602aad9a828429ef182c60d8f9db405041a5eab9b7fb93076f865d5df73dfe92a41f1e54452f429d76c25be5a505b4e77dedfededc7bff35905b5960aee34d9dc62d931fb3e421f223baa9be77bbe7eee0f35ec151f773dc8ed136d1be256613a00b7f69ba4a9219e2e8cfc24f291fb1b5070f14f1bf1147c212e2804404ca7fa464eac9e2bcb4e677c05f6ad2b1fd922315c1aea8c1d34a7a2b25427a461a1b4f911c28a09e39c7919d3f6d41ab2c5d0890a1806e99c41033ad2347a202622cb1c5ab373c33af79264f444e0ca6025f172ccba2abb65965c7493a6bd09986f89d3b6bcb0a05648e915da66fe165ed42d5693cad587d4eae2cd081d52e72f3dfca05bc25f14c88a90782c230c8aba3492706b8ba5608284858c81fe81f4156c374894f99fca5a320c4ec9a36ba0dbb3f9eb80d6e33fedaa8a10ac088ae8280f4321a6824bef044be877429e8a2b5618f87e2db31eade9430a0a2aa81a96b26966f9a161e4c508049bab60f8d404a0a8c70573ea377b2ba2d17da3a3e6fb32ef77c7ec7ac24d22f6574fbfc9348e127d4e954a667cdbe0b7b422c749a121636efa3cdc193ea366007aca559f65abd01fe622c0cef558423cded4e84642ec7a14fbc1207d890e02d57853c6de4ed793667ad6cdbc0bcdfdd8967bce022ce44d1c46383ab208b378560f5a788d4c68a7fd17c37a4d8ecd8b795ce33a8e2454898998f777e8ed0cea23bd67c50ce040e3d5871b03793b58e6332264462b01a25be9521ac0c5bd5d7aeaf8552aff467320d3ef339c9943c9ff73fa7b53250e2dd0559a00e76cf93187bfe5bcdff4148a507b5355ba892476fa09407a86df3711108c2b9357d5eb514cead5c007ba35de9bb683c5a54cd19df58efcf171407ca3fddafac8fac84d3b95031f072bfe043249babe57a5ca3282408bfc0cd5bab76957fee017d745a4cefb02e35ecebeb56f90517e2018e138b5d13efd8e377171bc1d1a20ae196c63ae79e06b6bc11d48e4e785757cc26f897a127f06968bcb1e8b7f9dacc9736bd7d70c5554ac626b2d3ccd6f5d9253254e25f82008c1aea021be0a5cf629960457626a048330ea1ea8e72a6a02930f7ec2894ded6e8f9c4f3d0673bef1e1de773c6640789826a936e561c85d6c1ed4fb8122e3d75f9bfbe808ded2aab7a5f05d49aa02d899c4d2514b5d01fdbc2ddbccf4de2c6a8cfdda32eb43b85d2baf2809adecf19a716cad8359e145b30c871efd467dd5d26757ce99ae5b3ad30f18bf35073bd001cdc6a4ece14867f7b68bafddf83ae61f13bb0fb6e62c418cdc54e9f1b936ce29034e9b6fe60d82406d0ddae5e39e11f50d1e06e95567c9074b1f91fda630ba6cea5e871b862264e41f948850d79f515b5e0f1fb8188bc46f5d51e784bcbc6079beb66fb0493108ce22f73ff037c88ec0882be6139c90abb79c39bb81c8b42662fa6e51145c01ddf07fc6e89b5c99af48d97b773cfb12fc162b3300988cc56ec641255deb16c06cee85bf9dea352a4ed6e46638d61b328e0e9596c0ddaef988f321d8194840a0dbfa7e21f37f1ac5135fcbc45306a5c4d69af52406c8c9df01e9d241faba83df194f782f185352941023fec797af35a5da97ddcd5cdc4ab168de279247050ccf2f2a16abb1f2ff06afca7d20eba31ac1ae0208adf8991f7feadbcbf3bf143146a794e286de0e68a3400ea38a1dd2810699bde3c4e3c6473078f7b514c83cb7f12e5ccce06c639babcfb76e5baef3cf83fd5fbd0a5cc58c7ca260528a0d13fa523672b6f31c1a070d386c7694711729a12fe8e5fa3ce4cf22db621f46daab732ce219e7b51ae447a9e313e121efd2c0791bfe9e99334c49c68a0ab4aa98c011e2a86182ed929a02af44655ccce07c66966e19b8091b65b1418f938356d15612d8a1eba0e8cc0f03971981b4d0883af65b0dc21404264ae184d9a690a5d30bedd02ee93e04a2d95207cc60697e9127c0f78e0b2146a654b9a30cb84aa7fe7d10fe0336b6a2b8ddff3e88c86a238a5fe3ef79d6d006f8fb9cf1df399f5f7227001ccf5a2fd46aed774bea67c9a6369a67e993c3440a908beb6a3dc17b411d67b3c6b9964502b22a342d02e04f73ae6687f2c42d657c25739f6bbd9d7e0338803c378bb3eb5ce844f0628bc62b5230e3403bef02c7a0e4c550d5263bbb12046724abf19cf6c0e02072e117e870162030134c243d3979b2c1250216cd72684d65f5256d3b8326fa1aeb9b11d809c452a14bd651f5c37a725f467318f31bcc8d39ad6f648110e809532e300207bf796a6df6ce904e155c7a84b32a0a03e005e4e43cc44b8d98fcaf72e480cda32207d2de1ee9e65a1c4e9d2f9eb0ce0d85b759a7f83de613cabf20db7ef889f12e838e19bfaefc98dd778067c77821ba90836bcaf0bfd9e808c38603c0b0519b0de25627fbe6b7b48e36ad24cc7925ccb9b450ba6971390bf26c6df3100b8e3c8902e0431d8e6e976391ef0ceb9d0b3a829688bb35b72ceac9177f247a4f362abe69b64351ea398451d3f5f7c4eb3e57b9da767239e7d0d199a5af5d7890e3c9b5c8e4856dbe59d551da872750fbd8dcfd3852e8213198f12d95dd5e7ce4b97529116c0cf9e2851a45efec7", &(0x7f00000010c0)="e0b745216e85cf3724918f8df84895c7eef9f979cd3b6eadd585a8b4dccd885f9a2214e9a24ed9ad8d877f33040b23ea64dfb35cfd8a56d58b2ea26cc48e9497e8b725dbad7e4b0c75b7947bed8afded3162ada7633b04e56479e1ce614d22d0e8c0d57ffd990f2518aad719986840ee109e68b28ce6225f", 0x3}, 0x20) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 2018/03/20 23:58:30 executing program 5: clone(0x200, &(0x7f0000000040)="2fa871b40fd4888569b354a656037b428f1ea4278664ac9ca07c60a5cf02a9b829e08c9f5b16d1ade5fb65d1a867df43c8bfb3d2a6b90000000000000000000000000000", &(0x7f0000000100), &(0x7f0000000000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000b13ff3)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f00000000c0)=0x1, 0x4) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80003) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:30 executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) close(r1) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000010, &(0x7f0000000040)=0x10000, 0xfffffffffffffe56) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x4002c0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x428, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@remote={0xfe, 0x80, [], 0xbb}}]}, 0x38}, 0x1}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fgetxattr(r2, &(0x7f0000000040)=@known='security.capability\x00', &(0x7f0000000080)=""/178, 0xb2) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ptrace$getsig(0x4202, r1, 0xfffffffffffffffa, &(0x7f00000000c0)) tkill(r1, 0x15) clock_gettime(0x7, &(0x7f0000000100)) 2018/03/20 23:58:30 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x3, 0x80000) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'gretap0\x00', 0x80}) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x80000) socket$packet(0x11, 0x3, 0x300) unshare(0x200000) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x600, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000100)=0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0xe209, 0x0, 0x7ff, 0x8}, 0x10) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$sock_netrom_SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000000)) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) munlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:30 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000000000, 0x20000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/243, &(0x7f0000000140)=0xf3) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x100, 0x0) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000080)={0x2, 0x54, 0x5, 0x5, 0x20, 0x5}) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140), 0x4) io_setup(0x9, &(0x7f0000000040)=0x0) renameat2(r0, &(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x7) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x40000, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30e) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@remote, @remote}, &(0x7f0000000100)=0xc) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000180)=""/4096) close(r0) 2018/03/20 23:58:30 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x10, &(0x7f0000001100)=ANY=[@ANYBLOB="c500000008000000fa586f22aa9fc201000000000000950000000000002455c17b91cc6e89018e6ed5564cc174ff8aa40f3da8501ad4294a93ff97b59b28d9111d3794cf68de50e109a1ebdc16889541abd7604296effdd5fd604fd1cc4141884be90a7d3a0454864a9cb2fb32d8c000c642f24e308745380800438496d9b8be333266b2c90e22"], &(0x7f0000e6bffc)='GPL\x00', 0x7, 0x99, &(0x7f00000011c0)=""/153}, 0x48) r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000010c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000040)="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") setsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000000)=0x43, 0x4) fcntl$setflags(r0, 0x2, 0x1) 2018/03/20 23:58:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:30 executing program 1: r0 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000000), 0x80000) pwritev(r0, &(0x7f0000000400)=[{&(0x7f0000000040)="dd212477eca3839cf0611f1a5f175b44573c0537335dddaca84460110e724746b469546a05c13cb12cd1ef3ba0e1f22e7d631e767afd12fb2e75876263943122f064b86b25dd05f829f9009fc2e39be08e4f9ec701d0b26718c2aea9ba202e8564d88fa13bf0d2dee64ec344650aeaffaa66f4684f2d44f87fb471973743000201de25c62913fa03db9929cba8447566d2ef5f8c9d7e72c84978", 0x9a}, {&(0x7f0000000140)="7c5d3dc87f486b", 0x7}, {&(0x7f0000000180)="88c9d27c5b28", 0x6}, {&(0x7f00000001c0)="18dd6597c0cbc5eaade5f94c9bd814a3d419645e2db51fb165e26babeb830c700e0684f9e6eced966d49207e03825fc7783bbf05530813ea4f3826e09f8346d15f9c8177b0e014d05341069b41ec6593b1d76425c6063962151b6bcb1c", 0x5d}, {&(0x7f0000000240)="282df3b927adf5aaa56fb79d2b033b7df047e6a7dba9ce1cf802fb05fd4ca25fd876eb28fefa8ac2f0d5f86142bb5fe78336a8e02777ddecb1e8abe780d62a642fecf4cb45054e5abafe8a9380a92c04aae5ce00bf42ab9c5257a53e96ba2e73384fb7173c89b33c2087fd48967ac9b0ce62f81c62570d57a45413a9726183d2e55913e9c2d65d2360383813adb3b2c134e93285043ba2eb72", 0x99}, {&(0x7f0000000300)="5be7293b5eeef5e7e337a3577a62460975d1d7ee390050e26bfe8a747a8704cb5dbef1c564251c36e5a1ec752d20c477eebdfe8d4a0a54c54cdb4fc7ba54601842004d1fa49089ddd44b5df7111e51504b6c762a4f5ca59b91b2f68fe761b60f1cb7e9058f7f3e2d3c8916733943e7d78fb5b99c02e6dd73317bacb8b098521e0e8e12d86c14bce98ec9532fe8367c4a566c05be85ada6071f6b6a63ba65796421b24d593935d91ed389d2919c2b3716718c718ce2482b86d1ed697c3bfe3d9a7bf5a0c38c1c0629253cc579dff92f034d82f6cb3de680966c8090f4b9fe", 0xde}], 0x6, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000440)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e23, 0x9, @empty, 0x8fa}}, 0x40, 0x81, 0x1, 0x3, 0x7e}, &(0x7f00000005c0)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000600)={r2, 0x1000, 0x2, 0x7}, &(0x7f0000000640)=0x10) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000480)) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000004c0)) 2018/03/20 23:58:30 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x4) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/44, 0x2c}], 0x1, 0x40) lseek(r0, 0x0, 0x3) ioctl$VT_ACTIVATE(r0, 0x5606, 0x1) ioctl$KVM_SMI(r0, 0xaeb7) 2018/03/20 23:58:30 executing program 3: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x800, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x8000, 0x4000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080), 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) pkey_alloc(0x0, 0x3) 2018/03/20 23:58:30 executing program 6: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001380)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000001480)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="00000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x41100, 0x0, [], r0}, 0x48) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x18}, 0x10) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_opts(r2, 0x29, 0x0, &(0x7f0000000240)=""/4096, &(0x7f0000000040)=0x1000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r1, 0x28, &(0x7f0000000140)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r3, 0x7, 0x18}, 0xc) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r2) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000000)) kexec_load(0xff, 0x3, &(0x7f0000000280)=[{&(0x7f00000000c0)="67994e1ee1729c1110719fe5507befe1d2661a386fa22af5", 0x18, 0x9, 0x3}, {&(0x7f0000000100)="340ea67fff639eb3eceb0c3d439a900cf4b247a3e18d4e0bb40f3be4ae7fe21322aab6dbc57e301db3d302ad05ce0be272e2f53501992555a4b3d1a894660b53e48ef7be7be5796d3aa03aa1b8ee5e6e7f71009ecf184a5ef3d35be1c10a9cd5fd818bf9b20b3ab2fd5a73d08903803f54fa6063bdb04c090b453734b7d46e", 0x7f, 0x1, 0x5}, {&(0x7f0000000180)="b53c08b3e4df4a9718bc756fad95026d56bb0fe20f21eb13d87a2d75063aa9fe1fc105bfd3de264d251722108bf7cb4391e8b0880074303e43a35df4a495ce77d94aa50abdc6f8437d60a56e4e7df423c5997e4478df6c55e9171411810883d062d6383dbce022eeaf362472ea30b50228c225c64dd8e3856b88bb0fa0203fa73680dada755f33e0ea1dc337e9682d322a1849c7590dca4fdc8ad6589b2a50f192836c5f5a3793ac74c8c469d8569d326fbd907759fef318ee2c4ba10658aa034abbf013ffcac6b95df31871c83eb3a314bf0e2b8b80fa9ab787722a41a42ca61e5a2dce2b87d7d43b1c06", 0xeb, 0x1be5, 0x279}], 0x140000) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x1f, r0, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000300), &(0x7f0000000340)=0x4) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/user\x00', 0x2, 0x0) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f0000000040), 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000040)={{{@in=@rand_addr, @in=@multicast1}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) 2018/03/20 23:58:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x8, 0x80) ioctl$EVIOCGBITSW(r2, 0x80404525, &(0x7f0000000100)=""/41) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000080)={{0x2, 0x4e21, @multicast1=0xe0000001}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x3c, {0x2, 0x4e22, @loopback=0x7f000001}, 'ipddp0\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) fcntl$setsig(r0, 0xa, 0x1) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f00000001c0)=0x8) r1 = gettid() ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x50) connect$ipx(r0, &(0x7f0000000040)={0x4, 0x0, 0x100000000, "0164a895e5fd", 0xffffffff}, 0x10) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"559b7a4f74253a083500f2ffffff00", 0x4103}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) close(r0) r1 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x76, 0x100) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f0000000100)="2c6d036b195fd91d96880597c8d5691999d60dcd025d2bd03f74b36f8d5b8d7e7ac3d591bc6ce9f8e957015fcf74aadba90a17a3c55a1b979509d99b10df2ee51b28e3eadd9055fc13c9c35e1f59f0f8492b756fc431d581c03e9101034418d66d15a75a573e4dfe9d841529a3c1581bbc7998d618bb5bf0f580069cda2501c5e046150f7ef4b4115e9865c0924a88169153c967702097d94de572cca084ee56d8dd119faf80af", 0xa7) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000140)=0x6) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000100)={0x3}) signalfd4(r0, &(0x7f0000000000)={0x8}, 0x8, 0x800) io_setup(0x1009, &(0x7f0000000040)=0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='mounts\x00') mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:30 executing program 2: r0 = getpgid(0xffffffffffffffff) timer_create(0x2, &(0x7f0000000280)={0x0, 0x40, 0x2, @tid=r0}, &(0x7f00000002c0)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2100, 0x0) sendto$inet(r1, &(0x7f0000000380)="01471492b2ad649e0e06433d588156", 0xf, 0x40010, &(0x7f00000003c0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r2, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) socketpair(0xf, 0x80007, 0xfff, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000080)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000180)=0xe8) clock_adjtime(0x7, &(0x7f0000000200)={0x5d, 0x3c00000000000000, 0x8, 0xf82d, 0x3f, 0x200, 0x101, 0x8, 0x3, 0x0, 0x1, 0x4, 0x100000001, 0x9, 0x1, 0x400, 0x1004000000, 0x717, 0x455d, 0x8, 0x2, 0x3, 0x3, 0x0, 0x8, 0x6}) r6 = dup(r4) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r5}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x40000a, &(0x7f0000000340)=0x4, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r6, 0xc008ae67, &(0x7f0000000300)={0x7ff, 0x8001}) sendto$inet(r2, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000), 0x0) io_setup(0x9, &(0x7f0000000040)) 2018/03/20 23:58:30 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000001009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0xe5) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40800, 0x0) fcntl$getflags(r0, 0x40a) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x10) 2018/03/20 23:58:30 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f00000007c0)={0x1, {&(0x7f00000008c0)=""/219, 0xffdf, &(0x7f00000009c0)=""/98, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000000)=""/63, 0x3f, &(0x7f00000001c0)=""/225, 0x0, 0x2}}, 0x68) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000380)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r3 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r3, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f0000000500)="af5f8aba3118252f9826d0e6f2e79ac9d0411fc94a0b1e5d881e94e64fcaa8123862d147977f5927ec924d4dc19ca0996ff80c48460b", &(0x7f0000000540)=""/63}, 0x18) lseek(r3, 0x0, 0x3) mknod(&(0x7f00000002c0)='./file0\x00', 0x80, 0x40) ioctl$TCSBRK(r3, 0x5409, 0x100000000) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e20, 0xf92, @mcast2={0xff, 0x2, [], 0x1}, 0xff}}, 0x81, 0x1, 0x8001, 0x7, 0x8}, &(0x7f00000001c0)=0x98) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x2) 2018/03/20 23:58:30 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7ff, 0x8000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="00001a0000e80000"]) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x181000) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f00000000c0)=""/135) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r1) 2018/03/20 23:58:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) sendmsg$unix(r1, &(0x7f0000000a40)={&(0x7f0000000940)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000009c0)=[{&(0x7f0000000880)="1ec87b1918adda0c279f", 0xa}], 0x1, &(0x7f0000000a00)=[@rights={0x1c, 0x1, 0x1, [r0, r1, r1, r0]}], 0x1c, 0x4000000}, 0xc0) process_vm_readv(r2, &(0x7f0000000140)=[{&(0x7f0000000040)=""/142, 0x8e}, {&(0x7f0000000100)=""/24, 0x18}, {&(0x7f00000001c0)=""/174, 0xae}, {&(0x7f0000000280)=""/73, 0x49}], 0x4, &(0x7f00000008c0)=[{&(0x7f0000000300)=""/31, 0x1f}, {&(0x7f0000000340)=""/116, 0x74}, {&(0x7f00000003c0)=""/113, 0x71}, {&(0x7f0000000440)=""/217, 0xd9}, {&(0x7f0000000540)=""/141, 0x8d}, {&(0x7f0000000600)=""/165, 0xa5}, {&(0x7f00000006c0)=""/183, 0xb7}, {&(0x7f0000000780)=""/202, 0xca}, {&(0x7f0000000880)}], 0x9, 0x0) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000001140)={0x800, 0x3, 0x1000, 0x400, 0x4, 0x9}) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000100)=""/4096, &(0x7f0000000000)=0x1000) bind$rds(r0, &(0x7f0000001100)={0x2, 0x4e22, @multicast1=0xe0000001}, 0x10) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x80, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in={0x2, 0x4e22, @loopback=0x7f000001}, @in={0x2, 0x4e24, @multicast1=0xe0000001}], 0x20) 2018/03/20 23:58:30 executing program 6: r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x800000000040, 0x20001a3080) sendmmsg(r0, &(0x7f0000001680)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x3, 0x2, {0xa, 0x4e21, 0x76a, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xa2}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000100)="0a1812fadcb14a269c7fdc0bba02e4d6a0e5ac771eacd155993e9ba16c802e2bdb538805d668de24adb6121b2f8b419994887856927714b76b1a", 0x3a}, {&(0x7f0000000140)="ded078be8e8fa4bc31d3fd24e33105498c2fa12099007ca6c6d60a3e50731d6dac787ed12db37d474f3df095a19571fb52b973aeef373ff3f4657f8ae51c5b7dd4", 0x41}, {&(0x7f00000001c0)="b2f516f2cf7b61750b9e037022c48b68de28f1ed03e42a120338c7d358fa2670c575bdfa7cae6873d18f46ad5ba2c652bcb49b4c7d99070f8aec9e262dc723d067e5adaff016b1ac1011f5731ccd005abd933f15f349ae8ddb8ed2e443124cf89e8bf57531507dc80d0d7cfb5e449dd8135a452360ed225863e230bbcdcba3e5d332d655fba35144752b50191198ebb19d9f7ba70a2d86a6ed8689217bf0bd4f562adf7d8a4ba4a7fdf34e6ab29a12a71446e825b57a1ee74927a680163d1172d7ada54f56aade2c08ccd5ba19fdc509549e8819c5ec05f61241cfdfade6044c5d529a58f023045dbd3e75c93a3e38f10b256ce528", 0xf5}], 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="940000003a000000ffff00006303723130540f823255364fdf44711719a9d33b02c66b46ac5c0183469d95fe0f05b7b2d20787fc279a24d48884aa487dff4c7dd75a3712295c0a500d4cc1831834163dc4a88676451db37373142ea0b423a0cbe5d4152c6c6790ce63b7d228e6686aae679dcbfe44f4556e3fa81ee6c891f732d8492711dd96daf0eb6f16810c13071ce98acc000c10000001000000070000001e7431010d085271a5c40c450501f1a76a9e001083863172bda7a61eafeaf92b634a1acf6c699e5d6ac3968fd5ab1d29e83a306b4fe0ae8e5fa315b31d5cffd8ee7a9bdb9bd28dc683b84ebcc200136cb083f677372b93911edb99b0cadbed43ff11779df459f6fbd91735bb6d64cd5ead72bb91bf36f90ee470a659df0eab70ffb996e945e8bf2965733306c79ed300bbd5dba73826aa9d4cf5e931246780017bb5cc8dbd1158fa1994469d5359b15ec5c44e896e6dfccd8325afc3c3bb3bf8c20b287cbc4e8ea3d2c3f18369260a4592839e0140f173199c8f2c1b3642e0c315ea4d95c16ad592d29def7bde041ddce0454060a6aad86ebe3939a043a824b1ce8aad0e2b73776be472a3de7eeaa058b10f8be2ad1e1a48e4c2910da0c39531bd5de8af9e5f14045601baf2164d75efa0949a979779771a59c8083467e805624d482853c3b2c2df4a2d6eb898f18fd62eea1eec1f11fddedf95513a6d609f8e14bab17c1d24b21db39acb57ff2005ccc0895c1c45f24d45658cb1486381aab68463ecd979085d9f8efbadb7cbb6bb50bf566474154eb494e37e71f90f1c3d5b1a81c1e09e4b68797cfadbee7e81b9d0ef6cd8d0eb7a4fcdc453d37f8e5e7f1e44eea560d4c53f514351c324daab429ffc343d59d0ccd0c0f80812d1c8da3d23ee66bea1c8ac371f759e1272b9cc40efc9cd9d1f9c4966fc2df6717700884c9bdb2dc218baddbc02cac88946ec052b3ce6e4c771b7b2eabc8998e617f2ac8a547b51da70b7c34a86af7591f5c572ec7c9a270c4f4c695d58f9ab6ffa9b35333e8198c773e0bf8b54b133b9f3a47e6a1176546411de907108bc04dbf27343f3ad4b5feb2bf47282a3a2ecda573b5f080a2c14cb34024f966fc55ab87a41f84c6916da59c985e34fb709fc1b87f380ab92f0b5ce3bba2797bd43a4aecb14cb8faacb5a32ff47a314384d323b34f92289eedf10f8f80b31dd865416aaa6c96bc4b9e26609cd2ae27629e4f90e40e35cbd2d90007f6596ced324c2e9aaa232861b4259931e834190f535342c0eda709bdbf8f9c90df6c7724983155fcf36daef62bca5955b5a30f44380917494c4d1b1e712602ab63085b7aa40277a8c4d0228feee480f6084bf4556bc7f7b1b503dfcf11dd81a531b612adce615dc90c837a5360266e7bccdb921fc2ff5e8274dfeb9121483c1f86d1db92d498eead3fd9cc830389b2363908455fb567b60e359dc149ca4bdd64198490eba676634fa7b1bd091c56715c369931653ed717f4dcfc7b6e8ecfeb172f143fdfda8801131836ff9e3f8db180992ee7d07e1eab25c47bda3a2bd94e94652104581f3cd9e6ca99499b19ea9908c161dbd4f9020206da9c7cf3785433e824fbf7727dcb5954171c18d1242917cd9f86df36d621f6fa17659eed7db99bd0834d1f624d9b4a5251ef7aef7f57abaa9ab4130ecc67ef14d4eb893c051287e6546d57fc208d464f3222350d02b00068a8bf6c508ee91ea9e67f945c8fb238668315090064fc5924de42b7a20e08496bb1cc798495285274f49947895ffcf04065916201e2a26676027d64b54ee4145d9b24bdabbf8111830bf03c705161c63941a426f1285ee6177d506676918f69746f95c93956adcf72abfed074c2bed73640fd2f06f4c99e079e805fbf46984c52453b0ce52aedc3a05d502da0a594d402ae7236085c3e6c6a4d08bb051ee1c7f153bc492e824e0a8f5a7099da3deb274c48f66b42d14ebd99aafa213384e5f9c0808320f2f30d9d11c35f26d2003f760b8932005b0b106ce3bb542e898a335cbbc4fd7e52e720cefd91f41819cd60573b3b5dd1eb641dc289817b97c4ca2b7324b90284ca8a601e3a5d67fe07e602b7f6b2159cae9cad83c8dd0ed1588218e4109aac146c53b7bd46cbd80067319a9918d838f111c5fb2555e2939f6343a952b5f374e5aa1b09eba2b31d9be5db518f7765e69f51be2729e6533e801b54e267de75460992b91000ab2b5d2f88541334ab3a723387aaa466dc06265240ab312aa411e31cf206535c02e78a1170f782a7d33420cde17e098af37a19e3212a67db1d0af3d1fb60023c92081e427550ec45e185e497ff94f59db2311789a630bf376dd57a5b9a29e9438a862668b003700d28e4b0530b8b0420a548c2ed565fb1c00f2a71127e69b636315f858e5a52d8d7b1dcc9559d9fb1178996eb8f21f4667928ad1732cafd76149d25fe6f0028fe13a810b0850285e3c4355676492220fdd0577d914c72c083a79b2e6bec5f021de9675daa0e5207ae1a1f2646c77fbeed4533dcfb47cd79a50ffa316bdfa485db8fb7134b71062761591dd4e82a9e95dbba3836c2372e4accc10055f78b0fcd8d48eae37e466e8f0244deedd30f2d809d8ef667b406d8bffd296b654dbfa23dab71904583f50f946cc95e805c3f60551bd032f7e1dc7d629f8c96f3a68a3492f0911cc131e50a4a5629b9f26e94d404ba60b5775f2dfe9d547839a1018c5c5507f5785b04814063b7f0e21ad5e5bf485fd25253e1957df94ea47e05666392fb33c46e8150796eacc610733a0a9aad3c2ada2b7e25f7e7eb9a30720a20c5bd1d1ba2b21f086a1419bb0fcf975731f3f612ce943b41a3780022f597848d484951a6f969997dec57832d6752ff5cf576826ed9be64dbfcf582c69bac033e5084e016287081aee6abdb3c3e9175c930a9cff8f048b998160b7645aba685c2f010a15dd26c4dc360d3dbce85ae1f37401d18b1add396f7eaaa264c4910b6fe3a40b829b6573f68c5dcc3d5530bff04b1034b905165052b2e0009801f8c6c1c321ab1e493462997438a949c75efd573c1ef16facf1662cac4ae1a4b01450711f6e8f739659b37bae6d8a304307e6ff352278d8fbc075b780687a3bfcae87c3c56dd31f023067311c3138784322e87e8979dfac640cf52634be960d96818818c8feb89720c601006158cdd794c618983c6f67c4479883c6aa2840d6d4595f5f0073563f34ba3549e4d3e8c20c84e6a71d3980b21a623eaabfc460dc96ec6e88da7584f5a20b677ba798ca69a402297926044eb593ec597c479e421ffd9548fd4d959a7e3a110f93eaa9bef3a8b021ccef5110e81b54ffd9a4631678369b40a0b86523b02190b8d9559e248305b7f577e7de92dfd5d835277263f71d3df8477cea936dedb4764b086315571529de46496bad7f67c1cca0860c58e5765acdbd760838f7c6fe5b294a93953b06f29ff18064f7786762fdd4f3e8396d5cc6f95cc1f959fc30f2ff18b4077aaf46d1e4b34bb9cabf912332af85f8f35a3142b35d5122d2a8e9be30201476d864f9a935a87166094a5ea3773bf4e04a2e145b2fd7305d02c0e61ccd48cbdbb163bfe5f507bdbaf4f9546459f94ea1c467d20aeddb4ce04dedbcf803774641a991c2e3c98d1732ad37329859edc7f925526e70c4a435d5f7d609e1b4dcdf1d8939f31cf60abc1d8cf7c6677dc52acb6aabee4c21f8f651846b807fb5ecde9e1c95edee669110f7218b104c08de78a8adca8e3ec6ebda8035e0f467ddf324913017ba075454da868793fdf13f10cc681a7ab1cf923b754a76c35c8d85a9d7934a15cdd03bc13277dac412a437cba7f435f9ff97fd0ed425707914cdd6f36150b577c28d85eaa7d12e1202464352cb950712b03f98a6776c65e808c586cc23bda13c228f3f0b996f144155db245ccd5e587d140df9a7c7e0f57ce0b856f2e9616a7b711c412f0c53d6dbbba69284c93356ec5f6e6cb8cc2a8d14fb84cc8a1680d93cabf5f26b64c6bffa51c9ee2aac04d8b728446ce25616ea4557f8995a4f1fc7fce735885de1a53cbc1ea1647b87085d5f0d4c7b560a3074cc2b819cc6aafdb32db87233c81630d23686e2bd5faba3fff92bd95cee6b857c172d1cb484851173176f90674012dfceeb73e1c0593bc2d44f15505052a16f2005cd0e00d3fa76270e2361f15e2ac75b5fdeb18d5f4d3aa9c24c6911db7a979a8ae6a25c11214619b8ffb78c75f5b3b8504eed03fd65c548d3b4bad402d53a3f1bc678924bb5e1ec1d3c8f86e11224ebcca9d4660cd87ca21896f04db513d267da40b1046ff062995e70b3fe7a0bbf595cdfdd8d4adb23cec7416b780229655006cdbbbf478c43e29dbe4422b77296ea1e372e34518309db0a7e5e52438d366ea9b881ea02a18569d1605decde485f6049e9cf348d3a9a4edc58160db9bbe46522d8ebea2f57386b1d4403543811ff29c831847aeb676e658637a54d80a8631d8e2f8a5a03a15535c1dcf567742019bcaeaf860a7b7dab63e28734359d1609b6d8cc28bda077c5fcc76c0b5a0c6f2e66e76c4bd32b9e6522155b4459e8b0af32dbde939e6cfd6ad096b1b2fa21d39b23abd7ee81d5bace10a7f6c6a267f52b93acb72ce0278e96dc03da080faf885ccd3c0d06885fb4d05b9eedcecbfc2c89e7485a2f7d3da0239170e8d2b2802ced96797f777cab63255c99f56dc1d39f7b396d2ab5d1ee9a909a9154c65620d45878524d100d8bdc935593dc56ea9924d77ff2e4bdfa570f2546fd9abd69ecb3a278c484dddeb761f9027dde5a04b4bf3ddc40023fc21deea415c0f899461a0d91bf21c96a70b363ad25cb8bb1bb20639e13254dfd0f906b41aa107b2a11b146685d6e581eb50608790c5d0549d7bd8a0b5f14a748e0599b44a84b171091174352c6d47930a444a8d4240a14e762653de3fb916809127d285292db878e0d6f1882e6b9be9cf3490ffd63fc700ea066a64fb250c78b7207e62ee580385e06b447c416078d78861ce963e6f1532a5ab11ea9619b4a0ed983d5dbde7effdf2df6c387e8c6f9e88fcb784ae5dddaf9ae2c17c7787c1cdc889df17dde5b5082e3b78757cb885a2db237b3e3634f4c29c92b5a14733ecbdf5bc26cc9b091226237fdbd10a429c74acad2d3b13dddeee7737dbe1b7cb875884cce1afa587231ddd41073189abc1e8f889d41bd6b562c719c6f805e978cdc89b1fcf6464ae30fad682eb74dbd4b53814f929a474b286fcd6e9fe8b51216f04220568b714a6dbbf228201cea5548e3dbd51af3ea21006225c94cfba9759ec06460fb7c14f1690d691f736466ac2c16e3f57aec8dd8ca81d40eb6d335111543189f949f44bf40f1d782c17f63fe61d7d106f0b24a106db46efc1dbefd9ce2304b19fde1e62b52fdae36cadf8490cee61e3978e8f8f13ac359c7dda5f663c75a97548d3548e1978fd41b81c83b724f6b9db1436c0224d522f3e9d8e21b0483b53b5441cd8fe63e575bd8518728508145543e1093c8679e60ed5e6386a558ff5944886af6652126afa067a06a5595fb30f234b0f476944ee0f3b1748bad86c572ef7e242edc4fc01d829171c7f8b1e59ce9158e904cd92739fa468d05373fa2084dd85eb7e044e6e6d9b92241607996f4cffa82508eef29c7c0a7e75ef82b5887a6f9c4bf08aa1a9aa83fd7debaca3f093017c3a9a2e07c1ac9898212788cf929257461bb969e54f59386541f30a46933f81fa80daca1c58ac9940dcdde77a5aab72ba1355a95287d45853f6f84d11613d490c2d106f040395f1373adda16f9d8f99c62cb7bd379c8d1c8df5f8baf22634de1648a994451a5303bc1d07b8b3adadda4977152825c3329a7319cf82292fc3b583ea5b3813a68b20cf7fbe9c39b8f1ed714eb7147677d8de322eb6e6b52e7e81000b5dc43fc1f5dcc7f67e3d2b2d7b990262dd3d2e4d0c3aa38cc5735e0f225273108922b9beae6aeec853b377cc4f8ac815841defb8970f7049daa6006ec"], 0x10a0}, 0x3}, {{&(0x7f00000013c0)=@nfc_llcp={0x27, 0x0, 0x2, 0x2, 0x2, 0x3, "18bf357546a7c9bb2d0e09f485f02983f741cfcfc3e07a79b80ea807bf0d2263326e0a314794ac544faa1a58195cb7b2e9b1f822265b807fd21e8b565bf74d", 0x23}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001440)="0dd6c370fea959d377da59062dddcd7388f0a346544ed7879b1470a1f33a03e281a849d9362928f1ba25cedd630ce1ce57e181c036ca2f46662e39db53de15393924d0067ee89f7cec7c8cb7aab9c997bf0cddac0bc0446a88184f36c5e93c7546499673d3d13ade95bada323d4f89fcfd2852a8f4d7ba9c8d53d1daea1b4667f4c1efd082f6c3383614d6bd7cd003083f4abfdf3ee8e8d47da9f6a9ba4b753e1711311b6cd335f9c1cdd3ba4ae254f1928b11f7e114b7115bc886bd273a66367216d1eb7c5a1da7dfb7e65ae390de4a", 0xd0}], 0x1, &(0x7f0000001580)=[{0xd8, 0x119, 0x7ff, "2e53d770eeededa5e6dc8574cf83c83b63a6d69f380a81e11c5e9a47aa247bae01794491263670f59f8c1e703bb3252dc3913779afb63f8bc833dce5f067533052512e2f1e8ef83be7d42ba6ccb8dad4ec59acf02d4a0e6300be35bf999d74871a378303b277a93d7c4f6fb6eb004fef286ed70b4015113fdefb132ac693858fa3562b623bdf5674dc8923ca14c8719913cba000df8ee818030cfcaf1046150d1bf4206e4fabaedb1d7feb39867664d62674850ca84329383502ba331fd7714c9aa818f4b192275ccbcc0ac0"}], 0xd8, 0x8000}, 0x40}], 0x2, 0x8010) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x1, &(0x7f0000000000)=ANY=[@ANYRES64], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xc5dd, 0x200101) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1e) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f00000000c0)=0x3, 0x4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'\x00', 0x3fc}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f0000000080)=0x7, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000100)={0x4, r0}) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000140)={0x8, 0x6, 0x9, 0x2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r2 = getpgid(0x0) r3 = fcntl$getown(r1, 0x9) kcmp(r2, r3, 0x7, r0, r1) close(r0) acct(&(0x7f0000000040)='./file0\x00') 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='system.advise\x00', &(0x7f0000000140)=""/114, 0x72) 2018/03/20 23:58:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000280)='/dev/sg#\x00', 0x2f68, 0x8002) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x400001) rt_sigprocmask(0x0, &(0x7f0000000100)={0xffffffffffffff01}, &(0x7f0000000140), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x5}) accept4$netrom(r1, &(0x7f00000001c0)=@full, &(0x7f0000000240)=0x48, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f00000000c0)={0x80, 0x83}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000002c0)=""/51) read$eventfd(r2, &(0x7f0000000180), 0xff0a) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) recvfrom$inet6(r2, &(0x7f0000000300)=""/215, 0xd7, 0x1, &(0x7f0000000400)={0xa, 0x4e23, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0xcd}, 0x1c) tkill(r3, 0x15) 2018/03/20 23:58:30 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003da80000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0xa1840b0f2132461d) r0 = memfd_create(&(0x7f0000000100)='lo\x00', 0x0) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000140)={0x2, 0x0, [{0xc000000f, 0x465, 0x0, 0x0, 0x20}, {0xa, 0x7f, 0x3f, 0x4, 0x33}]}) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x6, 0x400000) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff}) accept4(r1, &(0x7f0000000040)=@ax25, &(0x7f00000000c0)=0x80, 0x80000) 2018/03/20 23:58:30 executing program 5: r0 = getuid() r1 = getegid() syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xe000, r0, r1, 0x1, 0x2000) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r2 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r2, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) fchmod(r0, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) fallocate(r0, 0x2, 0x1, 0x4) 2018/03/20 23:58:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000004000000"]) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0xd5, 0x1, 0x9, 0x1}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x1, 0x9, 0x7f}) r4 = syz_open_dev$audion(&(0x7f0000001700)='/dev/audio#\x00', 0x8001, 0x200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000001740)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x1, 0x2, 0x3, 0x3, 0x3}, &(0x7f0000001800)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001840)={r5, 0x3c8, 0xb1, 0x50}, &(0x7f0000001880)=0x10) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) r2 = request_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)='eth0!\x00', 0xffffffffffffffff) keyctl$get_persistent(0x16, r1, r2) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x3ff, 0x3]) sendto$inet(r0, &(0x7f00000000c0), 0xfffffe03, 0x800000120000401, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0xb1) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r1 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x0, 0x109000) getdents64(r1, &(0x7f0000000380)=""/227, 0xe3) syncfs(r0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="f00e2b7c60faea9fc3a85639ef213f9b1eb1c86f829b4087a90776b1a15d30075092f1a3b162fa41148e183342a53b79d7e2380716fc31b439e6df95f65a462c55e4b4956f4bcfd55aeb12f26bf2aa1dadd149a3cb9b40f268d7966a80ab2719383ba7bb52b4763eb49ea2cbc2ac8670c98feded17d5941e8c109344ef46e4d91b945b1c154df36d562157d4e0aaacd95494854168e9856b46a9bcfa2d46ba95f423bfab00a815685474e7fc7ebb293cc0028b2b45c4b25916c9686e67ac6e6a61148145d976106dedf3d1d931c3a0e713a3012eaaa079cf6c49740bc557cf1c5025", 0xe2}, {&(0x7f00000001c0)="f5c6ee9e6b3c0899b5e43e4cf41b206c8b639f2c87bbbe4b7304857bf3466ae3", 0x20}, {&(0x7f0000000200)="625531da95aaf2fd9236f98162f5e4d11a8278118dc90690a52ef1f68ed90f321bef413eda79cd404024d58e698885fe75285f4072359b72d0c24cd9fd8ebb4b125ee0c0656a04110be51369f6a11b6cd22c61ab147d6c8a4e65f418d80db032b1cfba554f1cfbf3e4a46d7b0a9411aa813243d5c68c6da1135b606ba1be2f7e571603cc87cd65419be1a7ac9536045a25386cbb17fcf228cc1947d6221d258f3333d7beac963f834da2bc72ae40975478eba96894f06780d05efcf47641f9a96a2c", 0xc2}], 0x3, 0x4) close(r0) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) getsockopt$packet_buf(r0, 0x107, 0x7, &(0x7f0000000100)=""/213, &(0x7f0000000000)=0xd5) 2018/03/20 23:58:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='/dev/dsp\x00', &(0x7f00000000c0)='trusted&}^\x00', &(0x7f0000000100)='/dev/dsp\x00', &(0x7f0000000140)='/dev/dsp\x00', &(0x7f00000001c0)='ppp0vboxnet1&lo\x00'], &(0x7f0000000300)=[&(0x7f0000000240)='/dev/dsp\x00', &(0x7f0000000280)=']\x00', &(0x7f00000002c0)='eth1md5sum^\x00']) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readlink(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/104, 0x68) tkill(r1, 0x15) 2018/03/20 23:58:30 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000040)={@empty, @loopback}, &(0x7f00000000c0)=0xc) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x840, 0x0) getpeername$inet(r2, &(0x7f0000000140)={0x0, 0x0, @multicast2}, &(0x7f0000000180)=0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 2018/03/20 23:58:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x5, 0xfffffffffffffc85) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4$netrom(r0, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x800) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) fanotify_init(0x1, 0x109002) 2018/03/20 23:58:30 executing program 6: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x111000, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xfffffffffffffffd, 0x1, &(0x7f0000c91000)=ANY=[@ANYRES64=r0], &(0x7f0000e6bffc)='GPL\x00', 0x2, 0x99, &(0x7f0000000100)=""/153, 0x40f00, 0x0, [], r0}, 0x48) r3 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0x80000001, 0x80) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000440)=0xfffffffffffffffb) socket$nl_crypto(0x10, 0x3, 0x15) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}, 0x6, 0x7}, &(0x7f0000000180)=0x88) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000001c0)={r4, 0x1}, 0x8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000080)={@hyper}) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000200)=ANY=[@ANYBLOB="00000000846295ba87cabffc3caf6400"]) 2018/03/20 23:58:30 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffffffffffffd) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:30 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x1c9c380}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) r1 = fcntl$dupfd(r0, 0x406, r0) r2 = fcntl$getown(r0, 0x9) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000000)=r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:30 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'system.', 'eth0,\x00'}, &(0x7f0000000600)=""/97, 0x61) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/122, 0x7a}], 0x5, &(0x7f0000000340)=""/177, 0xb1, 0xd3b4}, 0x40000000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r1, 0x1, 0x6}, 0x10) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r2 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, &(0x7f0000000680)=0x2) lseek(r2, 0x0, 0x3) r3 = open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000480)="628e5a1acbdd38d4f261df248d3e5592982e65152979d1aecc465b6c0b115b4bc0434bc7e5bb696f0460d555756f017784b9b94ad69a1adea8dc31ea4c37cf2a3715747f77314f11ab097447d152c5e016b2032b4f2b094798ab2a8c72c587a8cb93b9af7097ef207216206eb2835eec3436d727b6a95127434c1ee2ab6414f9c3684795223b085e85959b65116fbb29f6ebf0460f3d5910de3b5ed9ce91d22815ba12067f7893b72f0abc367f3c3807912efaa6bd5519c0044131f6119bd7f03ce4c3ef32a3b56eaba53b441ae7d980c999f5e8c755ed83dd5a67ac970e30b7c51a62ca0f520358879851a67a9d8c865263b319d6", 0xf5}], 0x1, 0x11) 2018/03/20 23:58:30 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x2000000000000167, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0xfffffffffffffd59, &(0x7f00000000c0)=""/153, 0x0, 0x10}, 0xfffffed5) 2018/03/20 23:58:30 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x100, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f00000000c0)={0x13ca, {{0xa, 0x4e23, 0x9, @loopback={0x0, 0x1}, 0x9}}}, 0x84) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr/current\x00') ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f00000000c0)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x6}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000)={0x8, 0x4}, 0x8) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) 2018/03/20 23:58:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d00000000000000eb70e8a200000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) [ 68.438268] binder: 9642:9643 ioctl 8902 20000000 returned -22 2018/03/20 23:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000089147161da58096490696baba2f0d9d1d8afd7b036b348790ba6d72246fbbf5bf7a8dae66d8ad4cb5e1c3f3494e2034a356773ebe6e34c77bbece70d785fd53"]) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x610140, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000400)=0x7, 0x8) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000340), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x20000000006, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000300)='/dev/snd/midiC#D#\x00', 0x5, 0x200100) bind$bt_rfcomm(r2, &(0x7f0000000380)={0x1f, {0x10000, 0x776, 0xffffffff00000001, 0x10000, 0x2, 0x1ff}, 0x2}, 0xa) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xd2b, 0x400) sendmsg$nl_crypto(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000018}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="e8000000130010002cbd7000fedbdf25766d616328636173743529000000000000000000000000000000efffffffffffffff0000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000302e30d300000000000000000000000004000000200000000000000000000008000100ca040000"], 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x40040) getsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000200)={@loopback, @loopback, 0x0}, &(0x7f0000000240)=0xc) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000280)={r4, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0xffffffff80000000, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0xfffffbffffbffffc) bind$pptp(r1, &(0x7f00000001c0)={0x18, 0x2, {0x3, @broadcast=0xffffffff}}, 0x1e) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r3, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)="0600000080", 0x5}]) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x8, 0x10c41) ioctl$GIO_CMAP(r4, 0x4b70, &(0x7f0000000280)) 2018/03/20 23:58:31 executing program 0: mmap(&(0x7f0000000000/0xfd0000)=nil, 0xfd0000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x40000048c, &(0x7f0000000000)="01000000004d16ed6166e100000000000000000000200000", 0x18) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@random={'os2.', '/dev/net/tun\x00'}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) close(r1) 2018/03/20 23:58:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, &(0x7f0000c91000)=ANY=[@ANYRES32], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f0000000000)=""/153}, 0x48) 2018/03/20 23:58:31 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x101083, 0x191) ioctl$EVIOCSFF(r0, 0x402c4580, &(0x7f00000000c0)=ANY=[@ANYBLOB="5600000005b7690b030000000000e3ff0206030005000100007d2000400075c85c3e02fcffffff00"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x80000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000100)={0x7, 0x10001, 0xfffffffffffffff7, 0x5, 0x6}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x40000002) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x7) 2018/03/20 23:58:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7e35, 0x204800) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000040)={0x8c, 0x5, 0x2}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xfffffffffffffffd, 0x4, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000240), 0xfffffffffffffff1) r2 = gettid() getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x1, 0x101d, 0x7}, &(0x7f0000000100)=0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000200)={0x7fffffff, 0x5, 0x4cf, 0x4, "53a8463969677723698a3b4f70163946ba5bd02915458ec9a74377ebe96aac8384bb1e8f405ecfa75daf1a3f", 0x3}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r3, 0x2}, &(0x7f00000001c0)=0x8) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) lseek(r0, 0x0, 0x4) accept4$bt_l2cap(r1, &(0x7f0000000040), &(0x7f0000000080)=0xe, 0x80000) 2018/03/20 23:58:31 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r0, &(0x7f0000000040)="41bf2d7ef9bbeeb9d936bf4928691d33911d33bc5910cbd0e407281c62d8fdf05fd022aa518a3c5006d85445de1bd0a0f8f8c81b714e6b7b6acaf9fa488d115ace840d50f605eec252a3bd09ea938c89b50849a156eaf99e6e018f5f6ef8164db4af7a82dd0a5d30cfefcdfadfe4ccec06ffccea89f1db84f32d2f", &(0x7f00000000c0)="fbf72a6f0bc096b66a60a684014ea7cce822cd953b94ad811059f6d507fb0a3d2c3ec48c199b12ae9c113ae1bbc7622f376fb43507227b09ff000fa51d82e51f08ee0760531f52ce0b89a6fadb31062ebce366c7275cd134812bc95d729aa292149dbadb4a582393558ad2fbe1c7415c55efb33cd2ef7d0a1610295643e866062cb03cf7711ee7f1c28785c6da980d9d2cd39f59799420dfd8e07bf82ec857778d7f47ac63ccff03b57cd7e23f52e960aea0e2abc840260b26e0b1bf0850d9fe9866a73b13d671f7a339b7b339f4300fbd0c898b1d96b95a6a4c", 0x1}, 0x20) lseek(r0, 0x0, 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x2) 2018/03/20 23:58:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x40, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x200016) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x100, 0x0) 2018/03/20 23:58:31 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x20000000081) socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b93fcf77000010d800881301e710"}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:31 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200, 0x0) sendmmsg$unix(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x80}], 0x1, 0x40) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000040)=0xc) setgroups(0x1, &(0x7f0000000100)=[r2]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000080)=ANY=[@ANYBLOB="00000000000000000b9adcf850b3ec88a52920ca28f0e9d846d9e05f13f7af998872fb1d36436f6dd42dc3dbf312251b965ff58c54f445e05dc299b807e7e1ed63cc33da9a8967860287c43269c4664dd3cba2b85c9a4747"]) 2018/03/20 23:58:31 executing program 6: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000002c0)={'ah\x00'}, &(0x7f0000000300)=0x1e) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x20001, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000200)={0x0, 0x6, 0x2e3f, &(0x7f00000001c0)}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000240)={@loopback}, &(0x7f0000000280)=0xc) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000000440)=0x81, 0xffffff53) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x80000) sendmsg$inet_sctp(r1, &(0x7f0000000400)={&(0x7f0000000080)=@in={0x2, 0x4e23, @rand_addr=0x86cc}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000000c0)="13488d9162b3c7fae7efcf3107c447e49e5498ec729454f834d2b2a7aa4851184b741a771a6ae7e865705dfeef6682cb7b398ebfe2eb1c", 0x37}, {&(0x7f0000000100)="7e7138e06303dbd2cc22ffcaa6cc7b33e7c9657edc8c34081de3e66c739dcd87c072", 0x22}, {&(0x7f0000000140)="d5", 0x1}, {&(0x7f0000000180)="aeb18603fa68b8623f8b86b672d015b7c616facfc6e0455b895ea17553189c1d7c0af37467bcf5ef63d722c011aa17d3ba14809cc7a110be0c5a35fa19e6d13661326968ddd05b4d97712e6ae7dbf50d6fe4ca18d117587e550c02f98036b3f3f3bbf3c6db54ef7e2f132cab34458713aa1f5561666fe790ef4d729203428c702861e8a34a74b05cf5455f36c3a07f", 0x8f}, {&(0x7f0000000240)="6d381856952cf0e272d763fc93be64b322cdd05f4fb7db87b423429701bdb51991865785315d270102ea0704291529daeafabe587049496a63f6b13e14fb8d22ce8509e960e6ebd143e8517082d27a77f32b04185040f63e77a1acca5246ead2aed6d54d42a24e23e9e3f1bc7215", 0x6e}, {&(0x7f00000002c0)="3f863c761aa5e371f374dfd8a00dbae9d08bc83a8d3a68b87928f8283c0439b3d24b814d64fc808f69bdae4b7c4b9eb0d20ee7073904dc3467dcea5573c0004b97aa2b277d7a996a5b256937dbe2a5288ee443c4a644f8798ad1692c7b41e1d6073eabb3ff7277fb8c7d29e448da723ac39580a0fef225a105a90ca97edfd7eebffc7e5bde3d1a8a0e82ba353783c8b800c73b00526d4fa3efb78949b17228b3c0aa73f87438cb6b846c3013b2e9b5d4bb01e5d3b953b1d6b4b357c97dd5e88c98f54954cb3575bfa3cd29dceca9e44fb9e90c84d9a151344e2ef7b222e7ca4c2b35bcf9671c32b846ad", 0xea}], 0x6}, 0x1) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r2 = geteuid() stat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file0\x00', 0x2000, r2, r3, 0x2, 0x0, 0x900000) 2018/03/20 23:58:31 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x80002) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:31 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='children\x00') ioctl$TIOCNOTTY(r0, 0x5422) r1 = dup(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r1, 0x0, 0x65, 0x54, &(0x7f00000000c0)="0b4add6f7a5a07a0b60d6af8b1476fd586550aa911f396b5c45371581f798b21e13dea61121879bb0c6e83aaf234bf51d1078a417e6310b73ba45a8f5babc303bbdbae7bf1bdbf3a169ff40f254a0dd102557073958b6521a7a458e402f4116fc0e7970b5b", &(0x7f0000000140)=""/84, 0x9, 0x2}, 0x28) socket$rds(0x15, 0x5, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{}, {}, {}]}) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000000)={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) tee(r0, r2, 0xfff, 0x8) 2018/03/20 23:58:31 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x11}, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e21}, @in={0x2, 0x4e22, @multicast1=0xe0000001}], 0x5c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:31 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = dup2(r0, r0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x581000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000080)={0x10000, &(0x7f0000000000), 0x0, r2, 0xb}) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) ptrace$peekuser(0x3, r3, 0x1fffffffe000000) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x8000) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x7, &(0x7f0000000200)=[@in={0x2, 0x4e23, @multicast2=0xe0000002}]}, &(0x7f0000000280)=0xc) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)={r4, 0xfffffffffffffff9, 0x5, [0x20, 0xffff, 0x5, 0x931, 0x20]}, &(0x7f0000000300)=0x12) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000180)={{0x5, 0x6}, {0x3, 0x3401}, 0x6, 0x4, 0x55a7}) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x2, 0x200) mkdirat(r1, &(0x7f0000000080)='./file0\x00', 0x12) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@generic, &(0x7f00000001c0)=0x80, 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000200)=[@in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, [], 0x11}, 0xfffffffffffffffd}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e21}, @in={0x2, 0x4e22, @multicast1=0xe0000001}], 0x5c) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000180), 0xff0a) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000200)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000080)) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='syscall\x00') epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x2000}) connect$netrom(r2, &(0x7f0000000100)=@full={{0x3, {"8d46024225b364"}, 0x81}, [{"4f327ecfa849f5"}, {"46f84f51b42e78"}, {"80c005b0e5f44f"}, {"46e9b92a09ebb9"}, {"b1fa9d13966a6c"}, {"d5cbe6737c1e2a"}, {"d1afcac84d687b"}, {"8673c7d3e0c042"}]}, 0x48) tkill(0x0, 0x15) 2018/03/20 23:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sysinfo(&(0x7f0000000040)=""/4096) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x72c3, 0x80) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000100)={0xffffffffffffffff, 0x377be227, 0x2, 'queue0\x00', 0x5}) 2018/03/20 23:58:31 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000080080f00003d000000000000009500020000000024c44d33ede3372853d1616746bce293a658a3c26d1f3f89aed20a6234bb0c05c1fb2d89cbb2e8532377fc527d64"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={0x0, r0, 0x7, 0x1}, 0x14) 2018/03/20 23:58:31 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x3, 0x4) 2018/03/20 23:58:31 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x404400, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x10000) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_tables_matches\x00') readlinkat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/222, 0xde) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000200)=0x5, 0x4) close(r0) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000040)={'bpq0\x00', 0x3f}) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0xffff, 0x2}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0x1, 0x2, [0xfac6, 0x7fffffff]}, 0xc) pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={r1, 0x3}, &(0x7f0000000240)=0x8) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r4, 0x1, &(0x7f0000000140)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000080)="0600000080", 0x5, 0x5}]) ioctl$TCSBRK(r3, 0x5409, 0x7) 2018/03/20 23:58:31 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x4000000000000105, 0xfc) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000003d0000000084c638472fb863923c9136fae16e7000000095000000000000249721b7e77cb1ae81480be891d26d99d2b5e0d08423a4d73989aac8ba27d46dad8cb3ea2d71399fd4a8d961839a2438cc1ddd96fb3a1fa72d5ae349b763391285c0217e5dbd936071d4e2153e5ecf31348356506da5279cac6068e5ab558a8e3677a03b384360a88bd971da78e8bad4700e20b14f5e095bbf8f45328cc916947aa0f19937395bff08f52889"], &(0x7f0000000080)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x10000000}, 0x48) socket$bt_cmtp(0x1f, 0x3, 0x5) 2018/03/20 23:58:31 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4, 0x22200) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r2 = dup2(r0, r0) r3 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x8, 0x0) renameat2(r2, &(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x5) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000180)=0xffff) 2018/03/20 23:58:31 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getxattr(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)=@random={'system.', 'eth0,\x00'}, &(0x7f0000000600)=""/97, 0x61) recvmsg(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000040)=@can={0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/200, 0xc8}, {&(0x7f0000000200)=""/62, 0x3e}, {&(0x7f0000000240)=""/35, 0x23}, {&(0x7f0000000280)=""/122, 0x7a}], 0x5, &(0x7f0000000340)=""/177, 0xb1, 0xd3b4}, 0x40000000) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r1, 0x1, 0x6}, 0x10) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r2 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4004ae52, &(0x7f0000000680)=0x2) lseek(r2, 0x0, 0x3) r3 = open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000480)="628e5a1acbdd38d4f261df248d3e5592982e65152979d1aecc465b6c0b115b4bc0434bc7e5bb696f0460d555756f017784b9b94ad69a1adea8dc31ea4c37cf2a3715747f77314f11ab097447d152c5e016b2032b4f2b094798ab2a8c72c587a8cb93b9af7097ef207216206eb2835eec3436d727b6a95127434c1ee2ab6414f9c3684795223b085e85959b65116fbb29f6ebf0460f3d5910de3b5ed9ce91d22815ba12067f7893b72f0abc367f3c3807912efaa6bd5519c0044131f6119bd7f03ce4c3ef32a3b56eaba53b441ae7d980c999f5e8c755ed83dd5a67ac970e30b7c51a62ca0f520358879851a67a9d8c865263b319d6", 0xf5}], 0x1, 0x11) 2018/03/20 23:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = getpgid(0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000040)=0x3ff) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:31 executing program 7: r0 = syz_open_dev$admmidi(&(0x7f0000000100)='/dev/admmidi#\x00', 0x9, 0x380) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x0, r1, 0x1}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000080)="099ca0066ee5fa2169a50c5ba005c0d15a9f643ebee20d7ed87b8b51f28ed76e7eec66c6a6dd71c882dc3ac23782c4035fe79c50908008e2f95cb93b5c25c23235d06c695dd146375d3480353596979385f197320a563785438c512557fea58fa9aa9f58b2ba1bee4796d5dac5424563f3cc6760c1a2ecb9b7c569e63c3e8b28fa1f14cb2d309ff34184691a147d3dacd6d83323b6db28b40d3106190d48e3c166e99931267f749e47aa7ead604f959fad6df0593a2acb41a71f1b3022d821a7", 0xc0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) io_setup(0x4, &(0x7f00000000c0)=0x0) io_submit(r2, 0x3, &(0x7f0000000380)=[&(0x7f00000003c0)={0x0, 0x0, 0x0, 0xf, 0x3c1a4b03, r1, &(0x7f0000000100)="18b43e269b8edc49a94be3307f", 0xd, 0x3, 0x0, 0x1, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f0000000180)="181bacac85c24a1614be15d2f97cf53d80acdf09c6c5acb075f069e266b89e28299f24e87f2425d348d77aa595b0f04f6b8930623d04cd73fc6552404a490bba40df7986e5ca98f4be385a70b3f8f5afe58236c15ca3fba3b9", 0x59, 0x80000001, 0x0, 0x0, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff7, r0, &(0x7f0000000240)="6750a9f8ef4c4cfa48229b7db7a872a7e8e81db115a8a0876318cc5bd24d119cf7fe3153f796d68bd1612770a452429fef522d226f9b99a3b22c6300df4bd7b93f7c5ae00be1f9f10788c2720581957120dee67e176332114e0330d6df8a2642ce41ab571b9e8a7f7c42d3f174953fd434cd885441462e23fd9a02aa40e12d6641d2c58b2b05f9e2dc1ef4855713b999f21d41b8fc108aff994569646de943e4f0384d2a28a7806e5d5503bfd6ede254e590e516d2ca317a9897e94b88a5e93f842cb6c7fbe3e52f43831c878c804c44c347a5aacfbb65f376f5d981f182", 0xde, 0x3, 0x0, 0x0, r1}]) recvfrom$inet6(r1, &(0x7f0000000000)=""/122, 0x7a, 0x40000040, 0x0, 0x0) 2018/03/20 23:58:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x6, 0x1, &(0x7f0000000000)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32]], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153, 0x41f00}, 0x48) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5, 0x0, 0x0, 0x100000000000}]) 2018/03/20 23:58:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e05411, &(0x7f0000000040)=""/164) 2018/03/20 23:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000000c0)={&(0x7f0000000080)=[0xf41e, 0x4, 0x4, 0xd5, 0x6, 0x0, 0x2], 0x7, 0x6, 0x1ff, 0x8, 0x3f, 0x6, {0x5, 0x0, 0x6, 0x100000000, 0x0, 0x400, 0x81, 0x100000001, 0xe99, 0x0, 0xfffffffffffffeff, 0xe1, 0x4, 0x4, "4c595e46270a6e7fced64b45c98187f313884e3df526a95094243532ca0e76a9"}}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="009800000000"]) 2018/03/20 23:58:31 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x47fd, 0xfffffe86) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x40000000030a) close(r3) 2018/03/20 23:58:31 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000000000), 0x1f4, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:31 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0xfffffe11) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000024c8002413b8f81d90616fec05a2af86750714d893e78a9a0075d0880b54d39e9b227ccce664d05d53e39d7853a5562cfc1d1f69df57cf3ebb50a5e40ecde46098bbd5a6faaa1ff164"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'ip6gre0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000200)="41d31369533cc1a4f621f71ed173ec5ab2fbaf60672c040410c8cd083479a930a029fe977711a13bbe18aff8b7d7eb927c5b0b83e18b5a6886ca950d1fa2b207e5bfdd4b91afe53051d2b8b4bff079da6c2c1ada3dbbe56b53344325424ae3283dbae2c0274ef91f34facbdf2abb6fb3fe394fb23c8a0143cb8e2beb5d363eb5f98484dc898695db6d540ab023d679c8181fa189effdfb42a1e5503b3a6035861233bc332152f5aae98fde7c63d782da670a9d9d7b317999b3724d8487e067d7cc196a54ffdc", 0xc6, 0x80, &(0x7f0000000640)={0x11, 0x6, r1, 0x1, 0x400, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x109200, 0x0) recvfrom$inet6(r2, &(0x7f00000000c0)=""/177, 0xb1, 0x2, &(0x7f0000000180)={0xa, 0x4e22, 0xe3, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0xb8, &(0x7f0000000100)=0x0) bind$netrom(r0, &(0x7f0000000000)=@ax25={0x3, {"4c9a8730f5414b"}, 0x401}, 0x10) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x4, 0x0, 0x8, 0x0, r1, &(0x7f0000000040)="0600000080", 0x5}]) 2018/03/20 23:58:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)) sched_setaffinity(0x0, 0xfffffffffffffee7, &(0x7f00007f0ff8)=0x101) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1e, &(0x7f00000002c0)=""/196, &(0x7f0000000140)=0xc4) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f000000d000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r5 = dup2(r3, r2) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r5, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000000c0)=0x4) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f0000000100)={0x4500000000000000, 0x100000, 0x6, 0x4, 0x15}) r6 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x80000000007, 0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r6, 0xc0485510, &(0x7f0000000440)={0x8, 0x199, 0x800, 0x4, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}]}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r8, 0x8188aea6, &(0x7f0000000280)=ANY=[@ANYBLOB="0b000001000000dcde928c000000ae819401ab35"]) 2018/03/20 23:58:31 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f00000000c0)=ANY=[@ANYBLOB="03000000000000000400000001000000002100000000000015571b160000000001000000000000000500000000000000ffff0000830a00000000ffff04000000000000000000000007000000040000005f05000000000000000000000000000000000000000000000104000007000000000000002000000000000080f0050000000000000000000000000000000000000000000000000000"]) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000040)) read$eventfd(r1, &(0x7f0000000200), 0x8) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0xe}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x100000001, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) io_setup(0x9, &(0x7f0000000040)) ioctl(r1, 0x80000000, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x8, 0x10000, 0x200, 0x8, 0x5, 0x101, 0x6, 0x6a69, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2}, 0x8) 2018/03/20 23:58:31 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) syncfs(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'rose0\x00', 0x1}) r2 = socket(0x10, 0x803, 0x6d7) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0xfffffffffffffe00, @local={0xfe, 0x80, [], 0xaa}, 0x3}, @in6={0xa, 0x4e22, 0x2, @empty, 0x1}], 0x48) 2018/03/20 23:58:31 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0xa080) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x1, 0x4) close(r0) 2018/03/20 23:58:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1, 0x101080) getsockname$packet(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv4_getaddr={0x58, 0x16, 0x310, 0x70bd25, 0x25dfdbfd, {0x2, 0x0, 0x1, 0xfd, r2}, [@IFA_LOCAL={0x8, 0x2, @rand_addr=0x1}, @IFA_BROADCAST={0x8, 0x4, @local={0xac, 0x14, 0x14, 0xaa}}, @IFA_LABEL={0x14, 0x3, 'irlan0\x00'}, @IFA_LABEL={0x14, 0x3, 'teql0\x00'}, @IFA_LOCAL={0x8, 0x2, @multicast1=0xe0000001}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x400, 0x0) read$eventfd(r3, &(0x7f0000000180), 0xff0a) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000002c0)={@local={0xfe, 0x80, [], 0xaa}, 0x5, 0x1, 0x3, 0x8, 0x1, 0x7ff, 0x569c}, &(0x7f0000000300)=0x20) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x26) 2018/03/20 23:58:31 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x47fd, 0xfffffe86) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x40000000030a) close(r3) 2018/03/20 23:58:31 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:31 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000080)="0600000080", 0x5}]) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@empty, 0x0, 0x1, 0xff, 0x2, 0x400, 0x4, 0x3}, &(0x7f0000000100)=0x20) 2018/03/20 23:58:31 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)) r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/dev_snmp6\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:31 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x401}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000001c0)={0xe0, 0x0, 0x1, 0x0, r2}, 0x10) 2018/03/20 23:58:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) accept4$ax25(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x12c) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400000, 0x0) 2018/03/20 23:58:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x5e37}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r2, 0x5, 0x200, 0x8000, 0x7fffffff, 0x7, 0x7, 0x6922, {r3, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x53, 0x9, 0xf6b, 0x9, 0x7f}}, &(0x7f00000002c0)=0xb0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:32 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="850000090806001e00ce5585d6000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x80005, 0x3) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x4d60, 0x4) 2018/03/20 23:58:32 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5, 0x0, 0x0, 0x1}]) fallocate(r1, 0x2, 0x6, 0x7fff) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000100)={{0x2, 0x4e23, @multicast1=0xe0000001}, {0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x2, {0x2, 0x4e21, @multicast2=0xe0000002}, 'syz_tun\x00'}) memfd_create(&(0x7f0000000000)='cpuset\x00', 0x1) r3 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000180)={0x39980732, r3}, &(0x7f00000001c0)={0x13b48c11, 0x9, 0x1, 0xb926, 0x0, 0xffffffffffffff01}) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x8) 2018/03/20 23:58:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x47fd, 0xfffffe86) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x40000000030a) close(r3) 2018/03/20 23:58:32 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x200) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040)=0x1, 0x4) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/219) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:32 executing program 0: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000000c0)={'mangle\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7d6bfd6b) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) close(r1) 2018/03/20 23:58:32 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0xa080) setsockopt$inet6_tcp_int(r1, 0x6, 0x8, &(0x7f00000000c0)=0x1, 0x4) close(r0) 2018/03/20 23:58:32 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x1000, 0x14, [0x6, 0xfe6, 0x1f, 0x5, 0x480333c7]}) 2018/03/20 23:58:32 executing program 6: openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) socketpair$inet(0x2, 0x800, 0x80000001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x14, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={r1, @multicast2=0xe0000002}, 0xc) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x20, 0x400) bind$netrom(r2, &(0x7f0000000100)=@ax25={0x3, {"1005d2f48487bd"}, 0x8846}, 0x10) 2018/03/20 23:58:32 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000eefffc)=0x47fd, 0xfffffe86) sendto$inet(r2, &(0x7f0000c14000), 0x0, 0x0, &(0x7f0000ef0000)={0x2, 0x4e20}, 0x10) r3 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r3, 0x400454cd, 0x40000000030a) close(r3) 2018/03/20 23:58:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[]) 2018/03/20 23:58:32 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000080)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={"d202b999cf77000010d800881301e710", 0x4102}) rt_sigtimedwait(&(0x7f0000000040)={0x7ff}, &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x1c9c380}, 0x8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:32 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x1ff, 0x200) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000040)=0x1, 0x4) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000080)=""/219) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:32 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x26800) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) dup2(r0, r1) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r2 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xa1, 0x1f, "f4f20c523ee474a611b90b61415a5e47c6e9e3394e49b99b8f74482426f5d561ac3cd92150f9e87ba9f218515a738c120c32f0180758074e2077d54f7fe80872ba1c0257047b5e73985fa2233e50e2027080117c5f9f73c85f4b19142215d34a16d81e46e43b5491a25de27e582916079e09db9de86eb7a1aed57a9ba2814414a23d5c17e32cd538501897bfe940d914e8bac10d672c6bab77"}, &(0x7f0000000180), 0x1400) lseek(r2, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r1, 0x7f}, &(0x7f0000000100)=0x8) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:32 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:32 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000000000)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) 2018/03/20 23:58:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000004000000"]) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x100, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0xd5, 0x1, 0x9, 0x1}, 0x10) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x1, 0x9, 0x7f}) r4 = syz_open_dev$audion(&(0x7f0000001700)='/dev/audio#\x00', 0x8001, 0x200) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000001740)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}, 0x1, 0x2, 0x3, 0x3, 0x3}, &(0x7f0000001800)=0x98) getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000001840)={r5, 0x3c8, 0xb1, 0x50}, &(0x7f0000001880)=0x10) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x0, 0x4) 2018/03/20 23:58:32 executing program 6: getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000080)=0x80) bind(r0, &(0x7f00000000c0)=@ax25={0x3, {"31079eb7c18b16"}, 0x80}, 0x80) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x40000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x1000, 0x240000) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000001c0)={0x2, r2}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000080000003d0100000000000095000000000000240d299a4463046e85d76a1598c59471551587c3d98e70eda0c50e8cfee9be26ab4721c044d0e22212367391d5910aff9b468c094218486d4e0003813121868aa272ed1bb1494b609d22635d683dfe1177ae20b1317e3bbe97630e0bd38f302a9f3b273b6ef84e83618c2667b04a9b5f975ce821a0afcbe9e950e4855d958acb1328ffef2ae4767c10a5fadfd12d20309aa4fb69d4fcdc2f4d030000004dc7a90792b42bcb3609d7eb902478c180dcd58ff0feb9b4dbce3c7893ac558994e94ac3017fc2ab6c3f6b3bfcf8dfe1dce0d6a158be2dca640e3b186783aa908c1943f9b24d75e3ccb3fe3473cca48ccd7e77961f2788672d2ee5828f543df9313ed38e3206243c55b6b8dd96c5789c445236e87f5a6be44a66d70bd0a283fb7aa127d1cd14f4478d935b94289e5372373464a2b8aff8b777d7bea670ddc4ed30007f4633ccb778870c8a57d93805019bee61ebdf792eb80d3a1bbe1373dda59013f36d0ac579c704ff62625a0b38c83450a4a94ed047494ac9bae1c8355cc54471aec8b2a9c38fcd89321e8faea28c989ad871bc153452df071c6162f7980e34"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) 2018/03/20 23:58:32 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={"d202b9551e67fc001071b7881301e710", 0x200}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x40000, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x6000, 0x2000}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000140)={0x7f, 0x1, {0x1, 0x2, 0x5, 0x0, 0x3}}) syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x30, 0x40) close(r0) 2018/03/20 23:58:32 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/create\x00', 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) r1 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x0, 0x109000) getdents64(r1, &(0x7f0000000380)=""/227, 0xe3) syncfs(r0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) vmsplice(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)="f00e2b7c60faea9fc3a85639ef213f9b1eb1c86f829b4087a90776b1a15d30075092f1a3b162fa41148e183342a53b79d7e2380716fc31b439e6df95f65a462c55e4b4956f4bcfd55aeb12f26bf2aa1dadd149a3cb9b40f268d7966a80ab2719383ba7bb52b4763eb49ea2cbc2ac8670c98feded17d5941e8c109344ef46e4d91b945b1c154df36d562157d4e0aaacd95494854168e9856b46a9bcfa2d46ba95f423bfab00a815685474e7fc7ebb293cc0028b2b45c4b25916c9686e67ac6e6a61148145d976106dedf3d1d931c3a0e713a3012eaaa079cf6c49740bc557cf1c5025", 0xe2}, {&(0x7f00000001c0)="f5c6ee9e6b3c0899b5e43e4cf41b206c8b639f2c87bbbe4b7304857bf3466ae3", 0x20}, {&(0x7f0000000200)="625531da95aaf2fd9236f98162f5e4d11a8278118dc90690a52ef1f68ed90f321bef413eda79cd404024d58e698885fe75285f4072359b72d0c24cd9fd8ebb4b125ee0c0656a04110be51369f6a11b6cd22c61ab147d6c8a4e65f418d80db032b1cfba554f1cfbf3e4a46d7b0a9411aa813243d5c68c6da1135b606ba1be2f7e571603cc87cd65419be1a7ac9536045a25386cbb17fcf228cc1947d6221d258f3333d7beac963f834da2bc72ae40975478eba96894f06780d05efcf47641f9a96a2c", 0xc2}], 0x3, 0x4) close(r0) 2018/03/20 23:58:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xbe40, 0x101800) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0x27) tkill(r1, 0x15) 2018/03/20 23:58:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040)) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-net\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="e6ffffca0049b727"]) 2018/03/20 23:58:32 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000a80)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) socket$packet(0x11, 0x3, 0x300) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=""/142, &(0x7f00000003c0)=""/69, &(0x7f0000000140)=""/14}) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000640)=0x200000000) write$vnet(r0, &(0x7f00000007c0)={0x1, {&(0x7f00000008c0)=""/219, 0xffdf, &(0x7f00000009c0)=""/98, 0x0, 0x2}}, 0x68) write$vnet(r0, &(0x7f0000000480)={0x1, {&(0x7f0000000000)=""/63, 0x3f, &(0x7f00000001c0)=""/225, 0x0, 0x2}}, 0x68) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000380)) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r3 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r3, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r3, &(0x7f0000000500)="af5f8aba3118252f9826d0e6f2e79ac9d0411fc94a0b1e5d881e94e64fcaa8123862d147977f5927ec924d4dc19ca0996ff80c48460b", &(0x7f0000000540)=""/63}, 0x18) lseek(r3, 0x0, 0x3) mknod(&(0x7f00000002c0)='./file0\x00', 0x80, 0x40) ioctl$TCSBRK(r3, 0x5409, 0x100000000) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:32 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x365, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:32 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'gretap0\x00', 0x1000}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:32 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:32 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = timerfd_create(0x7, 0x80000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x4) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:32 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) close(r1) 2018/03/20 23:58:32 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x800400080) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x2002}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x400000000309) r1 = getpid() ptrace$poke(0x5, r1, &(0x7f0000000040), 0x5) close(r0) 2018/03/20 23:58:32 executing program 1: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000280)=""/225) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(ctr(blowfish),wp512-generic)\x00'}, 0x58) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000380)={0x0, 0x94, "e3f0c7a4aa18b555dcc726f7c94c16a88d4a4f52e385fe21123337119aa8e3d9cf29d915e7209b34a97c9b015a5558750a543827c2fa81699e8834e4100956166fed38920d0e4e30eb3eddcf1b901a9c90780d122a05818e1776fbce8258eda90d2f02dfa2e9e92a1232fdce4d5a9ff4689b90117b6c178f99301a3c6088e93cc4b882ecb6a488c261bc2a59e281acc8c00305ea"}, &(0x7f0000000140)=0x9c) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000180)=r2, 0x4) close(r1) setfsuid(0x0) 2018/03/20 23:58:32 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, &(0x7f0000040000)) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000000040)) tkill(r2, 0x15) 2018/03/20 23:58:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000040)=ANY=[@ANYBLOB="b5970101000086003574a18b5e70f4b499de0000000000000001589ee351c0bf"]) 2018/03/20 23:58:32 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) r1 = getpgid(0xffffffffffffffff) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x1, 0x1, 0x343, 0x7, r1}) 2018/03/20 23:58:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f00003d8f37)="18000300000001000000be5ea6cd88360000080203000008000006000e640002b90010a17e19470055040097ec67a1e2010049fc2d63e000000000001418000a00000000130000c88ebbff06010000ad000000000000061475d7220342000747ecf48b05000000e7ec75e848ccfff6ba00b3b40f0000c62cc6e96c7a442ef629cd7ed089f74164536dab653670786eaec0ef151332450f779c4865c287b7e75ab4f1b8fc393d2696c0c3ba5aeae20000000000000013659c61200000000000000000000000000000", 0xc8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:32 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x8002) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000001c0)=""/4096, 0x1000, 0x3, &(0x7f0000000080)={r1, r2+10000000}) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x2d) 2018/03/20 23:58:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="0806000000000001"]) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x400000, 0x0) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000080)=""/117) ioctl$EVIOCGMTSLOTS(r3, 0x8040450a, &(0x7f0000001080)=""/4096) keyctl$join(0x1, &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}) 2018/03/20 23:58:33 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0xfffffffffffffffe, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000000c0)={{r4, r5+10000000}}, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240)=0x90, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1e) tkill(r2, 0x15) 2018/03/20 23:58:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308, r2}, @increfs_done={0x40106308, r3}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:33 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x6, 0x101, 0xfffffffffffffff8, 'queue1\x00', 0x4eb7}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000300)) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = request_key(&(0x7f0000000040)='trusted\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)='io\x00', 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$instantiate(0xc, r1, 0x0, 0x0, r2) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFCONF(r3, 0x8910, &(0x7f0000000000)) r4 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@empty, 0x1, 0x1, 0xff, 0x8, 0x0, 0x6, 0x1}, &(0x7f00000002c0)=0x20) preadv(r4, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r4, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:33 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f00000000c0)=""/88) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030e) close(r0) 2018/03/20 23:58:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = accept4$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000240)={{0x81, 0x3, 0xdd, 0x0, "798c31752ffa57d521041a44f952a7df0681f4496d95e6d8118bd87d1253202fbb59a4d44833562f4b2fbd8b", 0x5}, 0x0, 0x0, 0x800, r3, 0x10001, 0x0, "1c502fdc70b5ddd67cfbd2dd606f7c435c4e1b93e1a0617358df528784a17030784ece113d3a8c6f2703cbbe377068a37546124f6aa0943bc514ddc23741e4e3", &(0x7f0000000200)='vboxnet1]bdevppp1mime_type!cgroup\x00', 0x22, [], [0xfffffffffffffffd, 0x80000001, 0xfffffffffffffc01]}) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={r2, 0x3}, 0x8) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x15) 2018/03/20 23:58:33 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308, r2}, @increfs_done={0x40106308, r3}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 70.748909] binder: 10031:10037 got reply transaction with no transaction stack [ 70.756588] binder: 10031:10037 transaction failed 29201/-71, size 56-48 line 2763 [ 70.779471] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:33 executing program 2: keyctl$session_to_parent(0x12) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f000039c000)=0x400000000000001, 0x4) setsockopt$sock_int(r0, 0x1, 0x4000000000000008, &(0x7f000066e000), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000383000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r0, &(0x7f0000482000), 0xffffffffffffff56, 0x800000120000401, &(0x7f0000e45ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/03/20 23:58:33 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x9, 0x0) 2018/03/20 23:58:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308, r2}, @increfs_done={0x40106308, r3}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:33 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:33 executing program 2: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) getpeername$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14) 2018/03/20 23:58:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0xfffffffffffffffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) [ 70.806906] binder: 10050:10052 got reply transaction with no transaction stack [ 70.814520] binder: 10050:10052 transaction failed 29201/-71, size 56-48 line 2763 [ 70.828323] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, &(0x7f00000000c0)) time(&(0x7f0000000100)) tkill(r1, 0x15) 2018/03/20 23:58:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308, r2}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:33 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x200000) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) getitimer(0x2, &(0x7f0000000040)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, {0x1000, 0x7846, 0x6, 0x5000000, 0x8001, 0x7}}, 0xa) [ 70.891448] binder: 10057:10062 got reply transaction with no transaction stack [ 70.899145] binder: 10057:10062 transaction failed 29201/-71, size 56-48 line 2763 [ 70.913326] binder: undelivered TRANSACTION_ERROR: 29201 [ 70.956696] binder: 10074:10075 got reply transaction with no transaction stack [ 70.964280] binder: 10074:10075 transaction failed 29201/-71, size 56-48 line 2763 [ 70.977567] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:33 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@mpls_delroute={0x48, 0x19, 0xa08, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x10, 0x10, 0xffffffffffffffff, 0xfe, 0x2, 0xc8, 0x7, 0x400}, [@RTA_DST={0x1c, 0x1, [{0x1, 0xa3, 0x0, 0x2}, {0x2906, 0x6, 0x1, 0xcaa}, {0x1ff, 0x345a, 0xfffffffffffffffc, 0x3}, {0x6, 0x10, 0x7f, 0x9}, {0x1, 0xff, 0x8e8, 0xfffffffffffff03b}, {0x3, 0xd6cf, 0x2, 0x2}]}, @RTA_DST={0x10, 0x1, [{0x6, 0x4, 0x8, 0xf33}, {0x20, 0x2, 0xfffffffffffffffc, 0x2}, {0x4, 0x6, 0x100000001, 0x1ff}]}]}, 0x48}, 0x1}, 0x40000) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x4) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000001c0)=ANY=[@ANYBLOB="afbe888dbaa019ee34f418a5de40d0a4995ef9e7a0099c71fd4c81bc7196bd63d27883141e04b9c3029f1c8d984f9672f102770a71239a2dbfec0d644d73058e99c9b7e263dfcfe01e430e69008ff810de7b323177fae6993dec055789ecc8"]) 2018/03/20 23:58:33 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() pipe2(&(0x7f00000000c0), 0x80000) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000000040)="3878ba2bbab59bd79a2ceeb5b3fd952bcf8e881f3fb848ca0d26a110dc5c70638098e371f9be8bf311504b5d6b056213a271bc63ad0122e954c00da0392d84ba34d7af727fd83635b6e44d3bf8914f3faf3bf10d4b974d0dd8307f6a739d1a4a5e677182bcac6e677fc8d7f13292fca190dc") setsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f00000001c0)="301c634239cdd5dcdb66e24bc75085555f6812da6f94a3c18d14506775ed72e1a67af1d62a68639231ba3cbdb861c9d65ee8953684815cebeaaac1371cd7f1d8ad37771612f8782d9966596ee4099ec96cbea1d165fc016e6cbe64c30bc8f395e5db11251f43fad46032f4c7a9a345876e487db4bfc35e255985b84e240989da648cd5db07017ee5a018c1f81574265554ed0bcdc5943d29833b8c0b3c955854ce1061e08c2714938b947ce9edd7c9320b98044e7999ebfc60d061ffc01a8737cbfc4450be56a2012693c02d3378165450d274ad03ea225f2dbbc79a0aa6af64ca723c4f79ac6bd5", 0xe8) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:33 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000200)=0xc) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) clock_gettime(0xfffffffffffffffe, &(0x7f00000001c0)={0x0, 0x0}) timer_settime(r3, 0x1, &(0x7f00000000c0)={{r4, r5+10000000}}, &(0x7f0000000100)) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000240)=0x90, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000040)=0x1, 0x4) bind$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x2, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x1e) tkill(r2, 0x15) 2018/03/20 23:58:33 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000040)={{0xa, 0x4e22, 0x9, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xfffffffffffffff8}, {0xa, 0x4e24, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x7ff}, 0x7fffffff, [0x73c1, 0x1000, 0x5, 0x80, 0x8, 0x3, 0x5, 0x4]}, 0x5c) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000000c0)={0x1000, 0x2, 0x1}) preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR64=&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES64=r2], @ANYPTR64=&(0x7f0000000080)=ANY=[@ANYPTR64, @ANYRES64=r2, @ANYRES64=r1, @ANYPTR64, @ANYRES32=r1, @ANYBLOB="133ed2d955ba28b0d3b32c07c45bcac9215bb954a94d9db689cee970894b7096dad76d593bd5549b3aa9c0ba142ef8437db73cc7b4337cd022838300d506375732facb323d7344375365be2746d381f596489c8bf010b45a363ba1d426a9bda878a70b3b18770943af041e25baafa7527e1c173def", @ANYRES64=r1, @ANYBLOB="3638905e16a03a4294762907a2b3063e9b34b50cbd69868da023caa5e12677f6e7cc90b63b5c96e25d44e56ad111c01484cf024cb73bfc6f6a071a6565c9cb0ea9decb3e2387c1e8c4dd251c90202675d13f70c7f2beb5f1a2b4605ad27e247b5c30f217675fd613a302ceec72b5d3ad9fab86825fdcbfa5c0975e75a26b451e42416037266e8e8ff2054f0423852f88883b51ede890845906f2a7db5d5c7a4141a7ac8df5a927f1a0aef29c9c4f1794a2e562e40fa2decf771316"], @ANYRES64=r2, @ANYRES64=r0, @ANYRES64=r0, @ANYRES64=r1]]) 2018/03/20 23:58:33 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) fcntl$setpipe(r0, 0x407, 0x2) 2018/03/20 23:58:33 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) [ 71.333185] binder: 10092:10098 got reply transaction with no transaction stack [ 71.340814] binder: 10092:10098 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:33 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@rand_addr, @broadcast}, &(0x7f0000000080)=0xc) 2018/03/20 23:58:33 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, r1, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:33 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) getitimer(0x1, &(0x7f0000000040)) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x9, 0x117000) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000140)={0x1, r1}) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000100)=0x1, 0xffffffffffffff51) close(r0) 2018/03/20 23:58:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) waitid(0x3, r1, &(0x7f0000000080), 0x80000000, &(0x7f00000000c0)) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000180), 0xff0a) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80206433, &(0x7f00000001c0)=""/160) [ 71.388900] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000040)=""/114) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:34 executing program 6: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000001c0)=ANY=[@ANYBLOB="060000000000000000000000ff010000040000000100000005000000000000000f0000807f0000f71f000000030000000500000000000000600000800600000004000000ff0700003be70000000000000f8000c0000000008302f43739010000000001000000000001000080ff0f00008f000000c400000001000000000000000d00000001000100060000007f000000128ecc4f00000000"]) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000280)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) tkill(r2, 0x15) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x7, 0x2034, 0x8, 0x4, 0x9, 0x0, 0x1, 0x0, 0x1000, 0xff, 0xfffffffffffff038, 0xfff, 0x4000000000000000, 0x8, 0xcf], 0x0, 0x10000}) 2018/03/20 23:58:34 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) r0 = socket(0x4, 0x2, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001840)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001a00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x10000, 0x0) r9 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000580), &(0x7f0000000600)=0x58, 0x800) r10 = eventfd2(0x7, 0x80000) r11 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x28c, 0x0) r12 = socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000800)=0xe8) r15 = getegid() r16 = getpgid(0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000980)=0x0) getresuid(&(0x7f00000009c0)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000b00)=0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) getgroups(0x6, &(0x7f0000000c00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000c40)=0x0) r26 = getuid() lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001280)=0x0) r32 = getuid() fstat(0xffffffffffffff9c, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001340)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001380)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001480)=0xe8) r36 = getgid() r37 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f00000014c0)=0x0, &(0x7f0000001500), &(0x7f0000001540)) getresgid(&(0x7f0000001580), &(0x7f00000015c0)=0x0, &(0x7f0000001600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001640)=0x0) r41 = geteuid() lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = syz_open_dev$vcsn(&(0x7f0000001740)='/dev/vcs#\x00', 0x4b3, 0x1) r44 = socket$bt_cmtp(0x1f, 0x3, 0x5) r45 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000017c0)=0x1c, 0x80800) r46 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/member\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001a40)={0x0, 0x80000, 0xffffffffffffffff}) pipe2(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001ac0)={0xffffffffffffff9c}) r50 = epoll_create(0x3) r51 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/kvm\x00', 0x100, 0x0) r52 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r54 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001e80)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0, 0x0}, &(0x7f0000001f80)=0xc) r58 = socket$netlink(0x10, 0x3, 0x17) r59 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000002080)={0x0, 0x0, 0x0, @dev}, &(0x7f00000020c0)=0x1c, 0x0) r60 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(r45, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000002180)=[0xffffffffffffffff]) r63 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r64 = accept4$unix(0xffffffffffffffff, &(0x7f00000024c0)=@abs, &(0x7f0000002540)=0x6e, 0x800) r65 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer2\x00', 0x101, 0x0) r66 = syz_open_dev$sndctrl(&(0x7f0000001880)='/dev/snd/controlC#\x00', 0x4, 0x84040) r67 = syz_open_dev$mouse(&(0x7f0000002600)='/dev/input/mouse#\x00', 0x3, 0xa0002) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000002640)={0xffffffffffffffff}) r69 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002680)='/dev/autofs\x00', 0x10000, 0x0) r70 = syz_open_dev$evdev(&(0x7f00000026c0)='/dev/input/event#\x00', 0x6888, 0x80000) r71 = socket$inet_udp(0x2, 0x2, 0x0) r72 = syz_open_dev$sndpcmc(&(0x7f0000002700)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) r73 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000002740)={0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r77 = openat$ppp(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/ppp\x00', 0x400000, 0x0) r78 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002940)={&(0x7f0000002900)='./file0\x00', 0x0, 0x8}, 0x10) r79 = socket$kcm(0x29, 0x5, 0x0) r80 = socket$can_bcm(0x1d, 0x2, 0x2) r81 = accept4$ax25(r0, 0x0, &(0x7f0000001fc0)=0xffffffc1, 0x800) r82 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000029c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000002a00)=0x1c, 0x800) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002a40)={0xffffffffffffffff}) r84 = inotify_init1(0x80000) r85 = syz_open_dev$tun(&(0x7f0000002a80)='/dev/net/tun\x00', 0x0, 0x600000) r86 = eventfd(0xffff) r87 = syz_open_dev$mouse(&(0x7f0000002ac0)='/dev/input/mouse#\x00', 0x1, 0x100) r88 = syz_open_dev$sndpcmc(&(0x7f0000002b00)='/dev/snd/pcmC#D#c\x00', 0x0, 0x420000) r89 = socket(0x0, 0x80000, 0x9) r90 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/ppp\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) r92 = socket$vsock_stream(0x28, 0x1, 0x0) r93 = signalfd4(0xffffffffffffff9c, &(0x7f0000002fc0)={0x7}, 0x8, 0x80000) r94 = syz_open_dev$amidi(&(0x7f0000003000)='/dev/amidi#\x00', 0x94, 0x0) r95 = socket$pptp(0x18, 0x1, 0x2) r96 = syz_open_dev$sndpcmc(&(0x7f0000003040)='/dev/snd/pcmC#D#c\x00', 0x8000000000, 0x2400) r97 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003080)='/dev/hwrng\x00', 0x391000, 0x0) r98 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000030c0), 0x800) r99 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003100)='/dev/kvm\x00', 0x8000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000003140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003180)={0x0}, &(0x7f00000031c0)=0xc) getresuid(&(0x7f0000003200), &(0x7f0000003240)=0x0, &(0x7f0000003280)) getresgid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003380)={0x0, 0x0}) r105 = getuid() r106 = getgid() r107 = socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) r109 = mq_open(&(0x7f00000035c0)='io\x00', 0x800, 0x1, &(0x7f0000003600)={0x1c9, 0x8, 0x40, 0x1, 0x5, 0x7, 0x3, 0x7f}) r110 = socket$nl_xfrm(0x10, 0x3, 0x6) r111 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003640)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) r112 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) r114 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000003700)='/selinux/create\x00', 0x2, 0x0) r115 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000003740)='/selinux/member\x00', 0x2, 0x0) r116 = syz_open_dev$urandom(&(0x7f0000003780)='/dev/urandom\x00', 0x0, 0x149001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004b40)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004c00)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="aa28b7d34034c34eda1b76265331e4e00ab21a88b44777416513595653f5763678adb3e51b5f630d89c37de9a30ee6114dc5bca44eebe1b02c975c1164fff2eb5d04abde5832448b20c5b6b08b63a245a8786698ff7569c65e5494db6db11f00fa87fa76e77ad8de8dc5f14f1cbcb27b402af6b158fcc2c3f90307348f560042d4e30882841d5ffd2bfad70c067d984ccd996e887a2cb4cecce154445b3efdc67920d1fba900f9a7807b8dd9b29845d659769e39524720e9850c5dd494bd3d2611349a15cffbf4515e728e058d7215273f970ad646359e", 0xd7}, {&(0x7f00000001c0)="2a1d5349ec13f00a8c6fc5744d931229a9aea0143e28b02dc97a442d71505cf1bb42c622d2f8fa5c834fe19bb109d90803c92789502914641fcb96d75a5f9c0a63014afd25ffc745a8518e180e46d53b98457b99f31a7c1d4719b71a8409425f41", 0x61}, {&(0x7f0000000240)="8e4211871d73462ee5e722332095ee7cac9828155531698d60c3cede2d3c7d", 0x1f}], 0x3, &(0x7f0000000d40)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x2c, 0x1, 0x1, [r5, r6, r7, r8, r9, r10, r11, r12]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @cred={0x18, 0x1, 0x2, r25, r26, r27}], 0xbc, 0x20000000}, {&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e80)="a316bc7a4246420469f677836fd23d0c05a9c22411a8faa463d07321118a4321945caf02631e109b3ee2a4c58b5026bd9e992243cd20b1ed6a67b2cdc080b50b1d9d1fb71d68848f445e624318a51fcc8dba99407b06178fa69b5bd343c9a1cad52a15e5fc4a173d51937bfaf4e96c29da5e836f5b5739b5c3ceb463ff4bde6f60d90103acec930c0b7c16404e158bde6e7fa4bff3c49d11f1626f2c5deccf5f283948dada5442c04afa9554f5a92129369d5550d7ed3aaac22b9daed5b4d689ec79d6ca4e11d15a4b4dd7e467863c", 0xcf}, {&(0x7f0000000f80)="afd8ffeb2ba3cff8a705065f60f218b81edca67ed29cae8d8828bc27e2a9bd69c51759b1ba06340c488ec14cdb82be91e430bf736ef0387ea6bf1700d7b036b13fc8c6534b4a0b2cf246a097d4f209a3dc0322c11c0bfbee60f573e8573394afad6bf5d89fb65517d7d5bf41a9984074b81e2c862d61220df8a9c355ddf3fb3a038542ea3efe720cf0f68a586dd68959ee7e671fa94394d2e4cddc634ad54a31604ccee23e33a6eca0e85473fea3eaecba1f1a5ecbd8fe58aa7de6524fc42da335", 0xc1}, {&(0x7f0000001080)="f0e01f8d6f5caa5e5b6fc5ec456b6f8a11cdbbad0822619156c028fa00a46f359d83ca688924ee8439250e9832ce1a1fc49b60eca273afa8614f63578f", 0x3d}], 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="0c0000000100000001000000180000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="180000000100000002000000", @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYBLOB='\x00', @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="180000000100000002000000", @ANYRES32=r37, @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="180000000100000002000000", @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r42, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r43, @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="200000000100000001000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYRES32=r50, @ANYRES32=r51], 0xc0, 0x14}, {&(0x7f0000001c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="5d614964f6a45bf88afe25168a6c80b5c01cfb051ee26ea54ee8f7b53e7677fe5124ba56d6aff440", 0x28}, {&(0x7f0000001cc0)="3190300fb4ef5ff43931cba82e171be1b735e099353f35036132b914100bb028e97eb804b74aaa21369a39ac02dea8543b6710cd71537965aad6231e9ef7c07b23230698ce55cc31f72a084dbb5c7a4540ebbcc3c19a64360ca5248ac8eebf6de88c522f4630ffe4d25f53bfb13af3654a75cffdb6589416333572c05ffa4486342fa3440a51b4638cce43fefda0725fd5dabdd013d3386f5baf240b3a50a01db8363dd4ac1b153b075bb9ee369a3b1b1611d63c4fa347f14a5e4fa71d3dd930faa23b", 0xc3}], 0x2, &(0x7f00000021c0)=[@cred={0x18, 0x1, 0x2, r52, r53, r54}, @cred={0x18, 0x1, 0x2, r55, r56, r57}, @rights={0x14, 0x1, 0x1, [r58, r59]}, @cred={0x18, 0x1, 0x2, r60, r61, r62}], 0x5c, 0x10}, {&(0x7f0000002240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000022c0)="c30fd53906b0cd59b3568782b23346241f72d11077da235687d569d2401bd85a7f856d024f4fa986ec61ecb713e6bb5042958b2e940b66e55c5ee7d29926c2c3c960dbc99ff44b12ef5a191e6d04c989b8113fcfd805263ff9e8cc59d7cd8b7b1f93f7eea492c27eeb28b5f0fb07877203636d8131861cae70b4655137d78d861721b1ef1a50c968aad22503654cd39e294924321e9991620e289b5a8eeea1bee2c72d138cd814ca3d9c00008341f23834bf08c9f0158b62188e04e60d5000c848ba", 0xc2}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="b154b556e5e17b22764bf5a7015a99e89cc221d15f8425e43c2358fe2b9c53134aa1030bacfa9162b44577a3305a9a3726e5dc75955f", 0x36}], 0x3, &(0x7f0000002b40)=[@rights={0x2c, 0x1, 0x1, [r63, r64, r65, r66, r67, r68, r69, r70]}, @rights={0x18, 0x1, 0x1, [r71, r72, r73]}, @cred={0x18, 0x1, 0x2, r74, r75, r76}, @rights={0x2c, 0x1, 0x1, [r77, r78, r79, r80, r81, r82, r83, r84]}, @rights={0x20, 0x1, 0x1, [r85, r86, r87, r88, r89]}], 0xa8, 0x4000}, {&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)="6fa5e987d086c4a626d7f3984de276564f4a1b969dabc470e766f45c9292f7e89fa75b9c8560fe0d4dd164c533afd7092c328fbef8affb8575cd1bfd31a8ad1164b1075b720039e5828b5bfbbe1b8bad13733cbfe2265a9e2957f786c8be7408cb67c2476af40c763d7b6197dc233407c0db07124fa22a03719168dd4374264bec54f32d57ce365903e8f04b084612eca9af65a815cb75b00f7029b0c165389daa5c1dbda809482c1e58fdfd3d42a7763066045c3ff4e0c338eabceb821399a4b39202457460fd987d9914e3ee17458571247f91d717c1", 0xd7}, {&(0x7f0000002d80)="d747f020a8795e5e60d60713099b9acb0495172e2654f889c7dde218f322251f2b1fb204a6431b5ded487be19fbac06527cedb5491b7788326dc9bdb85dda988a1fa69e4428978b1e932b858be7d23f50d4b317feb902384f3bba53e896caa07de34180aaa", 0x65}, {&(0x7f0000002e00)="63c76ab6a3d42490", 0x8}, {&(0x7f0000002e40)="35bbeed83c4f65aa5c4754845353a8d5c1fd17253a930d4a9f0217a75a66e6c80530eccf4c8c28c5d653a937f2e1303476d346e697fa34855be8ece5437b4f1ede80643ce5d3f2fca03375d660d476d9e348c7e01f7f789c38d8ad2c721a745014c8b3f7202984ce708af5b6748472dcdaa2acd700322e9a2fba2556ae5e4559ddee7c42d1598c7a04741de5914c6205dd9195fff755f6ce285bad6f08c5724d0ef4187f83fd76f6c9e66773", 0xac}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="0c00000001000000010000001c0000000100000001000000", @ANYRES32=r90, @ANYRES32=r91, @ANYRES32=r92, @ANYRES32=r93, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r94, @ANYRES32=r95, @ANYRES32=r96, @ANYRES32=r97, @ANYBLOB="1c00000001000000010005000000000100002a4e667d260ae86661bbf5e041ab98870164b821ceecc79fe79b7e92b773c2586eb064789cc3acd2b428b1679abf1171e35de676a8ba9d5cdb1346691e9a64a0caa93ece2d9b5d487581ba4fb31d32a228b46e089b18c6f728653e1c34246a993d94684964b1c7797aa1fdca1ea928643411c84f6ae7dbfb055133ac", @ANYRES32=r98, @ANYRES32=r99, @ANYRES32=r100, @ANYBLOB="180000000100000002000000", @ANYRES32=r101, @ANYRES32=r102, @ANYRES32=r103, @ANYBLOB="180000000100000002000000", @ANYRES32=r104, @ANYRES32=r105, @ANYRES32=r106], 0x8c, 0x8000}, {&(0x7f0000003480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003500)}], 0x1, &(0x7f0000004b80)=[@rights={0x1c, 0x1, 0x1, [r107, r108, r109, r110]}, @rights={0x28, 0x1, 0x1, [r111, r112, r113, r114, r115, r116, r117]}], 0x44}], 0x6, 0x80) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r118 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r118, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x6}], 0x1, 0xfffffffffffffffd) lseek(r118, 0x0, 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x300, 0x20000000000000) [ 71.455084] binder: 10117:10121 got reply transaction with no transaction stack [ 71.462652] binder: 10117:10121 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 71.506463] binder: undelivered TRANSACTION_ERROR: 29201 [ 71.545926] binder: 10140:10142 got reply transaction with no transaction stack 2018/03/20 23:58:34 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x3) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x276}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x0, 0xeb, 0x80000001, 0x9, 0x5}, 0x14) [ 71.553541] binder: 10140:10142 transaction failed 29201/-71, size 56-48 line 2763 [ 71.604904] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:34 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x0, r0, 0x1}) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x8) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r2, &(0x7f0000000180), 0xff0a) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) timer_getoverrun(r4) 2018/03/20 23:58:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1, 0x10) r4 = accept4$inet(r3, &(0x7f00000000c0)={0x0, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x80000) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000a80)=@broute={'broute\x00', 0x20, 0x6, 0x874, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000200], 0x0, &(0x7f00000001c0), &(0x7f0000000200)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x5c, 0xe8bf, 'vcan0\x00', 'gretap0\x00', 'lo\x00', 'sit0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="2463b68b3dde", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], 0x70, 0xf0, 0x138}, [@common=@ERROR={'ERROR\x00', 0x20, {"e5c0c8e110d475a0631885f8b993a6afb7dda69d8f868703586562bc3e59"}}, @common=@RATEEST={'RATEEST\x00', 0x18, {{'syz0\x00', 0x7, 0x0, 0x6}}}]}, @common=@LED={'LED\x00', 0x24, {{'syz0\x00', 0x1, 0x3, 0x91}}}}, {{{0x5, 0x1, 0x6005, 'syzkaller1\x00', 'syzkaller1\x00', 'ip6gre0\x00', 'ip_vti0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0x128, 0x170, 0x1b8, [@arp={'arp\x00', 0x34, {{0x321, 0x0, 0xa, @empty, 0xffffffff, @broadcast=0xffffffff, 0xff, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @random='\x00fIk~\\', [0xff], 0x9c}}}, @rateest={'rateest\x00', 0x3c, {{'yam0\x00', 'nr0\x00', 0x8, 0x3, 0x0, 0x80000000, 0x9, 0x1ff, 0xfffffffffffffff7}}}]}, [@common=@log={'log\x00', 0x24, {{0x2, "b707937205ae5d3e9c25d26eb2812508a232db6ba13e9262b58e7f313005", 0x4}}}]}, @common=@LED={'LED\x00', 0x24, {{'syz1\x00', 0x0, 0xdcd000000000000, 0x3}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x40, 0x206, 'bpq0\x00', 'tunl0\x00', 'ip6gre0\x00', 'tunl0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x70, 0x98}}, @common=@STANDARD={'\x00', 0x4, {0xffffffffffffffff}}}, {{{0x13, 0x2, 0x89ff, '\x00', 'ip_vti0\x00', 'ip_vti0\x00', 'ipddp0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff], @random="5715cc0a9c80", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0x70, 0x70, 0x9c}}, @common=@mark={'mark\x00', 0x8, {{0xffffffd0, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff, 0x2, [{{{0xf, 0x8, 0x8037, 'bcsf0\x00', 'nr0\x00', 'ip_vti0\x00', 'ip6gre0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x114, 0x114, 0x184, [@devgroup={'devgroup\x00', 0x14, {{0x0, 0x1, 0x9, 0xff000000000, 0x5}}}, @stp={'stp\x00', 0x48, {{0xc, {0x0, 0x3, 0x7f, @random="f6ba5e494dfb", [0xff, 0x0, 0x0, 0xff, 0xff, 0xff], 0x525, 0x0, 0x5, 0x9b3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0x4e21, 0x4e23, 0x401, 0x180d, 0x5, 0x9, 0x6, 0xeb9, 0x9, 0x7}, 0x28, 0x180}}}]}}, @common=@NFLOG={'NFLOG\x00', 0x4c, {{0x8, 0x3e45da14, 0x3f, 0x0, 0x0, "73ff6b5f77c9dd926023c495143caa5c3fdced1e16183d8b58a02946859b42330c4b467dd6f4f854ae95642958dbad9beba0bebdf8dca5e54b5d1420d686ee95"}}}}, {{{0x3, 0x11, 0x88a8, 'sit0\x00', 'erspan0\x00', 'ipddp0\x00', 'ifb0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0x70, 0xe0, 0x20c}, [@common=@nflog={'nflog\x00', 0x4c, {{0x78d, 0x80, 0x6, 0x0, 0x0, "0ea09d4320a21de6f77a527a0b65de06ce710581abe9416f29022f7ef4c83ee269d26089b2e9a669fde8fae528be415203d3af42cbf8a7c4972f92f4046da7be"}}}]}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x401, 'system_u:object_r:tmp_t:s0\x00'}}}}]}]}, 0x8c4) 2018/03/20 23:58:34 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f00000000c0)=0x3c0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='nv\x00', 0x3) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:34 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) r0 = socket(0x4, 0x2, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001840)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001a00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x10000, 0x0) r9 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000580), &(0x7f0000000600)=0x58, 0x800) r10 = eventfd2(0x7, 0x80000) r11 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x28c, 0x0) r12 = socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000800)=0xe8) r15 = getegid() r16 = getpgid(0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000980)=0x0) getresuid(&(0x7f00000009c0)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000b00)=0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) getgroups(0x6, &(0x7f0000000c00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000c40)=0x0) r26 = getuid() lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001280)=0x0) r32 = getuid() fstat(0xffffffffffffff9c, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001340)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001380)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001480)=0xe8) r36 = getgid() r37 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f00000014c0)=0x0, &(0x7f0000001500), &(0x7f0000001540)) getresgid(&(0x7f0000001580), &(0x7f00000015c0)=0x0, &(0x7f0000001600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001640)=0x0) r41 = geteuid() lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = syz_open_dev$vcsn(&(0x7f0000001740)='/dev/vcs#\x00', 0x4b3, 0x1) r44 = socket$bt_cmtp(0x1f, 0x3, 0x5) r45 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000017c0)=0x1c, 0x80800) r46 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/member\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001a40)={0x0, 0x80000, 0xffffffffffffffff}) pipe2(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001ac0)={0xffffffffffffff9c}) r50 = epoll_create(0x3) r51 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/kvm\x00', 0x100, 0x0) r52 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r54 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001e80)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0, 0x0}, &(0x7f0000001f80)=0xc) r58 = socket$netlink(0x10, 0x3, 0x17) r59 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000002080)={0x0, 0x0, 0x0, @dev}, &(0x7f00000020c0)=0x1c, 0x0) r60 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(r45, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000002180)=[0xffffffffffffffff]) r63 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r64 = accept4$unix(0xffffffffffffffff, &(0x7f00000024c0)=@abs, &(0x7f0000002540)=0x6e, 0x800) r65 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer2\x00', 0x101, 0x0) r66 = syz_open_dev$sndctrl(&(0x7f0000001880)='/dev/snd/controlC#\x00', 0x4, 0x84040) r67 = syz_open_dev$mouse(&(0x7f0000002600)='/dev/input/mouse#\x00', 0x3, 0xa0002) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000002640)={0xffffffffffffffff}) r69 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002680)='/dev/autofs\x00', 0x10000, 0x0) r70 = syz_open_dev$evdev(&(0x7f00000026c0)='/dev/input/event#\x00', 0x6888, 0x80000) r71 = socket$inet_udp(0x2, 0x2, 0x0) r72 = syz_open_dev$sndpcmc(&(0x7f0000002700)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) r73 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000002740)={0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r77 = openat$ppp(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/ppp\x00', 0x400000, 0x0) r78 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002940)={&(0x7f0000002900)='./file0\x00', 0x0, 0x8}, 0x10) r79 = socket$kcm(0x29, 0x5, 0x0) r80 = socket$can_bcm(0x1d, 0x2, 0x2) r81 = accept4$ax25(r0, 0x0, &(0x7f0000001fc0)=0xffffffc1, 0x800) r82 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000029c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000002a00)=0x1c, 0x800) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002a40)={0xffffffffffffffff}) r84 = inotify_init1(0x80000) r85 = syz_open_dev$tun(&(0x7f0000002a80)='/dev/net/tun\x00', 0x0, 0x600000) r86 = eventfd(0xffff) r87 = syz_open_dev$mouse(&(0x7f0000002ac0)='/dev/input/mouse#\x00', 0x1, 0x100) r88 = syz_open_dev$sndpcmc(&(0x7f0000002b00)='/dev/snd/pcmC#D#c\x00', 0x0, 0x420000) r89 = socket(0x0, 0x80000, 0x9) r90 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/ppp\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) r92 = socket$vsock_stream(0x28, 0x1, 0x0) r93 = signalfd4(0xffffffffffffff9c, &(0x7f0000002fc0)={0x7}, 0x8, 0x80000) r94 = syz_open_dev$amidi(&(0x7f0000003000)='/dev/amidi#\x00', 0x94, 0x0) r95 = socket$pptp(0x18, 0x1, 0x2) r96 = syz_open_dev$sndpcmc(&(0x7f0000003040)='/dev/snd/pcmC#D#c\x00', 0x8000000000, 0x2400) r97 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003080)='/dev/hwrng\x00', 0x391000, 0x0) r98 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000030c0), 0x800) r99 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003100)='/dev/kvm\x00', 0x8000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000003140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003180)={0x0}, &(0x7f00000031c0)=0xc) getresuid(&(0x7f0000003200), &(0x7f0000003240)=0x0, &(0x7f0000003280)) getresgid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003380)={0x0, 0x0}) r105 = getuid() r106 = getgid() r107 = socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) r109 = mq_open(&(0x7f00000035c0)='io\x00', 0x800, 0x1, &(0x7f0000003600)={0x1c9, 0x8, 0x40, 0x1, 0x5, 0x7, 0x3, 0x7f}) r110 = socket$nl_xfrm(0x10, 0x3, 0x6) r111 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003640)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) r112 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) r114 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000003700)='/selinux/create\x00', 0x2, 0x0) r115 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000003740)='/selinux/member\x00', 0x2, 0x0) r116 = syz_open_dev$urandom(&(0x7f0000003780)='/dev/urandom\x00', 0x0, 0x149001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004b40)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004c00)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="aa28b7d34034c34eda1b76265331e4e00ab21a88b44777416513595653f5763678adb3e51b5f630d89c37de9a30ee6114dc5bca44eebe1b02c975c1164fff2eb5d04abde5832448b20c5b6b08b63a245a8786698ff7569c65e5494db6db11f00fa87fa76e77ad8de8dc5f14f1cbcb27b402af6b158fcc2c3f90307348f560042d4e30882841d5ffd2bfad70c067d984ccd996e887a2cb4cecce154445b3efdc67920d1fba900f9a7807b8dd9b29845d659769e39524720e9850c5dd494bd3d2611349a15cffbf4515e728e058d7215273f970ad646359e", 0xd7}, {&(0x7f00000001c0)="2a1d5349ec13f00a8c6fc5744d931229a9aea0143e28b02dc97a442d71505cf1bb42c622d2f8fa5c834fe19bb109d90803c92789502914641fcb96d75a5f9c0a63014afd25ffc745a8518e180e46d53b98457b99f31a7c1d4719b71a8409425f41", 0x61}, {&(0x7f0000000240)="8e4211871d73462ee5e722332095ee7cac9828155531698d60c3cede2d3c7d", 0x1f}], 0x3, &(0x7f0000000d40)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x2c, 0x1, 0x1, [r5, r6, r7, r8, r9, r10, r11, r12]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @cred={0x18, 0x1, 0x2, r25, r26, r27}], 0xbc, 0x20000000}, {&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e80)="a316bc7a4246420469f677836fd23d0c05a9c22411a8faa463d07321118a4321945caf02631e109b3ee2a4c58b5026bd9e992243cd20b1ed6a67b2cdc080b50b1d9d1fb71d68848f445e624318a51fcc8dba99407b06178fa69b5bd343c9a1cad52a15e5fc4a173d51937bfaf4e96c29da5e836f5b5739b5c3ceb463ff4bde6f60d90103acec930c0b7c16404e158bde6e7fa4bff3c49d11f1626f2c5deccf5f283948dada5442c04afa9554f5a92129369d5550d7ed3aaac22b9daed5b4d689ec79d6ca4e11d15a4b4dd7e467863c", 0xcf}, {&(0x7f0000000f80)="afd8ffeb2ba3cff8a705065f60f218b81edca67ed29cae8d8828bc27e2a9bd69c51759b1ba06340c488ec14cdb82be91e430bf736ef0387ea6bf1700d7b036b13fc8c6534b4a0b2cf246a097d4f209a3dc0322c11c0bfbee60f573e8573394afad6bf5d89fb65517d7d5bf41a9984074b81e2c862d61220df8a9c355ddf3fb3a038542ea3efe720cf0f68a586dd68959ee7e671fa94394d2e4cddc634ad54a31604ccee23e33a6eca0e85473fea3eaecba1f1a5ecbd8fe58aa7de6524fc42da335", 0xc1}, {&(0x7f0000001080)="f0e01f8d6f5caa5e5b6fc5ec456b6f8a11cdbbad0822619156c028fa00a46f359d83ca688924ee8439250e9832ce1a1fc49b60eca273afa8614f63578f", 0x3d}], 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="0c0000000100000001000000180000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="180000000100000002000000", @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYBLOB='\x00', @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="180000000100000002000000", @ANYRES32=r37, @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="180000000100000002000000", @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r42, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r43, @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="200000000100000001000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYRES32=r50, @ANYRES32=r51], 0xc0, 0x14}, {&(0x7f0000001c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="5d614964f6a45bf88afe25168a6c80b5c01cfb051ee26ea54ee8f7b53e7677fe5124ba56d6aff440", 0x28}, {&(0x7f0000001cc0)="3190300fb4ef5ff43931cba82e171be1b735e099353f35036132b914100bb028e97eb804b74aaa21369a39ac02dea8543b6710cd71537965aad6231e9ef7c07b23230698ce55cc31f72a084dbb5c7a4540ebbcc3c19a64360ca5248ac8eebf6de88c522f4630ffe4d25f53bfb13af3654a75cffdb6589416333572c05ffa4486342fa3440a51b4638cce43fefda0725fd5dabdd013d3386f5baf240b3a50a01db8363dd4ac1b153b075bb9ee369a3b1b1611d63c4fa347f14a5e4fa71d3dd930faa23b", 0xc3}], 0x2, &(0x7f00000021c0)=[@cred={0x18, 0x1, 0x2, r52, r53, r54}, @cred={0x18, 0x1, 0x2, r55, r56, r57}, @rights={0x14, 0x1, 0x1, [r58, r59]}, @cred={0x18, 0x1, 0x2, r60, r61, r62}], 0x5c, 0x10}, {&(0x7f0000002240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000022c0)="c30fd53906b0cd59b3568782b23346241f72d11077da235687d569d2401bd85a7f856d024f4fa986ec61ecb713e6bb5042958b2e940b66e55c5ee7d29926c2c3c960dbc99ff44b12ef5a191e6d04c989b8113fcfd805263ff9e8cc59d7cd8b7b1f93f7eea492c27eeb28b5f0fb07877203636d8131861cae70b4655137d78d861721b1ef1a50c968aad22503654cd39e294924321e9991620e289b5a8eeea1bee2c72d138cd814ca3d9c00008341f23834bf08c9f0158b62188e04e60d5000c848ba", 0xc2}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="b154b556e5e17b22764bf5a7015a99e89cc221d15f8425e43c2358fe2b9c53134aa1030bacfa9162b44577a3305a9a3726e5dc75955f", 0x36}], 0x3, &(0x7f0000002b40)=[@rights={0x2c, 0x1, 0x1, [r63, r64, r65, r66, r67, r68, r69, r70]}, @rights={0x18, 0x1, 0x1, [r71, r72, r73]}, @cred={0x18, 0x1, 0x2, r74, r75, r76}, @rights={0x2c, 0x1, 0x1, [r77, r78, r79, r80, r81, r82, r83, r84]}, @rights={0x20, 0x1, 0x1, [r85, r86, r87, r88, r89]}], 0xa8, 0x4000}, {&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)="6fa5e987d086c4a626d7f3984de276564f4a1b969dabc470e766f45c9292f7e89fa75b9c8560fe0d4dd164c533afd7092c328fbef8affb8575cd1bfd31a8ad1164b1075b720039e5828b5bfbbe1b8bad13733cbfe2265a9e2957f786c8be7408cb67c2476af40c763d7b6197dc233407c0db07124fa22a03719168dd4374264bec54f32d57ce365903e8f04b084612eca9af65a815cb75b00f7029b0c165389daa5c1dbda809482c1e58fdfd3d42a7763066045c3ff4e0c338eabceb821399a4b39202457460fd987d9914e3ee17458571247f91d717c1", 0xd7}, {&(0x7f0000002d80)="d747f020a8795e5e60d60713099b9acb0495172e2654f889c7dde218f322251f2b1fb204a6431b5ded487be19fbac06527cedb5491b7788326dc9bdb85dda988a1fa69e4428978b1e932b858be7d23f50d4b317feb902384f3bba53e896caa07de34180aaa", 0x65}, {&(0x7f0000002e00)="63c76ab6a3d42490", 0x8}, {&(0x7f0000002e40)="35bbeed83c4f65aa5c4754845353a8d5c1fd17253a930d4a9f0217a75a66e6c80530eccf4c8c28c5d653a937f2e1303476d346e697fa34855be8ece5437b4f1ede80643ce5d3f2fca03375d660d476d9e348c7e01f7f789c38d8ad2c721a745014c8b3f7202984ce708af5b6748472dcdaa2acd700322e9a2fba2556ae5e4559ddee7c42d1598c7a04741de5914c6205dd9195fff755f6ce285bad6f08c5724d0ef4187f83fd76f6c9e66773", 0xac}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="0c00000001000000010000001c0000000100000001000000", @ANYRES32=r90, @ANYRES32=r91, @ANYRES32=r92, @ANYRES32=r93, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r94, @ANYRES32=r95, @ANYRES32=r96, @ANYRES32=r97, @ANYBLOB="1c00000001000000010005000000000100002a4e667d260ae86661bbf5e041ab98870164b821ceecc79fe79b7e92b773c2586eb064789cc3acd2b428b1679abf1171e35de676a8ba9d5cdb1346691e9a64a0caa93ece2d9b5d487581ba4fb31d32a228b46e089b18c6f728653e1c34246a993d94684964b1c7797aa1fdca1ea928643411c84f6ae7dbfb055133ac", @ANYRES32=r98, @ANYRES32=r99, @ANYRES32=r100, @ANYBLOB="180000000100000002000000", @ANYRES32=r101, @ANYRES32=r102, @ANYRES32=r103, @ANYBLOB="180000000100000002000000", @ANYRES32=r104, @ANYRES32=r105, @ANYRES32=r106], 0x8c, 0x8000}, {&(0x7f0000003480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003500)}], 0x1, &(0x7f0000004b80)=[@rights={0x1c, 0x1, 0x1, [r107, r108, r109, r110]}, @rights={0x28, 0x1, 0x1, [r111, r112, r113, r114, r115, r116, r117]}], 0x44}], 0x6, 0x80) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r118 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r118, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x6}], 0x1, 0xfffffffffffffffd) lseek(r118, 0x0, 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x300, 0x20000000000000) 2018/03/20 23:58:34 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) r0 = socket(0x4, 0x2, 0x2) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001840)='/dev/rtc\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001a00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@remote}}, &(0x7f0000000400)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/dsp\x00', 0x200000, 0x0) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000500)='/dev/hwrng\x00', 0x0, 0x0) r7 = epoll_create1(0x80000) r8 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x10000, 0x0) r9 = accept4$nfc_llcp(0xffffffffffffff9c, &(0x7f0000000580), &(0x7f0000000600)=0x58, 0x800) r10 = eventfd2(0x7, 0x80000) r11 = syz_open_dev$adsp(&(0x7f0000000640)='/dev/adsp#\x00', 0x28c, 0x0) r12 = socket$packet(0x11, 0x0, 0x300) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@rand_addr}}, &(0x7f0000000800)=0xe8) r15 = getegid() r16 = getpgid(0x0) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000980)=0x0) getresuid(&(0x7f00000009c0)=0x0, &(0x7f0000000a00), &(0x7f0000000a40)) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000b00)=0x0) getresuid(&(0x7f0000000b40), &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)) getgroups(0x6, &(0x7f0000000c00)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000c40)=0x0) r26 = getuid() lstat(&(0x7f0000000c80)='./file0\x00', &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000011c0)=0x0, &(0x7f0000001200), &(0x7f0000001240)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001280)=0x0) r32 = getuid() fstat(0xffffffffffffff9c, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001340)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000001380)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001480)=0xe8) r36 = getgid() r37 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f00000014c0)=0x0, &(0x7f0000001500), &(0x7f0000001540)) getresgid(&(0x7f0000001580), &(0x7f00000015c0)=0x0, &(0x7f0000001600)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001640)=0x0) r41 = geteuid() lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r43 = syz_open_dev$vcsn(&(0x7f0000001740)='/dev/vcs#\x00', 0x4b3, 0x1) r44 = socket$bt_cmtp(0x1f, 0x3, 0x5) r45 = accept4$inet6(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000017c0)=0x1c, 0x80800) r46 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000001800)='/selinux/member\x00', 0x2, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001a40)={0x0, 0x80000, 0xffffffffffffffff}) pipe2(&(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001ac0)={0xffffffffffffff9c}) r50 = epoll_create(0x3) r51 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/kvm\x00', 0x100, 0x0) r52 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, 0x0, 0x0, 0x0}) r54 = getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001e80)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001f40)={0x0, 0x0, 0x0}, &(0x7f0000001f80)=0xc) r58 = socket$netlink(0x10, 0x3, 0x17) r59 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000002080)={0x0, 0x0, 0x0, @dev}, &(0x7f00000020c0)=0x1c, 0x0) r60 = fcntl$getown(0xffffffffffffffff, 0x9) fstat(r45, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000002180)=[0xffffffffffffffff]) r63 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000002480)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r64 = accept4$unix(0xffffffffffffffff, &(0x7f00000024c0)=@abs, &(0x7f0000002540)=0x6e, 0x800) r65 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002000)='/dev/sequencer2\x00', 0x101, 0x0) r66 = syz_open_dev$sndctrl(&(0x7f0000001880)='/dev/snd/controlC#\x00', 0x4, 0x84040) r67 = syz_open_dev$mouse(&(0x7f0000002600)='/dev/input/mouse#\x00', 0x3, 0xa0002) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000002640)={0xffffffffffffffff}) r69 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002680)='/dev/autofs\x00', 0x10000, 0x0) r70 = syz_open_dev$evdev(&(0x7f00000026c0)='/dev/input/event#\x00', 0x6888, 0x80000) r71 = socket$inet_udp(0x2, 0x2, 0x0) r72 = syz_open_dev$sndpcmc(&(0x7f0000002700)='/dev/snd/pcmC#D#c\x00', 0x5, 0x1) r73 = socket$can_bcm(0x1d, 0x2, 0x2) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000002740)={0x0, 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000002800)='./file0\x00', &(0x7f0000002840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r77 = openat$ppp(0xffffffffffffff9c, &(0x7f00000028c0)='/dev/ppp\x00', 0x400000, 0x0) r78 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000002940)={&(0x7f0000002900)='./file0\x00', 0x0, 0x8}, 0x10) r79 = socket$kcm(0x29, 0x5, 0x0) r80 = socket$can_bcm(0x1d, 0x2, 0x2) r81 = accept4$ax25(r0, 0x0, &(0x7f0000001fc0)=0xffffffc1, 0x800) r82 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000029c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000002a00)=0x1c, 0x800) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002a40)={0xffffffffffffffff}) r84 = inotify_init1(0x80000) r85 = syz_open_dev$tun(&(0x7f0000002a80)='/dev/net/tun\x00', 0x0, 0x600000) r86 = eventfd(0xffff) r87 = syz_open_dev$mouse(&(0x7f0000002ac0)='/dev/input/mouse#\x00', 0x1, 0x100) r88 = syz_open_dev$sndpcmc(&(0x7f0000002b00)='/dev/snd/pcmC#D#c\x00', 0x0, 0x420000) r89 = socket(0x0, 0x80000, 0x9) r90 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002f40)='/dev/ppp\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000002f80)={0xffffffffffffffff, 0xffffffffffffffff}) r92 = socket$vsock_stream(0x28, 0x1, 0x0) r93 = signalfd4(0xffffffffffffff9c, &(0x7f0000002fc0)={0x7}, 0x8, 0x80000) r94 = syz_open_dev$amidi(&(0x7f0000003000)='/dev/amidi#\x00', 0x94, 0x0) r95 = socket$pptp(0x18, 0x1, 0x2) r96 = syz_open_dev$sndpcmc(&(0x7f0000003040)='/dev/snd/pcmC#D#c\x00', 0x8000000000, 0x2400) r97 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000003080)='/dev/hwrng\x00', 0x391000, 0x0) r98 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000030c0), 0x800) r99 = openat$kvm(0xffffffffffffff9c, &(0x7f0000003100)='/dev/kvm\x00', 0x8000, 0x0) socketpair$inet_sctp(0x2, 0x0, 0x84, &(0x7f0000003140)={0xffffffffffffffff}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003180)={0x0}, &(0x7f00000031c0)=0xc) getresuid(&(0x7f0000003200), &(0x7f0000003240)=0x0, &(0x7f0000003280)) getresgid(&(0x7f00000032c0), &(0x7f0000003300), &(0x7f0000003340)=0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000003380)={0x0, 0x0}) r105 = getuid() r106 = getgid() r107 = socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000003580)={0xffffffffffffffff, 0xffffffffffffffff}) r109 = mq_open(&(0x7f00000035c0)='io\x00', 0x800, 0x1, &(0x7f0000003600)={0x1c9, 0x8, 0x40, 0x1, 0x5, 0x7, 0x3, 0x7f}) r110 = socket$nl_xfrm(0x10, 0x3, 0x6) r111 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000003640)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x800) r112 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000003680)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pipe(&(0x7f00000036c0)={0xffffffffffffffff, 0xffffffffffffffff}) r114 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000003700)='/selinux/create\x00', 0x2, 0x0) r115 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000003740)='/selinux/member\x00', 0x2, 0x0) r116 = syz_open_dev$urandom(&(0x7f0000003780)='/dev/urandom\x00', 0x0, 0x149001) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000004b40)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000004c00)=[{&(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f00000000c0)="aa28b7d34034c34eda1b76265331e4e00ab21a88b44777416513595653f5763678adb3e51b5f630d89c37de9a30ee6114dc5bca44eebe1b02c975c1164fff2eb5d04abde5832448b20c5b6b08b63a245a8786698ff7569c65e5494db6db11f00fa87fa76e77ad8de8dc5f14f1cbcb27b402af6b158fcc2c3f90307348f560042d4e30882841d5ffd2bfad70c067d984ccd996e887a2cb4cecce154445b3efdc67920d1fba900f9a7807b8dd9b29845d659769e39524720e9850c5dd494bd3d2611349a15cffbf4515e728e058d7215273f970ad646359e", 0xd7}, {&(0x7f00000001c0)="2a1d5349ec13f00a8c6fc5744d931229a9aea0143e28b02dc97a442d71505cf1bb42c622d2f8fa5c834fe19bb109d90803c92789502914641fcb96d75a5f9c0a63014afd25ffc745a8518e180e46d53b98457b99f31a7c1d4719b71a8409425f41", 0x61}, {&(0x7f0000000240)="8e4211871d73462ee5e722332095ee7cac9828155531698d60c3cede2d3c7d", 0x1f}], 0x3, &(0x7f0000000d40)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x2c, 0x1, 0x1, [r5, r6, r7, r8, r9, r10, r11, r12]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @cred={0x18, 0x1, 0x2, r25, r26, r27}], 0xbc, 0x20000000}, {&(0x7f0000000e00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000e80)="a316bc7a4246420469f677836fd23d0c05a9c22411a8faa463d07321118a4321945caf02631e109b3ee2a4c58b5026bd9e992243cd20b1ed6a67b2cdc080b50b1d9d1fb71d68848f445e624318a51fcc8dba99407b06178fa69b5bd343c9a1cad52a15e5fc4a173d51937bfaf4e96c29da5e836f5b5739b5c3ceb463ff4bde6f60d90103acec930c0b7c16404e158bde6e7fa4bff3c49d11f1626f2c5deccf5f283948dada5442c04afa9554f5a92129369d5550d7ed3aaac22b9daed5b4d689ec79d6ca4e11d15a4b4dd7e467863c", 0xcf}, {&(0x7f0000000f80)="afd8ffeb2ba3cff8a705065f60f218b81edca67ed29cae8d8828bc27e2a9bd69c51759b1ba06340c488ec14cdb82be91e430bf736ef0387ea6bf1700d7b036b13fc8c6534b4a0b2cf246a097d4f209a3dc0322c11c0bfbee60f573e8573394afad6bf5d89fb65517d7d5bf41a9984074b81e2c862d61220df8a9c355ddf3fb3a038542ea3efe720cf0f68a586dd68959ee7e671fa94394d2e4cddc634ad54a31604ccee23e33a6eca0e85473fea3eaecba1f1a5ecbd8fe58aa7de6524fc42da335", 0xc1}, {&(0x7f0000001080)="f0e01f8d6f5caa5e5b6fc5ec456b6f8a11cdbbad0822619156c028fa00a46f359d83ca688924ee8439250e9832ce1a1fc49b60eca273afa8614f63578f", 0x3d}], 0x3, &(0x7f0000001b40)=ANY=[@ANYBLOB="0c0000000100000001000000180000000100000002000000", @ANYRES32=r28, @ANYRES32=r29, @ANYRES32=r30, @ANYBLOB="180000000100000002000000", @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYBLOB='\x00', @ANYRES32=r34, @ANYRES32=r35, @ANYRES32=r36, @ANYBLOB="180000000100000002000000", @ANYRES32=r37, @ANYRES32=r38, @ANYRES32=r39, @ANYBLOB="180000000100000002000000", @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r42, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r43, @ANYRES32=r44, @ANYRES32=r45, @ANYRES32=r46, @ANYBLOB="200000000100000001000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYRES32=r50, @ANYRES32=r51], 0xc0, 0x14}, {&(0x7f0000001c00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001c80)="5d614964f6a45bf88afe25168a6c80b5c01cfb051ee26ea54ee8f7b53e7677fe5124ba56d6aff440", 0x28}, {&(0x7f0000001cc0)="3190300fb4ef5ff43931cba82e171be1b735e099353f35036132b914100bb028e97eb804b74aaa21369a39ac02dea8543b6710cd71537965aad6231e9ef7c07b23230698ce55cc31f72a084dbb5c7a4540ebbcc3c19a64360ca5248ac8eebf6de88c522f4630ffe4d25f53bfb13af3654a75cffdb6589416333572c05ffa4486342fa3440a51b4638cce43fefda0725fd5dabdd013d3386f5baf240b3a50a01db8363dd4ac1b153b075bb9ee369a3b1b1611d63c4fa347f14a5e4fa71d3dd930faa23b", 0xc3}], 0x2, &(0x7f00000021c0)=[@cred={0x18, 0x1, 0x2, r52, r53, r54}, @cred={0x18, 0x1, 0x2, r55, r56, r57}, @rights={0x14, 0x1, 0x1, [r58, r59]}, @cred={0x18, 0x1, 0x2, r60, r61, r62}], 0x5c, 0x10}, {&(0x7f0000002240)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000002440)=[{&(0x7f00000022c0)="c30fd53906b0cd59b3568782b23346241f72d11077da235687d569d2401bd85a7f856d024f4fa986ec61ecb713e6bb5042958b2e940b66e55c5ee7d29926c2c3c960dbc99ff44b12ef5a191e6d04c989b8113fcfd805263ff9e8cc59d7cd8b7b1f93f7eea492c27eeb28b5f0fb07877203636d8131861cae70b4655137d78d861721b1ef1a50c968aad22503654cd39e294924321e9991620e289b5a8eeea1bee2c72d138cd814ca3d9c00008341f23834bf08c9f0158b62188e04e60d5000c848ba", 0xc2}, {&(0x7f00000023c0)}, {&(0x7f0000002400)="b154b556e5e17b22764bf5a7015a99e89cc221d15f8425e43c2358fe2b9c53134aa1030bacfa9162b44577a3305a9a3726e5dc75955f", 0x36}], 0x3, &(0x7f0000002b40)=[@rights={0x2c, 0x1, 0x1, [r63, r64, r65, r66, r67, r68, r69, r70]}, @rights={0x18, 0x1, 0x1, [r71, r72, r73]}, @cred={0x18, 0x1, 0x2, r74, r75, r76}, @rights={0x2c, 0x1, 0x1, [r77, r78, r79, r80, r81, r82, r83, r84]}, @rights={0x20, 0x1, 0x1, [r85, r86, r87, r88, r89]}], 0xa8, 0x4000}, {&(0x7f0000002c00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002f00)=[{&(0x7f0000002c80)="6fa5e987d086c4a626d7f3984de276564f4a1b969dabc470e766f45c9292f7e89fa75b9c8560fe0d4dd164c533afd7092c328fbef8affb8575cd1bfd31a8ad1164b1075b720039e5828b5bfbbe1b8bad13733cbfe2265a9e2957f786c8be7408cb67c2476af40c763d7b6197dc233407c0db07124fa22a03719168dd4374264bec54f32d57ce365903e8f04b084612eca9af65a815cb75b00f7029b0c165389daa5c1dbda809482c1e58fdfd3d42a7763066045c3ff4e0c338eabceb821399a4b39202457460fd987d9914e3ee17458571247f91d717c1", 0xd7}, {&(0x7f0000002d80)="d747f020a8795e5e60d60713099b9acb0495172e2654f889c7dde218f322251f2b1fb204a6431b5ded487be19fbac06527cedb5491b7788326dc9bdb85dda988a1fa69e4428978b1e932b858be7d23f50d4b317feb902384f3bba53e896caa07de34180aaa", 0x65}, {&(0x7f0000002e00)="63c76ab6a3d42490", 0x8}, {&(0x7f0000002e40)="35bbeed83c4f65aa5c4754845353a8d5c1fd17253a930d4a9f0217a75a66e6c80530eccf4c8c28c5d653a937f2e1303476d346e697fa34855be8ece5437b4f1ede80643ce5d3f2fca03375d660d476d9e348c7e01f7f789c38d8ad2c721a745014c8b3f7202984ce708af5b6748472dcdaa2acd700322e9a2fba2556ae5e4559ddee7c42d1598c7a04741de5914c6205dd9195fff755f6ce285bad6f08c5724d0ef4187f83fd76f6c9e66773", 0xac}], 0x4, &(0x7f00000018c0)=ANY=[@ANYBLOB="0c00000001000000010000001c0000000100000001000000", @ANYRES32=r90, @ANYRES32=r91, @ANYRES32=r92, @ANYRES32=r93, @ANYBLOB="1c0000000100000001000000", @ANYRES32=r94, @ANYRES32=r95, @ANYRES32=r96, @ANYRES32=r97, @ANYBLOB="1c00000001000000010005000000000100002a4e667d260ae86661bbf5e041ab98870164b821ceecc79fe79b7e92b773c2586eb064789cc3acd2b428b1679abf1171e35de676a8ba9d5cdb1346691e9a64a0caa93ece2d9b5d487581ba4fb31d32a228b46e089b18c6f728653e1c34246a993d94684964b1c7797aa1fdca1ea928643411c84f6ae7dbfb055133ac", @ANYRES32=r98, @ANYRES32=r99, @ANYRES32=r100, @ANYBLOB="180000000100000002000000", @ANYRES32=r101, @ANYRES32=r102, @ANYRES32=r103, @ANYBLOB="180000000100000002000000", @ANYRES32=r104, @ANYRES32=r105, @ANYRES32=r106], 0x8c, 0x8000}, {&(0x7f0000003480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003540)=[{&(0x7f0000003500)}], 0x1, &(0x7f0000004b80)=[@rights={0x1c, 0x1, 0x1, [r107, r108, r109, r110]}, @rights={0x28, 0x1, 0x1, [r111, r112, r113, r114, r115, r116, r117]}], 0x44}], 0x6, 0x80) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r118 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r118, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x6}], 0x1, 0xfffffffffffffffd) lseek(r118, 0x0, 0x3) open$dir(&(0x7f0000000000)='./file0\x00', 0x300, 0x20000000000000) 2018/03/20 23:58:34 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000040)={0x6, 0x0, [{}, {}, {}, {}, {}, {}]}) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:34 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x101100) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0)=0xd18, 0x4) [ 71.933107] binder: 10156:10162 got reply transaction with no transaction stack [ 71.940707] binder: 10156:10162 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:34 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0xd00, 0x0) close(r0) 2018/03/20 23:58:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x20, 0x100, 0x8001, 0x2, 0xffffffffffff400d, 0x401, 0x9b, 0x3, r1}, 0x20) read$eventfd(r0, &(0x7f0000000180), 0xff0a) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x208000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:34 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 72.023972] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000040)=ANY=[@ANYBLOB="7247de99c927bb6daea6"]) 2018/03/20 23:58:34 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0xc000, 0x0) fcntl$dupfd(r0, 0x406, r1) r2 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') r3 = socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(r3, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)=ANY=[@ANYBLOB="020a000014ffffffff00000000000000"], 0x10}, 0x1}, 0x0) preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r2, 0x0, 0x3) creat(&(0x7f0000000100)='./file0\x00', 0x40) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:34 executing program 6: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=ANY=[@ANYBLOB="85000000080000003d000000000000009500000000000024"], &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) [ 72.159006] binder: 10199:10201 got reply transaction with no transaction stack [ 72.166699] binder: 10199:10201 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:34 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') gettid() preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) [ 72.224845] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:34 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:34 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000300)="66b9150200000f320f20e06635000040000f22e0baf80c66b8d66a068666efbafc0cb80900efb880058ee8baa000ec66b92808000066b80048000066ba000000000f30801fb8660f38055e620f01390f30", 0x51}], 0x1, 0x10, &(0x7f0000000380), 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x200, 0x0) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000080)) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000380)=0x100000000, 0x4) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000480)=ANY=[@ANYBLOB="40000007a76a00001ee2e952c6a684229192d1f319a819b518af802ceda316d7386e3b98a5e4128691b987f31d270400ff89c1f44e8f99eb013a68e35f5b0ac7f9088a470bb7b02e92cb3f3bfa000000000000000000000000000000000000000000000000"]) r4 = request_key(&(0x7f00000000c0)='rxrpc\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)='/dev/ppp\x00', 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f0000000180)=""/216, 0xd8) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000400)={&(0x7f00000003c0)=[0x7fffffff], 0x1, 0x40, 0x9c27, 0x2, 0x40, 0x2, {0x4, 0x4, 0x101, 0x2f, 0x6, 0x8, 0xd2, 0xff, 0x3, 0x401, 0x9, 0x14, 0xffff, 0x1, "9dc5c0031a668a76e9a936cddcbbdabd3c90babd4eb1e24711182866a58de905"}}) 2018/03/20 23:58:34 executing program 6: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = dup(0xffffffffffffff9c) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0186415, &(0x7f0000000040)={&(0x7f0000002000/0x1000)=nil, 0x0, 0x1, 0xc, &(0x7f0000002000/0xf000)=nil, 0xa1}) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) ioctl$void(r0, 0x5450) lseek(r1, 0x0, 0x3) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:34 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101000, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)={0x1, 0x5, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="f6e5bf34244f"]}) r2 = getpgrp(0xffffffffffffffff) syz_open_procfs(r2, &(0x7f0000000100)='ns/pid\x00') ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000000c0)={0x7, 0x1}) 2018/03/20 23:58:34 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'HL\x00'}, &(0x7f0000000080)=0x1e) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={r1, r2, r3}, 0xc) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:34 executing program 2: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') gettid() preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) [ 72.384222] binder: 10225:10234 got reply transaction with no transaction stack [ 72.391804] binder: 10225:10234 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:34 executing program 1: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x20, 0x100, 0x8001, 0x2, 0xffffffffffff400d, 0x401, 0x9b, 0x3, r1}, 0x20) read$eventfd(r0, &(0x7f0000000180), 0xff0a) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffffb, 0x208000) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:35 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x200, 0x0) write$selinux_user(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7973f4656d9437fca3542154108ab7edebf6ad465f753a6f626a6563745f723a646576696365d0fc745f7699c600"], 0x2e) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) close(r1) 2018/03/20 23:58:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) mq_timedreceive(r2, &(0x7f0000000040)=""/41, 0x29, 0xda, &(0x7f0000000100)={0x77359400}) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000080)=ANY=[@ANYBLOB="0500001700d79b3f8ce726b8680d0f3a86e3d15493e809a840a15ba512e91902000000000000003bc2b98ea1ada258b6148d9794af22fb4965af2a7457fbe50b9ae59232c87eff7dbbb3c3e6eadbac28d911fef0a1bfe79a6df3c1f2bcc3e932a1671adfb7"]) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[{0xba54d73e687dee1b, 0x10000}, {0x6, 0x7}, {0x4, 0x1}, {0x2, 0x3}, {0x3, 0x8}], 0x5) [ 72.444997] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:35 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) ptrace(0x11, r2) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r3 = gettid() getsockname$inet(r1, &(0x7f0000000040), &(0x7f0000000140)=0x10) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) timer_create(0x8, &(0x7f0000000240)={0x0, 0x3e, 0x4, @tid=r2}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x15) 2018/03/20 23:58:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000080)={0x3a2, 0x3, [{0x401, 0x0, 0x3}, {0x3ff, 0x0, 0x3ff}, {0x3, 0x0, 0x3}, {0x2, 0x0, 0x7ccc1734}, {0xfffffffffffff000, 0x0, 0x6}, {0x3f, 0x0, 0x8}, {0x1, 0x0, 0x4}, {0x1, 0x0, 0x2}, {0x800100, 0x0, 0x4}, {0x1, 0x0, 0x8}]}) [ 72.513529] binder: 10257:10262 got reply transaction with no transaction stack [ 72.521111] binder: 10257:10262 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:35 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x6, r0, 0x1}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mixer\x00', 0x200, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000300)=r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r3, &(0x7f0000000180), 0xff0a) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f0000000140)=0xe8) fstat(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={r4, r5, r6}, 0xc) tkill(r4, 0x15) [ 72.554126] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:35 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0xd, 0x240080) bind$rds(r0, &(0x7f0000000180)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) mlock(&(0x7f0000003000/0x4000)=nil, 0x4000) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x0, 0x30}, &(0x7f0000000200)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e20, 0x7ff, @remote={0xfe, 0x80, [], 0xbb}, 0x71e1}}, 0xfffffffffffffff8, 0xf6, 0xf7ed, 0x4, 0x10000}, &(0x7f0000000300)=0x98) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a45323, &(0x7f00000000c0)={{0x6, 0x7}, 'port0\x00', 0xc8, 0x51819, 0x6, 0x7ff, 0x400, 0x101, 0x401, 0x0, 0x6, 0xf24}) socket$vsock_dgram(0x28, 0x2, 0x0) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4003, 0x80) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x400, 0x0) sigaltstack(&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000380)) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40186417, &(0x7f00000003c0)={0x40, 0x7fff, 0x7ff, 0x0, 0x8}) r2 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r2, 0x0) 2018/03/20 23:58:35 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) 2018/03/20 23:58:35 executing program 2: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="2b9620e64fcba27e6ccffc6ab0aeb3d2", 0x10) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) io_submit(0x0, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ptrace$setregset(0x4205, r2, 0x203, &(0x7f0000000240)={&(0x7f00000001c0)="614ce576b6d2796cc75caeefd50a3faae3cfb59977eaae565d22b4e644f823c98ad686a4d47faea6fdfcc03acc3449e19bffacca6cffa85b4b2411287707413cf97730b8935d419790fc634244722aa6dfcc1c36a773af32069f8d5f0aa866641103ee4e899e28759f7e5d", 0x6b}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x20000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) 2018/03/20 23:58:35 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'ipddp0\x00', 0x4006}) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x10000, 0xa2) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) 2018/03/20 23:58:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) ioctl$sock_bt(r1, 0x5411, &(0x7f0000000080)="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") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e24, 0x401, @empty, 0x70}}, 0x800, 0x4}, &(0x7f0000000100)=0x88) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x7f, 0x200, 0x1, 0x800, r2}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x26) 2018/03/20 23:58:35 executing program 4: pipe2(&(0x7f0000c5b000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="2b9620e64fcba27e6ccffc6ab0aeb3d2", 0x10) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000100)) io_submit(0x0, 0x1, &(0x7f0000b52fd8)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="0600000080", 0x5}]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)=0x0) ptrace$setregset(0x4205, r2, 0x203, &(0x7f0000000240)={&(0x7f00000001c0)="614ce576b6d2796cc75caeefd50a3faae3cfb59977eaae565d22b4e644f823c98ad686a4d47faea6fdfcc03acc3449e19bffacca6cffa85b4b2411287707413cf97730b8935d419790fc634244722aa6dfcc1c36a773af32069f8d5f0aa866641103ee4e899e28759f7e5d", 0x6b}) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x20000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x2) 2018/03/20 23:58:35 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xfffffffffffffffc, 0x24b301a56dd37ddb) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x8000, 0x1, 0x4, 0xef4a, 0x8000, 0x5, 0x7, 0x6c5, 0x2, 0x6}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:35 executing program 2: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r0, 0x800442d4, &(0x7f0000000040)=0x1000) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r0, 0x9) sched_getparam(r2, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x0) 2018/03/20 23:58:35 executing program 6 (fault-call:1 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 73.101305] binder: 10283:10289 got reply transaction with no transaction stack [ 73.108944] binder: 10283:10289 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:35 executing program 2 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) [ 73.164506] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:35 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x7, 0x2) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="6566450f3881ab0e4f000066ba4000ecc461e56409b9800000c00f3235002000000f30c463217b8f00200000a94d0fc7acdc00d02a4c0f011a66b8e2008ec848b805000000000000000f23d00f21f835200000090f23f866ba4200ed", 0x5c}], 0x1, 0x42, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x7fae, 0x0, 0xa52, 0x0, 0x1, 0x0, 0xe9}, @dstype3={0x7}], 0x2) 2018/03/20 23:58:35 executing program 0: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000002c0)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@remote}}, &(0x7f00000003c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'ipddp0\x00', r1}) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x200280) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x31f) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x22a00, 0x0) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r3, 0x0) close(r2) 2018/03/20 23:58:35 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r0, 0x4, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) readahead(r1, 0x3ff, 0x3) tkill(r2, 0x15) 2018/03/20 23:58:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="25008d6f00000000"]) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x20000) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f0000000080)='/dev/kvm\x00') 2018/03/20 23:58:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:35 executing program 4 (fault-call:2 fault-nth:0): r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:35 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000000)={{0x0, 0x0, 0x4, 0x4, 0x5, 0x9}, 0x0, 0x0, 0x101, 0x7, 0x7, "3d115ad5cb65d82e71de2180c360743ec43680f446f7c56c1af52f27498e3fb3bf121bcdce3fda4ec29d786e58ae1e62cc258328c4f4c98e4cb42da2f05cbc9404ea51a7e75bdbc14e76c6ef7191625536ca07c5f5a8a1a5ffb87afaa3c19a952cf62f0b148d2b747f9ffff49cb9cd9e9497e7aac887e4d39b76bda28855b734"}) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x40, 0x0) preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) [ 73.218115] binder: 10317:10318 got reply transaction with no transaction stack [ 73.225788] binder: 10317:10318 transaction failed 29201/-71, size 56-48 line 2763 [ 73.252248] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.302573] audit: type=1400 audit(1521590315.833:37): avc: denied { map } for pid=10329 comm="syz-executor0" path="/proc/714/net/pfkey" dev="proc" ino=4026533440 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 [ 73.332119] FAULT_INJECTION: forcing a failure. [ 73.332119] name failslab, interval 1, probability 0, space 0, times 0 [ 73.343395] CPU: 0 PID: 10337 Comm: syz-executor4 Not tainted 4.16.0-rc6+ #270 [ 73.350749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 73.360100] Call Trace: [ 73.362687] dump_stack+0x194/0x24d [ 73.366411] ? arch_local_irq_restore+0x53/0x53 [ 73.371064] ? __lock_acquire+0x664/0x3e00 [ 73.375282] should_fail+0x8c0/0xa40 [ 73.378977] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 73.384058] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 73.389223] ? print_irqtrace_events+0x270/0x270 [ 73.393957] ? trace_hardirqs_off+0x10/0x10 [ 73.398258] ? trace_hardirqs_off+0x10/0x10 [ 73.402560] ? find_held_lock+0x35/0x1d0 [ 73.406624] ? check_same_owner+0x320/0x320 [ 73.410926] ? lock_downgrade+0x980/0x980 [ 73.415052] ? lock_downgrade+0x980/0x980 [ 73.419180] ? rcu_note_context_switch+0x710/0x710 [ 73.424091] ? lock_release+0xa40/0xa40 [ 73.428038] ? lock_release+0xa40/0xa40 [ 73.431995] should_failslab+0xec/0x120 [ 73.435950] kmem_cache_alloc_trace+0x4b/0x740 [ 73.440526] binder_get_thread+0x1cf/0x870 [ 73.444750] ? binder_inc_ref_for_node+0xbc0/0xbc0 [ 73.449661] ? check_same_owner+0x320/0x320 [ 73.453962] ? rcu_note_context_switch+0x710/0x710 [ 73.458872] ? __might_sleep+0x95/0x190 [ 73.463694] binder_ioctl+0x20c/0x1417 [ 73.467574] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 73.473177] ? check_same_owner+0x320/0x320 [ 73.477477] ? rcu_note_context_switch+0x710/0x710 [ 73.482386] ? __might_sleep+0x95/0x190 [ 73.486340] ? _cond_resched+0x14/0x30 [ 73.490209] ? selinux_file_ioctl+0x444/0x690 [ 73.494683] ? __fget_light+0x2b2/0x3c0 [ 73.498646] ? selinux_capable+0x40/0x40 [ 73.502693] ? __sb_end_write+0xa0/0xd0 [ 73.506656] ? security_file_ioctl+0x7d/0xb0 [ 73.511041] ? security_file_ioctl+0x89/0xb0 [ 73.515432] compat_SyS_ioctl+0x151/0x2a30 [ 73.519643] ? do_fast_syscall_32+0x156/0xf9f [ 73.524113] ? binder_ioctl_write_read.isra.38+0xcb0/0xcb0 [ 73.529716] ? do_ioctl+0x60/0x60 [ 73.533144] do_fast_syscall_32+0x3ec/0xf9f [ 73.537447] ? do_int80_syscall_32+0x9c0/0x9c0 [ 73.542005] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 73.547525] ? syscall_return_slowpath+0x2ac/0x550 [ 73.552433] ? sysret32_from_system_call+0x5/0x3c [ 73.557254] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 73.562079] entry_SYSENTER_compat+0x70/0x7f [ 73.566462] RIP: 0023:0xf7ffac99 [ 73.569802] RSP: 002b:00000000f77f609c EFLAGS: 00000286 ORIG_RAX: 0000000000000036 [ 73.577483] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 00000000c0306201 [ 73.584729] RDX: 0000000020008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 73.591972] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 2018/03/20 23:58:35 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 73.599214] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 73.606461] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 73.620624] binder: 10346:10352 BC_INCREFS_DONE u0000000000000000 no match [ 73.622770] audit: type=1400 audit(1521590316.152:38): avc: denied { write } for pid=10327 comm="syz-executor5" name="net" dev="proc" ino=34904 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 73.627784] binder: 10346:10352 BC_INCREFS_DONE u0000000000000000 no match [ 73.652625] audit: type=1400 audit(1521590316.152:39): avc: denied { add_name } for pid=10327 comm="syz-executor5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 2018/03/20 23:58:36 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000040)=0x1) 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {}, 0x0, 0x0, 0x5e35}) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x5f, 0x2) 2018/03/20 23:58:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:36 executing program 4: r0 = syz_open_dev$amidi(&(0x7f0000000280)='/dev/amidi#\x00', 0x40, 0x200) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f00000002c0)={0x81, 0xe, 0x7, 0x165945c9, 0x0}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r1, &(0x7f0000000380)=0x4) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r2, 0x0) fcntl$setsig(r2, 0xa, 0x40) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, &(0x7f0000000100)={0x0, 0x80000, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000440)=0x4) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0086426, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{}, {}, {0x0}]}) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/status\x00', 0x0, 0x0) ioctl$TCSETAF(r5, 0x5408, &(0x7f0000000240)={0xd3, 0x0, 0x0, 0x0, 0x800, 0x9, 0x3, 0x1ff, 0x81, 0xbb4}) ioctl$DRM_IOCTL_SWITCH_CTX(r3, 0x40086424, &(0x7f00000001c0)={r4, 0x3}) r6 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/qat_adf_ctl\x00', 0x4281, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_GET_ONE_REG(r6, 0x4010aeab, &(0x7f00000000c0)={0x1000, 0xfffffffffffffffd}) 2018/03/20 23:58:36 executing program 0: r0 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = getpgid(0x0) r2 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x2000) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x3f, &(0x7f0000000140)=0x1) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) kcmp(r1, r3, 0x7, r0, r0) tkill(r1, 0x35) ioctl$sock_bt_cmtp_CMTPCONNDEL(r2, 0x400443c9, &(0x7f0000000180)={{0xfff, 0x0, 0x7, 0x4, 0xa82, 0x7}, 0x4}) close(r0) [ 73.652642] audit: type=1400 audit(1521590316.152:40): avc: denied { create } for pid=10327 comm="syz-executor5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 [ 73.705850] binder: 10346:10352 got transaction to invalid handle [ 73.712243] binder: 10346:10352 transaction failed 29201/-22, size 24-24 line 2848 [ 73.726134] binder: 10328:10337 ioctl c0306201 20008000 returned -12 [ 73.737828] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000040)=@ioapic) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000140)="0f35b8004000000f23c00f21f83500000a000f23f8b922000040b805000000ba000000000f300fc79c83090000000f3266b88b008ed8640f01cf66baf80cb818487c8fef66bafc0c66b8090066efc744240000800000c744240200000000c7442406000000000f011c242e9c", 0x6c}], 0x1, 0x2, &(0x7f0000000200), 0x0) 2018/03/20 23:58:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40042406, &(0x7f0000000040)='cpuseteth1proc\x00') r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TIOCNXCL(r0, 0x540d) tkill(r1, 0x15) [ 73.792789] binder: 10360:10365 ioctl c0306201 20008000 returned -14 [ 73.816563] binder: 10362:10368 BC_INCREFS_DONE u0000000000000000 no match [ 73.823687] binder: 10362:10368 BC_INCREFS_DONE u0000000000000000 no match [ 73.830741] binder: 10362:10368 got transaction to invalid handle 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 73.837013] binder: 10362:10368 transaction failed 29201/-22, size 24-24 line 2848 [ 73.871482] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.878620] binder_alloc: binder_alloc_mmap_handler: 10360 20000000-20002000 already mapped failed -16 [ 73.893081] binder: 10360:10373 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:36 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"39db54cac3dbbc9d10d818880101e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x203, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x1ff, 0x3, [0x81, 0x40, 0x8]}, &(0x7f0000000100)=0xe) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000140)={r2, 0x5, 0x59cc4678, 0x5}, 0x10) close(r0) 2018/03/20 23:58:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000140)={0x0, 0x4af0, 0x4d1, &(0x7f0000000100)}) sendfile64(r1, r0, &(0x7f00000001c0), 0x1ff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000040)=""/142) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x2, 0x300) 2018/03/20 23:58:36 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0xfffffffffffffffc, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:36 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x100000000, 0x5c, 0x2, @tick=0x6, {0x3, 0x8}, {0x2, 0x2}, @note={0x1, 0x9, 0x100000000, 0x8, 0x4}}, {0x3, 0x8, 0x8, 0x8, @time={0x0, 0x1c9c380}, {0x2, 0xff}, {0xe0, 0x696}, @raw32={[0x101, 0x6, 0x3ff]}}, {0x4, 0x10001, 0xffff, 0xffff, @tick=0x1f, {0x7f}, {0x8, 0x100000001}, @addr={0x6301, 0x9}}], 0x54) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x22000) 2018/03/20 23:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x400) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$inet_udp(0x2, 0x2, 0x0) readahead(r0, 0xfffffffffffffa16, 0x5) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc4, 0x0, &(0x7f0000000280)=[@increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x403a7c437248a685}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000040)=r0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) eventfd2(0x1, 0x1) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x8000011) 2018/03/20 23:58:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x94400, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x4e24, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, {0xa, 0x4e23, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0xf8, [0xffffffffa0ae5e78, 0x7, 0xb6, 0xe11d, 0x10001, 0x401, 0x1, 0x7f]}, 0x5c) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000140)=0x54c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ustat(0x1ff, &(0x7f0000000140)) 2018/03/20 23:58:36 executing program 4: syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4000) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 73.988160] binder: 10384:10397 BC_INCREFS_DONE u0000000000000000 no match [ 73.995296] binder: 10384:10397 BC_INCREFS_DONE u0000000000000000 no match [ 74.002366] binder: 10384:10397 got transaction to invalid handle [ 74.008675] binder: 10384:10397 transaction failed 29201/-22, size 24-24 line 2848 2018/03/20 23:58:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)="214ef7eba0416d74aa3e4bc3", 0xc, 0xfffffffffffffffb) r2 = request_key(&(0x7f0000000140)='asymmetric\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000001c0)='/dev/snd/seq\x00', 0xfffffffffffffffb) keyctl$instantiate_iov(0x14, r1, &(0x7f0000000100)=[{&(0x7f00000000c0)="f8d329da5b2b074d2a68617bf3e0035937", 0x11}], 0x1, r2) 2018/03/20 23:58:36 executing program 0: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c, 0x800) ftruncate(r0, 0x7ff) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x40000000030a) r2 = dup2(r0, r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000200)={0x0, 0x20, 0x4}) fanotify_mark(r2, 0xc, 0x20020, r3, &(0x7f0000000140)='./file0\x00') getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) close(r1) 2018/03/20 23:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x18, {0x2, 0x4e23, @rand_addr}, 'teql0\x00'}) ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f00000000c0)={r4}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:36 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) fcntl$setstatus(r0, 0x4, 0x800) [ 74.054145] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.094144] binder: 10417:10422 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x2, 0x222380) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000080)={0x64, 0x0, 0x80, 0x21, 0x0}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0xb5}}, 0xfffffffffffffff8, 0x9}, &(0x7f00000001c0)=0x88) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:36 executing program 3: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(r0, 0x2, 0x3, &(0x7f0000000080)=""/234, &(0x7f0000000180)=0xea) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup3(r3, r1, 0x80000) ioctl$TIOCSLCKTRMIOS(r5, 0x5457, &(0x7f0000000200)) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="74d1f96e773552fc"]) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x1, 0x0) 2018/03/20 23:58:36 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) getgid() 2018/03/20 23:58:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000b0efa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00004f7000)="649c47ad", 0x4) sendmsg$nl_netfilter(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xc, 0x0, @uid}]}, 0x20}, 0x1}, 0x0) recvmmsg(r1, &(0x7f0000002e40)=[{{&(0x7f0000002bc0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x2e, &(0x7f0000002e00)=[{&(0x7f0000002c00)=""/199, 0xc7}], 0x1}}], 0x1, 0x0, &(0x7f0000002f80)) fstat(0xffffffffffffffff, &(0x7f0000000d80)) stat(&(0x7f0000001940)='./file0\x00', &(0x7f0000001980)) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 74.127512] binder: 10421:10428 got reply transaction with no transaction stack [ 74.135094] binder: 10421:10428 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x80, 0x5}, {0x0, 0x401}}) 2018/03/20 23:58:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = dup2(r0, r0) sendto$inet(r1, &(0x7f0000000000)="0b11d5bdb9bae2f96ab6b8ba4d2338c305aed6739b67aa5c78f702382751a42190ef3d29a75add7de4a1fb11ea5fe1cf7d0e4f3d641b94a16e8f5997f28fda7335ea67b6ece14b9656edb5e34ae85980aa591673a51c446b3bd22bc0cf", 0x5d, 0x40000, &(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x6}, 0x10) get_thread_area(&(0x7f00000000c0)={0xb13, 0x20000000, 0x5000, 0xe49, 0xb53, 0xfffffffffffffffd, 0xffff, 0x2, 0x2, 0x8000}) [ 74.195849] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.214921] binder: 10442:10444 ioctl c0306201 20008000 returned -14 [ 74.246197] binder: 10452:10454 got reply transaction with no transaction stack [ 74.253745] binder: 10452:10454 transaction failed 29201/-71, size 56-48 line 2763 [ 74.265929] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.275929] binder_alloc: binder_alloc_mmap_handler: 10442 20000000-20002000 already mapped failed -16 [ 74.286059] binder: 10442:10458 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:36 executing program 7: r0 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)="c6d01658b88270f0ef0c5fb10693195c2fc7c322d6bae003333c074daf59338e315189826411db555a54ae1c15d60e3edf3891e871bec76c3e91c524fd6a1abf97a90317c221a5d0ba9197d3c1b34aabda4da126d9f395e867cca7327431c64e870aed1822", 0x65, 0xfffffffffffffff9) r1 = add_key(&(0x7f00000001c0)='blacklist\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$unlink(0x9, r0, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) sched_setparam(0x0, &(0x7f0000000240)=0x4e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r4, 0xae47, 0xd000) name_to_handle_at(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="400000000020000000050000c50005c40fdae7"], &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710"}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) read$eventfd(r2, &(0x7f0000000180), 0xff0a) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000480)={'ipddp0\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x20, 0xf9, "c768b2774333375853252d959bb6e25e99c86e878e05bd7dfa7446b619735f695b3898228b35a9b1219c31ee6f585403269dbc0d373c42fafbab81bed6c157e822ab073ba6ea419940c61f4b25cb7625f41c008b207d5b2069ade652cf22a5facef4b1a5e674ce714f4484f43ac5dbf51fdc26d883394ad909c8c85ff657cd591533ddb5c6c404efc9a803625f55f8e7eca8dfcff2066a65a30b831b40320d8ea300403f138d1e2a3ca59e7b751e58e14cb3efa4c61baf7b5a4c6fd6c27c3b8bbbe37a914959be9c3a345d1f8f49f36ae806913a06a89e19cb66b2632b5337c8301ac002eed76e0c73e0bdbe4cccd6564990a47b19c50839d7"}}) r6 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@any=0xffffffff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) renameat2(r2, &(0x7f0000000280)='./file0\x00', r2, &(0x7f0000000300)='./file0\x00', 0x2) tkill(r6, 0x15) 2018/03/20 23:58:36 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={"d202b999cf77000010d800881301e710", 0x4102}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x40000000030a) close(r0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x101000) recvfrom$unix(r1, &(0x7f00000000c0)=""/253, 0xfd, 0x40000000, &(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) 2018/03/20 23:58:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) 2018/03/20 23:58:36 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x40, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x65, r1}) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='numa_maps\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r2, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xffffffffffff12e8, 0x8000) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000002c0), &(0x7f0000000200)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x8000, 0x4000) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r5, 0xc0485510, &(0x7f0000000100)={0x3, 0x2, 0x8, 0x100000001, &(0x7f0000000080)=[{}, {}]}) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000000280)=0x7) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) getpeername$netlink(r4, &(0x7f00000004c0), &(0x7f0000000500)=0xffffffffffffff11) 2018/03/20 23:58:36 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCCBRK(r0, 0x5428) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) gettid() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:36 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0xd6eb70f3a84fb4c0, @tick=0x5, 0x401, {0x2}, 0x4, 0x1, 0x100000000}) [ 74.368282] binder: 10470:10474 got reply transaction with no transaction stack [ 74.375883] binder: 10470:10474 transaction failed 29201/-71, size 56-48 line 2763 2018/03/20 23:58:36 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:37 executing program 0 (fault-call:3 fault-nth:0): r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 74.432184] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.455322] binder: 10484:10493 ioctl 5428 0 returned -22 2018/03/20 23:58:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0xa000, 0x0) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000080)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB="fcfffffffffff8"]) 2018/03/20 23:58:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x40) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0xfffffffffffffffe, 0x100004}) [ 74.480557] binder: 10484:10499 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x8000, 0x0) r1 = open(&(0x7f0000000240)='./file0\x00', 0x10200, 0xc8) ioctl$PERF_EVENT_IOC_ID(r1, 0x80042407, &(0x7f0000000300)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)={0xffffffffffffffff}) membarrier(0x29, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0086426, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r4, 0x4008641c, &(0x7f0000000200)={r5, &(0x7f0000000140)=""/144}) r6 = dup(r4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) connect$pppoe(r6, &(0x7f0000000340)={0x18, 0x0, {0x4, @empty, 'bpq0\x00'}}, 0x1e) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$EVIOCSABS2F(r6, 0x401845ef, &(0x7f0000000080)={0x9, 0x1, 0x9, 0x1f, 0x20, 0x1ff}) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000000)) [ 74.507502] binder: 10496:10504 got reply transaction with no transaction stack [ 74.512720] binder: 10484:10493 ioctl 5428 0 returned -22 [ 74.515046] binder: 10496:10504 transaction failed 29201/-71, size 56-48 line 2763 [ 74.535756] binder: 10484:10512 ioctl c0306201 20008000 returned -14 [ 74.544810] FAULT_INJECTION: forcing a failure. [ 74.544810] name failslab, interval 1, probability 0, space 0, times 0 [ 74.556120] CPU: 1 PID: 10506 Comm: syz-executor0 Not tainted 4.16.0-rc6+ #270 [ 74.563479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 74.572830] Call Trace: [ 74.575419] dump_stack+0x194/0x24d [ 74.579061] ? arch_local_irq_restore+0x53/0x53 [ 74.583760] should_fail+0x8c0/0xa40 [ 74.587476] ? get_pid_task+0x93/0x140 [ 74.591362] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 74.596500] ? find_held_lock+0x35/0x1d0 [ 74.600605] ? check_same_owner+0x320/0x320 [ 74.604940] ? rcu_note_context_switch+0x710/0x710 [ 74.609858] ? vfs_write+0x374/0x510 [ 74.613562] should_failslab+0xec/0x120 [ 74.617515] kmem_cache_alloc+0x47/0x760 [ 74.621568] getname_flags+0xcb/0x580 [ 74.625354] getname+0x19/0x20 [ 74.628526] do_sys_open+0x2e7/0x6d0 [ 74.632221] ? filp_open+0x70/0x70 [ 74.635746] ? do_fast_syscall_32+0x156/0xf9f [ 74.640221] ? compat_SyS_openat+0x40/0x40 [ 74.644432] SyS_creat+0x27/0x30 [ 74.647776] do_fast_syscall_32+0x3ec/0xf9f [ 74.652084] ? do_int80_syscall_32+0x9c0/0x9c0 [ 74.656643] ? _raw_spin_unlock_irq+0x27/0x70 [ 74.661115] ? finish_task_switch+0x1c1/0x7e0 [ 74.665592] ? syscall_return_slowpath+0x2ac/0x550 [ 74.670498] ? prepare_exit_to_usermode+0x350/0x350 [ 74.675493] ? sysret32_from_system_call+0x5/0x3c [ 74.680321] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 74.685157] entry_SYSENTER_compat+0x70/0x7f [ 74.689545] RIP: 0023:0xf7f81c99 [ 74.692886] RSP: 002b:00000000f777d09c EFLAGS: 00000286 ORIG_RAX: 0000000000000008 [ 74.700568] RAX: ffffffffffffffda RBX: 000000002001cff0 RCX: 0000000000000000 [ 74.707812] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 74.715055] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 74.722302] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 74.729549] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 74.754899] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:37 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) 2018/03/20 23:58:37 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x0, 0x4, 0x80000000, 0x5, 0x6f}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}}, 0x84) 2018/03/20 23:58:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x42801) write$evdev(r1, &(0x7f00000000c0), 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = syz_open_dev$audion(&(0x7f0000001380)='/dev/audio#\x00', 0x0, 0x900) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f00000013c0)={'ah\x00'}, &(0x7f0000001400)=0x1e) 2018/03/20 23:58:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) 2018/03/20 23:58:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x30, &(0x7f0000000080)=[@fda={0x66646185, 0xa, 0x2, 0x13}, @flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:37 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x4000) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) flock(r0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/dsp\x00', 0x90080, 0x0) ioctl$TIOCNOTTY(r1, 0x5422) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000040)={0x6, 0xfffffffffffffffc, 0x8, 'queue0\x00', 0x9}) creat(&(0x7f0000000100)='./control/file0\x00', 0xc) sendmsg$nl_generic(r2, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000180)={0x308, 0x35, 0x200, 0x70bd25, 0x25dfdbfb, {0x1f}, [@generic="794b11ef97664285fc5c42db9d577df24de3466d148ff6304843d8d65567f7f0cbc42536e1e97a63c23953755efa8e686772640a66e99b4183e95b8dc259bf742803d2512b7ec37d88c1fa2a34ee73eccd37dd65f632925d8ebc9db77e3ceab3a934800d4f78b63c2260c7ca9244c2c85fbb637a327fbb926fa0eb2c9ab67f17b4f708df19a6cfefb3566095dacb6fb8b1643e25d955fbce0a077a14e473f95efde11f10318ebbebb3a113eadfd54631d1d7a6a8cc528668a5f8b168f7557ed0fd0532d909ba353610e439fdbe6efdd3e971fee70e7330805a0b833885a87be615df271d61922b64f76e0cb627c7552bd4", @generic="d7bf77082fc2d9961ffb49bb491cdc9ba30074001dd09fba1d05645a7419e88cb690b1bfd54f895c0cfe19266e8652245795d0f24d2200909db9f551d4064bb2f9bd46e9720c0a153d755b8e7173d49e7306524f2f5fab0ac155b57490e19fa709cbeb119171c5697e2e9b46cc91248fdb592f392563f049021c73", @generic="4f76880c34ab75f1e60d0e857d828c6b77c921b94a322da707b32fd89dde2436f3810ca3f1b8f29c0c45285558b1b1a45b24b8479ad35a3d703ba65933d04fb8ac8095e2e7af400b460b55d4704d2ffec090217b180f17648d7d2c56a9cd6f3b4d7baaec311bedf6e4d87d1792a9e9ca1f4af58d6f269d683c6115961c336c098dc9d2857fe2081f56fdf5435bce6a9c34255f7bc4dbdc03424a9d6a1236acc7d69bebd908ce02ff31b8a03e1d", @nested={0xd8, 0x13, [@typed={0x8, 0x77}, @generic="308ba94517701ec655837da79d5387f9cba25d84dc1b6a45944e7f99128aa2f709697ad7a937fda9cb462fbfa2d1370e4c51e86dd44c62c0fb20e92a13fe391fd28a777cfd3945b0f90c3e6cdee330600370f6e4c96645079cede5f5f076deb3bdfacd1b8934ca0def4cc5e2f7871e00d0217a7aedc741339c4126e98e0a51574aa4298ff8f4ee77910cdd05d0c5fbf94b1f0a0f08d5d950189dd0089378f210dd0e87b003912834ab6d5ec5781b672279dce4724e8bbfa4edcf440e27f0f8a0f15c7a2e177c20d40ef51a"]}]}, 0x308}, 0x1, 0x0, 0x0, 0x8080}, 0x24000010) 2018/03/20 23:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000500)='/dev/snd/pcmC#D#c\x00', 0x2, 0x404200) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f0000000540)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) r4 = open(&(0x7f0000000040)='./file0\x00', 0x800, 0x33) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4004ae52, &(0x7f00000005c0)=0x401) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r5 = gettid() r6 = getuid() sendmsg$nl_generic(r4, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000100)={0x360, 0x34, 0x0, 0x70bd2a, 0x25dfdbfb, {0x11}, [@nested={0x294, 0x35, [@typed={0xc, 0xd, @ipv4=@multicast2=0xe0000002}, @typed={0xc8, 0x74, @binary="a7c82b233d650cc8f0c36a2e7f6b1efb59c16594b525c586273a4c3d2620514ec9ad1554a5e55a52ad572f55d6465e96041cffaf79f46e5342a34bcc0273f3e08b1cd59ebcaafe84e87529fbec4948981f114a4ff6697d3546a8f4a7839db49cb7a65d6c61c61507407c2e61327efe78660414de66e6e4a8013b799b5ce7c0c85d163618cf2297c95d17bebb684db78cbee7945048949b8ec897ddd2f414eb8475f117aab1c8f8e123e8fa66ae1d3bac165f9c64d30115f336bb978158fbb63c"}, @typed={0xc, 0x79, @pid=r5}, @typed={0xc, 0x6, @uid=r6}, @generic="56de863d93146328bbfafafa29b83be8d12aa8a6f189e5a4bcce0abfe66201218d45db85eee2e5895b26db289d61e6d8441adaf016f098c9ed55a0393d54dc465368f2afef64769c040c1ff5a6a76a78696b8c030a73895da2187bbe5bfc70d82646bfb30b4f7bc6b618f8c4e1038afb674bf03fb4b64e37f5d1b7282b102fdecf4fb3a0b912b4cca85006b7776aaee39ef96e48a55d58083164f33f856ac09b03ad0f34a33680646f58e43251fc7904e14528a3ecf31566a44815369c322641f8b510f9444f5056181328ba5f9816d81af302232d10293625bd3301acba177a0529e8cfb1fff2295fbf95afcdf3fe19ae54717e", @generic="108c97e9b6ae4d2ee572f7f19d7f4092b4cdeaf04f348f5276ba031ee8798ac7c65458696eab3978f5e31f693fa5a50ae3826baab7e992f2cd28aa2fc92059283f0ba2e72b002bf774afb6cc7914faf516470cc9035ed7a105656ff258b849f309bb7072dd0425f757c0b2d4dae17ba3e7517191eef440721c3e897ccac91dde12865ee024e81f6896c3570f5a6e34216d324e931dbde136f464f78a00dedf32051b72fd1b0b1c4f08364c519e9e"]}, @generic="9e3581f2efff5f2eee45505a00a6aa7344fa74bad00da67888cabb529ed93d5dffc3595f86929ba3773f5e05a1c8ed05f3d0ba8626c05e2be05a7031855f8e27ae8cc148df13a1fc220665616b0ee6b3f1bcd5ccc89c1695e30c6c2f399ee6669c4a7f7d07f7e1c9743a8ecf6f73547e3842dc08fae5584a57ddeb184e27a803736bb706d27f3b8de81adb01c0fea0c11fa115cbbe90c3868ec636ccf1d96494db5ecdc0ec6eff14c8e4d0eed38a0e6dea7f30953946cb"]}, 0x360}, 0x1, 0x0, 0x0, 0xc010}, 0x80) getrlimit(0xf, &(0x7f0000000580)) 2018/03/20 23:58:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000040)={0x5, 0x1f, 0x1}) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x8, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x4, &(0x7f0000000140)=""/155) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000480)=0x6, 0x4) [ 74.837705] binder: 10528:10535 got reply transaction with no transaction stack [ 74.845287] binder: 10528:10535 transaction failed 29201/-71, size 56-48 line 2763 [ 74.853301] binder: 10524:10531 ioctl c0306201 20008000 returned -14 [ 74.873812] binder_alloc: binder_alloc_mmap_handler: 10524 20000000-20002000 already mapped failed -16 2018/03/20 23:58:37 executing program 0: r0 = inotify_init() ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x5) r1 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000080)=[@flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@mcast1={0xff, 0x1, [], 0x1}, 0x5, 0x1, 0xff, 0x2, 0x3, 0x5, 0x6}, &(0x7f0000000140)=0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x2, 0x3, 0x8, 0x3, 0x8}}) inotify_init() 2018/03/20 23:58:37 executing program 2: stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getegid() getgroups(0x3, &(0x7f0000000100)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000200)=[0x0]) r5 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$VT_GETSTATE(r5, 0x5603, &(0x7f0000000600)={0x75c5, 0x3, 0x8}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_open_dev$sndmidi(&(0x7f0000000540)='/dev/snd/midiC#D#\x00', 0x81, 0x0) r9 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}, &(0x7f00000005c0)=0x1c, 0x80000) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0xc) getgroups(0x9, &(0x7f0000000480)=[r0, r1, r2, r3, r4, r6, r7, r8, r10]) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r12 = open$dir(&(0x7f00000004c0)='./file0\x00', 0x404000, 0x0) mknodat(r12, &(0x7f0000000500)='./file0\x00', 0x0, 0xffffffff) r13 = ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r13, 0xae60) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r14, 0x8004ae98, &(0x7f0000000000)) [ 74.886876] binder: 10524:10545 ioctl c0306201 20008000 returned -14 [ 74.913721] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.975617] binder: 10558:10559 got reply transaction with no transaction stack [ 74.980728] binder: 10557:10562 ioctl c0306201 20008000 returned -14 [ 74.983170] binder: 10558:10559 transaction failed 29201/-71, size 24-48 line 2763 [ 75.012838] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:37 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0xb4, 0x12, 0x3, 0x100, 0xe2b8, 0x25dfdbfd, {0x2, 0x0, 0x7}, [@generic="8a7ba17bb62757eed66419da8146f4a9c74bd686362f7206228d2c70e1761535124c5e412e66e0a3361e7b649ac17bd01882e0241ace26666835e97bd06d6c4e94bca2f5a7ac63c3454f6db1d1fcaccc52493617c6e5ed6fa7fb26f7d2ca327b211db61f02b132af1d0b6c736de30cedc81da33c16953de09e3819a0b22df79257120f4519eddd8f2d426b289abce6cab220ec07955aa4167cd1a7b31d"]}, 0xb4}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) read$eventfd(r1, &(0x7f00000001c0), 0x8) r2 = gettid() ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) timer_create(0x200, &(0x7f0000000300)={0x0, 0x12, 0x40000, @thr={&(0x7f0000000340)="6709d245dd9b330564779041a8830ecb43b66176088eb8eb531a089bc23fee0740d6bda9", &(0x7f0000000380)="8cba0c3ddfc917ad4270e54fc67884da10ef86ea11c182b191c473fc56f468d31e88d7d4da9d999a45401b1d6ff0c143d196772a45c544708cbb3e0441759da22016daaa8ccb2ac6040b67d242fe951c755a95fd9c99777a2be59fa4534f2c6d"}}, &(0x7f0000044000)) clock_gettime(0x8, &(0x7f0000000080)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x8}, {r3, r4+10000000}}, &(0x7f00000000c0)) tkill(r2, 0x15) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x8000, 0x80000000, 0x1, 0x0, 0x8000}, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) 2018/03/20 23:58:37 executing program 0: r0 = eventfd(0x100000000) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000140)="ece203efdea4ba622b5f58ca8eeae4060c2a2dc793f51fc263dca6829e90eaece1b3eb3f57456fcfe30db70d1ee5ab8684c98c7f41f70aeb38c58b54464d082df794fbf615e35ecd9a293b805c9aac5b0f3c2eb7b6c100d1899294b8f9280b1432ce817e93b415fd9e81e8694ba8403bc4b6b89e52237a08df45d2c00cafa03f3cb13eca265e0a4388a52c66a1667c90f5fccf620c989049e9aa4b885a4ccc873dfd0f97147b", 0xa6}, {&(0x7f0000000200)="47fbd2be6a4935f4e1a11313ba30a83699fa11ad0a2a784cd99da16e4fc3db42ebebf42fed78a60b4cb0d461a910a578c4fc6072129908ac3a0d877c2f0493203b4728e2b9b90a188be10ac3681b00541b3cca02b70287599909ef099b552c8224f27e993f8aa9910371bf1e59233809e2c572e36d86f34e80e4d464c53dc166f2237f77b9addd3cd44e8738a217418fb90d21b6473eb736fd01c7c5c5f2f1172aa4a36f85a6507824db5e623b1c804cb39019b25e1058a729", 0xb9}, {&(0x7f00000002c0)="6382c3b04c976c891bd7faf82c8eacbc48bfc7515623870ff2bba3f3e46454aeac8dcab487e6e41597bc06fabf494cb914a37776a8139138a559b2438b17a500618a4043fda7af2267ef7dc5a86caf4b9a57b968d7fd5522c2b70b3b916f0fb890338f3f9d50ae862b6c62b8e97f5db8aba422ff517091fc3930655f8b76203f409b492ce08800db015368ba17c5ec49856d56a2a528da667c8a3e740ec3623a25d482818d5c3a7d23f683f91cdcb15bbda18271adda1eba97c386fa7d6223cf3159bfb288", 0xc5}, {&(0x7f0000000080)="3b201211f3fdd5cb5b39b9c84be6223bcbaeff816de9630d46b89103f2631f298a580d152e7c0e977e559dc4993cf8705d344d744d3d5b28cb3c06f57fabab0b5aa89c431665d156f35958a28613293dee28acc2e6d9e079eb138d2f973464db952ed8662978adf1d4f0a497b6ed4c71385ce4c433f2544542cef8024511", 0x7e}, {&(0x7f00000003c0)="119540060e53c7455db7228b12cd8f3b671c8ffb91f877ed2ddf4f6cb60758e6be6e6bf746ff4827ae0bb4ae981ee2226f93da0ca2f59abe28df0aaf6687f69cf89ea0adf5558846824bd82b92168b", 0x4f}, {&(0x7f0000000440)="364d20f0f715d4845d007510e9a0fb98d1c6c03255b0d776f4567cb81b876ee8874e6fcfd2b97e20ab817dc45c98cf4da7106a92462e37857842ff38778401f14eb91abd2d0a5c488b3e4ce9862e4b1d85670999f8ca6ed0aed391570d9fea2c415b946fc886fea119abca47bd2f77099cbef60551ae1a4724603ffe61711eefc72f8f919649a6bbb9", 0x89}, {&(0x7f0000000000)="087937a9b5a8d589febb2768b28d2bcebf50418592dc6c909c", 0x19}, {&(0x7f0000000500)="75b699e395aee092f0e0be03353d58ceb2a77deb784ef8a1eb0170a598ad377e8da8e07bd2d8a93918573f1687271fa43435eda6a0c2da8f67d979115edbab53f7d33bd568357e02f8b92b99d5ccec4153d2cc56815779192f415250e4380cfa88a70d8c1c293ac5ae3c79b313c85ca6606edb17694c0e3ec2", 0x79}], 0x8, 0x0) r1 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2000, 0x0) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f0000000040)={0x0, 0x6d31}) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:37 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x8, 0x956, 0x7, 'queue1\x00', 0x7}) 2018/03/20 23:58:37 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = dup(r0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000000)={0xfffffffffffffffb, 0x0, 0x10000, 0x80}) ioctl$DRM_IOCTL_AGP_UNBIND(r1, 0x40086437, &(0x7f0000000040)={r2, 0x3}) eventfd2(0xa0f2, 0x80000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x400003, 0x8}, {0x101, 0x4}, 0x40, 0x1, 0x6}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {}, 0x0, 0x0, 0xd8}) 2018/03/20 23:58:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x4, 0xecc, 0x40, 0x40, 0x5c, 0x3, 0x3f}, 0x1c) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x7, 0x5, 0x578, 0x1ff, 0x80000001, 0x8001, 0x200}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x4, &(0x7f0000000100)=[{0x0, 0x10001, 0x8, 0x7ff}, {0x7, 0x9, 0x7, 0x7fff}, {0x74ac, 0x8, 0x76, 0x60000000000000}, {0x7, 0x6, 0x48d2, 0x7}]}, 0x8) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000080)={0x0, 0x4, 0x7fffffff}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)=ANY=[@ANYBLOB]) 2018/03/20 23:58:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={0x0, r1, 0x3, 0x1}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x30, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 75.031502] binder: 10557:10564 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:37 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100, 0x0) sendfile64(r0, r0, &(0x7f0000000040), 0x15) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) connect$vsock_dgram(r1, &(0x7f0000000000)={0x28, 0x0, 0x2710, @any=0xffffffff}, 0x10) epoll_create1(0x80000) 2018/03/20 23:58:37 executing program 6: r0 = accept4$unix(0xffffffffffffff9c, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x800) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000001c0)={'bcsh0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x200000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x400}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000300)={r3, @in6={{0xa, 0x4e20, 0x5, @empty, 0x10000}}, [0xffffffff, 0x8, 0x100000001, 0x4, 0x3, 0x6, 0x7, 0x0, 0x100000000, 0xda8, 0x0, 0x8001, 0x3, 0x6]}, &(0x7f0000000400)=0x100) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e24, 0x6244, @dev={0xfe, 0x80, [], 0x18}, 0x9}, {0xa, 0x4e24, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x10001}, 0x9, [0x7, 0x4, 0x291f, 0x271e, 0x10000, 0xff, 0x401, 0x1]}, 0x5c) [ 75.092533] binder: 10575:10580 got reply transaction with no transaction stack [ 75.100077] binder: 10575:10580 transaction failed 29201/-71, size 0-48 line 2763 [ 75.108484] binder: 10579:10583 ioctl c0306201 20008000 returned -14 [ 75.128375] binder: 10579:10590 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:37 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x28, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:37 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x6, r0, 0x1}) io_setup(0xea3, &(0x7f0000000100)=0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vga_arbiter\x00', 0x80000, 0x0) io_submit(r3, 0x4, &(0x7f0000000440)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x8, 0x50ea, r1, &(0x7f0000000140)="cf9432de934b653b1ea773977e2a74274f7b554fd39f4c2e869d90dcbf0fa75dadd21d83bc1c0854529e341d34b32432fa694aa0bda89dfae92fe8184622e07a9ff999dae17d063f58f76d79ba8f", 0x4e, 0x3, 0x0, 0x0, r2}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x9, 0x15, r0, &(0x7f0000000200)="3ad25d55c0ef953f167ebe48a9cff0eabd2db9b8c1956dce03b0d1ce9ced9d299bffae97e57247d1dab6efa5b503ae995228ab20c33a1a198dcfb94124839495c33ed7bc145d8f92ff005082fca88ee5fe486add8c5ce6c5804e48cd98", 0x5d, 0x4, 0x0, 0x0, r1}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3, 0x6, r1, &(0x7f00000002c0)="df733fcdf645f2e146e5e5597093857e54132feae4537bcb710c6e01fadc74aa4ad5beda3b042163a56bc5e04bf671cea4559b8eabea932bcb975735a1c8faf0d182bd3c46db6c97776f567e9d5877074a430fed1f7387bb4ce6f927d890e2b1c58cc85ebbaeb2d739ab923f2688c31c57", 0x71, 0xfffffffffffffffe, 0x0, 0x1, r1}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x7ff, r2, &(0x7f0000000380)="045ff4616ce02fcaa606390f2909db", 0xf, 0x40, 0x0, 0x0, r4}]) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:37 executing program 0: r0 = inotify_init() r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x457, 0x4000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@bridge_newneigh={0x1c, 0x1c, 0x0, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0x0, r2, 0x8, 0x8, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3ff, 0x4000) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000040)=0x800001d) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000600)=ANY=[]) [ 75.146983] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) bind$rds(r2, &(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x7}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:37 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x80, 0x0) getsockopt(r0, 0xffffffffffffc1e4, 0x8, &(0x7f0000000040)=""/182, &(0x7f00000004c0)=0xb6) getsockopt(r0, 0x96d, 0x6, &(0x7f0000000180)=""/167, &(0x7f0000000240)=0xa7) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x200) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r2 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x9, 0x101802) fgetxattr(r2, &(0x7f0000000300)=@known='system.posix_acl_default\x00', &(0x7f0000000340)=""/203, 0xcb) [ 75.205975] binder: 10600:10604 got reply transaction with no transaction stack [ 75.213555] binder: 10600:10604 transaction failed 29201/-71, size 0-40 line 2763 [ 75.235334] binder: 10602:10607 ioctl c0306201 20008000 returned -14 [ 75.265540] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.303918] binder: 10602:10618 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x8800) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='bic\x00', 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x5}}) 2018/03/20 23:58:38 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x8, 0x2000) ioctl$KVM_IRQ_LINE(r0, 0x4008ae61, &(0x7f0000000440)={0x101}) r1 = inotify_init() mq_notify(r0, &(0x7f00000004c0)={0x0, 0x39, 0x1, @thr={&(0x7f0000000480), &(0x7f0000000580)="6f4b1e7392db8f16ac480102437d6250fe53c1ca0d826ce872d1f959d42e2596d4d9020d431d943414cb9b6a1a0696b68efb38bb9b704823d1cd6ce1539c64b0747fc2e65e09a7000cce77428723cf55929c4e49848c9ab6f5e5643b4a2e783e47e124a8b5ccae21f4143a838e640ec006f6f6466d758e491ad27a4a642d0313a8c57ac84b770009"}}) mkdir(&(0x7f0000000540)='./control/file1\x00', 0x2) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) r2 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) execveat(r2, &(0x7f0000000000)='./control\x00', &(0x7f0000000240)=[&(0x7f0000000040)='{vmnet0\x00', &(0x7f0000000080)='ppp0user.\x00', &(0x7f00000000c0)="2376626f786e65743076626f786e6574306367726f757021d6246b657972696e677dcd5c6574683000", &(0x7f0000000100)=')^&%em0system@md5sum\x00', &(0x7f0000000140)='cpusetselinux\x00', &(0x7f0000000180)='em0\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00'], &(0x7f00000003c0)=[&(0x7f0000000280)='\x00', &(0x7f00000002c0)='(($^\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='}userwlan0#-wlan0GPL#(^@-em1{[]security\x00', &(0x7f0000000380)='\x00'], 0x1000) 2018/03/20 23:58:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) r4 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r3, 0x8001, 0x4, r4) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000140)=0x300, 0x4) 2018/03/20 23:58:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0x0) rt_sigqueueinfo(r0, 0x33, &(0x7f0000000040)={0x2d, 0x0, 0x2, 0x1}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xcc, "f68b520841f72958fdc699c3ad12061c7cdaf23a84d89f25d65735bec6a87f2ba509d613304091f3a4bc97db888574135edb009559a2c6d33153afaa36b71b5b1d3dff9b492edf1c5981777075679f4d6b2849d704f318a9d4a50a967409b2390c428dfe15383763e10a3bc657c6261213f8085959e1625e186f05ab56ac8b85ce5a77a612e703c96abfb5a4c0b82f8813beb34e3c7d10631b9253a128cf22fdc1b1f0069009ac4a19bc86aeb2623aff95f4ecdd1cca260fc602708aa5ae3f7b9c91e210d99f909535ef2617"}, &(0x7f00000001c0)=0xd4) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000200)={r3, 0xfffffffffffffff0}, 0x8) 2018/03/20 23:58:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000040)={0x9, 0x8, 0x37b}) 2018/03/20 23:58:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x3, r1}) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x0, 0x480) getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x6) 2018/03/20 23:58:38 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x208000, 0x20) write$selinux_context(r1, &(0x7f0000000040)='system_u:object_r:inetd_var_run_t:s0\x00', 0x25) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x8, 0x80000) syz_open_pts(r1, 0x40000) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000040)=""/143) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0106434, &(0x7f0000000100)={0x7ff, 0x0, 0x10001, 0x6}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f0000000140)={0x6, r2, 0x0, 0x3}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x20, &(0x7f0000000080), &(0x7f00000000c0)=[0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 75.711913] binder: 10621:10630 got reply transaction with no transaction stack [ 75.719504] binder: 10621:10630 transaction failed 29201/-71, size 0-32 line 2763 [ 75.729126] binder: 10624:10634 ioctl c0306201 20008000 returned -14 [ 75.740555] binder: 10624:10642 ioctl c0306201 20008000 returned -14 [ 75.753336] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) recvmmsg(r0, &(0x7f00000013c0)=[{{&(0x7f0000000100)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000280)=""/249, 0xf9}, {&(0x7f0000000380)=""/173, 0xad}], 0x4, &(0x7f0000000480)=""/146, 0x92, 0x8001}, 0x4b}, {{&(0x7f0000000540)=@in={0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000b40)=[{&(0x7f00000005c0)=""/174, 0xae}, {&(0x7f0000000680)=""/83, 0x53}, {&(0x7f0000000700)=""/174, 0xae}, {&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/168, 0xa8}, {&(0x7f0000000940)=""/193, 0xc1}, {&(0x7f0000000a40)=""/54, 0x36}, {&(0x7f0000000a80)=""/176, 0xb0}], 0x8, 0x0, 0x0, 0x3}, 0x1f24e1e8}, {{&(0x7f0000000b80)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/32, 0x20}], 0x1, &(0x7f0000000c80)=""/169, 0xa9, 0x7}, 0x7311756b}, {{&(0x7f0000000d40)=@llc, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000dc0)=""/26, 0x1a}, {&(0x7f0000000e00)=""/41, 0x29}], 0x2, &(0x7f0000000e80)=""/136, 0x88, 0x10001}, 0x800}, {{&(0x7f0000000f40)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/117, 0x75}, {&(0x7f0000001040)=""/246, 0xf6}, {&(0x7f0000001140)=""/114, 0x72}, {&(0x7f00000011c0)=""/209, 0xd1}], 0x4, &(0x7f0000001300)=""/190, 0xbe, 0x4a0}, 0xfffffffffffffffb}], 0x5, 0x2000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001480)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000001580)=0xe8) bind$can_raw(r1, &(0x7f00000015c0)={0x1d, r2}, 0x10) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x9e) 2018/03/20 23:58:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffffffd, 0x20000) fsetxattr(r0, &(0x7f0000000100)=@random={'system.', '\x00'}, &(0x7f0000000140)='/dev/kvm\x00', 0x9, 0x3) ioctl$KVM_SET_XCRS(r1, 0x4188aea7, &(0x7f0000000080)={0x2, 0x0, [{0x8, 0x0, 0x1}, {0xe5d}]}) r2 = fcntl$dupfd(r0, 0x406, r0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r4, 0x8188aea6, &(0x7f0000000000)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x5, 0x4) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1fd) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 75.791899] binder: 10650:10652 got reply transaction with no transaction stack [ 75.799483] binder: 10650:10652 transaction failed 29201/-71, size 0-32 line 2763 2018/03/20 23:58:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() signalfd4(r0, &(0x7f00000000c0), 0x8, 0x800) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) seccomp(0x1, 0x0, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0xfffffffffffffffd, 0xffffffff, 0x5, 0xea3}, {0x6c21, 0xffffffff, 0xfff, 0x8}, {0x7, 0xfffffffffffffff7, 0x4, 0x6}, {0x8000, 0x7, 0x0, 0x927}]}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x15) 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0xffff) [ 75.856484] binder: undelivered TRANSACTION_ERROR: 29201 [ 75.889871] binder: 10658:10668 ioctl 40046205 7 returned -22 [ 75.897925] binder: 10658:10668 ioctl c0306201 20008000 returned -14 [ 75.915693] binder: 10658:10668 ioctl 40046205 9e returned -22 [ 75.922724] binder: 10658:10672 ioctl 40046205 7 returned -22 [ 75.932154] binder: 10658:10668 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r3 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r2, r3, 0x12, &(0x7f0000000080)={0x26, 0x800, 0x9, 0xffff}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000002) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:38 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/53) preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000580)={0x4, r0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) prctl$setptracer(0x59616d61, r2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x80}, {}, 0x0, 0x20000}) r3 = syz_open_dev$adsp(&(0x7f0000000540)='/dev/adsp#\x00', 0xffffffffffffff63, 0x541400) ioctl$KDADDIO(r3, 0x4b34, 0x6) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x40000000008, 0x204) accept4$unix(r4, &(0x7f0000000480)=@abs, &(0x7f0000000500)=0x6e, 0x0) ioctl$TIOCSTI(r4, 0x5412, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f0000000140)={0x7, 0x7, 0x4e1f, 'queue1\x00', 0x3}) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000005c0)=""/118, &(0x7f0000000640)=0x76) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/validatetrans\x00', 0x1, 0x0) mprotect(&(0x7f000032b000/0xe000)=nil, 0xe000, 0x2) r5 = request_key(&(0x7f0000000200)='big_key\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)='\x00', 0xffffffffffffffff) keyctl$read(0xb, r5, &(0x7f00000003c0)=""/4, 0x4) ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000740)) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x8, &(0x7f0000ffc000/0x1000)=nil) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f00000006c0)={r6, 0xe}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000080)={0x40000, 0x0, [0x1e500000000, 0x27f7, 0x6, 0x6, 0x0, 0x4a, 0x132d17df, 0x40000021]}) ioctl$KVM_GET_DEVICE_ATTR(r4, 0x4018aee2, &(0x7f0000000440)={0x0, 0x60000, 0x6, &(0x7f0000000400)}) inotify_add_watch(r4, &(0x7f0000000340)='./file0\x00', 0x1000040) 2018/03/20 23:58:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40020010, r0, 0x3) poll(&(0x7f0000000000)=[{r0, 0x1000}, {r0, 0x20}, {r0}, {r0, 0x4}, {r0}], 0x5, 0x100) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfc9, 0x200002) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000040)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/71, 0x47}, {&(0x7f0000000140)=""/167, 0xa7}], 0x2, &(0x7f0000000240)=""/224, 0xe0, 0x1}, 0x2) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000003c0)={0x2, {0x2, 0x4e22, @broadcast=0xffffffff}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e24, @rand_addr=0x8001}, 0x40, 0x9, 0x27e, 0x57f, 0x6, &(0x7f0000000380)='teql0\x00', 0x10001, 0x96, 0x1}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r0, 0x401845c0, &(0x7f0000000040)={0x7ff, 0x0, 0x4cfb, 0xd39, 0x5, 0x6}) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001280)={0x2, 0x1, &(0x7f00000000c0)=""/185, &(0x7f00000001c0)=""/191, &(0x7f0000000280)=""/4096, 0xf000}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'ip6_vti0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xb}}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000012c0)={0xcf, 0xd5, 0x40, 0x0, 0x7, 0x9, 0x5, 0x3, 0x80, 0x3}) nanosleep(&(0x7f0000001300)={0x77359400}, &(0x7f0000001340)) tkill(r1, 0x15) 2018/03/20 23:58:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000d91faca38432f457f31a7f4ede61d698f1e16855772ffa143f214f4d6d1a53eba7efdc5d8ea27a2a079f6e20c51eafb997619db1a084ab125f8c9d2e1decc6e327a1482bb17d6890586470a697c3d5178d0b190a52bba7a3ea77fd0210008ca3a8f6c25211b5797d50b0b403128544b668d7e28e09dfb41f8fbdc917a1715d08ffc3941ba7b4ead65b73b7203a0500d5aa5a32eb42b1458ee7b769f9a2d252df15d6c96df9e516d102ee"]) ioctl$TCFLSH(r1, 0x540b, 0x20000000) 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./control\x00') ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000040)={0x8001, 0x0, 0x2, 0x3}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0086438, &(0x7f0000000080)={0x40, r2}) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 76.003876] binder: 10675:10682 got reply transaction with no transaction stack [ 76.011441] binder: 10675:10682 transaction failed 29201/-71, size 0-24 line 2763 [ 76.039778] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:38 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x2810, r1, 0xffffffffffffffff) prctl$getname(0x10, &(0x7f0000000140)=""/179) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) getsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000000c0), &(0x7f0000000100)=0x4) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/validatetrans\x00', 0x1, 0x0) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x100000000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x101000, 0x0) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0xb18a, 0x2) 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x80000d50) creat(&(0x7f0000000180)='./control/file0\x00', 0x0) [ 76.072605] binder: 10700:10706 got reply transaction with no transaction stack [ 76.080217] binder: 10700:10706 transaction failed 29201/-71, size 0-16 line 2763 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=[0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XCRS(r2, 0x8188aea6, &(0x7f0000000000)) nanosleep(&(0x7f0000000040)={0x0, 0x989680}, 0x0) [ 76.129157] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.167577] binder: 10722:10726 got reply transaction with no transaction stack [ 76.175210] binder: 10722:10726 transaction failed 29201/-71, size 0-8 line 2763 2018/03/20 23:58:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020013, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x109880, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x50, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000380)=r2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x4, 0x10040) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x9, 0x0, 0x1, 0x10001, 0x1}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f00000001c0)={r5, 0x7f, "e71f8d7c78cb6fe891a48f602299f529506ae7c373fd9612c6aca4951cee75cc9aa55fa4764de9875bf1fbd153d112303a23352b3111b64305e4100465dd7ea17942e2cf25a2d3b9e279062c5d67cf98f4e4ab464b325da10f58b0b0c44e571c5bd2f40ce1628ac9ab3deb3a60a1d0056b08158ab9ec5b6aa5c12d1986ba66"}, &(0x7f0000000280)=0x87) ioctl$KVM_GET_XCRS(r3, 0x8188aea6, &(0x7f0000000000)) r6 = fcntl$dupfd(r0, 0x406, r0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000003c0)=0x0) capset(&(0x7f0000000400)={0x39980732, r7}, &(0x7f0000000440)={0x200, 0x1, 0x1, 0x7, 0x55, 0x7f}) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000040)={0x3ff, 0x6a, 0x5, 0x8000, 0x9, 0x70, 0x938d, 0x2, 0xfffffffffffff001, 0x6}) 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000040)={0x6222, 0x1, 0x6, 0x80000001, 0x1, 0x11fde685}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:38 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000080)={{0x9, 0x9304, 0x2, 0x4, 0x3, 0x9}, 0x7fffffff, 0x0, 0x200}) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000000400)=[&(0x7f0000000180)='io\x00', &(0x7f00000001c0)='+GPL\\-\'cpuset-vboxnet0\x00', &(0x7f0000000200)='securityvboxnet0wlan0\x00', &(0x7f0000000240)='}\x00', &(0x7f0000000280)='./wlan0\\selinux\x00', &(0x7f00000002c0)='io\x00', &(0x7f0000000300)='ppp1em0[vmnet0\x00', &(0x7f0000000340)='./wlan0\\selinux\x00', &(0x7f0000000380)='GPL\x00', &(0x7f00000003c0)='procnodev-\x00'], &(0x7f0000000140)=[&(0x7f00000000c0)='./wlan0\\selinux\x00', &(0x7f0000000100)='io\x00']) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') bind$rds(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast=0xffffffff}, 0x10) preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x27d}], 0x20000000000000d1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000013c0)='/dev/vcs\x00', 0x800, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000040)) r3 = socket(0xb, 0x7, 0xaba) setsockopt$nfc_llcp_NFC_LLCP_RW(r3, 0x118, 0x0, &(0x7f0000001380)=0xfffffffffffff001, 0x4) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000240)=""/131, &(0x7f0000000300)=""/4096, &(0x7f0000001300)=""/51, 0xf000}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x420000, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={&(0x7f0000000740)=@pppoe={0x0, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000007c0)=""/225, 0xe1}, {&(0x7f00000008c0)=""/158, 0x9e}, {&(0x7f0000000980)=""/4096, 0x1000}, {&(0x7f0000001980)=""/4096, 0x1000}], 0x4, &(0x7f0000002980)=""/219, 0xdb, 0x8}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) mount(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='jffs2\x00', 0x2800, 0x0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="077591e8b4d7433f5c9d2ebb0f70077af4f1757dcbf494127d0b20bc4239f626125bbe4e51bc41a549f204d162e9ab3b6408f4de97030cc5f8a32d7b96cbd13c428527e2725c0e4757b7dce2901c8b39f1e402be80575947b0745a4f6d6452a8401b1d20117d62a23f574af9953eee03e4addc082769a6922b92d6580babaf12ff6d039215905aa77a5a6b084dc0", 0x8e, 0xfffffffffffffffa) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000002a80)=0x0) ptrace$cont(0xffffffffffffffff, r3, 0x1, 0x4a) r4 = request_key(&(0x7f0000000340)='ceph\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000003c0)='user\x00', 0x0) keyctl$instantiate_iov(0x14, r2, &(0x7f0000000700)=[{&(0x7f0000000400)="3baf101bbf6836031332bf5f96458216aadbb01282148c93fb936307cbf04b57dcbda0f2eb32fa0132940f94eecb7e45b957e8202381601a9d1e767f4f2c01e3b74dfc60192b9fa20099d8f9b979beb7e3e49dfee7697bfb3bc489c836f4fa061ba18f22caa90cf2ab5635b1b7c6b8d2aaa122e3d9a791a01602dce3db7c4b5b1b99b1799135b92fdeda0246de2ba66e1b452dec30e63678dab4053b3cc0b87eea49478bcadfda1aa3e63a1dd2924e46d4da9bf7fc603bab6e348a1e9cf20ba3fa96d86c68089214011ce111", 0xcc}, {&(0x7f0000000500)="d707a6d8359aa7d131b9fc6ac52bc3a05128d1099a8c61a023e7119cdef3f54a2db056de960ac02d6d761afad46f18ff67acff00e30d6cab23050535c6f81bd5ec2c73b50a7c230c29e13e27d340920e0c96bac6a497e7e985cca676bf3cfc7b6566cb9cf2ae8574d1c6006e3862264f93e0e2da4f544cea25a7d901717d9ad4327a896322d4582655d8941e2b1f892459bbc681372dc3405f910a2662dbf22b2d447420e53734c4f118b0666e58dd8a90c30f765147d922682c1e915ea625c511abe2ed487bfa4a655fc89748c8669b54866a8ac5dd6c044d2aee1d9bf8b35728fa5000c29652c7c6e02cb8f11cb1ac4e", 0xf1}, {&(0x7f0000000600)="15e93a78fdf57f67f32e6c8ff6254ae3903ddf11c15865a1b71258e152ccc198644e0c5f1831f1cdc22abaefad781e633c17372d841df7c670201f85fb79be594909945cc1613df744b82f78af3305e03eee55d3af71fe62ef7a457314346daa327a4b9051cfa2c2672df33a609866bcedd8d6577d52e1907c4cf8ec", 0x7c}, {&(0x7f0000000680)="04a58b648add0d8be8ed937e10602bbc683119eeefcda3dd5b00cf8b31d96ca06d299a7fe13d8f29690b547ec165", 0x2e}, {&(0x7f00000006c0)="03967793b9414fd45b256d2d2dcb3e8209011513d06a2fc624acbffa5d235bd04a1af79674c8393c064b9410aed326a8c9f8de4e61a699ed66f9a1", 0x3b}], 0x5, r4) [ 76.218414] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:38 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x40, 0x10000) recvmsg$kcm(r1, &(0x7f00000024c0)={&(0x7f0000000040)=@sco, 0x80, &(0x7f0000002480)=[{&(0x7f00000000c0)=""/104, 0x68}, {&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000001140)=""/18, 0x12}, {&(0x7f0000001180)=""/231, 0xe7}, {&(0x7f0000001280)=""/4096, 0x1000}, {&(0x7f0000002280)=""/140, 0x8c}, {&(0x7f0000002340)=""/108, 0x6c}, {&(0x7f00000023c0)=""/147, 0x93}], 0x8, 0x0, 0x0, 0x7}, 0x40000000) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:38 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x9, 0x0, [{0x8000000a, 0x4, 0x8001, 0x3, 0x9}, {0x3, 0x94, 0xfffffffffffffff9, 0xffffffffffffffc1, 0x9}, {0xc0000003, 0x80000000, 0x5, 0x0, 0xff}, {0x0, 0xfffffffffffffffd, 0x10000, 0x6, 0x7f}, {0xa, 0x5d, 0xa2, 0x60, 0x3}, {0xc0000001, 0x9, 0x3f, 0x7, 0x1ff}, {0x8000001b, 0x15, 0xc15, 0x7ff, 0x7}, {0x0, 0x2, 0x4, 0x89, 0x1f}, {0x80000007, 0xf2d, 0x3, 0xffffffffffffffff, 0x9}]}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x5, 0x3}, {}, 0x100000000}) 2018/03/20 23:58:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 76.272888] binder: 10733:10744 ioctl c0306201 20008000 returned -14 [ 76.279795] binder: 10735:10747 got reply transaction with no transaction stack [ 76.287358] binder: 10735:10747 transaction failed 29201/-71, size 0-0 line 2763 [ 76.308832] binder: 10733:10752 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:38 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x7fffffff, 0x4) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 76.349176] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.384167] binder: 10767:10772 got reply transaction with no transaction stack [ 76.391756] binder: 10767:10772 transaction failed 29201/-71, size 0-0 line 2763 [ 76.428106] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x58, 0x800) 2018/03/20 23:58:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1000, 0x80) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0106434, &(0x7f0000000040)={0x7fff, 0x0, 0x10002, 0xf3}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40086439, &(0x7f0000000080)={0x4, r2}) socketpair$inet(0x2, 0x80e, 0x93, &(0x7f00000000c0)) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:39 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendfile(r0, r0, &(0x7f0000000040)=0x4, 0x7) tkill(r2, 0x15) 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = dup(r0) getsockopt$ax25_buf(r1, 0x101, 0x0, &(0x7f0000001480)=""/157, &(0x7f0000001540)=0x9d) 2018/03/20 23:58:39 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000000240), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) getpid() r0 = getpgid(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000300)='ns/mnt\x00') renameat2(r1, &(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00', 0x4) preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4) r2 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x2, &(0x7f00000001c0)=[0xffffffffffffffff, 0xffffffffffffffff]) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={r2, r3, r4}, 0xc) 2018/03/20 23:58:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000080)={0x8, 0xfffffffffffffe00, 0x5}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0xb, 0x5, 0x2}) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) [ 76.581425] binder: 10787:10790 got reply transaction with no transaction stack [ 76.583722] binder: 10785:10791 ioctl c0306201 20008000 returned -14 [ 76.588985] binder: 10787:10790 transaction failed 29201/-71, size 0-0 line 2763 [ 76.617625] binder: 10782:10797 got reply transaction with no transaction stack [ 76.618828] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:39 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {}, 0x4000000000, 0x4}) 2018/03/20 23:58:39 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x401, 0x575c, &(0x7f0000000040)}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xfc, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 6: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fchownat(r0, &(0x7f0000000040)='./file0\x00', r1, r2, 0x1000) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 76.625175] binder: 10782:10797 transaction failed 29201/-71, size 0-24 line 2763 [ 76.667667] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.670125] binder: 10807:10808 got reply transaction with no transaction stack 2018/03/20 23:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) timer_settime(r2, 0x400001, &(0x7f000006b000)={{}, {0x77359400}}, &(0x7f0000000080)) r3 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0x10000) ioctl$ASHMEM_SET_SIZE(r3, 0x40047703, 0x7fffffff) tkill(r1, 0x15) 2018/03/20 23:58:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x400000) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) [ 76.680708] binder: 10807:10808 transaction failed 29201/-71, size 0-0 line 2763 [ 76.686186] binder_alloc: binder_alloc_mmap_handler: 10785 20000000-20002000 already mapped failed -16 2018/03/20 23:58:39 executing program 6: r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x3, 0xe6, 0x6, 0x400, 0x9, 0x54}) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bcsh0\x00', 0x0}) prctl$setendian(0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', r2}) r3 = pkey_alloc(0x0, 0x3) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000800)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000900)=0xe8) lstat(&(0x7f0000000940)='./file0\x00', &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000a00)=0x0) fstat(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getgid() r10 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d80)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@dev}}, &(0x7f0000000e80)=0xe8) r12 = getgid() r13 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001080)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000001180)=0xe8) fstat(r1, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000003980)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000012c0)={0x0, 0x0, 0x0}, &(0x7f0000001300)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001340)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001380)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001480)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000014c0)={0x0, 0x0, 0x0}, &(0x7f0000001500)=0xc) r22 = getpgrp(0x0) fstat(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000002b40)=[0xffffffffffffffff, 0x0, 0x0]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002b80)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002bc0)={{{@in=@broadcast, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000002cc0)=0xe8) r27 = getegid() r28 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000002d00)={{{@in6=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000002e00)=0xe8) r30 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003100)={0x0}, &(0x7f0000003140)=0xc) r32 = geteuid() lstat(&(0x7f0000003180)='./file0\x00', &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r34 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)={0x0, 0x0, 0x0, 0x0, 0x0}) r36 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000003300)=0x0) lstat(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003400)='./file0\x00', &(0x7f0000003440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f00000034c0)={0x0, 0x0}) lstat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000035c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000003880)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000300)="865c5c4510c3a1f899199babd7cd9c88b1ccc7a7ac8708ec0a09271e216cb5eb147b8f14dfc2cb585aab8c9ebd29c96e12976e6aa4af5e554f2d638f40cb7f0b714a0ff1c68b53e9f9fd4cef13ff9a706a71a3aec95fcc7e094fd4ab4388d715792412bf9b6afe8915bb61af655cf9d147b45ddd88e05d5a241c686020b0705b1887703036ea2a7506a45da9064b24238984f26df40a2f1ed9a8af3af5b0b03796fee34ee856a71af65b6a13b698c65869b2a0c9003cb83bd38322062650bccecbe8a91096bd7ce0e90a4cf4ae95dfb7e2b2d1e94e9bec39573e625a10c3c4aaf198c52314b30f8864491c77af4b69faca1d694665921f8d7900", 0xfa}, {&(0x7f0000000400)="11d351ed4bbd74dd09b4f0ce26c5e62bab75d8ab6a01422e2b5afa5e967904977bd353d0b7dddccbc026b2c2ba92778babfa7be15ee01f4d9720824b819c763e5c60cb45d13cd98814809829cf1e4ba32e41273d6ff479c9f4b2a328ad9aeb3e3a5bced12e430a60c5802a31a836ecb89f47948c530e103ffae91dd6184cfde34d7206e678cf43059c1d528930c2ac5e9edd88c62a045864165071a65ea195d9f04919dd1de1efec7700f93af1e4b5ebf531e3f37e347d8a42a55fdbe9b52d3a841f70243b0dc407c2f6e36632f25fb97bfc8607a8d66649b666e15e3afb00cf4117b54e83f50c", 0xe7}, {&(0x7f00000001c0)}, {&(0x7f0000000500)="ce1feb2c4d7134378e779d93b55ac6188c5e6730429c11eae18c1779dfe22694be06567e6bff90f745d4c30ef664220b14f8f9c7c4ceaf33203170f1f03a4da97baf4407c2baf497d2e3336a9468c706d71d181b26148c0bf51559590bf31be9314390b02f9c784708a157f35b0278ceb856b3964d4e4b3cae99cb3a8a8d96aa3c414945c30bd7e47f9ef6ebb7e7ce6d353bcf550e245433a808e322f001c6427781a5ebbb0d17e0197de639e7b5fb72a1b69352ed2a1de9f9103af61fef6a3a6ba3ab91a9d88bba834fc18fb94c447f028ac690f873cd465d1891f419f4402e74964b64", 0xe4}], 0x4, 0x0, 0x0, 0x4084}, {&(0x7f0000000640)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000780)=[{&(0x7f00000006c0)="34e1dce80298a5071b663b3fd2756301f59ea9be77cf2522fe216bce8d5aeb7c0c01e00fe7c97be7db636954942de07a1b9b626842285ca4bcbb5fc32d7ed3a5b4e002f41e45ee7659ae6716d203593f8c268701ba119f18867e9f886aa8577f47774f6b213990ca727e87d5137f9fbe9d12a963318f77c102ee6692c51634fd10f247f57d3ddf41c226f7a6b0dbfa65e487f440b545e0c0965fa79b5d", 0x9d}], 0x1, &(0x7f0000000ac0)=[@rights={0x2c, 0x1, 0x1, [r1, r0, r1, r0, r0, r1, r1, r0]}, @rights={0x34, 0x1, 0x1, [r0, r0, r1, r0, r1, r1, r1, r0, r0, r1]}, @rights={0x1c, 0x1, 0x1, [r1, r1, r1, r1]}, @rights={0x14, 0x1, 0x1, [r1, r0]}, @rights={0x10, 0x1, 0x1, [r0]}, @rights={0x1c, 0x1, 0x1, [r1, r0, r1, r0]}, @rights={0x14, 0x1, 0x1, [r1, r1]}, @cred={0x18, 0x1, 0x2, r4, r5, r6}, @cred={0x18, 0x1, 0x2, r7, r8, r9}], 0x100, 0x80c0}, {&(0x7f0000000bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000d40)=[{&(0x7f0000000c40)="201b0740ef4502aef1f6462916a1cc34b38e03a385bc089bb52d318bcfc70f2974e471ae40e2d9708d13954beae23323d5fab45553c42780c062e0fe0949b271c637067bf5564f86cc6a00f324281490817bcfd4314a51f5a3e926fcdfb3100822a7acb1f78e85a38573b1627d8e19d1b5458a98ecac4f3cc9e6b6e14fc1045483dcdb60151c1c230d46ebc3bc9a066d8828112be61b414a", 0x98}, {&(0x7f0000000d00)="b89319af7bae1f81f16361", 0xb}], 0x2, &(0x7f0000000ec0)=[@rights={0x1c, 0x1, 0x1, [r1, r1, r1, r1]}, @cred={0x18, 0x1, 0x2, r10, r11, r12}], 0x34, 0x44080}, {&(0x7f0000000f00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000f80)="6feb774e39579044b1f440cd06791d479913d81654b633b1bc61b92979c17923102685ddbb5b", 0x26}, {&(0x7f0000000fc0)="0c192c6fe0585b3a8fbdb524d58f1a54b69c34264656a0c35093e8d0ad4cef14e8a8ca8aa1d0367f5de6e4cb86296e26f5a6143e47c3630e2c84b8d49811acc411b0cf1e8df81875bc841a120be7544b858477a060eea3b3ce", 0x59}], 0x2, &(0x7f0000001540)=[@cred={0x18, 0x1, 0x2, r13, r14, r15}, @cred={0x18, 0x1, 0x2, r16, r17, r18}, @cred={0x18, 0x1, 0x2, r19, r20, r21}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}], 0x60, 0x40000}, {&(0x7f00000015c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000002a80)=[{&(0x7f0000001640)="56f581b38558b76100459a0d4a6a594319f91b39a9c950e17ca41435214d276adc9b92d88cb6a47124e564fc88a94f28d535290d8602072e1695df42d823a2614c7a21d768de6b4f1bc9ba828908f3ed27529b5241861b19414122adc01586d6544b86cad4d315620e563ec31da2d807f01dbed21e24091c5c63b84fb4cef524a256eb30d6a3a92313f2b1d36ab5765bc20261510653cfef41620bc58c2f187bd334fd43275cd146a1b95f83e9d8e9a3b239701c9b6d771e82", 0xb9}, {&(0x7f0000001700)="81a495edc2b14d823257ee32cc5aedcf4dacc5283b39213f0d4748b41e09241b934d821d6d3c1e0c716a64c3a36f07bd6013f87e761d86cc2fafecb603065caa14cb38a77a285ff391333a7fa30ca1d705b4efdb48dbf7", 0x57}, {&(0x7f0000001780)="1f6dd6f937956ccaa314b929a489daffa01cf9bc578eae7267dad9c2dbef15fd8bb22590e8731ebc8dcd5a4369a33ca32ace9b1b072ce995758ae0031a75f4e3518bee91d5f98516dfe2150d1a9732f3ad7b16d9ce6617b1c715cc230a7b92dc6b9823a84ade038ab2328b80d27abe8e089d82ef0127eae2bedbc49b38", 0x7d}, {&(0x7f0000001800)="ae94e4d02ddbe88ac3802ec6272ae19059697c105409546ef31ad7b59cf27494ebe6da2b45abf449eec6a4dd242e61829a71637616b05243c296ca2efafb705cefd5ff0cce2fa88b1ac314640289faa6170d6358cbd8d90c6185cc779d5a7722c296ff0eed7d4f6b2297552d2acd696cf51c3582580b4b37594bac9933f8063404e79f805056363f57422d6c62817bb647201390dfd380c1e42e7e3727ba", 0x9e}, {&(0x7f00000018c0)="bed1e12acc5588ba0bb1af7c6869302fb2d31ba3599163c15f60a5b76d90de14b41b49aa90d1c11cdf8e6c4436f89c29793b08ecefd76f06d08139262e0635d0dcbdfe5c927de39b38feef7fa8be9d531f930f09488dafdb8c33015a60b5fb87459010cc9985e06ac306603d10165ab9068dff33ebf7966b14cc731bee79c533d1e0859552962c012e08a0ae09e8793e69befb3c399be9b766909eaccd41ec33a1bf7b7fd27a69a2f7908beed150e6a032937e2220c0e07bf5d03a6f2704ea4bad6bdd529a2de39e99919d484bd157bb491e6746", 0xd4}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="4bb1c17c515ae64636b01f2d1ee38bc11558fd40404a7444b98ee5f3d8abaf00ee623d7bf4428911943a90075254f9c13d1b95a5eb6082be2497", 0x3a}, {&(0x7f0000002a00)="b70acee7a387ab8a404792fd439fdfce144995c4e5d78d9fa10de0110d144444e7ae6573d48d2d4560619983b5e254313cf8c9cdcff80cedb3aa11512ef2fc9428e6fda375810ea5c8c7b02a64fc85099ad32340390dfd785d7ba84b0c0482c3526b35e08fe472363fe2e61b0ec5699e7dc348c27c59dd62bc6ac2375491", 0x7e}], 0x8, &(0x7f0000002e40)=[@rights={0x14, 0x1, 0x1, [r0, r1]}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @cred={0x18, 0x1, 0x2, r25, r26, r27}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r28, r29, r30}, @rights={0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r1, r1]}], 0x98, 0x20000000}, {&(0x7f0000002f00)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000030c0)=[{&(0x7f0000002f80)="ecbeefc5e1962d0e60fcf1d035f2d9732e450155e6daecae403e00a7712deef5d8bc8fcc4daf075c72d6ec911aca7a279dcb7f9810315f041aea0d99ab1086b5864875a6344934b173b114a8c107963ba019022d919728b6ca19bbff335ad74a0c991371cbee9a7ae7a071868afe7a346785e0da3e382df6c0e90829addba8250ca721f5979e8d06f6ab46f470d074d985a9cbaa02846f2223af342801553e3f799d758e78f3838dfc642869500825ff2b0a398cd24fc9c794762b6af676f4ae4f29ecac94a36273523b696effd2d4ae07cc19fe0b1af226d1", 0xd9}, {&(0x7f0000003080)="ce1714829626d15c4a43f85752d30bdf06cc8d84fe37a7370193cae9bf357ac3a818394897ab8fadb3e8a8c1167f3025c6a9d5c4297d746a", 0x38}], 0x2, &(0x7f0000003600)=[@cred={0x18, 0x1, 0x2, r31, r32, r33}, @cred={0x18, 0x1, 0x2, r34, r35, r36}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r0, r0, r1, r1, r0]}, @rights={0x10, 0x1, 0x1, [r1]}, @cred={0x18, 0x1, 0x2, r37, r38, r39}, @rights={0xc, 0x1, 0x1}, @cred={0x18, 0x1, 0x2, r40, r41, r42}, @rights={0x14, 0x1, 0x1, [r1, r0]}], 0xc0, 0x40000}, {&(0x7f00000036c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003840)=[{&(0x7f0000003740)="8e2a9fedf0bd6394fc8fce7c79abeb149f7ba321c663c4d6a924985278f8bf5a8b1876b4e3aed1519a97cb961b2d563c72d86554ac79a815cfee1d92df81fe2e2a86e6c46944f3f90cb6b99000fd640a8084050d37f8cf49651a8d69d75a4f057134db5088bdb31b0e6ea4800860049120aca415db5d7affb297046afae91ace38b19c0a5a5b07406d0f1b08591d7604fd5577bb80b2c3760eac3f94687369bd59f9b80a488c753e24da7f75e30830597373f7ad154f58eb52fef3da92bb3e46694bbcf87a698b2043f0b85a65c9abecc6bf42a871e1873273ad", 0xda}], 0x1}], 0x7, 0x845) pkey_mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000002, r3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@add_del={0x2, &(0x7f00000000c0)='rose0\x00', 0xfc6}) 2018/03/20 23:58:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000003000/0x12000)=nil, 0x12000, 0x0, 0x8000000040020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:39 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) open$dir(&(0x7f0000000100)='./file0\x00', 0x20200, 0x0) 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xfc, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) mq_open(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x40, &(0x7f0000000100)={0x2, 0x7, 0xfffffffffffffff7, 0xfffffffffffffff7, 0x2, 0xad, 0x67, 0x100000001}) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x7fff, 0x60101) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000040)={0x67, "d20405d299560f6d5ea0da61d2f2e3b6cf9d2cf4517e282394494c0f2b6dd75f62f2a4734bb5e61ddc8d23024e592f4e8b8a9cecad5891f1bd5f4da03f12c131232f97960e6b7df55be6de2a7f965762cd59372f85587cc3520003e05a392306d15a8e97ce7540"}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 76.729734] binder: 10785:10810 ioctl c0306201 20008000 returned -14 [ 76.742612] binder: 10811:10818 got reply transaction with no transaction stack [ 76.750187] binder: 10811:10818 transaction failed 29201/-71, size 0-24 line 2763 [ 76.765044] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=[0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 76.804007] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.814888] binder: 10833:10838 ioctl c0306201 20008000 returned -14 [ 76.823266] binder: 10831:10837 got reply transaction with no transaction stack [ 76.830809] binder: 10831:10837 transaction failed 29201/-71, size 0-0 line 2763 [ 76.847511] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) init_module(&(0x7f0000000000)='trusted', 0x7, &(0x7f0000000040)='/dev/snd/seq\x00') ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair(0x0, 0x80003, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000380)={0x2, [0x5, 0x2]}, &(0x7f00000003c0)=0x8) listen(r1, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000fd1ff6)='net/tcp\x00') preadv(r4, &(0x7f00000019c0)=[{&(0x7f0000001740)=""/255, 0xff}, {&(0x7f0000001840)=""/171, 0xab}, {&(0x7f0000001900)=""/187, 0xbb}], 0x3, 0x0) r5 = fcntl$dupfd(r0, 0x406, r0) ioctl$TUNDETACHFILTER(r5, 0x400854d6, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x800, 0x7}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000480)=r6, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f00000001c0)={0x220, @time={0x0, 0x1c9c380}, 0x0, {0x310fd824, 0x2}, 0x2, 0x2, 0x1edbaa78}) ioctl$EVIOCSABS3F(r5, 0x401845ff, &(0x7f0000000200)={0x3, 0x7, 0xfffffffffffffff7, 0x0, 0x8000, 0x6}) renameat2(r5, &(0x7f0000000240)='./file0\x00', r5, &(0x7f0000000300)='./file0\x00', 0x7) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x4, 0x10}, &(0x7f00000000c0)=0xc) bind$ax25(r5, &(0x7f0000000180)={0x3, {"983c1e9b860381"}, 0xc39}, 0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r7, 0x8}, &(0x7f0000000140)=0x8) 2018/03/20 23:58:39 executing program 0: r0 = inotify_init() r1 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0xaf, 0x216400) ioctl$TCXONC(r1, 0x540a, 0x3ff) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5b394b4064b7dfd) setsockopt$inet_group_source_req(r2, 0x0, 0x2c, &(0x7f0000000040)={0x2a22, {{0x2, 0x4e22}}, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x104) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 76.853840] binder: 10840:10842 got reply transaction with no transaction stack [ 76.854062] binder: 10833:10844 ioctl c0306201 20008000 returned -14 [ 76.861431] binder: 10840:10842 transaction failed 29201/-71, size 0-24 line 2763 2018/03/20 23:58:39 executing program 3: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r1, 0x4018aee2, &(0x7f0000000080)={0x0, 0x401, 0x575c, &(0x7f0000000040)}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001480)='/selinux/checkreqprot\x00', 0x30102, 0x0) sendmsg$alg(r3, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="eaf50fd54e1b3e7d7da1cc08663c4393dbba3b8d82be1eb7c4dcfbf5a12b2fa31cb7c57dd9f7a1fc61ed70c31863e0782cb025c9a2ec25078f4e8225cb3f0e3d72efab7c4b5b1fce2f992ea151cb10d6b437bdc6f249accb634de16daab28df175d91b6f83da07ef146d63004499ac87f6fc9e2335e1905154eff451ee1d240aaf7f94c4ec905541a450964cc175f219958e2625f0954a1a9ec70d839a51260a05e293af469beaf906854bcbe54f5dfb0fd11329f6bce1c86d3c68c3796fa298e1279c02e49aa10b0b6e154e20fa61d4a0eae2cd9366b9133720830b195f9be755aaeaf23c59e31a2a58dc69b9e874ac28f301ddbf92d739659b3bcaa8b4799630c528d307e79535a935c4a7cfc0470e625657b64a750d0ce3507444ac909786149d8ee4f32968f4194207baedea87dfac6fcd58cb19d57c45d7dbb2544af8e76f3a45e011b5bbc3f38adbbed50d9dc68df2806cb1bb144890c6f67dd4b2771425bc48c5743e1a5ee641d7b708b7794b2ec1c13e6c8317a5bdc2f8e978fc38bae179eceb9a98c7ac99712249ecd6833dc70501ae44c1e3e3c0ec7f13580d7b785541d04299e17912c73951ff461e359e2939c65df9c372fe5ceda16d189e86b32dcf460bc0075900d3312ad1c0859f6cdbc3536fadb364f35deccbeb5749642ce54acc5cc43cf8c59f6b8c6ef2480da3aba1cbfa1fb0646692cf2df8e4eef0d89b3a14af89961627f92aaa3cc29eca3f1f199f80b187487367c892ea1af1841063a9403f2cb648b077914992c34fcab59b1f31d428815a7121233997cf626af5ca1d66a561af14271adea9da1bc0c35d085924cafa304e000ed7e01276f0b188bb9dc7cf87ef3892e95cce5db9184552cf6049ca8392f5df3ae13778e3385b9502f33e9a360d7f78922d86114d5975646a07428ed7bfa057fb1b97ee88fb13f62d73824c09648f127cee8ed1df68e32faf1207c28c46addd60a9a6fbb2d40fab7844a9493700b2876cbfede507c5257dafcbf27bec5059aeefc88218eee4904eeb70873fff03f40944f3398d614a62faba0c70bdf20e56978cadef26c0195213863e5111950aa96becde9a134842e9ffa9ae640a6c6a5e836461ed23ac6437ab66bc1b841b539254e17c16b2e57cc524fb4676d4a5e6ca80d1fb9c63f25f36205f86116e2d0c9b85c9fe8df37f430e92e8cbfa263839e879c255a8518f9456f423302c2cb19066f735d37fb0d3bdff14de1253124495fb1ce35da17bee509e5af05e453cf4ec870f22429c25626a180705d04c0ab40b89c44f6ddfdb5c4641e49eafe75444938293e2d7d96cfb26c1a1e8addf33071eac20d9736b6383577d09ebf8d87c01a7a4931f3761aeb32b1f3e6d398315cd4ea56f4965a966e2408007f69bb78c14b4fdf22012116fee72215754ec1fcc01e3e6b4f5c307919adcc3b83b8a4f099e6b211ed0deac3545f6b87c4c4c9b4ad4080906598d4cb3b1cff516cef0b92412c66b32b58e33aea94bd0126eba2bc9377f47ef41ad686efb49a8aa6ec7a23b109eab69eb5d698fabff03e1c12a80311e92732e54f7f771e16f1ba9cdfc7b83bc4f61e1a46c926bf059d3760dc2b1deb3f903cdbfc8bd99a157ce63bd1f5280c88c4673ae2cf065cab9053a7a22326ebe4f5da9335bd96b87cd5fe2256c75aeb9c833a3a3f948fb9b20a3493ec379e1849293916ac2e9505dadae7c3eb07c672340b1967ca8d0257bc9aa4c6a35c35b0ff686df7456b045e70ec12232acd3b9224cc7379dcf76f6c057a5ea0e392a8f4cb40cf80eb7009a6a02694ecad639293091f562a38495e7f97e0c72ca434ddb504b4981c877d95f0a54a230c0f596d34a878f75c547735379d74da5e2c16ca6756b755afb37a62292399abb83f6fa2acc2c888be37a3ac9b95e4462b7df85944967363816da842aa9fe128920123c163bc8fe5f0cef0a40b4ca6fc5583207e8ee1ad2c54392903ecf27053a322947cd31464ee54ad67aa216667bcaa934f3f766920c176e4b90e2c401d965c08b90607b59d426a7c04e59af956048ae2092ade7a242f5f94c4ad78ff214c6796bef2b72ea8ac965e972bd0d5dc18d8e92c2c0fc1f5d94f41e24bf751a249babb072b7489606a821107b12afff16c6f27eb688c5ac1116a57dabd33c013b449af68d6e22cf47eed0e824fcc02ca451fca90a4148dcb2cfd50fe7193e7787f86aa2bf4e82f4de68b929268d8a29920f6a440b6322eff7d9da6eae5594f9de4341994d805a725e956d0ca79595b490eea8a2c2fb0eb2e07e4fea0bd5a57c1680ed06e823006b850716c310c920627a5fd5bc5c111e45ce57ed59a3bc0faae03eb5125619ae594d88547640398aa03a73f45df27f4c79368f92b24575ecbe10ea924c6f039611fcf875d8da3be2c8e29a8f40bcaff2ee88291e9f3230c9cb3f2d4429a44ffc4884e6628bb73a31636822892b49a32575b74a9122831314dcc07eace0128b4d42920bc1e483ef787b549ebddd1f3006a53f3904fa7c03e00fe23b32672c7050f850b50fed7846f3df4a7a0714d81201b660b2b0ba3881aa6ea8e20278102d82f9732e77a63462e2e9c4f22d2efece4509d353bf696f0d9b4b4cc4bc3efe2db0e92795a951656eac39e4ed7d6b289934676b6c4d6ea61297fe035bc5e2ccf28d03148403e4d20553b1efe0c33ae1386f4aed4e7ef0221a1ec2923b546b8fa798aeba949f60ad1c945c4fc2ff22b8cc8523b448c0fb99d372245cbd6aee88beabd5041a0acd7bffd33121c8c917e1b96acd4913d3f902843af55103adcc57f877f04e941829dfe6fa399098604b119369cf0ec778f3ca8662369d9a4bd1f87bea735a02200cc5997a90a76ab2a0d8781e5a59015651c748f051e0142a4e3e9a8adbcce7fa53542b994057905cc515141292ee49015ac5083807a6c4e5f73f4afd8b80c59c237746df6bfc3775c4390d4ce08d674d9b65aa7d07846fa29fe546654cb1f4643b7c1e0db1123e4372c6c3dac200cc125424a16fe87d7ee30bda4b687c553b54716b673e3b50ff04cf2414cf3fd2ea93eafd107cdba95a838389642d4eb2a678a47dad44b1d2fd7f5fcfb2978f8795034db6411572a0905c4da2133ee3b9225567902e87031305602dea96718c54530415a3217ce9b10eceb23be224f0d460d7e3c323e6b45427bf0add763d46483bedbbe6ef91db7746aab664c0edb757623eb92d54269caa91f83e5045f42103edb46682b2578a7b39b721a46f8a1a53ceda318caa10d3ec7055e6fd30881204ea862c831df6d86e9cba0014125d977951d5b895f66ba02a30f02f9b64c0b5d512e81f378b229fe9a8178750874fdfeb4e4bd08bdd25d1a6424dc1cfececa485b6efe13e5c2eefed45a670e317bc2a7710b98b9a1880ba628592bc1ddb01c92e06f58cf315d6e61e527815fca70d426e4a90c74de0fa40cdd7888252cf6d01a27210e7b219f890758e3b7e8d7f9bbe2530e768bb637af95f1efc84e6d67baa4f0690fc79282c8b5ed8e72d1f779a86105738d61bf7d36bca7549b0ebaa2c113f5350f9fee2e579f0a9934fb17624f8dae79c9ad87a4ce09d77686383e9e4a1ff175dd78ca079835a157f81fdfb1bf93b0dbb306555e37952455098da0f3cd42e26c8dcb5c79f61d6993cacdf7521d6a71d1365137d568771cee7cc937ee26c5ef2449f3ff72d093b7501e8ab86d71bb7f61eadb9b11cc90a9c49f0006ee1a9e042a013187b2e06e5d0908b5b59c7b88b7f09430cd79c86804a0abc84f6aaab74786a7e93d220277e487cd1061a67828fca2a6cd2d280d21d9317b22349879ba9bbe6f572cae87fb070766ec9b71b1ff506ad8d06c0cb0bceb901024268429c8b37850c092b4bf8784329d7cf4f52d0e5a478fc63b7647c8b63a70c41efb76d70a34136e798d27dc54ef8d21419f9dfb8b7f8cda74293b876700962014906ab8ede3452dcedecec71fac40b76c1cd9dc4557fee0614a38c88ba426a186e886f4d40235f51e13f958721f78b7bff001134050a8cff9c7bf48995a31a221cbb691295d8f955a459cece1b854c8c80353ace9dab71f46693d89a34b3522e9fa7db096b5ca05f103c9702c1beed608a883478ba732dbe284e1a763bb78ebbe46ccba312ac8c6103b00b233a4a1fcee28d23fc49310075ff734a586e771835c6d03c9477ea61f8f5726a7b351b6739732872eaf58b71d2989b8ec1fd31465ab55ba0d5e5e7ebe935afb8507529e519fe92b9ac45c31f248ae5ae7d0aff46b2d11881d7db306b11399e83cf0379a4b34f3126b8006b8f16e2d9a0544ed14aa1821a9b51c99faae69fd20946b2ee97e29d082bdc7546f0b657e74c0a6e7eabe1f26c1ca45551f816329f02656fe862e1b3f498c685173e56254d0a0ad1d1e335a7103f6484ff086ee5156c9d1ce4559047159650ae30b174a185f745377e0836712235522c7538116ee9eded1ab5b04e4999e2e8c49cc2f6438a8fdc535999fc9c5eb65b419729f45d8a24b3b3e79604ddba13e9b778bf0ab78a21d90a06dd9db14eec1541e970f7a308afc05a57229e0de18732b225a31314bf7c07c4261bd51a1c09b48a09a4ec019e815f52888da0226ee720de29f4c386bb2f035b31aedbc3aa063217c457f244b264f6fadc06611a53a84c0148033e920cbb17e7b69cee3aeadbe19ef6de5aff618910cbbc9a01bca210a2ff56a56ab1aba1c248b530ff253993626181501c014f5f8f34454efa34c251c11c51b4b07aaf2a650c7c29519920653c08bbfed728a2135903a3e6fd2f87c9f75c52a64a019d8cdca77fe69e96f3a37585010c9f608ef7f10a42f5ca030ee68ad11a7b4cb5fb71a82f84ce1fd6b9e6220c24eea436d811b0d4ded598fcae93bc65ce97c5705213b957cd0ab3c046cca8c2b1cd646386593d5e57935ed3eb1d89c1b3ddd78b7ba3e373ac86c245e9eaf38f5285b44facc23dc5b186a65e4f95c428b7c7cc3b1b15bd16e144720cee11facc6b8af77491de6a4d7a009068e7a75064173956668e0ad36e1212cd3156e71f366340f8b0fd87f1324eef0f17add5d06d10c876f68e2287421117505d5d77f58aea3fda1a6afb16ec2dce2f91dfe5d82681a5da01b0cc6a8f7bf81f13b69a2df28862ee4efe7f2edfb12f7982bfd866a898d2e1b0c9f7612a4e456917cad892960739461d0be43fcb3e6283a6c1cf18bb76b76386ac99666fb623e73620b33bdbca31aeebb760e190916681146e7f6c3a4b7a13f140e3e282b8147ca93c1318bb6e3c7ddadcf0309eac5d51c857977bd873256fe95acc90bb668e0480083d49fff9c54cc07969be9924facf5b28d1af8f5249c83ede8815975ead230515aad65c51ab25575fcfc8a5ade5212c1fd7c8728c754282956ae9702b18b1df54fde839d50fdd5f154e642a90b120afb9899944d97655b82d044b174e240a2c21625fda11fdca1478ed7510d0b139be457e561e7faec696496d57479a0892da9811fd9d7d73e98c66a6c74695dc1272bb029c75f5c7f5fb0a1566e47ca06a645ea1775c86f2d1423adac21dc44f020b286dd7e83c72ebf1becd2df4fb3d87bc3924319a0b92b9b2e63ccdacbdb158aa88e2cf8c907aac5e161d6d5dbae300a179ab88283922a3b60499e68668b543037233706a61b93e1a67b897af844bf4456bcc1c7de41285fde14bd6d2b130911367930f647a467a47322298426844d088424bded37df67fa14f8f5cf36cf7aad198d110a4f3161b776a192795af60a568f9c799793ff0d8c8dcd2c941", 0x1000}, {&(0x7f0000001080)="eb9cfddebf9b17ac9a5802f9c210b053f7099aac19ecca8dc6017a6bc9fd9df4835ac2e58a17a1de38e6293504565442bd27d03f4ac1a977225875b3bbd1482b707a81e97614d6d4da78973914d959630e695adb3800b5ee78f282fb47b5d38bb717392f0e8725fde86064c11cd43514ad60831df7c228178c56edd4b95ac22bcf66a2124ab23fe694", 0x89}, {&(0x7f0000001140)="50cc48a4ddc40f45b5d458ef7fc8aadd44fc1f8d3366bf7adf5420fa1ad36cad66c334ccd1cd0ddc05ca78a4a7d649ffa683d51108f1b614848792354898329647ba8cf69967b2c6a26fd996293232a713b32aa9e9583f08ae85294e90e8bf8432111408e9a0e6e4b08d7ee171f1f8679ab8d3f30129fcff759f0c9faeda32", 0x7f}, {&(0x7f00000011c0)="8e2fcf0809f4da47ddb961636d14c1c193e70b80ae1fdb493b6b3692cba4898f0328abc0f998049842dbc3c73598b6f2dab13b766fddfe99b1d736ebf9b8c35f24e6e9f90bc5776a224b24b433f0c7fb63a58a7912c7f2f42011760ba6a5f7ce1296d9deb8d87998092085ef", 0x6c}, {&(0x7f0000001240)="4dd9d1ed866ed3f3ded93c7671efaed6c4441c5463550568789fafc8262973fa1046976225b74f8011e12aca1fe57ad2bf442879bff797c460f13cdb12cc5c0d4670848884cedcf57ab4ee07ea8f9994172c9a7f1399c42bdb461e9325effa7f", 0x60}, {&(0x7f00000012c0)="f3783d4e43ef94962f00534288485015716d0ea98bd2eb90d6be4bf146ed596ab87aca4bed131a551bef37208b58b0fe4a3d1fe84694c81cf3841e24acbc7d6b3e3f60611c7088e9ab58ffdbaa9f365a03fb2bdb09f16bb91db861b5341b34e683701f", 0x63}, {&(0x7f0000001340)="916a153d36f2de3ea0b2dd888912e1df68a49712f1c80fb4d58a8ca0286fd59508a3370639f7be0c36e9890c14f88282ac740be1ea9f3c0d2111c0cbb08a5c387abe03afabfebdd53b965130262f4495a332299be5ed9347238a7f16647fd4d08751eeb3869c01a20a332520f0c53421aa5c49e1e0b897d7fdcd07f9fc05760fd0f36f7961d8fb2cc0ce6345b99d322e6013", 0x92}], 0x7, 0x0, 0x0, 0x80}, 0x20000000) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:39 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000280)="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") ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000001000/0x3000)=nil, 0x3000}}) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000080)=[@flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 76.900863] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.912880] binder: 10846:10849 got reply transaction with no transaction stack [ 76.920528] binder: 10846:10849 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 76.957213] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.994777] binder: 10856:10861 ioctl c0306201 20008000 returned -14 [ 77.001303] binder: 10865:10868 got reply transaction with no transaction stack [ 77.001314] binder: 10865:10868 transaction failed 29201/-71, size 0-0 line 2763 [ 77.009064] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.026202] binder: 10862:10867 got reply transaction with no transaction stack [ 77.033766] binder: 10862:10867 transaction failed 29201/-71, size 24-48 line 2763 [ 77.086180] binder_alloc: binder_alloc_mmap_handler: 10856 20000000-20002000 already mapped failed -16 [ 77.101764] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xa4, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) socketpair(0x13, 0x4, 0x591, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20000, 0x0) dup2(r0, r1) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='net/connector\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r2, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:39 executing program 2: open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:39 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) fstat(r0, &(0x7f0000000000)) 2018/03/20 23:58:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x110, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18, 0x30, &(0x7f0000000080)=[@flat={0x77682a85, 0x1, 0x0, 0x2}], &(0x7f00000000c0)=[0x0, 0x0, 0x38, 0x18, 0x0, 0x78]}, 0x401}}, @increfs_done={0x40106308}, @increfs_done={0x40106308}, @transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x2, 0x800}) ptrace$cont(0x1f, r1, 0x421, 0x4) 2018/03/20 23:58:39 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0xc0e01, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000000)="f56fd7daf436da90") 2018/03/20 23:58:39 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:39 executing program 6: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x20000, 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x3, 0x6, 0x9, 0x727, 0x1000, {0x0, @in6={{0xa, 0x4e24, 0x4, @empty, 0x1}}, 0x5, 0x21d, 0x9, 0x200, 0x9}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000140)={r1, 0x9}, 0x8) r2 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) creat(&(0x7f0000000180)='./file0/file0\x00', 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 77.321555] binder: 10879:10888 got reply transaction with no transaction stack [ 77.323202] binder: 10883:10892 got reply transaction with no transaction stack [ 77.329115] binder: 10879:10888 transaction failed 29201/-71, size 0-0 line 2763 [ 77.336539] binder: 10883:10892 transaction failed 29201/-71, size 24-48 line 2763 [ 77.373825] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.401697] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:39 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xa4, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x9, 0x2) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0xb7, "ac55fe85ba00d34b780c3fd660baf61a119955696e402574d944014071dd6836d7a20ebddfe42c121db75a15050d945ab45fcaf9dd2aa13cd9d626086a7c0d538bcd33f5647e77b7455daffbf0e2a186bee4781c198f3d09b5138fd8fe31a193092fb56c3406703eecdc64f8206c293768ebbc3ecf126f2942680dcbb0ed14c9e0c6fad59f21d47d3f09afda94dfdbbffe7d051f73f3b508790909d2b8d53bd116e350e697e487aacf6398e6571bccd2d7f7034ddc0cbc"}, &(0x7f00000001c0)=0xdb) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000200)={0x0, 0xeb3, 0x20}, &(0x7f0000000240)=0xc) r3 = getpgrp(0x0) fcntl$setownex(r1, 0xf, &(0x7f0000000340)={0x0, r3}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={r2, 0x56, "70473a29e8a9a2aace0a0b8821706cbbd5ccaab426eb598c5566bcd93c4f17bfe5d1f7565d1d5db24302faa8c242fd40f3ad01e9b6729b4b09ed0c64ac2837294ee3f7787449d9d19b5f43cacdf57fd31988437c4cf9"}, &(0x7f0000000300)=0x5e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:39 executing program 3: r0 = socket$inet(0x2, 0x3, 0x10) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000a19000)=0x6, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000ff7000), 0x0, 0x0, &(0x7f000066354c)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1000, 0x800) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f0000000080)=0x7) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xffff, 0x30, 0xfff, 0x6}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x9, 0x4, [0x7, 0xfffffffffffffffc, 0x40, 0x9]}, 0x10) 2018/03/20 23:58:39 executing program 0: r0 = inotify_init() r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7f, 0x0) sync_file_range(r1, 0x7965c07a, 0x8, 0x2) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000080)) mkdir(&(0x7f0000000000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:39 executing program 6: r0 = socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x2) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:39 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x1, [0x1]}, 0x6) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000080)={0x200, 0x99, "9ff9cf9ed05da12d350bb80b183dfab6187b9536336e20024e1d8224cf9d1fc01080f5ae61cb6c02f00b72b67b80d71ebce13517fc0b7bb123ac4486fefd1beca9b67f6adbc3114cde4895874570c159b9b01477b8f4c15c85812f3aedb09c9ac4f3eaa1186e00f172536b772565d834501d47628f5af5d8e07ad0208a6ce7e0e17981f8a48d73683ac7e0d32324656318033e220d01dcbee7"}) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:39 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0xf2c87efa) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:40 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x80) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x5, @empty, 0x3}, @in6={0xa, 0x4e22, 0x7f, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x7fffffff}, @in6={0xa, 0x4e23, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0x1}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x64) r1 = socket(0x11, 0x8020400000000803, 0x0) bind(r1, &(0x7f0000ed6f80)=@generic={0x11, "0000010000000000080044944eeba71a496ae252922cb18f722e2ada000000012e0b3836005404b0e00100000014f26effffffffffffff67b100800000000000000101013c5804459e15775027ecce66fd792bbf0e5bf5ff1b080000dad11c000100fff6000000004974000000030000000000000000076d3a09ffc2c654"}, 0x80) sendmmsg$alg(r1, &(0x7f0000009700)=[{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000005000)="b4ff54c2c53c9143e5b6dac3ef33", 0xe}], 0x1, &(0x7f0000005100)}, {0x0, 0x0, &(0x7f0000005540)}], 0x2, 0x0) [ 77.468614] binder: 10912:10918 got reply transaction with no transaction stack [ 77.476179] binder: 10912:10918 transaction failed 29201/-71, size 0-0 line 2763 [ 77.477548] binder: 10913:10917 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xa4, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:40 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:40 executing program 0: r0 = inotify_init() syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x700000000, 0x105002) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) mount(&(0x7f00000000c0)='./control\x00', &(0x7f0000000100)='./control/file0\x00', &(0x7f0000000140)='iso9660\x00', 0x2080, &(0x7f0000000180)="a6ad906ad6a91c237f2a6a69e22bd3149d043047283fa97c30f6701b2ba96f44f8d0824fb42b250ee515180196807b9c08c644c5f9802133555bfda32045cbc527cd0dfa607153f77d9028e33a02c13be2433dc3cee543a95ed941077007a928870e61a3a836be08dcf01ac71be2b2c93987c325086fdbf3a2a1fa1d26c2b6b976906b7ff91ed224aa") r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000440)) [ 77.513844] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.541621] binder: 10913:10933 ioctl c0306201 20008000 returned -14 [ 77.552705] binder_alloc: binder_alloc_mmap_handler: 10913 20000000-20002000 already mapped failed -16 2018/03/20 23:58:40 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x0, 0x5}}) 2018/03/20 23:58:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair(0x5, 0x6, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f00000003c0)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000400)={@local={0xfe, 0x80, [], 0xaa}, 0x7e, r3}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f0000000440)={0x7, 0x200}) sendmsg$key(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2, 0xb, 0x3ff, 0x0, 0x25, 0x0, 0x70bd29, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x78, 0x0, "9734efec8ac2157e89d3e7f4042763"}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e22}, @sadb_x_sa2={0x2, 0x13, 0xf0, 0x0, 0x0, 0x70bd25, 0x3507}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x2, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in6={0xa, 0x4e24, 0x3f, @mcast1={0xff, 0x1, [], 0x1}, 0x200}}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x4e20, @multicast2=0xe0000002}}, @sadb_ident={0x2, 0xa, 0x6, 0x0, 0x20}, @sadb_x_sec_ctx={0x9, 0x18, 0x8, 0x10000, 0x40, "eabad4b922e1908315e1e28d6a442cc587849e2ed63b689f3361564c78155a1cff121d85bd88482fc49ebaec15582dde20393eecb39f40e791d0de6367181cd0"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_key={0x2, 0x0, 0x40, 0x0, "713be0059770f012"}, @sadb_lifetime={0x4, 0x2, 0x100000001, 0x5, 0x372, 0x2}]}, 0x128}, 0x1}, 0x8010) 2018/03/20 23:58:40 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl(r0, 0x4, &(0x7f0000000000)="5b0f46e22eed117c497bad911d203d0c7b808d25cdaaba328655b4b0ef") 2018/03/20 23:58:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x5, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 77.570365] binder: 10938:10941 got reply transaction with no transaction stack [ 77.577983] binder: 10938:10941 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000240)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}) 2018/03/20 23:58:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 77.618162] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.659769] binder: 10951:10953 ioctl c0306201 20008000 returned -14 [ 77.667076] binder: 10964:10967 got reply transaction with no transaction stack [ 77.674599] binder: 10964:10967 transaction failed 29201/-71, size 0-0 line 2763 [ 77.696205] binder: 10951:10953 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'ip6gre0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) tkill(r1, 0x15) 2018/03/20 23:58:40 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0xd, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x15, &(0x7f0000000400)=""/21, 0x41100, 0x1}, 0x48) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001740)=0x0) getresuid(&(0x7f0000001780)=0x0, &(0x7f00000017c0), &(0x7f0000001800)) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000380)) getresuid(&(0x7f0000001840), &(0x7f0000001880), &(0x7f00000018c0)=0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/dsp\x00', 0x200, 0x0) r6 = syz_open_dev$audion(&(0x7f00000045c0)='/dev/audio#\x00', 0xb8, 0x0) r7 = perf_event_open(&(0x7f0000004600)={0x3, 0x70, 0x5, 0x6, 0x0, 0x2, 0x0, 0x8, 0x4, 0x3, 0x8, 0xc7d, 0x20, 0x0, 0x7, 0x1000, 0x0, 0x59c, 0x8, 0x401, 0x2, 0x1000, 0x0, 0x3, 0x1a758000000, 0x4, 0x7, 0x9, 0x7fffffff, 0xb8ca, 0x2, 0x5, 0x10001, 0x10000, 0x1, 0x100000001, 0x6, 0x100000000, 0x0, 0x6, 0x0, @perf_config_ext={0x2, 0xffffffff}, 0x2000, 0x8001, 0x1, 0x4, 0x1ff, 0x6, 0xff}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0x1) r8 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000004680)='/dev/ashmem\x00', 0x200000, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000004700)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000004740)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000004840)=0xe8) r12 = getgid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000004880)=0x0) getresuid(&(0x7f00000048c0), &(0x7f0000004900), &(0x7f0000004940)=0x0) getresgid(&(0x7f0000004980)=0x0, &(0x7f00000049c0), &(0x7f0000004a00)) sendmsg$netlink(r0, &(0x7f0000004ac0)={0x0, 0x0, &(0x7f0000004580)=[{&(0x7f00000004c0)={0x1250, 0x3b, 0x300, 0x70bd29, 0x25dfdbff, "", [@generic="8831ef68414922ab0d2b76c333f6232885eafe3e6f7ac898dc13a422f36b1726c17456bccb77addf5585c5a1f663e1aa750bfc565f552a6f301b594a9005b9c7a95da63b5c2002038b6e730bb0f4fc90b58f006343016a2ad4510b9ea981191486a2c817e1d2dca3996eab697bfd93ad39229e20ebea8b5664e2b5b964e6d03a15bddacc918c28911b11d8d0f9d327241d4ff35a3177e8f0083f0cfa15ced1d24e74395a52", @generic="b3495c92cd3c0173a4cce400dcab16e6a8305a5d06ecde2b376aace8eec6269f2b7bb70b113ad154b8f42084ccdfe44973d37fe52052d76511264ecfbd0dd4a9dc92774ab5aa86754d0fd2cee9cc060ade0d8e3882d75d960eec0cb058e20bea", @nested={0x10f4, 0x18, [@generic="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", @typed={0xc, 0x65, @fd=r1}, @generic="1560edad93ecc4547cb30ef0ce6735dbf4ac285c931c933c3e60e8a68a3721", @typed={0x10, 0x70, @str='queue1\x00'}, @generic="7d062fdc93b2e2dcfcfed4b16139d38fd2c13aa455bc9c88f5bea2501806138078871fc445568fbe9a343b9361e14dec35959eb6a9089ad8a27e9319e2ca191fa405c1d2d66a2e90f02f34b8f224fe2b69947d71d1d4159f4f0c674be5f58b6a1bb1dbde9def8178ffa037f7423794de02d152dbf59d7e953f2d462387d35e3151f04246760e5e3c43b51181d7843d3bcaa17c39838850e40c01349ef77a50999c1801de68a5f92107c392e49a9033d4af4e16e7f5"]}, @nested={0x44, 0x1b, [@generic="d56240", @typed={0x14, 0x88, @binary="dd2a57879040731298653c"}, @generic, @typed={0x8, 0x2c}, @generic="c3c31f5dfd4d770e556b7e7623153a274e44f7826046d5adbef2076cf17720"]}]}, 0x1250}, {&(0x7f0000001cc0)={0x253c, 0x39, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@generic="727c74d965ec7bd6fd4a1d7d74064b330f5ab3404aa3c6830d7a480ca470f6d332acda7606b67de2518c41cb08aa2826a135b32f0a73744d7b5f3aea326e9b66eed9cb3aa6c0705b33b1b14e2858cb8a4b7934daf06bb9c759da2a3a58a679a216749d893003015061d850713ea8031f273ad62cdf2c119abb8be685a83cff04f32f4b82052bfef706ddc1c8a39023413e09e7693c6441df93ce3db3dce92142a88addc867e9c96d09464ad882653392593fceb1bcf2640a", @nested={0x13c0, 0x2e, [@generic="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", @generic="2be79344c5ae07c3365ca957aeac2e89dccccb851640504ebe949822e6f47ab0333bf32a02180f88a9c5d824a54f61a7808c60ec249dfc958aafee15901aec40e9f3ff5bc1ec26f8cc15f53e640edc2f4b93983cb477502907b2426d6040a702d2a7f99e0fded4d0ed8e831e921434270496599e56d030bd83aab89d05d1aef60d75afcdad56b56a23accb8e0eaae784e5f4556b0ed30f1a8d3030e1dbbf303e9d8200cf41e452ce97fb871fd8b00d351130dd1800573dafbff20848a79af80dd42765fc5b71ebc999032bf65570b334aa1a42aabb5ca42d7676bec6ba4027a53b3d4d99d67e183465d3dfadadd856f3569911a74cbb2459c5231db390ec31bafa9117cdd9c13692b30e46edc25ac565d3e6737ac96eeb06c82a8cf4dab3d82d81e2a98c4ebad1748ffd9d808c2358bc90c60a30dddf0231cb5150b5ec0d392a1589d3aac5a7022f28e3efbcc74c0c514bddd4a1604f858a27d42a0555ed0c4055d888d1c970514a31f6c58899fa8cec91a7c0fc9be5d199183599bcf64291ec24b171fa943076f637e97fc7ac1b63196528c3895b40e686156115d0d8c6a4ab053364cd91583ba3993771148b8f1ac9e2d0136880fb96b903719619f3b9def7cfbc7e415746ba5292b9ef6aa024d18b1f685bce3b264f4653f878f07c46b5cbfeb4332ad9643162e1e37818097c07ac5bed01bde559e20461d16b45171c667855268cc37405a8e4b53253b1f620de0792b520800d7a339888f734ab2d83b7644843b79eb05b7e72ebc2aa265b0e94e2c8696a004cb79559da07d0856ac6b399f30dd86daebe010ed9e1580ce4a5b7696a92f15638543bea3b407a6a541a853839df219a4f6813bbe7d02bd8b28377e80d205e9f121abe0fdeca19ac7c14abbf2784d1c314ab6e7b5ff1593e0c58ea1179859d969790c600a625ff0fe2995c4d0d648384768138b39c0aa07adfb4f6f03e9e6f1944e2814356dca4d1553291ec71dc6f224655cb8348868f282e28e1e38d295ad51187033efc4a56f53c4f1adf01ce360825f09072f21f87869b64ca9bc0531f41fde97ebf9312c453d83abaa42e5cbc42a137287900e9f143f5255278a8333f8c1ab1b467d7be7afa4cee2eb22ef7b17cf1f844cc9bb4ee8a1ce0b8627f8aed72fb5488f4e9aa88656782b4cf201502417f65ecfb2cb9b47e5dc0b90a3204b52429d218c732f795e9f81560b2fb815fcb176fe7eff8812e3dc51a7f591fac59ea093b6fdbe673c5068c8bb0f8cbb7acac59e48e4d0c7c4aa5d0d5d13b8631b5afa217dc3acdafa6464b4583009b4c30633d9ac0eee495e1c65cefeba82ae106e4d4fb0c5f87c610f568ebf54cc9c670388a952cb3391b643ecbe11f229331d80a0818eee4b9e143866bbf140694ff23ee05887e3a277b120311a0687f07c45891480c77a5d308ef604d400fcfce2520b19a388c18f6042650e2f2049d7541c43c3e37f12beb9602e4fdd41c2235277496d3d4034620c7291b1f1d794d1a8ac6eca2403f97c513a56ad0d2acb617b2b4c6d72db769d761c292e16e2f0fbc21d2e79a61694dcd97fecc9ac4380f31bec72929d1b7cef985a98b0ad71cf3671c016d454b076fe62d2d5bc07d7ec79cd64a094687ad5a9e909a2015206d796235b7f964ef3d6955dd01b46c836ec4495e9f636ea426b61c26bc8bec02afed928da368b87984fb2f5e0036e1e22724874c7c564de8b7f32fb39fc279dfd4026c2765835249a50b7e53c7e05276a147a765f4edb577934dd5131f4fde55d18d8b3296bb7fcb882560278bf49d6eed75e48b49ce1381bf13b07483cf1444304d6e3e3f65931b7be3f49bd57b8374de7579e5640b910abb39b27abe310ddeb7aa4b90fc861ed612ff9177bc656a39fc7a1b5093ebdd32b332b64d9a40ce9b6d6c0a36f4b2b056ec4b7b9cb49acd9c135d6b7963731fc3db6936bedbf4f1ed3de143704be2dade398f8d7480f57938894beb1998f3668918a324d4b74a3c78e0fd528949455ece7c970527f501a3c9f08e8e6477365f50eb69220a5b5f75258da1c8fe83c936876b58adb10fb5a04cb5aa6ef258bbd89f687d7d5d9bc651603b46d0e0368691bcc49d66f4b92c4e29d79fb919d4bf67e197b287c8f897b623b228795c15970492b260fd7c596a9461556cdabb96d4563fba6cbb42ede7e388161857eb701eca1fe046dac069ebba0a90fa14de76c9fabfcfb5fe58d9a15da29772a752f06d2380ee751af50029f122e54ba96f7f010e9c113a7ba37bce05d3b9043f73e2dcf754d8873aa6ade880dd6b3c922be88eea3d6fe34fa2ed978cd23a899f30b6a2ab11efc60039a3d8c80d0f7208b7061eb6de255a56b6909f13f385a3d5b1063a34a521deb7c93e881ce92ff7b007502172163854f8c7bad76fd2d9adaf614c1197c99eb80021d6f624ae35be5f9027ad9bed5565dd563d198cbd401cc6705f9d07df0f4eababb85b43cf28d81d1bea7d0d3f17632d0015cf4cbba339d5701339afa44aec8f887d641b25e8fb8618bf843b2a48ce87ba07466d434ee7f97e244e4ddb3be9cbbb79cec90bac9d64d441be07821210fa7983e2ca8e0cfc217a61c913a0ca4e08c6392c17ffe93ed79b3fa6e5b7cec4883a44de7fc2af707e402afecd97c271610798183cf3499e908942f55db76889fbbe75c22cb12bd97ad1907baa6620637f251d700c6b47b46e033b47ac674aa141bf6bb0b77fb75b02043e24f5c9ddb7d2131cfad9106ea1f4689de36de7d7d72b51090d238956392ea4b901785f61b3f0ad6288748330442613d56cd57332d576db15c8e3618f782eab73028bd57ce3d95e4cb75115092b355e64c5271f83332263f5f5d423cd7b616661494b8ad61c8a2302b9993d4a329e4ca672899a0d6df7ebe8f38aa8c6b1f90ae2f60ba682f67f966fa89322eebdda5139fceeb658b8476682ca2f05527d7e9b5ad37acb1f7905b4a5d10ca22ec616f639c8abaa525216015eef50c927629bed3243389718cb41e2a4d940d42f8a2c1414813d88047db44fee7ca0520ca08901a80d153dfe424a64a930ccbcab40b7f19b8b3b7a1c1fbb58c67b13a3ddee065e715ec89add659741e95cd29ccb61ca81064cc10604595b4de122ce9215ad15d7459538466f127ed83a8aeb8ec6e8641633a43ee743b156de45ef5aae0ccf75dcb5807dc43a330f1ab4ded5f3d3983035ca2ae0b12fd39969fd60aad7b9dedd3b99996a48fd3afc61eb11de031a7d82b288d45f83decfe445fa728b72eaf993eb5e3e3b28530e8fcee10ca1c067264221b77de3610c604dbcb0fb66d33fb42e39ef40dcfd04046400c2c59958dd6f9968186812922e4d7a1a83f28dafdc03362a2fe96cf697e2da9466791538c5ae7b5b716e6e80659f864828121d8fbc28085063625c7872cf392d1eb8884df07075cabfaf90274ef8bbcd4774bfd8b9cdba18bbae2b05c824e5f584de7afce2b58a45045616965f659fdb20681f820d49a1f57fd3e384776660f3651d151730a53757cda24ca0cf6ad0f49a663b176840b9f491dd0b5e4ac2d6734e515ba2627bd3b02462e8c7667bf27aca6b5d8d4ed69c6e5abff3be6801e6b564d7711878ad477b1f07804220298c066e0f9b343d49223cb30034c137cf7d47cd6ef5bcb7110d695733b26efdc9e9a596c56d313996d1b52442526044e5be9a7301106fff741393fe17605f30276759f597e967d43fd6fbb264f2e9afb9717cd31d2fd7e17a4fdd9cb8837a638ecdc387f022dbeabeb85d517c15f076e535f5f1bb350b4d967a424c5118b431b935bbf74ebddacb6e0ccf9e3a7ab0a053ad619f5316ed9ecfc3f4e166587e57de2644e5d5a8a25f7da2bd893ded2e62a04844b5603d4e0d395eb676bd5be7012cb54f70066f22b8baa7df65e2e04ae219cf7a246723e7571f315580cc57277e061a9def61f4389069da440fecfcc52dfdbcdbd79d0829ef1857a2bb1cc6f818c34fc7d7326a86c68d858d10574df0549f01c6905a9e611ca15f55e0f1e777738dadc237281d028b2cedc3e9d4f7eca20ce49e836cb841c96acb9cdf04f48233de4fbcfa1ed9ca4edcb0ad2c695f5e992d89536bd49a04e557f15ecf12e7d0b994fe6bee5f8f19d17566ad1bd8e1d688f35dafcf29b189012ce070db35dd2151c4a1e5f0578f74c07ccf6a82284e1db896b9f88191a69b4a65d72537b0cda8fe1b6d30532d03f3f1d5faf2dd4d5cf06132738cbdfa0d6d51dbd8132bf7bd53cde8e97156d2f0f9771589c118d236ceb73a59d408f85460932d85668ef5092e439de717eee43fdcb51138ec03acd2204c63fc9f7b6a5ed7ed1baedf9b25825c2bccd8dd44f6201572900ed7769fa03e5e79b7b4e4ed499a2cfee5522f5df71c5a25939c2dcc7106a1d696f133ec5032394901fc1392ca7f7d5fdc1225d29c5d689487af0ae1f9061765d9265cd3c35c831993b4936c3751789657cfb4adac80872633f8620608d84d0793a55f04d41f9f36dbccdae41c462adfdebde1ce47dea07298f4743d5aea1fd3e104b32d952207105e15e701c78ee8d40fce81e3887f4520f0af8f6af87bda21608a892a9a7c626f97414e8304e56e40b297ab60c7c07f2ff6fa7ddfd5f72c0a382a9040e8343803ddda2d8bde3d90f257d51230876787edf65022c6d31fce9ffd23a109a6aa81f0ff866a05d2deac780519535c2b2aff72a7e174240dbe5590d8381c8954e5fd74108e3e81452d4ed0468494d187a26a14c827bb540f0255d3dd4b340fa8d9362a9fb80350b4c825d32b16bd8b13ce3954e7f15e08cb5be857a3ecfe2297c95b24705e4c120ae91f6e08944222cbdb20d2e16be7fdf2fedffd236826019d011f89edc45201682579ad5d7497467b47ad4df913f5f7e6a77318a2c892d8baeaeb84101c602c7e2455eb70c009a7b0c90056cc5934c1cb156b99813c38e14122acce735b832a6fddd2cc80309c70fa531061da86a1dd9cd65ad4eece6f8d374fb3dcdfc5242e69d7240c7a145f6e6239f8dae9ce32bc009fb9605ddafe614d40fd41e577e1c9611e84a6c434d36eb2a4c6ef2152b36ef8c3b4a66be267af4c8c5d72ff65db82915e992da40430d9dc21cde6e567612e7abd43d7925e56caa03edcc3e8d0200fb4a22fda3a6c413e3deb771d418e9c432d69da5ec02fc290ab603235f4625bbcdfb97697363e12817fc3963402b4546d277c792d457e34e2612954d787c55931981ffcc44f52c51d1ef826b2261a91c3070afc109e9060e779b591af490ca5bf776406502ac89b2f36227e72331afd5a33958a2e11cc93cc0434e2940b60c56b1243acc26835e9e562c948dfc7d6628c02bde56571df3470909a8aec2eb56abe24c7b63991cf9cb76bd8c14cd053027e1989ab05112d42f490694957efd1d0f94ae973c92fdfbd86e09360eef175e2da443c3fe5304d5e6deb14135d316fd5b8536604663d17432f6fcbbc536d7c45b17abe69d2573444180e1425abc112f2406b0baf9bada48fdd32272bd3130b97f32f83422cfddc76e7e9bfdc76a3ac936f22d9e2df77138beebbaad2da166887687a34494ecf52c866667c37a6c240359a9b754dc0b2da50bb84cb3e1dff431a6933edf3da0f84626df75423c66a2a6a458c2ddd28265c1b74b6b20978a0a815701b5fbbaa3c29eb33f89147eed0802c0743530492c253ef5fa82407c400f25eb869f141cf2b8f3787e6815235a419d7cab27c6a42da0826b0b73de783ff23ac506597e0580223a857a1575cd268318080a36e741b", @generic="f2bd91c016b023929c0fb582f40567c0ffa88c62d34974a051b81708bf15ccbe59c1fb75eee3d24d728fae3af335ada47b7f23a89b1991aaae899ecae3e6b7a3a75207ef0e79f4cff3df256b0c76ab05dd1e3069114af5d5f811b4290661d04a288bafaefec9571a8c32d6804ec2dfc3d87a181cd140f2eb18c71362ed52002ca48734631d0d236eb057df4ddf1f08a4f0fa618e27ee1f52ce0c62c72e4751c3a0596e726455076d97af668b9e58e9ecc7d4e9e8fddbfc64f52991f7f2e94eab6af68ec549a325ee5484bd814910f6365088fdfc8e", @typed={0xc, 0x24, @pid=r2}, @typed={0xc, 0x78, @uid=r3}, @generic="23b46ce70b219d53df7920c990ec668cb4162d9c86e85ae7d926a025cb77758fa5e0bc78ea2aef4d22c8f16c29aaac01a30e9d7c799f4a3d4ff44be8a3a34e90713a45e8ccc2d2651053406f79ee1b10c33834a3dc1128ab34109c5fdedf4aee1adc52ef9aec3332e5707e1e5a872cd0193451995a54c03e353d9e0ddf6e9f106ef2373dbd66060e33a4376c8a4e85a465d730e6ba2297183bb9acdf25300063dabb067bfa84afe6d6182635a232851282514e8fc50abd38ac5f36e51610e8769071914503b1e3d7a771a7c4fe666265df2973e0c745b1b412e62e35888ad8bf89cad2", @generic="61b2bb1cc71bfbd1a3c256e5cb40c615855ea4aba3d49fa3ba7b690cb2d7b364eeafa7", @generic="8dd9a516fe83701723350cd04b71c10f9a11196dd0071abf5fdad8b990fe2d6425bdd52df896218ba379627633a41b2610428177b32079e05782c5faf58ddccfe8c74f9ef6081a9eeaf06b290767af13d8ab6f9cb332ad506af7e61a69c5d0b30f0272e6fdcf5e47f402ac33db72d25268cf287e88313c11af26131a0031b28cf0b2bb119f1c2d2a726b0a818d564dd2851bf9342d03a214cc71c53e6b43a8bb5919fff343002613f1a6898c040781377f98077d24367b55f19555e5c35c0e34ae", @typed={0x8, 0x54}]}, @typed={0xc, 0x4, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @nested={0x1098, 0x2d, [@typed={0xc, 0x5c, @uid=r4}, @typed={0x18, 0x5b, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x10, 0x4c, @u64=0x6}, @generic="2acf98512f9d51b584903a6c9d893e9a408f7a630172e076c7da370ab2c0ff6ef28d8864d0551128428efabcee7fe1cc055e4db2ae9426b8f640d894764620604c61ac81b39272655f3e7a0d608daa735363", @generic="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", @typed={0xc, 0x59, @fd=r5}]}, @typed={0x10, 0x38, @u64=0x400}]}, 0x253c}, {&(0x7f0000004200)={0x10, 0x1b, 0x4, 0x70bd28, 0x25dfdbff}, 0x10}, {&(0x7f0000004240)={0x218, 0x22, 0x10, 0x70bd28, 0x25dfdbfc, "", [@typed={0xf0, 0x6c, @binary="3488e14545e7569988fdd2cb91d03528b3413dc679eed1bf55f22eceebc7931b4e019ffccbc1a9dae1e7359feda428d6f54ed98b5647cf4abcbe8fd6a1fbc9d8038d8738f733f4e381b26b467abdea83b55a8d4f155989cbf07810097158fc737ef1e12f32ef612b4041ad35fb51510706a6f6139537b526d1fe43953aec97a50d6d59e4e35712a7fe6ee1d51860afabe354234d5c2d9a6b34d09d265ebf5034e75b87bd0e76dd514bf3b123529c65ce37deedf28df50136dcc2bafefc01803006eef5a8b5e9da83157e5a1ad5929bca4164a13ba6d2994a4e6481b0e94236886283bd308b683f"}, @typed={0xc, 0x7, @u32=0x8}, @typed={0x18, 0x2c, @ipv6}, @generic="0be70ae03db9e5007925c57a50afa0adce40ef2dd5f66a7bfad686d5eacd3576bf6fc51a154aeaec72a9c4d08bd15f3ae92ca7502cf23bbadecb5c85d8ecbd2914aa984562d59747c8f2d682c09c42dfa28a7cc73bcc53c3bec88a48c10d1bf6a586de6e2ef5cb342636cb674e1d911bebb0b6740bf4c7265042e1f3d0471cabc7d68e12b81f4c439bd2a69fa40163d328f8137ebb6dacd2609b7fe4773194ee583984e3107916b4419ce187284bc31c61ea", @generic="671f86120104c24c6d2f869253efb1fcf740bcce1ea11d3e615b91a7080bca85031cb40e9d82c03d97bfb9c62f65d3ef01f3bf78822fee0ea0524b9692126737260a"]}, 0x218}, {&(0x7f0000004480)={0xf8, 0x38, 0x800, 0x70bd27, 0x25dfdbfe, "", [@nested={0xe8, 0xc, [@typed={0xc, 0x62, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @typed={0xc, 0x51, @u32=0x9f8}, @generic="4ed36e549752fb78445477eb099655b4199e17f166a867ec7bf242f16ebbb92d975e798d0ed92d1c489915aa345ab2f0ee0d908a38b75c0816ff49c4904e71897df76a31f2f875423005c6bad854df4a0142a1b1a78ab13e8c05ac8269d257ebbcadd37c93069a8326b4cf19a2b6fd0271c8392275f409af68a9a5f8ca9280568e6bf7e4738b42b3698c70525d3cfdf2480d169aa838b9e81d6b731ccc3f87570a6499a0b175b4c53dcf3c66c068ba75685840016bcb1d2b71685ddf24eeb608d65c7b7c87f90d405a"]}]}, 0xf8}], 0x5, &(0x7f0000004a40)=[@rights={0x1c, 0x1, 0x1, [r6, r7, r8, r9]}, @cred={0x18, 0x1, 0x2, r10, r11, r12}, @cred={0x18, 0x1, 0x2, r13, r14, r15}], 0x4c, 0x4000010}, 0x8000) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40100) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000001900)={0x7f, 0x1, {0x3, 0x0, 0x10001, 0x3, 0x5}}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$nfc_llcp(r16, 0x118, 0x3, &(0x7f0000000180)=""/145, 0x91) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r16, 0xc0505350, &(0x7f0000000300)={{0x3, 0x5}, {0x0, 0x1}, 0x0, 0x0, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r16, 0xc04c5349, &(0x7f0000000100)={0x80000001, 0x8, 0x9}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r16, 0xc08c5335, &(0x7f0000000240)={0x3f, 0x4, 0x5, 'queue1\x00', 0x1}) 2018/03/20 23:58:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:40 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) vmsplice(r0, &(0x7f00000001c0), 0x0, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r1, &(0x7f0000000000)="4c2e128f894b808df06d47e935952b9974f6d87d556c7ea9b2a98334f32d446b523bbf0c786aa5970212885a267670b555c77b4776fb3d1e2377187aea30bd4079b9504cfebd6a9e2d9db8489eaaed956be94dd704fd7095f2142ae5bf519bfad9b3ba8d96e85e3d12b13e1c9b88a9f699e1abb6", &(0x7f0000000080)=""/237}, 0x18) 2018/03/20 23:58:40 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000040)) splice(r0, &(0x7f0000000140), r0, &(0x7f0000000180), 0x7fff, 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x1) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4(r1, &(0x7f0000000040)=@pppoe, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000100)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000380)="de", 0x1}], 0x1, &(0x7f0000000580)=[@sndrcv={0x2c, 0x84, 0x1, {0xfffffffffffffe01}}], 0x2c}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x422, 0x0) 2018/03/20 23:58:40 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) seccomp(0x1, 0x0, &(0x7f0000158000)={0x1, &(0x7f0000000000)=[{0x6}]}) [ 77.716693] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:40 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0x200) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 77.764285] binder: 10970:10975 got reply transaction with no transaction stack [ 77.771927] binder: 10970:10975 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:40 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = dup(r0) write$selinux_create(r1, &(0x7f0000000000)=@access={'system_u:object_r:systemd_passwd_var_run_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x32, 0x32}, 0x40) r2 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000040)="678a41cf21b31ca6297e83c70235398c08790a76df6982fd9e116ecf5ff8c705655055a754728ad7581bfac48cb8fb4482711e1378587a270450968908ebb00dd72c15022c309ebaac3c444e1d31018740cb7dda6ed6bd8713f0df925f4b9ae2e547919c68bf878d7d75e1f86923c880951a6a39d89c75c754585bac7242fa7236992cc20c7a87f94f92d3d12dbfb82c13e3f0270a7d114cb6d8d381dcad69c0c61370597729d066ce0962614148a2e2f83cc85308bb2ce8") 2018/03/20 23:58:40 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x80002, 0x0) write$eventfd(r0, &(0x7f0000b4dff8), 0xfffffe7e) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="9b", 0x1}], 0x1) tkill(r1, 0x15) 2018/03/20 23:58:40 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:40 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x2a}, &(0x7f0000044000)) mq_getsetattr(r0, &(0x7f0000000040)={0x5, 0x2, 0x5362, 0x7, 0xfffffffffffff4a3, 0x8001, 0xcee, 0x20}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) accept4$alg(r0, 0x0, 0x0, 0x80800) tkill(r1, 0x15) [ 77.864893] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.887065] binder: 10998:11001 ioctl c0306201 20008000 returned -14 [ 77.887890] binder: 11007:11008 got reply transaction with no transaction stack [ 77.901194] binder: 11007:11008 transaction failed 29201/-71, size 0-0 line 2763 [ 77.912347] audit: type=1400 audit(1521590320.443:41): avc: denied { map } for pid=10998 comm="syz-executor4" path="/dev/vcsa1" dev="devtmpfs" ino=42 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=1 [ 77.943703] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/212, &(0x7f0000000180)=0xd4) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/03/20 23:58:50 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) lseek(r0, 0x0, 0x3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x50, &(0x7f0000000080)}, 0x10) open$dir(&(0x7f0000000000)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x80) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000000c0)={0x3}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 0: r0 = inotify_init() pread64(r0, &(0x7f0000000000)=""/229, 0xe5, 0x0) mkdir(&(0x7f0000042ff6)='./control\x00', 0x40) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x400400, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000140)={0x8, 0x6f7f, 0x9, 0x7, 0x5, 0x986c, 0x9, 0x100000000, 0xfff, 0x7, 0x10001, 0x53}) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) sync_file_range(r0, 0x1, 0x2, 0x1) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:50 executing program 3: r0 = socket$inet6(0xa, 0x4000000006, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r0, 0x1008002) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) sendmmsg(r1, &(0x7f0000000280)=[{{&(0x7f0000000180)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000680)=@sco={0x1f}, 0x80, &(0x7f0000000700), 0x325, &(0x7f0000000740)=[{0x10, 0x410d}], 0x10}}], 0x2, 0x0) 2018/03/20 23:58:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() r2 = openat(r0, &(0x7f0000000040)='./file0\x00', 0x51e422410694b867, 0x41) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000080)=r1) tkill(r1, 0x15) 2018/03/20 23:58:50 executing program 3: request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='vmnet1self\\:\x00', 0x0) [ 87.724506] binder: 11023:11026 ioctl 4008af22 200000c0 returned -22 [ 87.725011] binder: 11020:11030 got reply transaction with no transaction stack [ 87.738601] binder: 11020:11030 transaction failed 29201/-71, size 0-0 line 2763 [ 87.750778] binder: 11023:11036 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:50 executing program 0: ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000100)={0x401, 0x14, 0x1, 0xffffffffffffffff}) setns(r0, 0x40000000) r1 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) socketpair(0x19, 0xa, 0x3, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4018641b, &(0x7f00000000c0)={&(0x7f0000ffa000/0x4000)=nil, 0x0, 0x1, 0x95, &(0x7f0000ffc000/0x3000)=nil, 0x4008}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) link(&(0x7f0000000000)='./control/file0\x00', &(0x7f0000000040)='./control/file0\x00') 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x18, 0x18, &(0x7f0000000180)=[@fd={0x66642a85, 0x0, r0}], &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000001180)='/dev/dsp#\x00', 0x7, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xffffffffffffff98) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000000040)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x200000c6, 0x50) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r1, 0x2402, 0x40) r2 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000080)={{{@in=@rand_addr, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) r4 = geteuid() getdents64(r1, &(0x7f0000000180)=""/4096, 0x1000) setresuid(r2, r3, r4) 2018/03/20 23:58:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x4801) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 87.771514] binder: undelivered TRANSACTION_ERROR: 29201 [ 87.777365] binder: 11023:11026 ioctl 4008af22 200000c0 returned -22 [ 87.777384] binder: 11023:11036 ioctl c0306201 20008000 returned -14 [ 87.867503] binder: 11050:11058 got reply transaction with no transaction stack [ 87.875098] binder: 11050:11058 transaction failed 29201/-71, size 0-0 line 2763 [ 87.894860] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:50 executing program 3: mlock2(&(0x7f00005ee000/0x800000)=nil, 0x800000, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) munlockall() 2018/03/20 23:58:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x6, 0x5, 0xe95, 0xc6]}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) r3 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x7724, 0x400) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0106434, &(0x7f0000000100)={0x7f, 0x0, 0x10001, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r3, 0x40106435, &(0x7f0000000140)={0x2, r4, 0x10001, 0x9f}) 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {0x0, 0x7b}}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40000, 0x0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000080)) 2018/03/20 23:58:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000000000000000007fd3a01f000005000000a40600001001000010010000ffffffff5002000052020000d8050000d8050000ffffffffd8050000d805000005000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="ff010000000000000000000000000001ff010000000000000000000000000001ffffffffff000000ffffffff000000ffffffffff000000000000000000000000697036746e6c3000000000000000000065716c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003300070104000000000000000000000000000000c800100100000000000000000000000000000000000000000000000048004d415351554552414445000000000000000000000000000000000000000012000000fe8000000000000000000000000000107f0000010000000000000000000000004e234e2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f80040010000000000000000000000000000000000000000000000003000616800000000000000000000000000000000000000000000000000000000000004d2000004d308000000ff01000048004e45544d41500000000000000000000000000000000000000000000000000c000000e0000002000000000000000000000000000000000000000000000000000000000065006500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000248020000000000000000000000000000000000000000000000003801727400000000000000000000000000000000000000000000000000000000860c00008000000008000000ffffff7f0502000000000000000000000000000000000001ff010000000000000000000000000001fe8000000000000000000000000000aafe80000000000000000000000000001900000000000000000000000000000001fe800000000000000000000000000016ff02000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000aa0000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000aafe8000000000000000000000000000bb00000000000000000000ffffffffffff00000000000000000000ffff00000007ff010000000000000000000000000001060000004800444e4154000000000000000000000000000000000000000000000000000104000000e0000001000000000000000000000000ff020000000000000000000000000001660bb70b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f800400100000000000000000000000000000000000000000000000030006672616700000000000000000000000000000000000000000000000000000600000004000000ff0000002003000048004d41535155455241444500000000000000000000000000000000000000000200000000000000000000000000000000000001ac1414aa0000000000000000000000004e234e240000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800cc000000000000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x700) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:50 executing program 4: syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x800) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000000)='io\x00', &(0x7f0000000040)='\x00', &(0x7f0000000080)='io\x00', &(0x7f00000000c0)='\x00'], &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:50 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 87.911075] audit: type=1400 audit(1521590330.441:42): avc: denied { setuid } for pid=11052 comm="syz-executor5" capability=7 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/20 23:58:50 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x8}]}, 0x10) 2018/03/20 23:58:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000240)={0x3, 0xffffffffffffffff, 0x1}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x1, 0x5, 0x3, 0x9, 0x5}, &(0x7f0000000340)=0x98) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380)=r2, 0x4) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xa8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x43fcf5a7, 0x400, 0xb9, 0x2, 0x10}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000001c0)={r4, 0xffff}, &(0x7f0000000200)=0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x80000000000000) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="16ca0e5ba01b3837b42e75a92268dcb2833edb4680c46c2d90315f7ab2752e5a74e09bcf981e4b07c5a7a3c6bd40ddfb3df69d728bec7fa2f0a27621b8d40c3e6b8b4e5cd6ab7e7f26d9298fad23f1a01ff121cd021366e50917fc101729e58a27c34b2d1b964c1653bd6d1c776164", 0x6f}], 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x28000, 0x0) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000180)=@nl=@kern={0x10, 0x0, 0x0, 0x2000000}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000300)="1965d708db817307d7cc4c865958912a3fb3dddca34d255915f4a81c3a291cbc4a484ddc9ddb4ae976f74e07085ebe1a7e89371913b252b9df2b260c768727c60f46b16b450b8967104fad0bba41bc40da4952a83738cf3bcb673952d0efef4db27075bba875c689c261eb5216a88718336b0d7a54491a0e3066e6c9ff96c55044e5bcc6099e3e69b2a599abdd32e77d9def3ae3", 0x94}, {&(0x7f0000000200)="acdccdbd14db71e360a783241627a87d229628c19858eb33761671be1be49c16ec0495058c0e308e6931e4335d3e4e2b057082cb65bdc4424e6bd1f6143da24c1f", 0x41}], 0x2}, 0x41) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000100)) [ 87.974466] binder: 11073:11076 ioctl c0306201 20008000 returned -14 [ 87.975433] binder: 11074:11080 got reply transaction with no transaction stack [ 87.988555] binder: 11074:11080 transaction failed 29201/-71, size 0-0 line 2763 [ 87.996363] binder_alloc: binder_alloc_mmap_handler: 11073 20000000-20002000 already mapped failed -16 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000180), &(0x7f00000001c0)=[0x28, 0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x2000402) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:50 executing program 0: r0 = inotify_init() r1 = dup2(r0, r0) bind(r1, &(0x7f0000000040)=@generic={0xf, "525ae7f4ef05fc9929e85639267d82a44dd6e222bf68425882d271023f1d3e097da675e0c940a48cd887b82ae9f6d21918ad8194127fcae4aa1aba7589f7b2b35558e03df9905572d1f61d45251e319b1ed8b26fbbcc8172ad3e910113b465937b5bce508f0bc0c3e0edc7b06ef5148c31fc09b1c336d595ca8782e37281"}, 0x80) mkdir(&(0x7f0000000000)='./control\x00', 0x40) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 88.034308] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.061364] binder: 11095:11098 ioctl c0306201 20008000 returned -14 [ 88.067052] binder: 11097:11102 got reply transaction with no transaction stack [ 88.075412] binder: 11097:11102 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0)=[0x78, 0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 3: r0 = getpgid(0x0) kcmp$KCMP_EPOLL_TFD(r0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000900)) [ 88.107356] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.125740] binder: 11095:11110 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000040)=""/31) 2018/03/20 23:58:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000300), &(0x7f0000000340)=0x8, 0x80004) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x9}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x80000000, 0x2, 0x2}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tp, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=""/38, 0x26}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000880)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f0000000840)={&(0x7f0000000600)=@bridge_getlink={0x20, 0x12, 0x50d, 0x0, 0x0, {0x7}}, 0x20}, 0x1}, 0x0) 2018/03/20 23:58:50 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=[0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000080)={0x400, 0x1d, 0x7, 0x400}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:50 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x400000000010) [ 88.157606] binder: 11115:11118 got reply transaction with no transaction stack [ 88.165178] binder: 11115:11118 transaction failed 29201/-71, size 0-0 line 2763 [ 88.182047] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000000080)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000000)={0x1, 0x400, 0x2, 'queue0\x00', 0xffffffffffffffc2}) [ 88.229325] binder: 11124:11130 ioctl c0306201 20008000 returned -14 [ 88.231084] binder: 11128:11134 got reply transaction with no transaction stack [ 88.243429] binder: 11128:11134 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=[0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x12000, 0x0) preadv(r0, &(0x7f0000be4fc0), 0x0, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:50 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) symlinkat(&(0x7f0000000000)='./control\x00', r1, &(0x7f0000000040)='./control\x00') [ 88.277237] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.318914] binder: 11152:11158 got reply transaction with no transaction stack [ 88.326599] binder: 11152:11158 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:50 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x404000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:50 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:50 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) dup2(r0, r1) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) 2018/03/20 23:58:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x2000000000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f00000000c0)=&(0x7f0000000080)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:50 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000180), &(0x7f00000001c0)=[0x78]}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x3e, 0xffffffffffffffff}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 2018/03/20 23:58:50 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x20000, 0x0) connect$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:50 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0xa000) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000080)={0xb0, 0x1f, 0xa30, 0x9, 0x401, 0x7f, 0x800, 0x1, 0x9, 0x1ff}) r1 = inotify_init() openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/load\x00', 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000000)) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 88.359205] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:50 executing program 6: acct(&(0x7f0000000000)='./file0\x00') r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:51 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) stat(&(0x7f00000001c0)='./control/file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./control\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000080)='./control\x00', r1, r2) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000340), &(0x7f0000000380)=0x4) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x9, 0x8009, 0x9, 0x2f, 0xec8, 0x1, 0x2, r4}, &(0x7f0000000180)=0x20) mkdir(&(0x7f0000000040)='./control\x00', 0x0) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 88.425364] binder: 11165:11172 got reply transaction with no transaction stack [ 88.431873] binder: 11169:11177 ioctl c0306201 20008000 returned -14 [ 88.432904] binder: 11165:11172 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 88.474158] binder_alloc: binder_alloc_mmap_handler: 11169 20000000-20002000 already mapped failed -16 [ 88.478208] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.502746] binder: 11169:11190 ioctl c0306201 20008000 returned -14 [ 88.505206] binder: 11197:11198 got reply transaction with no transaction stack [ 88.516853] binder: 11197:11198 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:51 executing program 6: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000040)="10") r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe8, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}, @enter_looper={0x630c}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:51 executing program 3: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="f6", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, 0x0) 2018/03/20 23:58:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x21}) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0xfff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:51 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x40a400, 0x0) fgetxattr(r0, &(0x7f0000000140)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/120, 0x78) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)=0x1) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x40, 0x200000) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./control/file0\x00', 0x0, 0x18}, 0x10) 2018/03/20 23:58:51 executing program 6: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2a642, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$KVM_SET_IRQCHIP(r0, 0x8208ae63, &(0x7f0000000080)=@ioapic={0xd000, 0x401, 0x4, 0x6, 0x0, [{0x1, 0x8495, 0x9, [], 0x1ff}, {0xb62, 0xf978, 0x1ff, [], 0x80000001}, {0x0, 0x41, 0xffffffff, [], 0x1000000000000000}, {0x10000, 0x9, 0x6, [], 0x4}, {0x4, 0x7, 0x7, [], 0x4}, {0x0, 0x4, 0x1, [], 0xffff}, {0x4f42, 0x800, 0x0, [], 0x8}, {0xfffffffffffffffb, 0xe8de, 0x40, [], 0x1}, {0x80000001, 0xffffffffffffbe2d, 0x10000, [], 0x8}, {0x0, 0xea, 0x10001, [], 0x8}, {0x2, 0x7, 0x1b2, [], 0x3}, {0x4, 0xfb7a, 0x3, [], 0xfff}, {0x200, 0x9, 0xb8, [], 0xffffffff}, {0x80000001, 0x6, 0x100000000, [], 0x3}, {0x6, 0x836e, 0x8, [], 0x6}, {0x1, 0x5, 0xffffffff, [], 0x1}, {0x4, 0x8, 0x9, [], 0x2}, {0x9, 0x2, 0xfffffffffffffffe, [], 0xf7d7}, {0x4, 0x100000000, 0x2, [], 0x800}, {0xfff, 0x6, 0x80, [], 0x1}, {0x800, 0xffffffffffffffff, 0x2, [], 0xd24000000000000}, {0x9, 0xf086, 0x10000, [], 0x100000001}, {0x6, 0x88f3, 0x1, [], 0x3}, {0x5a, 0x80000000, 0x401, [], 0xfff}]}) [ 88.529617] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.553154] binder: 11202:11205 got reply transaction with no transaction stack [ 88.560911] binder: 11202:11205 transaction failed 29201/-71, size 0-0 line 2763 [ 88.594800] binder: 11209:11211 ioctl c0306201 20008000 returned -14 [ 88.596484] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe4, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) socketpair(0xa, 0x0, 0x799a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001140)=ANY=[@ANYRES32=0x0, @ANYBLOB="23000000b9f69a3fb965f20344682d698429ed15760ee5967775456e15bcbf1cd1076c60e51569"], &(0x7f0000001180)=0x2b) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000011c0)=@assoc_value={r3, 0x101}, 0x8) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000001200), &(0x7f0000001240)=0x4) sendto$unix(r1, &(0x7f00000000c0)="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", 0x1000, 0x20000004, &(0x7f00000010c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) fstat(r2, &(0x7f0000001280)) 2018/03/20 23:58:51 executing program 0: r0 = inotify_init() ioctl(r0, 0x5, &(0x7f0000000000)) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) recvmsg(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000080)=""/254, 0xfe}, {&(0x7f0000000180)=""/19, 0x13}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/12, 0xc}, {&(0x7f0000001480)=""/240, 0xf0}], 0x5, 0x0, 0x0, 0xfff}, 0x40) mq_open(&(0x7f00000015c0)='\x00', 0x43, 0x92, &(0x7f0000001600)={0xffff, 0x8, 0x1, 0x2, 0x0, 0x8000, 0x9, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000001380)=@assoc_value={0x0, 0x5}, &(0x7f00000013c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001440)={r2, 0x90}, 0x8) accept4(r1, &(0x7f0000001240)=@hci={0x0, 0x0}, &(0x7f00000012c0)=0x80, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001580)={@empty, 0x6, r3}) r4 = creat(&(0x7f0000001400)='./control\x00', 0x0) bind$ipx(r4, &(0x7f0000001200)={0x4, 0x400, 0x200, "5385c909a1c2", 0xffffffffffff7fff}, 0x10) 2018/03/20 23:58:51 executing program 3: r0 = perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 2018/03/20 23:58:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x28000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000000c0)={0x8001, 0x2, 0x0, 'queue0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) fcntl$setflags(r2, 0x2, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x10001, 0x0) accept4$ax25(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x10, 0x80000) 2018/03/20 23:58:51 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='personality\x00') socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)) preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:51 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000380)={0x1, 0x1}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r3 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000000c0)="8a487e1871fb992d73bea3f6cf43d10faf56f1381e0d0b317bf27a979eaf01d8dc90b8a142a05d015d85a81f937cc95ccf1ce91219fbfbc681a8a54830a231737506a941073c757df2bb457227c019643c446588c1a02d60bc3cef2ec9d293400b99628c680e66f46912809d0e4e5097d370918bac82571a7a15bc2e86acf31393a0f667fe312ac5c12c1e4f", 0x8c, 0xfffffffffffffffe) r4 = request_key(&(0x7f0000000240)='id_legacy\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='/dev/dsp\x00', 0xffffffffffffffff) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000200)=[{&(0x7f00000001c0)="9a82817fbed84db814eb8eb229f7fa09642c6fc9b44918a94403fc4e8b658d72df1b9e233a0112a56d66dab963117c2e478b169aa194", 0x36}], 0x1, r4) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sched_getparam(r2, &(0x7f0000000300)) tkill(r2, 0x15) 2018/03/20 23:58:51 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x2007fc) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) clock_adjtime(0x7, &(0x7f0000000040)={0x0, 0x4, 0x308e, 0x4, 0xfffffffffffffff7, 0x3, 0x2cf1, 0x5, 0xfc00000000000000, 0x100, 0x400, 0xffff, 0x0, 0x6, 0x1000, 0xa3, 0x200, 0xffffffffffffffff, 0x7, 0x2d74, 0x38, 0x9, 0xcf3, 0x101, 0x4}) 2018/03/20 23:58:51 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x4000, 0x5}, {0x0, 0x6}, 0x100000000000000, 0x0, 0x10000000}) [ 89.020233] binder: 11219:11228 got reply transaction with no transaction stack [ 89.023658] binder: 11220:11231 ioctl c0306201 20008000 returned -14 [ 89.027794] binder: 11219:11228 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xe4, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000200)=[@fda={0x66646185, 0x1, 0x3, 0x1}, @fda={0x66646185, 0x1, 0x4}], &(0x7f0000000240)=[0x18, 0x20, 0x38, 0x38, 0x38, 0x0]}, 0x63}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:51 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x84800) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x9d, "ac3422d963c0f43762e8dbd320bce340c4385b6f78bf3b329ff2c8a6fa20275a2b180012af55e6a3e237b9e3c161655061bae06a95fb034ec5e978445104b003f426d9164f0dea3cd9b59cb926d17835b39f8f63e5b01939546f27856706ac385150a7eed9bc008d1e4b2f42800af6dc654ab9561eedc9a60ee8be4295ea2980e9b1bac12bac4d58f93075d60e16233fe11b0e171dbb1bd46761f0d832"}, &(0x7f0000000100)=0xa5) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000140)={r2, 0xffff, 0x59, "f1d64f859ca83383aec1b6dde651876d9afe570fcde7ae818348781e7786992d47d6c54f6a6f04f50949c8429043ebac66ad1eaf69493505f0cb09bcbf6923e1ad8e5d0ee2d447421472f3c132a87f6a79819e80559f640d2a"}, 0x61) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x6, 0x80000) 2018/03/20 23:58:51 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002100), 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000000000fa"], 0x8) 2018/03/20 23:58:51 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x3, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000340)={0x4, 0x0, [{0xd0, 0x1, 0x0, 0x0, @msi={0xff, 0x7ff, 0x4}}, {0x2, 0x3, 0x0, 0x0, @msi={0x5, 0xffff, 0x72c}}, {0x5c1c, 0x0, 0x0, 0x0, @irqchip={0xfffffffffffffeff, 0x40}}, {0x3, 0x3, 0x0, 0x0, @msi={0x7, 0x5, 0x4}}]}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a45322, &(0x7f0000000000)) r2 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffffffa, 0x1bcd3fe38ff5a755) getsockopt$inet_dccp_int(r2, 0x21, 0x0, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000440)) recvfrom$ipx(r2, &(0x7f00000001c0)=""/67, 0x43, 0x10000, &(0x7f0000000240)={0x4, 0x6, 0x7f, "d42e203d8afd", 0x6}, 0x10) connect$netlink(r2, &(0x7f0000000480)=@kern={0x10, 0x0, 0x0, 0x209000}, 0xc) 2018/03/20 23:58:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) 2018/03/20 23:58:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000080)={0xffffffffffffff01, 0x7, 0x7, 0x8000, 0x5, 0x0, 0x6, 0xa6, 0x200, 0x2}) rt_sigsuspend(&(0x7f0000000180)={0x4}, 0x8) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = getpgid(0xffffffffffffffff) ptrace$peekuser(0x3, r3, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x10000, 0xb4) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7ff, 0x201) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:51 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') acct(&(0x7f0000000000)='./file0\x00') syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x4, 0x400) preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) [ 89.064923] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.066429] binder: 11220:11231 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:51 executing program 0: mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f000003a000)='./control\x00', 0x80000d50) r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x10000, 0x20000) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x3) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f00000000c0)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x8}}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) 2018/03/20 23:58:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000440)={0x1, r0}) r2 = syz_open_dev$mice(&(0x7f00000004c0)='/dev/input/mice\x00', 0x0, 0x400200) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000480)=0x0) prctl$setptracer(0x59616d61, r3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r4 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0xf242fb1801b7225d) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000500)=""/209, &(0x7f00000003c0)=0xd1) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000400)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000002d00)=ANY=[@ANYRES32=r3, @ANYPTR64=&(0x7f0000001880)=ANY=[@ANYRES32=r5, @ANYPTR64=&(0x7f0000001800)=ANY=[@ANYPTR64, @ANYPTR64], @ANYRES64=r5, @ANYPTR=&(0x7f0000001840)=ANY=[@ANYPTR64, @ANYPTR, @ANYPTR, @ANYRES64]], @ANYBLOB="fac2e310bac25c601320def6d88ffcfa844db386f2778b490bdddaa7282ffa0aa585959bd5514bdfdb28b60c81e20fa487b6c573efdcee02d024c9855ef1a8934372f51b8b4fc4e026a7d09efda89edbc88e9f53749062", @ANYPTR=&(0x7f0000002c80)=ANY=[@ANYRES64=r1, @ANYBLOB="efac087e7864fb161773", @ANYPTR64=&(0x7f00000018c0)=ANY=[@ANYRES32=r2, @ANYPTR64, @ANYBLOB="320d72d50b6ee7626d685bee0d1ce7f734fd3d90d657899c088c960be739", @ANYPTR64, @ANYRES64=r0, @ANYPTR64, @ANYBLOB="7a34d4d2805b6fed95bd43f9b30e25e1f179b464ff086606a66ec65872054feb488020c66c0447248d43537a9e5bf79ba804cff710ab0c229ecb0c870a92b0a952a485b874bb124f5578f6ca138d1cbd2c4091fd40f83548b4ec4790a3dc4e3c47236d0919bc2f529fa4349bcfdece35ff9d878a6be3590274a8814b8187ab9317e15889955584eaba33fd7f6826f6ecefa4553d7ac460c45fb239323188f0cb9dc003e86bd57aa2043537fc4318a393e1dab03e9d515d5cf1cd98f5381168b1508dbd44279bf5b08809346e2e6dce1f", @ANYBLOB="f11a2e88be7c2511f8286ea4a04f97092fa2b7a97e858526be8f70fb568ac2bdee78918703920a90032f538760a9da319550da3eb9d12def34f277db7eefb03287e2ed91d80f7eb7ce400f7e782b2fd47471b3f0754e114922d88c0e548de9b9236e69614fe22686d1e507b91749bc71647738a74f285e4b5f9053a7e9171aab088fd1e6c8f551627fdfcb7cb6ac305138edc5547ec3f8ab9f782210c099f0a3d9ddf93d6bca8b4e802dc5c948f6910f5bcca2f969fb6ea680025acdd4e5a187dbb4954da7ca438db35e735c8e0bc27e7d4e4533c395fc02a6a4a94177928e0af07f472d95f3112231bc986f9e55c5eb6b00fab171", @ANYRES64=r3, @ANYPTR64], @ANYPTR64=&(0x7f0000001b00)=ANY=[@ANYRES64, @ANYRES32=r2, @ANYBLOB="b15c9d297773a5ea4fca42660e64e6333292da37122b57140bf80c91ba79a24f0a84b038033ec97fde493e3d72adaa63a88dacce2e50ee492ea525b29fafbc368090018966e66e9bb8b0ff46e9a7f082bdea9001afae7d4627f6048fe6fee7231cb7", @ANYBLOB="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", @ANYRES32=r2, @ANYPTR64, @ANYPTR, @ANYBLOB="c896ca5bd73b2562e28f9d21779f9dc87c9cc429eae68458f7d0e7535589e744ce29bfb8b9e49a0c054f8fbf608a697b88c09057f5fc498a3f5d10910965cb6180178bb52be3263dad4fe19fd08a0e259c35b67ec8cb00b27f9d562ac13e0b8f9f5fdeb6557d4ca164f93c1a12a63234db6e8c77a307f26f1d7dddd57be5f844326b5d6ed8a47bdce6700c70c251564519db68f256709e45753e5a2ed88a79d2f088c9cde8382a29e6aaf006eaebf6bccefdb6dec645c80e86c0c4b4015bb51e5e7ea966af684fe710ab7b9606bd53fd4a440b7c6273eacd9099986e606f1f8b70713a52ac53d14364d8536d4380"]], @ANYPTR64=&(0x7f0000002cc0)=ANY=[@ANYRES64, @ANYRES32]], &(0x7f0000000140)=0x5) ioctl$TIOCGSOFTCAR(r4, 0x5419, &(0x7f00000000c0)) lseek(r0, 0x0, 0x6) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r5, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e20, 0x100000001, @local={0xfe, 0x80, [], 0xaa}, 0x5}}, 0x6, 0x3ff, 0x10001, 0x4, 0x7}, &(0x7f0000000240)=0x98) pkey_alloc(0x0, 0x0) 2018/03/20 23:58:51 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000000000)='./control/file0\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 89.138913] binder: 11246:11257 got reply transaction with no transaction stack [ 89.146526] binder: 11246:11257 transaction failed 29201/-71, size 0-0 line 2763 [ 89.172338] binder: 11271:11272 ioctl c0306201 20008000 returned -14 [ 89.175833] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.196828] audit: type=1400 audit(1521590331.728:43): avc: denied { map } for pid=11271 comm="syz-executor4" path="/dev/input/mice" dev="devtmpfs" ino=9455 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:mouse_device_t:s0 tclass=chr_file permissive=1 2018/03/20 23:58:51 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x0, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) 2018/03/20 23:58:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x98, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}, @decrefs={0x40046307, 0x1}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) 2018/03/20 23:58:51 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x2, 0x4000) sendmsg(r1, &(0x7f00000004c0)={&(0x7f0000000040)=@pppoe={0x18, 0x0, {0x1, @random="e1d688cbf8be", 'syzkaller0\x00'}}, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)="a5c7da568af21ed0e5059d675ab7cf6ded1d7e523ad750763cc1e803ad4df2c1d1a52fb9574551fedeffb434157f455518459a65159ce43edf06a350f819953d74e87bf41339c0ff979215d8186386e3ebc08b010a50f9c39681d3512c50ac9cfdcf02e58bbb6ad93ac9ada03d1c1cff2920735814450c412f6e9b4013b92f3a6f65c90c07e306309d924c04fbb143bb3d08962a70c5ce54962166fcb2d9a9f6c0b6d515646d159d35f280af87e2370214cb49da478a9de009b800570e529ef6586f68669f0e2f6d90e5678581f16fb28c798813aeb4084c41d89eff9eb718f25be7d32e0ed35159a379cdca83fdc2", 0xef}, {&(0x7f00000001c0)}], 0x2, &(0x7f0000000240)=[{0xc, 0x101, 0x7}, {0x104, 0x119, 0x1ff, "1a2af8f37e2616cfae41f66fc93046f3abee3035dfe764aeabd337d7d47127a0f685247f2a99987772aa8260f1e40492aaf70f748a432ba384373453b182d1b8b8a540f77b825d297c56c2bfe5f56c2a974f1d2ebd0b9b11489ac9a7dd8877ebf71ba54eba00add3f5141c46897fb902419e8a331ca5332666c86cb0b743c1abba60ded7e57618aafb432b24332fe990948dac75204c3dc5b5aeff3a3fa9db3e4ff317770560bf035126032100e5a08cb1f6ff0e7082873b8954a52fd60b6cc7bf7fbaf7d4663ef4dabf9a7303d09e80262e94c015c86da72d8490fb2be8150fa18be993dacdaebbf2c550e6f981f4818e86cdd644"}, {0xa4, 0x1, 0x80, "c6c16459b24fd011624d4414c93bddd5e8ba097fc3c77e77303641f5cdead8a594900a0d8b93895eda9e97afae227b05304c0b55783c1096e1d6b27643fd450a472ad103203e4ec5f16f1af0878d64a741849efe079ef84ccf4430184ad8143d0f9dec848974db09ff65191ce1b4d9ee27b803a8fc08f26fa49a44d59eced1b7e14053be499cea893eab62d2c65427ff8ac0032fd0fe0b"}, {0x90, 0x11f, 0x2c, "8d83d321b1763a01458fa39ed4d1c768a3550d5b012028e8adbb507ac77aa4a04b8d9f8765a9c8fd431b18aef72e1bfa0a8e9678644089a67be7d6ce1eb97a98bcc70b28e5351aba6bf1b669a5c2f1e646b476a47ca99a654b669792b781067d5d26efea7b23e9cebb9164cda17fc1bc6804edc669d1b6abb4d76b4b65cd218e00b53630"}, {0x3c, 0x116, 0x1f, "0aac43ac7cbac171c6be8273d4a9aa1ad6d976ff8a897213d1ba33f3e1eab147651e9e6a8e13deea62926b837ed239"}], 0x280, 0x24000840}, 0x20000040) creat(&(0x7f00000001c0)='./control/file0\x00', 0x0) 2018/03/20 23:58:51 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x2000000015) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x8, 0x401}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000000c0)={r2, 0x1}, 0x8) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0106434, &(0x7f0000000100)={0x400, 0x0, 0x10001, 0xffffffffffffff01}) ioctl$DRM_IOCTL_AGP_BIND(r0, 0x40086436, &(0x7f0000000140)={r3, 0x1}) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xffffffffffffffff) 2018/03/20 23:58:51 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x121) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000040)=""/108) socket$key(0xf, 0x3, 0x2) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x10000, 0x0) 2018/03/20 23:58:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000040)) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:51 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bpq0\x00', 0x400}) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) creat(&(0x7f00000000c0)='./file0\x00', 0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:51 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x2, &(0x7f0000000040)={0x0, 0x34}, &(0x7f00000000c0)) timer_delete(0x0) pread64(0xffffffffffffffff, &(0x7f0000000f7b)=""/133, 0x85, 0x0) 2018/03/20 23:58:51 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x1f, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edafa290f2da3f57bc908ce7ed34ebb013"}) [ 89.336301] binder: 11287:11293 got reply transaction with no transaction stack [ 89.343885] binder: 11287:11293 transaction failed 29201/-71, size 0-0 line 2763 [ 89.354480] binder: 11289:11294 ioctl c0306201 20008000 returned -14 [ 89.370156] binder: 11289:11305 ioctl c0306201 20008000 returned -14 [ 89.375936] binder: undelivered TRANSACTION_ERROR: 29201 [ 89.408172] binder: 11311:11312 got reply transaction with no transaction stack [ 89.415745] binder: 11311:11312 transaction failed 29201/-71, size 0-0 line 2763 [ 89.426176] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:52 executing program 3: setgroups(0x0, &(0x7f0000000280)) 2018/03/20 23:58:52 executing program 0: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x3) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x14, 0x45, &(0x7f0000000040)="55970ce0a5cab77fb12d2888abe1a3a516a49687", &(0x7f0000000080)=""/69, 0x100000001, 0x7}, 0x28) 2018/03/20 23:58:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = getpid() mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) process_vm_readv(r1, &(0x7f000000b000)=[{&(0x7f0000005f3f)=""/97, 0x61}, {&(0x7f000000a000)=""/51, 0x33}, {&(0x7f000000b000)=""/73, 0x49}, {&(0x7f0000006000)=""/4096, 0x1000}], 0x4, &(0x7f0000007000)=[{&(0x7f0000000fbd)=""/67, 0x7ffff000}, {&(0x7f0000008f73)=""/141, 0x8d}, {&(0x7f000000b000)=""/240, 0xf0}, {&(0x7f0000008f9d)=""/99, 0x63}, {&(0x7f000000b000)=""/4096, 0x1000}, {&(0x7f000000bf62)=""/158, 0x9e}], 0x6, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x3ffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:52 executing program 4: mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/03/20 23:58:52 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) clock_nanosleep(0x1, 0x1, &(0x7f0000000500)={r0, r1+10000000}, &(0x7f0000000540)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r2 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r2, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r2, 0x0, 0x3) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000000)={0xffffffffffffffe1, {{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1, 0x8, [{{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}}, {{0x2, 0x4e20, @multicast1=0xe0000001}}, {{0x2, 0x4e24, @multicast1=0xe0000001}}, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e21, @broadcast=0xffffffff}}, {{0x2, 0x4e22, @broadcast=0xffffffff}}, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e21, @rand_addr=0x2}}]}, 0x48c) 2018/03/20 23:58:52 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000001340)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001380)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f0000001480)=0xe8) r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000014c0)={0x0}, &(0x7f0000001500)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001540)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f0000001640)=0xfffffffffffffdad) getresgid(&(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001740)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001780)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000001880)=0xe8) fstat(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001940)=0x0) r12 = geteuid() stat(&(0x7f0000001980)='./file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = gettid() r15 = geteuid() getresgid(&(0x7f0000001a40)=0x0, &(0x7f0000001a80), &(0x7f0000001ac0)) r17 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001b00)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000001c00)=0xe8) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = accept4$alg(r1, 0x0, 0x0, 0x800) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003340)={0x0}, &(0x7f0000003380)=0xc) stat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000003480)='./file0\x00', &(0x7f00000034c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003540)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000003680)=0xe8) getresgid(&(0x7f00000036c0)=0x0, &(0x7f0000003700), &(0x7f0000003740)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000003f40)=0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003f80)={{{@in=@broadcast, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000004080)=0xe8) r29 = getgid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000040c0)=0x0) stat(&(0x7f0000004100)='./file0\x00', &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000041c0)={0x0, 0x0, 0x0}, &(0x7f0000004200)=0xc) sendmmsg$unix(r1, &(0x7f0000004440)=[{&(0x7f0000000040)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001300)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000000c0)="c5ae8346df9e357ccac6cde7c9c4b8fc456258ad5f1bb3d77023eb827e7aefd45dc1912156880ff119ff09e2d063b9cc51f4c328e7e14c7b57b3b49fe2886ea90deff378aa47d0a05d2968226c05801d51f92d7c1e6a7f70de582e0d01c9f5a8bf6ca363d53ea3c8f3243557f26c40c3f08472be99162b35457464d8e5f48066975de28d", 0x84}, {&(0x7f00000011c0)="06c4508a26060cd51b1e77244d082e5b43058451ab512c1a22b05a845c07ea97", 0x20}, {&(0x7f0000001200)="31b0ea8f94bffe0c4080c67f7b5211087d3700b0fb6e836811074af13b0346d21e85b870c84728658e1b830bf327305c10e9cb19fa2a03585142b5aa2fd190c5303303c6ffaa64c7c3e32b77350ec25a97b7f6c4993106ad91562627b464a0034b6c", 0x62}, {&(0x7f0000001280)="ff1e8ca54f9f5c4c0e4f628e62d2c011c1ab5b29245154ebc0a380543b253cb8a5c612ef4c28605f631e5d2dc576b306e0cce0f3ea6474f0c8f4fe1c8c72ef34c854d7445b1f1274e26e2ba8594b3922c9e07c7e6d6ddf4fe6", 0x59}], 0x5, &(0x7f0000001d00)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @cred={0x18, 0x1, 0x2, r8, r9, r10}, @cred={0x18, 0x1, 0x2, r11, r12, r13}, @rights={0x24, 0x1, 0x1, [r1, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r14, r15, r16}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r17, r18, r19}], 0xc4}, {&(0x7f0000001e00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003300)=[{&(0x7f0000001e80)="e0df81ef699d3950a01f90e94a9c28c5b0f98b65461ee6c2ca137a50d89df3df65f11218eaf56e273202e682dcc1e0c51a3e6a9999dffc6ff0783a9c2696ef0ad3306f1331c2c15d1f63bec7dbffd8b9f49c75618b1d1c1dba512d202573fcd3b4a1675d6cff76042ea95b10f658749416861a60be3a7e7e25f5b51b11fa33217a874b9a063fe35ad66f59563d0e02914be38e04f91f0a8d21cac78d1eb8f307efc0d504c94765522a8c75b20a", 0xad}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="cbeeb7d41ab4bc0ae58c6a59f3be382700037d37f79d216a8d1000f4ca212e9b43e2fd35fdc19c78470321ac1d7aba0615a70c9afffde1c4e1b7e017a2a7cca8af86ecb9576e7a6ce1e754e78d1a359b71242869e0f225f3d2d457fb9d7031617256205f38483e1eb3715fe351efa19c5adab46fcf28a3a3bfbd6fe4a454a0a48cfaf29bbfaf42e1553fc5d2f615fdb450156ababf06b51b31acda76c590c7518260ec0aeca2f23128ec6bd8f390eeae3ac33095f7a02356808abb42a64a6dc3c8", 0xc1}, {&(0x7f0000003040)="d85a911a9e127e07f10bf6e57170d797fb61dc6885f89ce5f9900344f0e4905067ab7261991bf11cf94fb7d33f94e73339cd811621af5087c3d43cd387bf4c2c5f4fab31b9377ef9afbcea02a731240e136925d3edf0d207c301363bd7c3e2502e7ec19063f76e200804727cad2788216a7605024e1c869c9ef80a931fa256924e5d14cc590abd5cc65c0a0bb598f753291b336826996962aee3c8fe364bce4a6e11b86e638f683f339841cc88a98eedf1bd6a95987c8ebcbb14b423740cdd86aa241cd2b91f4a5fd2ccdb9332974c67480b5b1b0cf2b1b3f853750855f7fc518774f949", 0xe4}, {&(0x7f0000003140)="ab86422d30474477044b43665f1a1386c4b053c6d437c6ba0ed9f762b117311a904871146119dcda8e418a13c1fecb1682147c32d80ed36d36084ea52e04676c970ffa38e94b43423984a9bda7f94a16b15316fd3b674bef880b7e2d93e03bfc93efc8a15c5e80316360bd615368585cdabf5c4a41a47d2267791bdad74ce3649183152234e60cac6c28f8dccd56", 0x8e}, {&(0x7f0000003200)="c19800a2c7c874ada231d0e1d088de88eb16bdce40e3c180981ad290d7d77c7e57c775c996ccd6a350cc6dded73e4eb304c3566c1cf0fe39c906410b3222fc74905c0a54c7dc106aa7c3ebb25ae2dc9b9d3ada36cfba391c197785a806e1", 0x5e}, {&(0x7f0000003280)="00610179988343b98405beb685c7fdf44799411288107a7a1f6532799aec1b22e5a724b35e92b99a9863848ba47dce85e5a80143687191a16f7da91f0554d7ef8a75edc5b406a6d6cc29013a56a3530adb550a912f8c5fe9d7f1c8555a493513460ed48bff3bcda32e43704bafd9223781", 0x71}], 0x7, &(0x7f0000004500)=ANY=[@ANYBLOB="3400000001000000010000000f87d1a1bd65bb8c88cc1b46db32b66a206db49b1aca34b843fb6e82f57422a93603578f4516bacab20ce9a065ee9277228953bf5c7b8e31708b3ca528629ce8284d636634b1f389a3d6c85298fce7e709edfa5c216d98121fa007072b3e53f95194", @ANYRES32=r1, @ANYRES32=r20, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="140000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="300000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="2c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="180000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB="180000000100000002000000", @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYBLOB="200000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0], 0xf4, 0x20000891}, {&(0x7f0000003880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003900)="3b0cad20f21fac616656f57c0a11bf5c48c48d77eae7fd7c8362193f", 0x1c}, {&(0x7f0000003940)="e73b47888a21ee213cf95c41a1bcb666dc7e6e2719a1c5f2be73214e5d42c959e79df23d15345d56639505bed3a8809a84835b3a5f65c19fa9d8e19a883b05d244b3d2ef72a9cf66c260e7e7d5501cddb2a4b1e81780b3358204f20e29eaf72debfab564a0507c4c4708fdebe0fea361021f4b5e090809fbaac9dc8f44c3fd", 0x7f}, {&(0x7f00000039c0)="670421a6907c64897d237791b82320c1f6e5675e09923233eeca1fd851475922f9066e6a59bde61aede9bad551c50449606475ce3e0edf9529bfa4d0ebf973b4a0200a83d45359cef4db03963a28444621a7ca5cf20b799331ea7af60973c88b6ff6aa81f8ac71f1dd4338429054d85bf26c077a8cf8306d5f6629ad6199fa10f9254f0699a90de3720ce06c6e07438f52e30b743c7cd1fed897971bd78c719ff997e6adc1a7a6a52f73", 0xaa}, {&(0x7f0000003a80)="d7da4d9ca021f7fcccba255357dd9e00e6319114fea3c16dd8ffadbaccbe88be3b9a988cdf4b3673fe4e4d3448458fe918b88e6f53132e913785080d718e68fcef9ffdd3c2c7de65daa71fa051e452f6", 0x50}], 0x4, &(0x7f0000003b40)=[@rights={0x10, 0x1, 0x1, [r1]}], 0x10, 0x80}, {&(0x7f0000003b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f00)=[{&(0x7f0000003c00)="324e964892f13f5687c0ffadbf38a40dc3d016036a7c597c93f9a7a0b5ec616780440f4229b9d5af60f151b585288077189f1bc74fc5826b", 0x38}, {&(0x7f0000003c40)="734ab8e9511e3e519cf3deee13bacbf26f96eb4eb1", 0x15}, {&(0x7f0000003c80)="a30283c9aeeafcb1c3429a65f0ab3c6a991cee13ffba3d7fed554abca25c92d657a4d03e0d3ebd5e8e1a2eee39098caef1831dd4093540274e07a441e93f7b4828dff44666f126d06210d2ca00a07ace2fa8ffbb4736069216fd39415c5b2869d7adcf18eeeb6686b9aed21a0af8f0ed5dc3313858c0fd2a3e2ed7c825bb81d3d468d657621f8b47908ae64c9f7f950cde7b2cd05629447b2ec0ebaac549879bc6", 0xa1}, {&(0x7f0000003d40)="13c3300ab5a510b8fb760cb2b41c2656a2e8fd0b2b135799266aa207ec043d08f1625802b66ea7d4fedb1657b274b82e831db2db808507d18bad194c6236a9af92a5061db85ddc32b32889839764fe24d059c12c3500a5b70db54dfc86427343835b529c37ee6a014e0f6e7224860a608c5ce01deb7ce21becac49cd3671078648d1e5d42b69a72a9b81a6a5f33acc720f4cecd3e61d33ea19e7adbe2dcefb06f22863033402529edf692e869deff23ce751df8558bbdc07dc3ec92ce9c5d92af868b828e4d64e3fca9535b71ad6df275b101e58c6ece35b33b40408ea", 0xdd}, {&(0x7f0000003e40)="c9cae265a470361f9b45cf684ad3b7e0dd12d4341e63de28a5bdd8101f8ea4c428ee78fdcf74efb210c38412e528bcbefca9cde884629243109f2c0721b157de942fa296b8d8e99c16d4c0022ee6383ab10640af8c4afbfe90edb76985abc5a24a660926c04d0fed04c02baaed0e2a150f8a3ac5a66e9db0d2a4e1584a6f8fa2248332acf3e946eb0a87d0ee804a1c8a0535c3b1da5d369c2939f31d31433b8975dde6d87416921c97074d14", 0xac}], 0x5, &(0x7f0000004240)=[@cred={0x18, 0x1, 0x2, r27, r28, r29}, @cred={0x18, 0x1, 0x2, r30, r31, r32}, @rights={0x10, 0x1, 0x1, [r0]}], 0x40, 0x80}, {&(0x7f0000004280)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000004400)=[{&(0x7f0000004300)="1d3499cd7de7e01bd1953d41b3fa6d3081d3ff228cf278db6084854bb072b2ab264304fb048074b1f2a65e52df4e37a4806f247f90e57129f36d1ead7cbdd58bd6ea94346f3d11655e1a971df57e748817ecefa0c0f706c0643b8f42d6034f0e921426cbf71dd4e24a306c4c766426f173a0904da1ee0efb97ca09b245b30e0828d2ba447b4c7e55ab48b1930d6796e5450c813ed70641df117429d7da8587257c678dc56749", 0xa6}, {&(0x7f00000043c0)="9a05504bcfa5fc6a0c9390", 0xb}], 0x2}], 0x5, 0x800) r33 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r33, 0x15) 2018/03/20 23:58:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:52 executing program 3: add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) 2018/03/20 23:58:52 executing program 0: r0 = inotify_init() ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x84, r0, 0xfffffffffffffffd}) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000080)=0x8e2, 0x4) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 89.931345] binder: 11321:11328 got reply transaction with no transaction stack [ 89.938918] binder: 11321:11328 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x301202) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000080)={0x1}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) [ 89.979235] binder: 11335:11339 ioctl c0306201 20008000 returned -14 [ 90.001304] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.009820] binder_alloc: binder_alloc_mmap_handler: 11335 20000000-20002000 already mapped failed -16 2018/03/20 23:58:52 executing program 3: r0 = add_key(&(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) 2018/03/20 23:58:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f00000003c0)}) [ 90.034314] binder: 11335:11344 ioctl c0306201 20008000 returned -14 [ 90.073128] binder: 11349:11352 got reply transaction with no transaction stack 2018/03/20 23:58:52 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x20000, 0x0) getsockname$netrom(r0, &(0x7f0000000200)=@full, &(0x7f0000000280)=0x48) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x100, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000140)={r1, r2, 0x80000000, 0x8000, &(0x7f00000000c0)="5e8ec1dc572a7de71999a7cbbaa24f0afab5eeafccdc58f3b39d6f406b38dbb83be4a3959edccfba80e321366150364e5e5ff64dfd2674e6eb0f090f861c7fa1b16b512b613ccc9d3e33ffaea8a681f4d61b513a30dfdb6386a2b93e4e6544c9bf1da97af7ccdcf9ed7e2ae2a62424c9e0d56c329481d59700cc63aba253bd22", 0x9, 0x400, 0x5, 0x3, 0x9, 0xffffffffffffff12, 0xfffffffffffffff8, "57747bb09d29c54da092ff4fbc1fb81b3e3811e6b5e907e505d72425de4d5461bae8f36878569b66bac22d56db049f6cc623071e96dbf2d7505268568124b81f5d080faac1a15221764bf5924afe63974199cf4e11dbf3223756a2b747be4eff7b47db71f2d1de45bb8461f5de847dac587b144ca3abfe746c"}) r3 = inotify_init() setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000a004e2104000000fe8000000000000000000000000000aafffffeff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000020000000a004e21ff030000ff02000000000000000000000000000105000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000a004e2108000000fe8000000000000000000000000000132f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x18c) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r3, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f0000000040)='./control\x00', 0x0) 2018/03/20 23:58:52 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)='net/ip6_mr_cache\x00') preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4) lseek(r1, 0xfffffffffffffffc, 0xfffffffffffffffd) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x2) 2018/03/20 23:58:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000000c0)) 2018/03/20 23:58:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000a9eff8)='./file0\x00', &(0x7f00000db000)='tmpfs\x00', 0x0, &(0x7f000000a000)) umount2(&(0x7f00000075c0)='./file0\x00', 0x0) 2018/03/20 23:58:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000140)) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, r0, 0x1}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x1b, 0x5, 0x574, 0x10c, 0x21c, 0xffffffff, 0x350, 0x350, 0x4a8, 0x4a8, 0xffffffff, 0x4a8, 0x4a8, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xc8, 0x10c}, @common=@inet=@TEE={0x44, 'TEE\x00', 0x1, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, 'erspan0\x00', 0x7}}}, {{@uncond, 0x0, 0xc8, 0x110}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x15, @ipv4=@rand_addr=0xfffffffffffffbff, @ipv6=@dev={0xfe, 0x80, [], 0xb}, @port=0x4e24, @icmp_id=0x64}}}, {{@ipv6={@loopback={0x0, 0x1}, @empty, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'ip_vti0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x0, 0x3, 0x4, 0x20}, 0x0, 0xec, 0x134, 0x0, {}, [@common=@hl={0x24, 'hl\x00', 0x0, {0x2, 0xccb}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x6, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, @ipv6=@remote={0xfe, 0x80, [], 0xbb}, @icmp_id=0x65, @icmp_id=0x66}}}, {{@uncond, 0x0, 0x110, 0x158, 0x0, {}, [@common=@icmp6={0x24, 'icmp6\x00', 0x0, {0xf, 0xffffffffffffffff, 0x0, 0x1}}, @common=@ipv6header={0x24, 'ipv6header\x00', 0x0, {0x10, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv6=@mcast2={0xff, 0x2, [], 0x1}, @ipv6=@loopback={0x0, 0x1}, @gre_key=0xffffffffffffffa0, @gre_key=0x2}}}], {{[], 0x0, 0xa8, 0xcc}, {0x24, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5d0) syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x80000000, 0x30000) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f00000000c0)=r3, 0x4) [ 90.080694] binder: 11349:11352 transaction failed 29201/-71, size 0-0 line 2763 [ 90.138973] binder: 11359:11364 ioctl c0306201 20008000 returned -14 [ 90.142189] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:52 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="25381720c7", 0x5, 0x11, &(0x7f0000000080)={0xa, 0x4e20, 0xffff, @remote={0xfe, 0x80, [], 0xbb}, 0x7ff}, 0x1c) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a45352, &(0x7f0000000000)={{0x8, 0x5}, 'port0\x00', 0x80, 0x4, 0x0, 0x1, 0xffffffffffffffff, 0x1000, 0x0, 0x0, 0x4, 0x3}) 2018/03/20 23:58:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/03/20 23:58:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4002001f, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f0000000140)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x8001, 0x0) r2 = getgid() r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x4105c0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f00000001c0)={{0x6, 0x2, 0x1f, 0x4, 0x0, 0x10001}, 0xffffffff}) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x3, r1, r2, 0x3, 0x1050) 2018/03/20 23:58:52 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000180), 0xff0a) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) ioctl$KVM_S390_UCAS_UNMAP(r1, 0x4018ae51, &(0x7f0000000040)={0xd6, 0x2, 0xffffffffffffffff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setitimer(0x3, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000140)) tkill(r2, 0x15) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x3, 0x8000) splice(r1, &(0x7f0000000080), r0, &(0x7f00000000c0)=0x3e, 0x100000000, 0x4) 2018/03/20 23:58:52 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4001, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x9) getgid() 2018/03/20 23:58:52 executing program 0: r0 = inotify_init() r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x210000, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000040)=""/95) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f00000000c0)=0x6ad) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:52 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x1) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xd4, 0xd, 0xf, 0x0, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x3f}, [@generic="3836ed4f7eaf52a182d051d5786d718795d00142472905ed2d9d85daba7138e455d484f4839e5ea28c718b09079d300dca0cff5b65cd795eec3cdf38a4fc48af3817596afa740f233ab48f002a96ab89830a94e78c012e74591f5bc46678a6e5c5f52ca95a071d862987658082b10a74ce6831bbbf7635ac33f28f0fb3edfde9523b6eff344e1bd89372101111c5e19e6917a51097817b66ae3684564d81f8ee9b5dc64f76e555d1b1203c5e6c6c9276ac2faba26c151deae6d883e000"]}, 0xd4}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 90.250448] binder: 11383:11386 got reply transaction with no transaction stack [ 90.258043] binder: 11383:11386 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:52 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x1be638f1d4a2e431) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = fcntl$getown(r0, 0x9) ptrace$setregset(0x4205, r1, 0x4, &(0x7f0000000000)={&(0x7f0000000300)="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", 0x1000}) r2 = dup3(r0, r0, 0x0) getpeername$ipx(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/03/20 23:58:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x10, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bbb0a17288d3edaf"}) [ 90.311986] binder: 11406:11408 ioctl c0306201 20008000 returned -14 [ 90.331445] binder: 11406:11410 ioctl c0306201 20008000 returned -14 [ 90.348856] binder: undelivered TRANSACTION_ERROR: 29201 [ 90.387595] binder: 11421:11423 got reply transaction with no transaction stack [ 90.395261] binder: 11421:11423 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/4096) socketpair$inet6(0xa, 0x0, 0x400000000000001, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r1, &(0x7f00000011c0)={0xd0002001}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) recvfrom$ipx(r1, &(0x7f00000010c0)=""/186, 0xba, 0x40000123, &(0x7f0000001180)={0x4, 0xff, 0x9e70, "816d9de82cad", 0x6}, 0x10) 2018/03/20 23:58:53 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) fchmod(r0, 0x8) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @loopback}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@broadcast=0xffffffff, @in=@loopback=0x7f000001, 0x4e20, 0x5, 0x4e21, 0xfffffffffffffffe, 0x2, 0xa0, 0x20, 0x3e, r2, r3}, {0x0, 0x1, 0x1, 0x3, 0xde, 0x10001, 0x68, 0x4}, {0x782, 0xefe, 0x2, 0x7}, 0x6, 0x6e6bbe, 0x0, 0x0, 0x1, 0x2}, {{@in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4d2, 0x33}, 0xa, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x3501, 0x0, 0x1, 0x4, 0x7fffffff, 0x1a1, 0x400}}, 0xe8) 2018/03/20 23:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1ff, 0x40) ioctl$sock_SIOCGSKNS(r3, 0x894c, &(0x7f0000000080)=0x278c) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x2, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/210) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:53 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0xa08c0, 0x4c) preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x6) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) 2018/03/20 23:58:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x1, 0x0, &(0x7f00000003c0)='w'}) 2018/03/20 23:58:53 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000040)=""/39, 0x27, 0x2) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000c45ff7)='/dev/dsp\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000180), 0xff0a) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0xffffffffffffffff) [ 90.431657] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = syz_open_pts(0xffffffffffffffff, 0x2000) ioctl$KDENABIO(r1, 0x4b36) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x140, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000000c0)={r3, 0xfe2, 0x7, 0x100000000}, 0x10) [ 90.484491] binder: 11431:11437 got reply transaction with no transaction stack [ 90.492072] binder: 11431:11437 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x1, 0x0, &(0x7f00000003c0)='w'}) 2018/03/20 23:58:53 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000000000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) lremovexattr(&(0x7f00000000c0)='./control/file0\x00', &(0x7f0000000080)=@random={'security.', 'o,-bdev#\x00'}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) [ 90.527928] binder: 11425:11448 ioctl c0306201 20008000 returned -14 [ 90.567804] binder: 11425:11448 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x3) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$read(0xb, r1, &(0x7f0000000280)=""/225, 0xe1) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x800, 0x4000) setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080)=0x2, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000000280), 0xc, 0x0, &(0x7f0000000200)="0dafe64216ee590000000000"}) 2018/03/20 23:58:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1ff, 0x2000) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x1, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet6_dccp_int(r1, 0x21, 0x4, &(0x7f00000000c0)=0xfffffffffffffff9, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x4) acct(&(0x7f0000000040)='./file0\x00') ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:53 executing program 7: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000040)='proc\x00', 0x0, &(0x7f0000000240)) mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/bus\x00', &(0x7f00000002c0)="7270635f706970656673008c7c647f0399287d03b74f09f3ebb5030000009df9a59c06000000000000f90ef07834c1c4", 0x0, &(0x7f0000000200)) mount(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x2000, &(0x7f00000002c0)) 2018/03/20 23:58:53 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x7, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x84) r2 = creat(&(0x7f0000000000)='./control\x00', 0xd0) ioctl$KVM_DIRTY_TLB(r2, 0x400caeaa, &(0x7f0000000040)={0x21c, 0xfff}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x10000000080) 2018/03/20 23:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) [ 90.613634] binder: 11455:11466 got reply transaction with no transaction stack [ 90.621248] binder: 11455:11466 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:53 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x101040, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r1 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x100000001, @remote={0xfe, 0x80, [], 0xbb}, 0x1}}, 0xe0e2, 0x0, 0x3, 0x7, 0x20}, &(0x7f0000000140)=0x98) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000240)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x9, 0x18727cea, 0x4, 0x1f, 0x8000}, &(0x7f00000001c0)=0x14) preadv(r1, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r1, 0x401, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) socketpair$ax25(0x3, 0x7, 0xcc, &(0x7f0000000200)) 2018/03/20 23:58:53 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:53 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:53 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x7, 0x100000001}) write$rdma_cm(r1, &(0x7f0000000b00)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000ac0)={0xffffffff}, 0x13f, 0x100e}}, 0x20) write$rdma_cm(r1, &(0x7f0000000b40)=@migrate_id={0x12, 0x10, 0xfa00, {&(0x7f0000000040), r2, r1}}, 0x18) 2018/03/20 23:58:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x1, 0x0, &(0x7f00000003c0)='w'}) 2018/03/20 23:58:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000080)={{0x80000, 0x6}, {0x0, 0x1}, 0x0, 0x0, 0x2}) 2018/03/20 23:58:53 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000080)="0001af") preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000000)={0x3}) r1 = socket$inet6(0xa, 0x80003, 0xff) getsockopt$inet6_buf(r1, 0x29, 0xcd, &(0x7f0000003fc8)=""/56, &(0x7f0000002ffc)=0x6) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) ioctl$KDENABIO(r0, 0x4b36) 2018/03/20 23:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40, 0x0) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000000c0)={0x2, 0x4, 0x1, 0xf7, 0x100000000, 0x200}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) [ 90.834085] bond0 (unregistering): Released all slaves 2018/03/20 23:58:53 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f0000000040)={0x2, 0x0, [0x1f, 0x3, 0x7, 0x925f, 0x99f6, 0x1, 0x800, 0x2]}) [ 90.900246] binder: 11495:11503 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:53 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x9, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bb"}) [ 90.943875] binder_alloc: binder_alloc_mmap_handler: 11495 20000000-20002000 already mapped failed -16 [ 90.979271] binder: 11495:11512 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:53 executing program 0: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./control/file0\x00', 0x140, 0xf8) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x30e, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, 0x40, 0x9, 0x5, 0x400, 0x5, &(0x7f0000000040)='gre0\x00', 0x8e8, 0xd86, 0x3}) r1 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000000c) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_MP_STATE(0xffffffffffffffff, 0x8004ae98, &(0x7f0000000000)) [ 91.023202] binder: 11522:11523 got reply transaction with no transaction stack [ 91.030756] binder: 11522:11523 transaction failed 29201/-71, size 0-0 line 2763 [ 91.067309] binder: undelivered TRANSACTION_ERROR: 29201 [ 92.331997] IPVS: ftp: loaded support on port[0] = 21 [ 92.621534] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 93.048735] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 93.054830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.100473] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 93.144341] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 93.150468] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 93.157747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready 2018/03/20 23:58:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:55 executing program 6: setrlimit(0x9, &(0x7f0000000000)={0x8, 0x1f}) r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) socketpair(0x1b, 0xf, 0x4a3, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0xff, 0x3}, {0x0, 0x8000000100000001}, 0x8, 0x40000, 0x80000000003}) 2018/03/20 23:58:55 executing program 4: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000280)={0xffffffffffffffff}) fgetxattr(r0, &(0x7f00000002c0)=@known='security.capability\x00', &(0x7f0000000300)=""/29, 0x1d) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r1, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x2, 0x204300) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x80000000, 0x5, 0x8000, 0x7, 0x9, 0x9, 0x100, 0x4, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x4}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r4 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x81}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={r5, 0x9}, &(0x7f0000000140)=0x8) 2018/03/20 23:58:55 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8, 0x20080) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) 2018/03/20 23:58:55 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x80000) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x0) 2018/03/20 23:58:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x9, 0x0, &(0x7f00000003c0)="7786e1d7bd7d8b35bb"}) 2018/03/20 23:58:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4$ipx(0xffffffffffffff9c, &(0x7f0000000140), &(0x7f0000000180)=0x10, 0x80800) getsockname(r1, &(0x7f00000001c0)=@in={0x0, 0x0, @rand_addr}, &(0x7f0000000240)=0x80) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000080)="48b83ad00000000000000f23c80f21f835080040000f23f8c423bd0de02d0f381d7e02410f013ac4c385407d40473e660f3882a2a2ab61bb6643d8d10f09c42175e264c03f0f07", 0x47}], 0x1, 0x10, &(0x7f0000000140), 0x0) getsockopt$inet_int(r3, 0x0, 0x14, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:55 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:55 executing program 6: r0 = getpgid(0xffffffffffffffff) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x3, 0x10000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000100)={0x8, 0xa, 0x5, 'queue0\x00', 0x10000}) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x9, &(0x7f0000000300)=""/4096) r2 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:55 executing program 0: r0 = inotify_init() llistxattr(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)=""/3, 0x3) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) syncfs(r0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) [ 93.235091] binder: 11705:11706 got reply transaction with no transaction stack [ 93.242668] binder: 11705:11706 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x2, 0x0, &(0x7f00000003c0)="7786"}) 2018/03/20 23:58:55 executing program 0: socketpair(0x5, 0x5, 0x2, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0x800) r1 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) r2 = socket$packet(0x11, 0x0, 0x300) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000100)={'bridge0\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) r3 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) mknod(&(0x7f00000000c0)='./control\x00', 0x100, 0xc7f) getpeername$llc(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10) ioctl$KVM_DIRTY_TLB(r3, 0x400caeaa, &(0x7f0000000080)={0xe0, 0xbf0}) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x802, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) [ 93.280524] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.286184] binder: 11696:11709 ioctl c0306201 20008000 returned -14 [ 93.304096] binder_alloc: binder_alloc_mmap_handler: 11696 20000000-20002000 already mapped failed -16 [ 93.318552] binder: 11723:11727 got reply transaction with no transaction stack 2018/03/20 23:58:55 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:55 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) [ 93.326089] binder: 11723:11727 transaction failed 29201/-71, size 0-0 line 2763 [ 93.342517] binder: 11696:11713 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:55 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x2, 0x0, &(0x7f00000003c0)="7786"}) 2018/03/20 23:58:55 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = inotify_init1(0x80800) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_nanosleep(0x7, 0x0, &(0x7f00000000c0)={r4, r5+30000000}, &(0x7f0000000100)) inotify_add_watch(r3, &(0x7f0000000040)='./file0\x00', 0x20) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:55 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:55 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x41, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000380)={0x0, 0x119ec5e70d13ba28, r0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000440)={r1, 0x80000, r0}) setsockopt$inet6_dccp_buf(r0, 0x21, 0x8f, &(0x7f0000000280)="d7233e783ed5f8faec5039b9f52bcd0842b2bacd034dabc83cc49ca0fbc49d7d57e49c7539448b708fdb784c990c72fff9295911fde839ca79652d97bf171bc6599575e589de4b41c7a229eeb0cba7e8daeff67a8a50ed0f24d5a73f8cbf542e7dc431e4a132b01377a0c635a96a36864e11907212acdc2ea2a0b4484ae3ab671a76727f8f21a715a8b15033ac914bcedcd5fc12532b8ab8ab4c60784facbab7a1b54b2e75e007f7396e5293c0ea2334d84e3a32516ca1e1ba404cd6020ff86ad319fb24a7334854040e92560359a51217c055a513a3ca032b117c27e4ecc08352a2024c74803927d0388f16a387", 0xee) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000004c0)=0x9, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r2, 0x0) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000000c0)={0x0, 0x10, "a57ad4b1dcba8860cd1055274f3f15ff"}, &(0x7f0000000100)=0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000016000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001d001305000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="00000080010354c800"], 0x3}, 0x1}, 0x0) faccessat(r3, &(0x7f0000000480)='./file0\x00', 0x20, 0x800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={r4, 0x40, 0x10}, &(0x7f0000000180)=0xc) fcntl$getflags(r0, 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) ioctl$KDENABIO(r0, 0x4b36) accept4$packet(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000200)=0x14, 0x800) 2018/03/20 23:58:55 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:55 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control\x00', 0x5c) 2018/03/20 23:58:55 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/checkreqprot\x00', 0xc2000, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x80000001) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000440), 0x8) clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffff9c, 0x1}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000100)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x8040, 0x0) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000280)='net/ptype\x00', &(0x7f00000002c0)='net/ptype\x00', &(0x7f0000000300)='ppp0.systemvboxnet0\x00', &(0x7f0000000340)='net/ptype\x00', &(0x7f0000000380)='bdev]^,+\x00'], &(0x7f00000000c0)) r2 = syz_open_procfs(0x0, &(0x7f0000000940)='net/ptype\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000540)=""/157, 0x9d}], 0x2, 0x1) r3 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') ioctl$TIOCSBRK(r3, 0x5427) preadv(r3, &(0x7f0000be4fc0), 0x0, 0x0) exit(0x482) linkat(r3, &(0x7f0000000000)='./file1\x00', r3, &(0x7f0000000040)='./file0\x00', 0x1000) lseek(r3, 0x0, 0x3) open$dir(&(0x7f0000000180)='./file0\x00', 0x100, 0x0) memfd_create(&(0x7f0000000080)='io\x00', 0x2) 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x0, 0x5}}) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x9, 0x80000) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f00000000c0)={0x3, 0xfffffffffffffffc}) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f0000000000)=""/63, &(0x7f0000000040)=0x3f) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0xe000) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f00000000c0), 0x4) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) [ 93.465940] binder: 11747:11761 got reply transaction with no transaction stack [ 93.473530] binder: 11747:11761 transaction failed 29201/-71, size 0-0 line 2763 [ 93.487571] binder: 11751:11759 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = dup(r0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000000)=0x20) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x2, 0x0, &(0x7f00000003c0)="7786"}) [ 93.518592] binder_alloc: binder_alloc_mmap_handler: 11751 20000000-20002000 already mapped failed -16 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() r1 = inotify_add_watch(r0, &(0x7f0000000000)='./control\x00', 0x808) truncate(&(0x7f0000000040)='./control/file1\x00', 0x6) inotify_rm_watch(r0, r1) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) [ 93.567659] binder: 11751:11759 ioctl c0306201 20008000 returned -14 [ 93.576873] binder: 11785:11790 got reply transaction with no transaction stack [ 93.584422] binder: 11785:11790 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x6, 0x0, &(0x7f00000003c0)="7786e1d7bd7d"}) 2018/03/20 23:58:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) socket$pppoe(0x18, 0x1, 0x0) 2018/03/20 23:58:56 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26101, 0x0) 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x7, 0x40000) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000040)='/dev/snd/seq\x00') r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getflags(r1, 0x40a) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000040)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}) fchmod(r0, 0x107) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@buf={0x2a, &(0x7f0000000080)="29d2b79b367f41af99d90038d3ce9f63fff33ed5ad80cd9c30fb7d106f4d0535136fa42e6e66b6d1f00c"}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 93.641446] binder: 11795:11802 ioctl c0306201 20008000 returned -14 [ 93.649410] binder: 11800:11805 got reply transaction with no transaction stack [ 93.656961] binder: 11800:11805 transaction failed 29201/-71, size 0-0 line 2763 [ 93.660235] binder: 11795:11810 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) setxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000100)="21de00", 0x3, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40000, 0x2) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0186416, &(0x7f0000000180)={0xb0f2, 0x4, 0x6, 0x661d, 0x14, 0x2}) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x3, 0x0, &(0x7f00000003c0)="7786e1"}) 2018/03/20 23:58:56 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) mknod(&(0x7f0000b59ff8)='./file0\x00', 0x1040, 0x0) execve(&(0x7f00009cc000)='./file0\x00', &(0x7f0000bb2000), &(0x7f00006fcff0)) r0 = syz_open_procfs(0x0, &(0x7f00004faffd)='io\x00') preadv(r0, &(0x7f0000be4fc0)=[{&(0x7f0000846fd4)=""/44, 0x2c}], 0x1, 0x0) lseek(r0, 0x0, 0x3) open$dir(&(0x7f00003e8ff8)='./file0\x00', 0x26102, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:56 executing program 2: syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) [ 93.699055] binder: undelivered TRANSACTION_ERROR: 29201 [ 93.759790] audit: type=1400 audit(1521590336.291:44): avc: denied { fsetid } for pid=11818 comm="syz-executor6" capability=4 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 93.766994] binder: 11821:11829 got reply transaction with no transaction stack [ 93.791460] binder: 11821:11829 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) socketpair$inet(0x2, 0x5, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x4, 0x291}, &(0x7f0000000100)=0x88) r3 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x7fffffff, 0x200) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={r1, r3, 0x0, 0x2}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x5, 0x5, 0x1, 0x1, 0x75d3b230, 0x0, 0x0, 0x80, r2}, &(0x7f0000000300)=0x20) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x8b2, 0x0, 0x80000001, 0x3, 0x3, 0x6000000000000000, 0x3, r2}, &(0x7f0000000180)=0x20) 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) listxattr(&(0x7f0000000000)='./control\x00', &(0x7f0000000040)=""/144, 0x90) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x3, 0x0, &(0x7f00000003c0)="7786e1"}) [ 93.803791] binder: 11825:11831 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x3) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(0xffffffffffffffff, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) [ 93.855167] binder_alloc: binder_alloc_mmap_handler: 11825 20000000-20002000 already mapped failed -16 [ 93.889659] binder: 11848:11852 got reply transaction with no transaction stack [ 93.897271] binder: 11848:11852 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x3, 0x0, &(0x7f00000003c0)="7786e1"}) [ 93.905723] binder: 11825:11831 ioctl c0306201 20008000 returned -14 [ 93.958589] binder: 11866:11869 got reply transaction with no transaction stack [ 93.966129] binder: 11866:11869 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xfffffffffffffff9, 0x92880) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000001c0)) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2, 0x0) fcntl$setsig(r2, 0xa, 0x1) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r3 = fcntl$getown(r2, 0x9) setpriority(0x1, r3, 0x5) inotify_init1(0x800) 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)={0x1008, 0x0, "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"}, 0x202000) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x5, 0x0, &(0x7f00000003c0)="7786e1d7bd"}) 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x800, 0x0) accept4$unix(r1, &(0x7f0000000040), &(0x7f00000000c0)=0x6e, 0x80800) 2018/03/20 23:58:56 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f00000006c0)={0x0, 0x7ff}, &(0x7f0000000700)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000740)={0x0, 0x4}, &(0x7f0000000780)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000007c0)={0x0, 0xf7, "c4c80271102497c03b6bb72dcee54f697273621a2f19143d44294036e2563114f9072c25c90aaa3d67e3e1ffbba537181fe287536c1f9bf4bdd9b135b36863b6b1e444d7cc0dbd222bd0f60b03c9d46e31075ffe166ed8e441251e63eeacc46348c979c80895254e91443204d471aed3fbe3dcadce3f2da91279cf9b0d57378f1ca9c382be1eea0c4e840685559561f35793cb711cac4dab9bbc6fb2296d5968e1a3abac772f4e69108b68dd23998254431c12099bd764ba334b4454f06d975eab6aa542ff244335e891e5b5b42c22482a51c9d7a000cdb9ed74cf0d7b96ec796e0fd0e24503a7ba08ac1dd355d5da5ec497d4f7384912"}, &(0x7f00000008c0)=0xff) sendmsg$inet_sctp(r1, &(0x7f00000009c0)={&(0x7f00000000c0)=@in6={0xa, 0x4e24, 0xf8, @empty, 0x5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000100)="e101a927d5884e5ea3269aadce5cd76a0427e289092a8654f061ce2f1574894bb676bdc3dcf7f0f9af478e39445f83cfc679be303d6c0b", 0x37}, {&(0x7f0000000140)="00dcd54902e915552ea77fc5c7c0fd888c85116ec9f3d733787b0bdd591ea3302bb02ca3ff9b46e9ea8c83ed79ecb5919807c3c1ece63ec2cf1d3dc037e4b61d39a922d13b5b8292", 0x48}, {&(0x7f00000001c0)="e27b4b3891dcfad6b390c2ef465e84eb19209b0206495916ee5f4f8b685cc819ac6841613f33677d353f32ea5392aa1cc6f6b5b05a975fcfc817a521b145ba20fccbb63ebebad53e01f90511d441908046eb84d3dd6457d3e02d38fd9f7d58bd2e3b0f48322888aaa2db9d877bc93c65e37ead32050aa1719a9222508ab51a9c81bba5d1538b4a9c13c7a125f20b11dec1041ecd78c788ed9dd820597374600512a64b956529add10c2934b0f50e97bc109c8eac6561433b6276a51d0c1b4b89efb0ddd19604fecaab00146c8132c0e6e28c486679f61178", 0xd8}, {&(0x7f00000002c0)="88beee75461b3470122fc200d028f37564461ca393e0c5f9873ed2b2e3fe315e8b246ed6a1a1dbcb1b081023", 0x2c}, {&(0x7f0000000300)="b3ee6ac0684d937842f1839d686d0b305109d94c2680389fde9b14c9536d35fc46118fe3c745b7d8523f0d44202ab99044801fb004311cb941b9fcd656e8ce9ab200c7e12fb5935da8687910b94cfd00a9b64ea6b827fb0f89af7e90322251974068b8323632ba5d67a4ed3548c7dcefd9caa88d955151554ffdbe278877ec3436944cea6998b15bc745dc700e32268d6461069896b57fd46c34f4fb11208afb76dc06f9436c93617f8ea639c3e1", 0xae}, {&(0x7f00000003c0)="cfd2dde1608a9be8a2409286f175234fe8eb2e959f8497aebdf7ae5eb8b4fade3f89414b4d83dce7bb6adba60a9f90bf479303f3c21658cf245ff6661f23ceff3e68ffaffc936157bdbce981ed19401c4291e15aebe895d2de47d6a15110ff67f8b5d8801596f4133d09b18026f4f31c9e1bfdb1809efc437d38b9b8fa7e1e619f46add6ccb1d13bc6cb2cc3d5b9317c5131675e73d44f5979799db3f39092f16cee5b4a73f58e76d8f3a10becb423b1906ca594053c12153025b285d98b383ff690f4208fff4c66c6a9052d68af44112e0cb5fb203f6e184b05ae19bfe746b44cdb", 0xe2}, {&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000005c0)="b92d3cf9b0d148db04028d82f9b514bde4b3c3816116a18e3ee729e41bded5102b02d636c0753f8039f3b10034d3e1e110d830fa91668ac41ea03d3a65be66faefaafcf13f7b2677fa0f7dc81d522ef5a551fc15e95e46d4d7340f90b56fac7945e9d533cdd2e0d54974f88d030a9e6030e3fb849bf91ca9b73de0b0c4ad0654797e597cf1b286d25bc406813d8ec17d4e730ce52e7b301ad121a02d1a34a8576edd8ebd38427b2d7bca08f7b4bd4d1a9c027f96dd90aaf5879f86ca", 0xbc}], 0x8, &(0x7f0000000900)=[@sndinfo={0x1c, 0x84, 0x2, {0x3, 0x20e, 0x1000, 0x5, r2}}, @sndinfo={0x1c, 0x84, 0x2, {0xfff, 0x8202, 0x1, 0x3, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0xddb6, 0x40, 0x8000, 0x6, 0x7, 0x5, 0x200, 0x1, r4}}], 0x84, 0x4000}, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000a00)) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r7, 0x8004ae98, &(0x7f0000000000)) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000a80)={0x6, {0x2, 0x4e21, @rand_addr=0x2}, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e24}, 0x80, 0x101, 0x2, 0x1ff, 0x3, &(0x7f0000000a40)='bcsf0\x00', 0x6, 0x6, 0x5}) ioctl$int_out(r6, 0x5462, &(0x7f0000000040)) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:56 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f6578650000000000ff070000ddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a075fb35331ce39c5a7568641006d7c0206a74e333265316a175350e730ab2bce682b69d603fc05ead7fb5180de13a74155d8560fe23dfbba10724631067f955b8810f3402053f95a8798b0e3749d9c79cdd5f62547e59ab4352ab0a3827384665fd636c7b86f4ad7a4c24549743c95fe92c16ea53e5e2a1dc065b53520b9cd4eb30edc0f70cb82149f8ff5b628eabf1a9ab91915a78b5cb259f4a0fbfab4dacbd68f077") fcntl$setstatus(r0, 0x4, 0x44003) pread64(r0, &(0x7f0000002000)=""/4096, 0x1000, 0x0) 2018/03/20 23:58:56 executing program 7: socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xffffffffffffffc0}, &(0x7f0000000080)=0x8) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000800)={'nat\x00', 0x0, 0x3, 0x7e, [], 0x1, &(0x7f0000000740)=[{}], &(0x7f0000000780)=""/126}, &(0x7f0000000880)=0x50) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000e40)={r1, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0xa}, 0x2af}}}, &(0x7f0000000c40)=0xfffffffffffffcc8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x7, @dev={0xfe, 0x80, [], 0x14}, 0x2}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000300)="49850c7b22b095fd762fccf540157ef23835b83c691d874b36db6106724c46173e9282ff24b46e3871fae83e18193d362c0a8d334522096c5fe78ed65a41c5f586aa54c853b1c57448a2e50a2123a2e9ad1945f698e05ec14eca94acf3b8ea7d322cb510f5673bc70b1732edbb8191d39a89c36493cb3f1a6da430931ec1c7330824cfd045b8bd1254a9d02397ca7d1d6643c185bf1ccc80f820eb81a0d1665026e5a7e6c59d53535be955e733a752ea538640bf8ad0ccd9c24eda793340d1ae73d695039c975ea8382e8480f2eb4cc0c6b731b99613273c7c55388457b1f0792f050d9fb623c6c4", 0xe8}, {&(0x7f0000000200)="0ffcaa0c9f1ff022287608ecc3c648b98cad209190928211e4bdd316956a49cdaab2d0b8a16196ae1cce3b4cda68b411654c36f0ae58f2700987dccd1c7a890c88e1d40e7d41944f", 0x48}, {&(0x7f0000000400)="055ac7dedca0694ef4ea0a4afe6fd52c52d3502846ca5c52640fc14f2f9526a54d90f6266793a183bc0d11d62275e92d7edab33267f008f9f6c77cdc5e840faffe95ef9cc7b54a6ceb70a67311250e0bbaafc60d0d403518f9405f308cca255fb65a36867d17c5dfae4e48ca38990f3d5c573fc3c6415ae0e7da5583ff1e8921b76386a18a6fcddd594ce64efaffde5e314fbf57d6947524a38132cf8c2a4331d5a03d9de2dd808ed5db47e0c330917c3b752f8f0a27639d66550a7159064f8009833fbaaf69849b522e16f2eef0f1", 0xcf}, {&(0x7f0000000500)="b8bc1adb57efc4dd8b30ea215429cf68e53ce11729bd96f47795a6291d3307d08e89f306eba2c5d22a3585cbc9bed25f169cfcfcd2aaec0ba27f7ccd56b0e5a3133512796cea36", 0x47}, {&(0x7f0000000580)="9964", 0x2}, {&(0x7f00000005c0)="99baa81c3b8b9519d28a11b2f80ad53b114856e38d6d553489e2983bff490bdab2534b0525e90dc8f77a453cdebb", 0x2e}], 0x6, &(0x7f0000000640)=[@sndinfo={0x1c, 0x84, 0x2, {0x2, 0x208, 0x7fff, 0x3, r1}}, @init={0x14, 0x84, 0x0, {0x7, 0x101, 0x5, 0x2}}, @sndrcv={0x2c, 0x84, 0x1, {0x2, 0xb6e1, 0x200, 0x4, 0x81, 0x6, 0x1, 0x4e, r2}}, @init={0x14, 0x84, 0x0, {0x9e, 0x4, 0x7, 0x1000}}], 0xb0, 0x8000}, 0x40000) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xf4, 0x4) io_setup(0x976, &(0x7f00000008c0)=0x0) io_submit(r4, 0x3, &(0x7f0000000bc0)=[&(0x7f0000000980)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000900)="c2a4648ad96875f525da9b450bcf54f8aac26f9ef5ccb9d266d97dcc051a0ac744951b754bec6dd13e8785583fcca342b3138eb9f10a4c94304b417ebb81bfd24693f2ba14618f206780aff596aacc89c37e730b71b1888e2a4baa0200fee84c9073a54253cbab287eec62f051ee7b9e1b0d657b0186df", 0x77, 0x9a0d, 0x0, 0x0, r0}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f00000009c0)="8ff247032847f9045d32a7e6c91e21f07f776d311f21d4459c420418bbb1e3201930a90c92b067a21c314733c212a9d8cbbc680ad68fdec34fa64fe022a478a4fe610b71e2aa0429f31269568ee1cb676a6713ddd975a3377dc5cd03e82d66a5646f52912a7f8ac922fb8cf0d7113f4987d52cacdcd64f81", 0x78, 0x6, 0x0, 0x0, r0}, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0xd3a8, r0, &(0x7f0000000a80)="2eb66f9f1a55520d209eae16d6c01ad8593cacecf8dada1d23512c218053ea07cc5fbc78e7c0a5bd647c81a082b56f083f4bc9bb56549bc33cc517ec36b2ebe6f5d9d4db0d74c76409817bc2dbff2d9725e3a18c49dcc29575f86b9bac7e19f45d33351e20f713a7bafb4977109a21f4d11c9790f3c79be3d926a23b66ae70a1d7dbd1003bf7e23d16731284c179df0a2a77239691cd2eb29e4294cbf39401a09800b0d6dae0cdc267591756596f61354cff5b7f5fab96a436b71d67fa419525aacad0cdc8b8533594666f3b71bfe058717021c88cd3c11a37ab2253a984d18377467f42427019357137cbd5b04aa2f5b28aff57ef78cf", 0xf7, 0x10001, 0x0, 0x0, r0}]) [ 94.043528] binder: 11873:11880 ioctl c0306201 20008000 returned -14 [ 94.056631] binder: 11876:11887 got reply transaction with no transaction stack [ 94.064232] binder: 11876:11887 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x4, 0x0, &(0x7f00000003c0)="7786e1d7"}) 2018/03/20 23:58:56 executing program 0: mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(0xffffffffffffffff, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:56 executing program 5: syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/unix\x00') read$eventfd(r0, &(0x7f0000000140), 0x8) [ 94.087890] binder: 11873:11890 ioctl c0306201 20008000 returned -14 [ 94.090190] binder: undelivered TRANSACTION_ERROR: 29201 [ 94.132907] binder: 11901:11905 got reply transaction with no transaction stack 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) dup(r1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9, 0x0) write$selinux_create(r2, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f7d3a6f626a6563745f723a756465765f657865635f743a7330202f7573722f7762696e2f637570736420313100d9a77d43bae429f83c446605590ff9ab0c4acb989dff326e1833b8aaaae8295ef21eb95c5ec99a2a5d897e51b3b6e6dcdf6306551e6e3660c60f5ce7"], 0x34) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) [ 94.140525] binder: 11901:11905 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000100)=[@free_buffer={0x40086303, r1}], 0xfffffe2c, 0x0, &(0x7f0000000240)="10c16eba0d58071db0b2aedf34d07be73217448acfc8c48ed771a3a363b7053d37b293cce0067f3269df3fb9710000000000000000000000000000"}) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3, 0x101140) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x3) 2018/03/20 23:58:56 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) write(r0, &(0x7f0000000400)='M', 0x1) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000001580)="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", 0x198}], 0x1, &(0x7f0000001180)}, 0x0) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001cc0)="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", 0x4f3}, {&(0x7f0000000440)="65df4d5ab35758500e2902e5830a31202e4df9a1856f029c692d5464c90aef086fd785bd3ef43cd8c8d0be1cacac65981479fff154e8deceef", 0x39}], 0x2, 0x0, 0x0, 0x845}, 0x44800) 2018/03/20 23:58:56 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x80400, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f0000000100)={0x80, 0xd000}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)={0x7, [0x2, 0x6, 0x611400000000000, 0x7, 0x6, 0x7, 0x81]}) r2 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) fcntl$setpipe(r1, 0x407, 0x8) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x3, 0x0, &(0x7f00000003c0)="7786e1"}) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007000000000000001c55a1cb2b"]) 2018/03/20 23:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r3, 0x400454ce, r4) 2018/03/20 23:58:56 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffff9c, 0xae01, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) splice(r0, &(0x7f0000000000), r1, &(0x7f0000000040), 0x3, 0x8) mkdir(&(0x7f0000000100)='./control/file1\x00', 0x4) inotify_add_watch(0xffffffffffffffff, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 94.192899] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/20 23:58:56 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r0, 0x800443d3, &(0x7f0000000040)={{0x5, 0x100000001, 0x38f2, 0x1, 0x6, 0xfffffffffffffff7}, 0x2, 0x1, 0x8}) r1 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r1, &(0x7f000003a000)='./control\x00', 0x80000d50) r2 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0xdb}, 0x4) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x0, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[]) [ 94.254405] binder: 11922:11925 got reply transaction with no transaction stack [ 94.261972] binder: 11922:11925 transaction failed 29201/-71, size 0-0 line 2763 [ 94.271644] binder: 11921:11928 BC_FREE_BUFFER u0000000000000000 no match [ 94.286037] binder: 11921:11937 BC_FREE_BUFFER u0000000000000000 no match 2018/03/20 23:58:56 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) flistxattr(r0, &(0x7f00000000c0)=""/251, 0xfb) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) getsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x4) 2018/03/20 23:58:56 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x3, 0x0, &(0x7f00000003c0)="7786e1"}) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {0x80000001}}) 2018/03/20 23:58:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[]) 2018/03/20 23:58:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x100, 0x0) accept4$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710, @host=0x2}, 0x10, 0x80800) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:56 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000000)="c4416fd031c74424003c000000c744240205000000ff2c24c4c2c106ad00000100c4a17ff0a900000000660f0865440fc71d0a0001000f0f37b0430fae0bf2411218b9800000c00f3235000800000f30", 0x50}], 0x1, 0x1, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="090000000000e2ff024d564b830f8cc801"]) 2018/03/20 23:58:56 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x8001, 0x0, {0x3, 0x2, 0xe5ba, 0x3, 0xfbd}}) 2018/03/20 23:58:56 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x3, 0x20042) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0)=0x10, 0x4) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x42, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'bpq0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xd}}}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:56 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000080)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x2c) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e22, 0x3ff, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x84) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[]) [ 94.433213] binder: 11957:11962 got reply transaction with no transaction stack [ 94.440757] binder: 11957:11962 transaction failed 29201/-71, size 0-0 line 2763 [ 94.449702] binder: 11955:11966 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:57 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x90, 0x0, &(0x7f0000000280)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}}}, @transaction={0x40406300, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x3, 0x0, &(0x7f00000003c0)="7786e1"}) 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 94.501237] binder: 11955:11966 ioctl c0306201 20008000 returned -14 [ 94.538766] binder: 11983:11986 got reply transaction with no transaction stack 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x101402, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)={r0, r1, 0x0, 0x3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:57 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 94.546341] binder: 11983:11986 transaction failed 29201/-71, size 0-0 line 2763 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) creat(&(0x7f0000000000)='./file0\x00', 0xe) 2018/03/20 23:58:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000180)="2f6578650000000000ff070000ddd9f191be10eebf000ee9ff0700000000000054fa07424adee916d2da75afe70b35a0fd6a1f0200f5ab26d7a075fb35331ce39c5a7568641006d7c0206a74e333265316a175350e730ab2bce682b69d603fc05ead7fb5180de13a74155d8560fe23dfbba10724631067f955b8810f3402053f95a8798b0e3749d9c79cdd5f62547e59ab4352ab0a3827384665fd636c7b86f4ad7a4c24549743c95fe92c16ea53e5e2a1dc065b53520b9cd4eb30edc0f70cb82149f8ff5b628eabf1a9ab91915a78b5cb259f4a0fbfab4dacbd68f077") fcntl$setstatus(r0, 0x4, 0x6000) pread64(r0, &(0x7f0000000800)=""/4096, 0xfffffffffffffed8, 0x0) [ 94.574850] binder: 11988:11990 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000040)={0x0, 0x1}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:57 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000e04b00000068"]) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB]) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x50, r0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x4000, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000300), &(0x7f0000000340)=0x4) rt_sigreturn() r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000000c0)=""/212) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000240)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r2, 0x28, &(0x7f00000001c0)}, 0x10) r3 = dup(r0) ioctl$DRM_IOCTL_GET_MAGIC(r1, 0x80046402, &(0x7f00000003c0)=0x5) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000280)) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) signalfd4(r0, &(0x7f0000000380)={0x80}, 0x8, 0x0) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:57 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, r0, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sync() getpeername$ipx(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x10) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 2018/03/20 23:58:57 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000006ffc), 0x4) 2018/03/20 23:58:57 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) write(r0, &(0x7f0000000400)='M', 0x1) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001cc0)="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", 0x683}, {&(0x7f0000000440)="65df4d5ab35758500e2902e5830a31202e4df9a1856f029c692d5464c90aef086fd785bd3ef43cd8c8d0be1cacac65981479fff154e8deceef", 0x39}], 0x2, 0x0, 0x0, 0x845}, 0x44800) 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x40400, 0x0) bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd, 0x122}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6b, 0x100) getpeername$ipx(r1, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f00000000c0)={{0x6, 0x8}, {}, 0x0, 0x0, 0x8000}) [ 94.779195] binder: 12029:12031 ioctl c0306201 20008000 returned -14 [ 94.794418] binder: 12029:12034 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB]) 2018/03/20 23:58:57 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000001031900060007000000068100023b0509000100010100ff1ffe6f", 0x1f}], 0x1) 2018/03/20 23:58:57 executing program 0: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f0000000040)='./control\x00', r1, r2, 0x800) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) setrlimit(0x4, &(0x7f0000000000)={0x401, 0x3}) inotify_add_watch(0xffffffffffffffff, &(0x7f000003a000)='./control\x00', 0x80000d50) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x3) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000040)) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='syzkaller1\x00', 0x10) 2018/03/20 23:58:57 executing program 5: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') readv(r0, &(0x7f0000000740)=[{&(0x7f00000000c0)}, {&(0x7f0000000640)=""/193, 0xc1}], 0x2) 2018/03/20 23:58:57 executing program 1: r0 = memfd_create(&(0x7f00007b0000)="1f00", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) pwritev(r1, &(0x7f0000002340)=[{&(0x7f0000000140)='4', 0x1}], 0x1, 0x0) 2018/03/20 23:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x101002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB]) 2018/03/20 23:58:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000e04b000000680d0000000070"]) 2018/03/20 23:58:57 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x26, &(0x7f0000000040), &(0x7f0000000080), 0x8, &(0x7f00000000c0)) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) ioctl$VT_WAITACTIVE(r1, 0x5607) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000040)=[{0x3, 0xffffffffcf0d1080}], 0x1) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 94.852793] audit: type=1400 audit(1521590337.384:45): avc: denied { map } for pid=12042 comm="syz-executor1" path=2F6D656D66643A1F202864656C6574656429 dev="tmpfs" ino=43319 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 [ 94.855004] binder: 12047:12052 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:57 executing program 5: setxattr(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)=@known='security.selinux\x00', &(0x7f0000000700)='/dev/gvisor\x00', 0xc, 0x0) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x80000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x40, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000040), &(0x7f0000000080)) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$KVM_DEASSIGN_DEV_IRQ(r1, 0x4040ae75, &(0x7f0000000100)={0x10001, 0x7fff, 0x2, 0x501}) 2018/03/20 23:58:57 executing program 1: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) dup2(r0, r1) 2018/03/20 23:58:57 executing program 7: r0 = getpid() r1 = getpid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000080)) 2018/03/20 23:58:57 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x7f, 0x1) sendmsg$nl_crypto(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa0100040}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@del={0x118, 0x11, 0x100, 0x70bd28, 0x25dfdbfb, {{'drbg_nopr_ctr_aes256\x00'}, [], [], 0x0, 0x2000}, [{0x8, 0x1, 0x7}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x7f}, {0x8, 0x1, 0x10001}, {0x8, 0x1, 0x96c}, {0x8, 0x1, 0x2}, {0x8, 0x1, 0x5}]}, 0x118}, 0x1}, 0x20000005) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000000c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x24) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x33, 0x2000) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:57 executing program 5: add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, &(0x7f0000000140)="ea", 0x1, 0xfffffffffffffffb) 2018/03/20 23:58:57 executing program 6: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, 0xd3a0, 0x8, 0x1ff, 0x1f, 0x28}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r1, 0x78a7}, &(0x7f0000000180)=0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x1000000105000, 0x0) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) linkat(r2, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00', 0x1000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) [ 94.930691] binder_alloc: binder_alloc_mmap_handler: 12047 20000000-20002000 already mapped failed -16 [ 94.958394] binder: 12047:12066 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) alarm(0x5) 2018/03/20 23:58:57 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000f5ffe0)={@loopback={0x0, 0x1}, 0x400, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80}, 0x400, 0x1}, 0x20) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) accept4(r1, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f00000000c0)=0x80, 0x80000) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100"]) 2018/03/20 23:58:57 executing program 5: request_key(&(0x7f00000004c0)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='vmnet1self\\:\x00', 0x0) 2018/03/20 23:58:57 executing program 1: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x9}, {0x100000001}, 0x2000000000000, 0x2}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000240)) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000340)=0x8, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r2, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc008641d, &(0x7f0000000200)={r3, &(0x7f0000000100)=""/201}) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040)={0x8, 0x4}, 0x2) 2018/03/20 23:58:57 executing program 2: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000280)) r1 = accept4(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000000c0)=0x80, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0xb8d, 0x5a}, &(0x7f00000001c0)=0x88) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r5, 0x3, 0x0, 0x3, 0x49}, &(0x7f0000000240)=0x18) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:57 executing program 7: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) write(r0, &(0x7f0000000400)='M', 0x1) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000001580)="1210d3251bc424d3923ab18611a4dacb2c57f076fdbc80e0b1f79147322eaa08488d541aa794ee8a44b71674d9093362fa2bbfd02d9dc52e341acb293d628a28f53eecf559ad61a6370973644c6dc0ce8a6dd3c695e3aa12bb66935ca4c371d49231fb5218a8b8bad5bbd9456c1daf716d88cff03566158dc334230505153adcd24957f3c63bc575241abb0cc9fe9df88202981311af4d7dd40f768c533ac3b6486a727b0f7952f4fa7624b0a7c1310fa60bf6d3584136494433722526cae0c6199bba5754d516fe27faed067101f4ccafcc1169695a4207cfe6755c1c5a2de85e73", 0xe2}], 0x1, &(0x7f0000001180)}, 0x0) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001cc0)="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", 0x1e9}], 0x1}, 0x44800) [ 95.072443] binder: 12096:12103 ioctl c0306201 20008000 returned -14 [ 95.111715] binder: 12096:12115 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:57 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}}, &(0x7f0000000140)=0x84) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() r1 = memfd_create(&(0x7f00000002c0)='posix_acl_access&\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000300)={0x3, 0x5, 0x1000}) mkdir(&(0x7f0000000000)='./control\x00', 0x100000000) r2 = open(&(0x7f0000000040)='./control\x00', 0x40100, 0x20) ioctl$ASHMEM_GET_NAME(r2, 0x81007702, &(0x7f0000000080)=""/167) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) ioctl$PIO_FONT(r2, 0x4b61, &(0x7f0000000180)="4177f8ee045856400766ade0fc58c504cc004a9b2c1a04028419b4c72882c9a18540a4a6a814a56446925e510fa85ee614a5ed848f5dcc03ed5ef88e5e21c3248ba0cd115ecead1188aa07cd4a1ae9b8489a30d98ddb0615be18786d66e7c1a3c033cbec1f") r3 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000200)={'security\x00'}, &(0x7f0000000280)=0x54) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100"]) 2018/03/20 23:58:57 executing program 1: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000040)=""/33, 0x21, 0x0) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x400000000000) r1 = fcntl$getown(r0, 0x9) ptrace$getsig(0x4202, r1, 0x8, &(0x7f00000000c0)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000100)={'syzkaller0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r3, 0x80045530, &(0x7f0000000180)=""/250) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000040)={{0x0, 0x5}}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x50) 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x40020015, r0, 0x0) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f0000000000)={0xffffffffffff7fff, 0x910, 0x8000}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000000c0)={0x0}) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(r2, &(0x7f0000000300)="16aca3205646cfd2841dfb34c13c9ef8fa4b794dcbf36855745e9f13d241b1a42f4b5a5da087f09e4c432f879033820053f7bbef2101b23a0162a88e1faf5650d024987a84c89e55072b70e3ef813031a3f9c2c36e7a31b7b9c5537f42680fd4631748f6b52acef2c3d97351324171a7c793781b6ab4360f01b35e722a14c1f862b22f75a714bcc2b20b02fa6b01fa8032772e7a755dd70091f1efa107d7c3b8385fff8a15c56af0656653f650b99ecdc7b662537c2b8c1f7b0e5d1b1604fa5645b1e805205912312c956761098a2f5557d4bf3de6e57f725871ff551873a2c3535f9d48822e9af99c0e6524020fd322e4be", 0xf2, 0x80, &(0x7f0000000400)={0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0x3f}, 0x1c) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000540)={r1}) fcntl$getown(r0, 0x9) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xcc, 0x0, &(0x7f0000000440)=[@reply_sg={0x40486312, {{0x4, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x40, 0x30, &(0x7f0000000140)=[@flat={0x77682a85, 0x0, r1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000100), 0x1}], &(0x7f0000000180)=[0x20, 0x78, 0x0, 0x48, 0x38, 0x48]}, 0x264}}, @exit_looper={0x630d}, @request_death={0x400c630e, 0x4, 0x1}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x8, &(0x7f0000000200)=[@flat={0x0, 0x101, r1}, @ptr={0x70742a85, 0x1, &(0x7f00000001c0), 0x1, 0x1, 0x19}, @flat={0x736a2a85, 0x100, r1, 0x1}], &(0x7f0000000280)=[0x0]}}, @acquire_done={0x40106309, r1, 0x3}, @acquire_done={0x40106309, r1, 0x2}], 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:57 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00009def3c)={0x1, 0x70, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2018/03/20 23:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000080)='lo\x00') r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:57 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) close(r0) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x2, 0xc980) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000300)={"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"}) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x80000d53) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:57 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{}, 'port0\x00'}) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100"]) [ 95.190726] binder: 12126:12130 ioctl 4b48 20000000 returned -22 [ 95.204922] binder: 12126:12130 got reply transaction with no transaction stack [ 95.212476] binder: 12126:12130 transaction failed 29201/-71, size 64-48 line 2763 2018/03/20 23:58:57 executing program 1: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) recvmsg(r0, &(0x7f0000ec7000)={&(0x7f0000cf1ff0)=@nfc, 0x80, &(0x7f0000000080), 0x0, &(0x7f0000000240)=""/4096, 0x1000}, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000140)={@empty, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@canfd={0xd, {{}, 0x0, 0x0, 0x0, 0x0, "100bf7b32300a0c931080b912fb06824487757529e7f24961dcb300e66232713d0dc27bc9ee031ea6da2634fdb6c86198a2454c1d987c87f36de0d4af2485c03"}}}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_tables_matches\x00') [ 95.269427] binder: 12126:12150 ioctl 4b48 20000000 returned -22 [ 95.283476] binder: 12126:12142 got reply transaction with no transaction stack [ 95.291115] binder: 12126:12142 transaction failed 29201/-71, size 64-48 line 2763 2018/03/20 23:58:57 executing program 7: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000200), 0x0, 0x20000081, 0x0, 0x0) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f0000000000)='./control/file0\x00', 0x43) 2018/03/20 23:58:57 executing program 5: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="a4ff", 0x2, 0xffffffffffffffff) 2018/03/20 23:58:57 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x400000) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000080)={{0x20, 0x3f}, 0x8}, 0x10) 2018/03/20 23:58:57 executing program 1: r0 = memfd_create(&(0x7f00007b0000)="1f00", 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r0, 0x0) 2018/03/20 23:58:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff01000000000000000000000700"]) 2018/03/20 23:58:57 executing program 5: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000100)="a4ff", 0x2, 0xffffffffffffffff) 2018/03/20 23:58:57 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000000)={0x0, 0x6, 0x8}) 2018/03/20 23:58:57 executing program 7: memfd_create(&(0x7f0000ee4000)='/dev/vga_arbiter\x00', 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x20000000000002}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mbind(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000080), 0x7, 0x3) 2018/03/20 23:58:57 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000000000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f0000000040)='./control/file0\x00', 0x20) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000240)={[0x6, 0x8, 0x675, 0x0, 0x6, 0x2, 0x9, 0x3, 0x0, 0x100000000, 0x1000, 0x6, 0x5ebf, 0x1, 0x81, 0x81], 0x0, 0x1}) listxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/184, 0xb8) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0086401, &(0x7f0000000100)={0x4a, &(0x7f0000000080)=""/74}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:58 executing program 5: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns/net\x00') 2018/03/20 23:58:58 executing program 4: socketpair$ax25(0x3, 0x3, 0xcf, &(0x7f0000000700)={0xffffffffffffffff}) finit_module(r0, &(0x7f0000000740)='tunl0\x00', 0x2) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = getpid() capset(&(0x7f0000000780)={0x20071026, r2}, &(0x7f00000007c0)={0x6, 0x5, 0x20, 0x7fff, 0x2, 0x6}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r1, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, &(0x7f0000000000)=0x80) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000001c0)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000100010000000000001b00000005000000c80400000403000004030000ffffffff0c010000040300003404000034040000ffffffff340400003404000005000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c4000c010000000000000000000000000000000000000000000000002c006164647274797065000000000000000000000000000000000000000000002008100000000000010000004800444e4154000000000000000000000000000000000000000000000000000110000000ac1414bb00000000000000000000000000000000000000000000ffff7f00000100044e2300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc000401000000000000000000000000000000000000000000000000240074746c000000000000000000000000000000000000000000000000000000030300004800534e4154000000000000000000000000000000000000000000000000000108000000fe8000000000000000000000000000aa000000000000000000000000000000004e227f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009800f4000000000000000000000000000000000000000000000000005c00434c55535445524950000000000000000000000000000000000000000000010000000180c200000fd56000002d0015002c000b00120015000600150031002f000400110001000600300022000000030000000000000004000000ac14140d7f000001ffffff00000000ff74756e6c30000000000000000000000074756e6c300000000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000720001080000000000000000000000000000fc0030010000000000000000000000000000000000000000000000002400736f636b657400000000000000000000000000000000000000000000000101000000400073657400000000000000000000000000000000000000000000000000000007000000fbffffff290d0000000400000600000005000000200000004201810034005245444952454354000000000000000000000000000000000000000000000100000004000000e0000002e00000027f004e20000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000940000000000000000000000000000000000000000002400000000000000000000000000000000000000000000000000000000000000feffffff"], 0x524) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:58 executing program 1: pipe(&(0x7f0000000000)={0x0, 0x0}) vmsplice(r0, &(0x7f0000000080), 0x156, 0x0) close(0xffffffffffffffff) 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100"]) 2018/03/20 23:58:58 executing program 6: socketpair(0xf, 0x3, 0x9, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x40, @tick=0x400, 0x2a8e, {0x9, 0x4}, 0x2, 0x1, 0x20}) r1 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000280)={{0x6, 0x1}, {0x0, 0x7fff}, 0x0, 0x4, 0x400}) 2018/03/20 23:58:58 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/status\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x2) inotify_add_watch(r0, &(0x7f0000000040)='./control\x00', 0x4000040) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:58 executing program 1: mlock2(&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x1) r0 = perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() socketpair$inet6_sctp(0xa, 0x0, 0x84, &(0x7f0000000040)) unshare(0x0) openat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2018/03/20 23:58:58 executing program 7: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ptype\x00') readv(r0, &(0x7f0000000200)=[{&(0x7f0000001c00)=""/4096, 0x1000}], 0x1) [ 95.527554] binder: 12194:12195 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x3) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{}, {}]}) sendmsg$nl_netfilter(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x120, 0x5, 0x0, 0x204, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x6}, [@typed={0x10, 0x73, @u64=0xffffffff80000001}, @generic="fe33834ae0419693174237ae964b55", @generic="e7417e7c95ff95bffee4d36ef15fe8237262a98a6390c6e0181f52d8637f106f15b19612792399b6ea12b2e0f7fa1874167dc3bb588a16517cf5e01f607e318a68ea6948720f57c6e6e63bb4509519", @generic="ba1bdf8c7e0d2ef85d2bcd4001a2c85892739f0da5cdb19e510507b700f5eb16ae6df8e3c298d2cb1772a18a09c99aa96b5985e9487b841f4c02542b295b8107c3581f9df7b7982dba4bddfa1a276f52f78b6a94c63167e2b0fd4b8dbf4e028e37763df20adc0425ec469bde6be2d5d8859eb1515b035ceae83215377a6bde4a4cf82f4fd4817657a9afb306ad1bfba92b686caf09a74673e74bb83039"]}, 0x120}, 0x1, 0x0, 0x0, 0x40000}, 0x40) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)=@ioapic={0x5000, 0x9, 0x0, 0xffff, 0x0, [{0x9370000000000000, 0x6, 0x3ff, [], 0x60}, {0x7fff, 0x6, 0x9, [], 0xfffffffffffff001}, {0x400000000000000, 0xed, 0x1, [], 0x1ff}, {0x7, 0xbd8, 0x7f, [], 0x4}, {0x41e, 0x8, 0xffffffff, [], 0x8}, {0x81, 0x96, 0xff, [], 0x7ff}, {0x5, 0x9, 0x800, [], 0x8}, {0x690c, 0x101, 0x4, [], 0x3cad}, {0x2, 0x7, 0x8, [], 0x55a}, {0x0, 0x2}, {0x9, 0x2, 0x4, [], 0x7f}, {0x7, 0xffffffffffffa4db, 0x2, [], 0x6}, {0xfff, 0x5, 0x2, [], 0x6}, {0x0, 0x8, 0xfffffffffffffff8}, {0x8001, 0x6, 0x0, [], 0x6}, {0x2, 0x1, 0xc329, [], 0x400}, {0x5, 0x62206265, 0x2}, {0x0, 0xca3, 0x13e54323800, [], 0xfffffffffffffff7}, {0x8749, 0x0, 0x1, [], 0x10001}, {0x8aa2, 0x1f, 0x8, [], 0x8}, {0x5, 0xd5, 0x6, [], 0x6}, {0x400, 0x7f, 0x20, [], 0x4}, {0x0, 0x69c8, 0x7, [], 0x5}, {0x5, 0x70, 0xfffffffffffffe01, [], 0x7}]}) 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:58 executing program 5: perf_event_open(&(0x7f0000271000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x800000000402, r0) r1 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)) timerfd_settime(r1, 0x0, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f0000000180)) 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control\x00', 0x0) mlock(&(0x7f0000ffa000/0x4000)=nil, 0x4000) r1 = add_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)="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", 0x1000, 0xfffffffffffffffb) keyctl$clear(0x7, r1) [ 95.571649] binder_alloc: binder_alloc_mmap_handler: 12194 20000000-20002000 already mapped failed -16 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000"]) 2018/03/20 23:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x680080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:58 executing program 7: r0 = syz_open_dev$sndtimer(&(0x7f00007f2000)='/dev/snd/timer\x00', 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000736000)) [ 95.625286] binder: 12194:12218 ioctl c0306201 20008000 returned -14 [ 95.653115] encrypted_key: master key parameter 'tešjÌ#‡û§Dû™+„™nÁ4­ÁŠÚ,à;š9Ê–ŒòX®#„úˆy£ÿæ8ðT 6'0' is invalid 2018/03/20 23:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x9, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1f}}, 0x8001, 0x795d, 0x8, 0x8, 0x20}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000001c0)={r2, 0x1, 0x2, 0x1}, &(0x7f0000000200)=0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000003c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffbfc2, 0x20201) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000140)={0x0, @empty, @local}, &(0x7f0000000180)=0xc) sendmsg$nl_route(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@ipv6_getaddr={0x8c, 0x16, 0x1, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x10, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x1, 0xffffffff80000000, 0x1, 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x31}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x8, 0x0, 0x8}}, @IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}, @IFA_CACHEINFO={0x14, 0x6, {0x40, 0x2, 0x6, 0x7f}}, @IFA_FLAGS={0x8, 0x8, 0x20}, @IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0xffffffff80000005, "62db50020f5dbd7b", "e58f0f250958d2d8a9b12752ae943a2c2e19939827f4804f324712a22b8b8671", 0x3, 0x4}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000400)=""/240) 2018/03/20 23:58:58 executing program 5: r0 = perf_event_open(&(0x7f0000757f88)={0x1, 0x78, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000140)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x40000000003, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000b11000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) 2018/03/20 23:58:58 executing program 1: clock_nanosleep(0x0, 0x0, &(0x7f00006ba000)={0x0, 0x1c9c380}, &(0x7f0000daaff8)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000001500)='/dev/sequencer\x00', 0x0, 0x0) 2018/03/20 23:58:58 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004fc8)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000f80)={&(0x7f0000000d80)=@setlink={0x20, 0x13, 0x1}, 0x20}, 0x1}, 0x0) 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000"]) 2018/03/20 23:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) [ 95.700263] encrypted_key: master key parameter 'tešjÌ#‡û§Dû™+„™nÁ4­ÁŠÚ,à;š9Ê–ŒòX®#„úˆy£ÿæ8ðT 6'0' is invalid 2018/03/20 23:58:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x0, 0x0, 0x2000}) [ 95.756189] binder: 12256:12264 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {}, 0x0, 0x0, 0x8}) r1 = open(&(0x7f00000001c0)='./file0\x00', 0x200100, 0x100) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x85}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000300)={r2, 0x7fff}, &(0x7f0000000340)=0x8) ioctl$KVM_ARM_SET_DEVICE_ADDR(r1, 0x4010aeab, &(0x7f0000000100)={0x8000, 0xf000}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/connector\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f0000000380)={{0x5, 0x9}, 'port0\x00', 0x0, 0x40, 0x7, 0xffffffffffff0001, 0x7, 0x2, 0x4012, 0x0, 0x5, 0xf1}) getsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000080)=0x100, &(0x7f00000000c0)=0x2) 2018/03/20 23:58:58 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000023efa8)={0x80, 0x0, 0x0, 0x2000}) 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000"]) 2018/03/20 23:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000001380)='/selinux/user\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x7, 0x0, &(0x7f0000000000)="6bdaf9aca02d0d"}) vmsplice(r0, &(0x7f0000001340)=[{&(0x7f00000000c0)="31efb18d84b0857031a0ffdcf604c81df768d8371bf91e9a50546f5c99e12cc68d6d0f33f6b473c2e3bed4c278e6133aea0522b57f2e18e03b23fe3dedcd6d0976a7db2141b4a70c82f0e1485286", 0x4e}, {&(0x7f0000000140)="1d79f2d6efe6acefe4e6474afeb5b78939b66a5ba9e429b39079e2b7f7b7163a383fc9e458264a10b9add864647b92e5390acf5ac5f83b69ed83989f85690d8a6f64e0bc91f7dfe7c716af78b3413303ab58fd19f40396300e8368f71bc73ae18bbc1ddd1aec242688", 0x69}, {&(0x7f00000001c0)="24a68f51b60bd18ff9eedb9cf9f8649b576056913d1e8727066d088cde9ee9307350cdfdbab07a6b18bdaf3576a31dd2f74c67eba0d747b64f2193d11063877e85725e5478fd4df94b575313ba9fd57096ce77b69cef838e8f5ce0953a4db24183d0817ef83a8c81c23bca820beb58a8b7b419d6928f4ffea50cfa22961dc44540ef78670bd19728dfd55aa62938a01faf78db41059aa9526381d1d447c84c998ca48602304a689306288f747be86d1d2f45bcbc32f98df42bf8dddac8709b51e7e76c36ab44fe2eda4b818362fb08f161c16cf211384eb41f5137b134d9da034aa22decc3b9c5d8d0130b1b2d", 0xed}, {&(0x7f0000000040)="80ce99bba8dbdd0cc6ae68590469c550cbf4f98da39a6e6d042e05f581", 0x1d}, {&(0x7f00000002c0)="521665886bf423dd35b746585290d5ef96f3e021e6834324e6522a0d478df431aaa00df8e417e187ae829d55cdd948532bb7ad74a8e72463c4e60dc61a17e57788d0fcfa53f9dd1e5f8e8202d9d97531a7bef7913ad26d1735c9fbba08ccdabf67032bfec7be2088", 0x68}, {&(0x7f0000000340)="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", 0x1000}], 0x6, 0x0) 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() r1 = request_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='\x00', 0xfffffffffffffff9) r2 = request_key(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)='%\x00', 0xfffffffffffffffd) keyctl$link(0x8, r1, r2) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000001200)='./control/file0\x00', 0x10080, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000001240)={0x0, 0x9}, &(0x7f0000001280)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000012c0)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1a}}}}, &(0x7f0000001380)=0x84) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) llistxattr(&(0x7f00000001c0)='./control/file0\x00', &(0x7f0000000200)=""/4096, 0x1000) creat(&(0x7f0000000000)='./control/file0\x00', 0x8) 2018/03/20 23:58:58 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000001c0)={'gretap0\x00', 0x400}) 2018/03/20 23:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000040)={0x101, 0x100, 0x0, 0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000003) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:58 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 2018/03/20 23:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$TIOCCONS(r1, 0x541d) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000000c0)={0x1, 0x8001, 0xd04}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:58 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000180)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000140), 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000000000fa1b"], 0x9) 2018/03/20 23:58:58 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000942000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='tunl0\x00', 0x10) sendto$inet(r0, &(0x7f0000000b40)="94", 0x1, 0x0, 0x0, 0x0) 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() mkdir(&(0x7f00000000c0)='./control/file0\x00', 0x800000003) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d4c) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x1e000, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x4, 0x4) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) [ 96.024784] binder: 12305:12306 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000000000"]) 2018/03/20 23:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000000005) keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:58 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000080)=0x1c) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}, {0x800000000000}, 0x0, 0x0, 0x20000000000002}) 2018/03/20 23:58:58 executing program 5: add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200), 0x0, 0xfffffffffffffffd) request_key(&(0x7f0000000000)='dns_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)='vmnet1self\\:\x00', 0x0) 2018/03/20 23:58:58 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000180)=0x2, 0x4) 2018/03/20 23:58:58 executing program 7: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x4a, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x7, &(0x7f0000000280), 0x0, 0x8, &(0x7f00000002c0)) 2018/03/20 23:58:58 executing program 6: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) signalfd4(r0, &(0x7f0000000040)={0x6}, 0x8, 0x800) 2018/03/20 23:58:58 executing program 0: r0 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x935a, 0x20400) symlinkat(&(0x7f0000000080)='./control/file0\x00', r0, &(0x7f0000000100)='./control\x00') r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200080, 0x0) flock(r1, 0x1) r2 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x1) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000140)=""/4096, &(0x7f0000001140)=0x1000) inotify_add_watch(r2, &(0x7f0000000040)='./control\x00', 0x80000d4f) getgroups(0x4, &(0x7f0000001180)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) ioctl$TUNSETGROUP(r0, 0x400454ce, r3) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:58 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 2018/03/20 23:58:58 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000b10000)=0xc2, 0x6677bbc4) bind$inet(r0, &(0x7f00000f0ff0)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23}, 0x10) write(r0, &(0x7f0000000400)='M', 0x1) sendmsg$unix(r1, &(0x7f00000003c0)={&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001100)=[{&(0x7f0000001580)="1210d3251bc424d3923ab18611a4dacb2c57f076fdbc80e0b1f79147322eaa08488d541aa794ee8a44b71674d9093362fa2bbfd02d9dc52e341acb293d628a28f53eecf559ad61a6370973644c6dc0ce8a6dd3c695e3aa12bb66935ca4c371d49231fb5218a8b8bad5bbd9456c1daf716d88cff03566158dc334230505153adcd24957f3c63bc575241abb0cc9fe9df88202981311af4d7dd40f768c533ac3b6486a727b0f7952f4fa7624b0a7c1310fa60bf6d3584136494433722526cae0c6199bba5754d516fe27faed067101f4ccafcc1169695a4207cfe6755c1c5a2de85e73", 0xe2}], 0x1, &(0x7f0000001180)}, 0x0) sendmsg$unix(r1, &(0x7f0000000540)={&(0x7f0000000180)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001cc0)="8c76f06ec3b5b3438fb73a3a95ee297d09bd0495d80b7de2ef43bb0d478210675002bb5591587b6590e3735bb085af5be84284bb509a701583ce79c75c977e73f22721895b16a9337a6b5b35b32121c1da13d8b11a995ccdcaa64b51dee2bde84fcf9654ebfc76e691137016bfe2b5ec3f95a47bbe1b394306b71fe2e066b9f779bb44668d183383b47ff8bb10bceb1ae62f01defdc92635c4d69bf70b6957790577d209641cd40aa0fd4dbdef3c4b41007a87215f56fbb5a1225de36c47d59ff5cc6d41e095e4457a73cf1c8d76e9ee9181bd42d87cf7ab01f45b279ab26b3279e0e04a02e8b391ccacc0dd5d9407d85781b683295f038230d1ad2ca6cce80fbb5770f1a1d8d585d03d3b247df97ca0713b6c60ac275a67b761ab23b9b453614ef9ad457e450582d753f07dd3dfb397cd8da2c5102c31cc3bf2bdb2ae6c2f1efd755e5991faaf9b6e8507f37b6db9a112400ff7c901bcad432e1c715c994bd278c8e211be982c07012299baf5613ebf8aa45a0ffcf2ef2fffa508b315a7fa4be0e67fc2e812e606", 0x188}, {&(0x7f0000000440)="65df4d5ab35758500e2902e5830a31202e4df9a1856f029c692d5464c90aef086fd785bd3ef43cd8c8d0be1cacac65981479fff154e8deceef", 0x39}], 0x2, 0x0, 0x0, 0x845}, 0x44800) [ 96.123170] binder: 12323:12330 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000000000"]) 2018/03/20 23:58:58 executing program 7: perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setns(0xffffffffffffffff, 0x0) 2018/03/20 23:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:58 executing program 4: r0 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'vlan0\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) r1 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r1, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x5, 0x622001) ioctl$KDDISABIO(r2, 0x4b37) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) [ 96.181567] binder: 12323:12345 ioctl c0306201 20008000 returned -14 [ 96.250222] binder: 12361:12362 ioctl c0306201 20008000 returned -14 [ 96.290261] binder_alloc: binder_alloc_mmap_handler: 12361 20000000-20002000 already mapped failed -16 2018/03/20 23:58:58 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) stat(&(0x7f00000007c0)='./file0\x00', &(0x7f0000000800)) 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x3) io_setup(0x4, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:58 executing program 5: 2018/03/20 23:58:58 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) mkdir(&(0x7f0000042ff6)='./file0\x00', 0x40) syncfs(r0) inotify_add_watch(0xffffffffffffffff, &(0x7f000003a000)='./control\x00', 0x80000d50) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x3, 0x45, 0x7ff, 0x7fe0000000000000, [], [], [], 0xae, 0x6, 0x401, 0x101, "79bcec08a94b3ff5037f015cbf123b9c"}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:58 executing program 7: 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000000000"]) 2018/03/20 23:58:58 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xb4, 0x0, &(0x7f0000000380)=[@request_death={0x400c630e, 0x0, 0x3}, @decrefs={0x40046307, 0x4}, @acquire_done={0x40106309, r1, 0x1}, @reply_sg={0x40486312, {{0x0, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x68, 0x40, &(0x7f00000001c0)=[@ptr={0x70742a85, 0x1, &(0x7f0000000140), 0x1, 0x0, 0x1f}, @flat={0x776a2a85, 0x10b, r1, 0x3}, @ptr={0x70742a85, 0x0, &(0x7f0000000180), 0x1, 0x2, 0x23}], &(0x7f0000000240)=[0x0, 0x20, 0x0, 0x40, 0x20, 0x78, 0x48, 0x28]}, 0x4}}, @request_death={0x400c630e, 0x4, 0x2}, @increfs={0x40046304, 0x2}, @release={0x40046306, 0x3}, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x4, 0x3}, @register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000140)) 2018/03/20 23:58:58 executing program 7: 2018/03/20 23:58:58 executing program 5: [ 96.299930] binder: 12361:12369 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:58 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:58:58 executing program 7: 2018/03/20 23:58:58 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x4000, 0x0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) r2 = getuid() r3 = getegid() ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000080)={0x8, 0x2, 'client1\x00', 0x2, "80f619e914c25d96", "9811fe407b3ba57005a1b52418f0eb061b6b7cd68b0e2dec4b48fe6663df6a2c", 0x9, 0x24}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x8) fchownat(r1, &(0x7f0000000040)='./control\x00', r2, r3, 0x1400) keyctl$join(0x1, &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:58 executing program 5: [ 96.362770] binder: 12380:12384 ioctl c018620b 20000000 returned -14 2018/03/20 23:58:58 executing program 7: r0 = socket$inet6_sctp(0xa, 0x800000000001, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000ee4000)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r0, &(0x7f0000001100)='I', 0x1, 0x0, &(0x7f00000010c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x8}, 0x1c) listen(r0, 0x4000000400081) accept4(r0, &(0x7f0000001fc0)=@can, &(0x7f0000000100)=0xfffffffffffffd8b, 0x0) 2018/03/20 23:58:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007"]) 2018/03/20 23:58:58 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:58 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) [ 96.403138] binder: 12380:12387 ioctl c0306201 20008000 returned -14 [ 96.428489] binder: 12380:12399 ioctl c018620b 20000000 returned -14 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) sync() ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000100)={0x2, 0x80000000}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/03/20 23:58:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff010000000000000000000007"]) 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x80802) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x12100, 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f00000000c0)=""/191) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control\x00', 0x800) [ 96.612434] binder: 12416:12430 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() 2018/03/20 23:58:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000000)={0x0, 0x3, {0xffffffffffffffff, 0x0, 0x100000000, 0x2, 0x8}}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) 2018/03/20 23:58:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000000, 0x2) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r2, 0x800448d3, &(0x7f0000000200)={{0x1, 0x3, 0xd8, 0xf33, 0x7, 0x8}, 0xfffffffffffffffa, 0x80000000, 0x9, 0x19, 0x9, "08e60f5002272f5fc74479a775aca59511a404b98aa04bc6ad95d5b543e48dfad3369b488c37bac4e1e53009198668806dafd647892c139d414063668665e6df03f1621a6113a37c377162b6d0f4a171c7fa8850d051f8b72afc733e4786b39cd6f6b519aa25e1e9764524951c98dcde101039cc66e71ed04deb8dca8ea6e01d"}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getgroups(0x8, &(0x7f0000000080)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() r8 = getegid() setgroups(0x4, &(0x7f0000000340)=[r5, r6, r7, r8]) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f0000000140)) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0xfffffffffffffd46) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = dup(r0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x14) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0x18}, r2}, 0x14) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000000000"]) 2018/03/20 23:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x261, 0x1000000000303007) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x3887, 0x29af00) renameat(r0, &(0x7f00000000c0)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000000)={{0x3ff, 0x3}, {0x4, 0x3}, 0x4, 0x0, 0x80000001}) [ 96.708371] binder: 12444:12451 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x20400, 0x0) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x1, 0x6}) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000180)=0x209000000) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000040)={'ip6gre0\x00', 0x7f}) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000000000"]) [ 96.762137] binder: 12444:12460 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 6: personality(0x6200007) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@loopback}, &(0x7f0000000100)=0x14) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r2}, 0x10) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40000, 0x0) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000340)) close(r4) syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0x385, 0x1c1000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000240)={0x7, r2, 0x1}) 2018/03/20 23:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x800000040020011, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x60802) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, @in={0x2, 0x4e21}, @in={0x2, 0x4e21, @rand_addr=0x7}, @in6={0xa, 0x4e21, 0x43cb, @local={0xfe, 0x80, [], 0xaa}, 0x7fffffff}, @in6={0xa, 0x4e22, 0x80000001, @dev={0xfe, 0x80, [], 0x11}, 0x2}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0xe62e, @dev={0xfe, 0x80, [], 0x17}, 0x2}], 0x94) ioctl$TCSBRKP(r1, 0x5425, 0xe5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000000000000010000000000000000000000ff0100000000000000000000"]) 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000013c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a45352, &(0x7f0000001400)={{0x10000, 0xd0}, 'port1\x00', 0xa, 0x1000, 0x400, 0x1ff8000, 0x12, 0xcf, 0x80000001, 0x0, 0x2, 0xfb3}) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r2 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) preadv(r0, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4096, 0x1000}], 0x1, 0x0) execveat(r2, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000040)='ppp0\\\x00', &(0x7f0000000080)='^wlan0:.)\x00', &(0x7f00000000c0)='vmnet1\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='systemmd5sum]\x00', &(0x7f0000000180)='vboxnet1+mime_type\\proc^bdev\x00', &(0x7f00000001c0)="b77070703076626f786e657431656d312e73797374656d00"], &(0x7f0000000340)=[&(0x7f0000000240)='\x00', &(0x7f0000000280)='\x00', &(0x7f00000002c0)='.wlan0\\\x00', &(0x7f0000000300)='cpusetlousersecurity+\'selinux\x00'], 0x4496ab2d80094cd0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2018/03/20 23:58:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8042) timer_create(0x0, &(0x7f0000000280)={0x0, 0x4, 0x2, @thr={&(0x7f0000000100)="ebc5bb120bced10bf2b8fac9c0879962a0a9fe8aea45a38b2ff55625b50ade7e59d436f3a41f3245a429b5fb49965870b9ae6dfe73551fb7ed3f8ba6f83c71937fac8416f7a5f7087483df72384cf2ace235fc0fab60e57664ece03aee699f8eab24d5a02da12981ed4a714cb5badc5a11ea2dd6894f34c59a7da8d0acae0e", &(0x7f0000000180)="8becfa140f30f1eb4d8f0881a47c158faa547250050f892b9c18b4b4f58f6c2de66cb2fbdc28adfbe7f1f7ec9e3ce515a2f320b9ebab789291e79163d560fce7ccadc06bb436c7abd3eabd3c45abb83bfc889585c420cd9e2a776ff6d4a47d546f3a41fd4020c86dc5e2ce8f66a783d9037c82d15ddef78d57ee6773f37b8b2d03fe33d1d5b98791bfe3c0ee6b59b765fa15bd393a2e98506b607076661daa06a563892b360c502004aa9a094204b2b4f51cc32b5fe3132bd432ce81b117c6208ff5f62b86f360f751a5110bdf1c7584e1c6e62a9a222e7ad739af67d9beb9a66a85cd61a4171072"}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"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"}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000000c0)={0x3f, 0x0, 0x13}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0xb) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5c6, 0x240) ioctl$KVM_DIRTY_TLB(r1, 0x400caeaa, &(0x7f00000000c0)={0x2, 0x8000}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000280)={{0x0, 0x5}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000000)) 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000040)="afec9557b74d83ad0d0c83f98826460716469a819412c922c82059a28838035680594e84c4d9dfcaf7116254cc96b37c43318091188ba93dd766a0096abccf6e0fdab383d0864c665e5eec2c00a4f0e65a26b1abd415c7faf39de29206b839f4318370c343f7c31e4ff68226cc4c5edbf09e7d048bab5362911589587f23d65ca515e13315489f9c8c63e7be19018be5830239228674950fe1d336e34d7302382ad9720bb847b38f8603f82db0197f3b9832b3c4db54fa2b55f7a87905533ec58ce603e5e269dbfa5587eba66e62711ee3ae878ef65cd22838028aac0b8c7c3493c00d2da6d0") r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000140)='./control/file0\x00', 0x0, 0x8}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)={0xf, 0x800, 0x1380, 0x7cf8, 0x0, r2, 0x9}, 0x2c) r3 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) fallocate(r2, 0x3, 0x1, 0x800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x185f, 0x9}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={r4, 0x8000}, 0x8) 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 7: [ 96.913757] binder: 12480:12491 ioctl 5425 e5 returned -22 [ 96.937285] binder: 12480:12491 ioctl c0306201 20008000 returned -14 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1000001000000) r3 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x2249, 0x80) getpeername$ax25(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x7, 0x50080) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x40020011, r0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x3, 0x2) ioctl$sock_ipx_SIOCIPXCFGDATA(r1, 0x89e2, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000000000)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000c73000)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x10) 2018/03/20 23:58:59 executing program 3: [ 96.991292] binder_alloc: binder_alloc_mmap_handler: 12480 20000000-20002000 already mapped failed -16 [ 97.022331] binder: 12480:12505 ioctl 5425 e5 returned -22 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) fcntl$notify(r0, 0x402, 0x1) creat(&(0x7f000001cff0)='./control\x00', 0x0) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7, 0x800) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)) 2018/03/20 23:58:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendfile64(r1, r1, &(0x7f0000000040), 0x6) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() fcntl$getown(r0, 0x9) r1 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0xe3fb, 0x400000) getpeername$ax25(r1, &(0x7f0000000280), &(0x7f00000003c0)=0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0x8) getpgrp(0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) pipe2(&(0x7f00000001c0), 0x4000) socket(0x1a, 0xa, 0x5) r3 = syz_open_procfs(r2, &(0x7f00000002c0)="6e65742f756e697800e39890ee2f2bbc65a840268d137217d544ccd5c21bc9caec26405c5c66add1bf2d1ccabdefa4f6829bb8c27a3564fb30d87d4dbc9b1d3850aff58cb796384c56c046d9fd71b0cac91ecac360a3d8c10d30e14cd2de2418408e6ce66d66c0be5fc6e9061b98563d3bf5e266dafc319a140fa93c7903fb9978681fbc5e59cdcfec584ca407c00ef9d24d4498fd1a3cd2bdd9e7109768003c4bb4b3ccb26682372bc9765b51b7661cfcade61006000000000000007da00834990a5fdd4b2b29ecf66257ff39f7acb2083cca117c2dbb63edffa5ad5c2b7531c18e265b") bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r3, 0x50, &(0x7f0000000040)}, 0x10) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x40040, 0x0) pipe(&(0x7f0000000100)) creat(&(0x7f000001cff0)='./control\x00', 0x8) 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 6: [ 97.245614] binder: 12543:12557 ioctl c0306201 20008000 returned -14 [ 97.268781] binder: 12543:12550 ioctl 890b 200000c0 returned -22 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./control/file0/file0\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) socketpair(0x17, 0x1, 0x3c, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r2, 0x28, 0x2, &(0x7f0000000080)=0x7fff, 0x8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) modify_ldt$read(0x0, &(0x7f00000000c0)=""/212, 0xd4) 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 5: 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 4: r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x104) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x2d, "56099aa005d06be70e5eb3094b6dee30d1674ae2b907494612e76d15107095a087db4f73fd28bdf143f96274cd"}, &(0x7f0000000100)=0x35) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000140)={0x800, 0x8200, 0x0, 0x5, r1}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:58:59 executing program 1: sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 7: 2018/03/20 23:58:59 executing program 5: [ 97.302307] binder: 12543:12557 ioctl c0306201 20008000 returned -14 [ 97.322717] binder: 12543:12557 ioctl 890b 200000c0 returned -22 2018/03/20 23:58:59 executing program 3: 2018/03/20 23:58:59 executing program 6: 2018/03/20 23:58:59 executing program 0: r0 = inotify_init() r1 = gettid() getpgid(r1) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./control/file0\x00', 0x400) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:58:59 executing program 1: sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) [ 97.388816] binder: 12576:12581 ioctl c0306201 20008000 returned -14 [ 97.420675] binder_alloc: binder_alloc_mmap_handler: 12576 20000000-20002000 already mapped failed -16 2018/03/20 23:59:00 executing program 7: 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0xffffffffffffff0c, 0x0, &(0x7f00000002c0), 0x1, 0x0, &(0x7f0000000040)='@'}) 2018/03/20 23:59:00 executing program 6: 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x20) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:59:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x48c000, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000140)={r4, 0x7}, &(0x7f0000000180)=0x8) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:59:00 executing program 1: sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 7: 2018/03/20 23:59:00 executing program 6: 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000100)='./control/file0\x00', 0x80000d50) r1 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getgroups(0x1, &(0x7f0000000340)=[0x0]) r5 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@rand_addr}}, &(0x7f0000000480)=0xe8) r7 = getegid() ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000004c0)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) r10 = getegid() r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) fcntl$getownex(r0, 0x10, &(0x7f0000000cc0)={0x0, 0x0}) stat(&(0x7f0000000d00)='./control\x00', &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000dc0)=0x0, &(0x7f0000000e00), &(0x7f0000000e40)) r15 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000e80)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast1}}, &(0x7f0000000f80)=0xe8) r17 = getegid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000fc0)=0x0) r19 = getuid() fstat(r1, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r21 = getpgrp(0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0}, &(0x7f00000010c0)=0xc) fstat(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r24 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001180)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000001280)=0xe8) lstat(&(0x7f00000012c0)='./control/file0\x00', &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000001380)=0x0) r28 = getuid() r29 = getgid() ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000016c0)=0x0) stat(&(0x7f0000001700)='./control\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x0, &(0x7f00000017c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001840)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000001940)=0xe8) lstat(&(0x7f0000001980)='./control/file0\x00', &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001a40)=0x0) stat(&(0x7f0000001a80)='./control\x00', &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001b40)={0x0, 0x0, 0x0}, &(0x7f0000001b80)=0xc) r38 = getpgid(0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001bc0)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000001cc0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001d00)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r41 = getpid() getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001d80)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000001e80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, &(0x7f0000001f00)=0xc) sendmmsg$unix(r1, &(0x7f0000003400)=[{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000080)=[{&(0x7f0000000140)="a939096036b5f77120358f6acb8cb5a75a25d072748b871f63714a4db8e8b895c55b34f7c8909401a80a1cf3f0f39dc1a34a4b5c73e8a7d180c30d9799552db1a16ecf24ec440bee2a8bbffc77f543626a1a0ebaf16cadc59aa21def1de11b8d0765d8593189839248f3e313d6aa8c7d8a8546aa83b13094c2305c0dd899e57cb9734f1d123760ad", 0x88}], 0x1, &(0x7f0000000580)=[@cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r1, r0, r1, r1, r1]}, @rights={0x18, 0x1, 0x1, [r1, r1, r0]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r1, r0, r0]}, @rights={0x24, 0x1, 0x1, [r1, r1, r0, r0, r1, r0]}, @rights={0x24, 0x1, 0x1, [r1, r1, r1, r1, r0, r0]}, @cred={0x18, 0x1, 0x2, r5, r6, r7}, @rights={0x1c, 0x1, 0x1, [r0, r1, r0, r0]}, @cred={0x18, 0x1, 0x2, r8, r9, r10}], 0x10c, 0x40000}, {&(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000900)=[{&(0x7f0000000740)="5c0d5e3513e4a7bd1d86497d841389db38419704f4fc210cd661c39c50a7cf4242967b2185e204f52f3a2fe001e44690db84181f8fceddf1f9968c804f7986454cea352d46fb3228ac35a2b7396526fea8ebd56111672e03fc5d18b73011a790ad67236866422f6f5e85eae8cb0d84e8b3ed1ac1b2d7b3afa7c19509ae0d1e987c6e3e79d98b7f6590fba457f6e5f7229f97c565ce7e21e276e366834ac1827911895ead71edce36784418cff04a997c", 0xb0}, {&(0x7f0000000800)="95831a684fb28cb2227ba9165a01a6c9e89485f24b8c091ab2cfda405b1bd23138fcc7bf0a2c8a65874ae431d57f64ff09cfef9437ec10e4e8bd08721b03129ea90a880d4145ab5a11a7133f0d88af47946b79513d4438a006abf7f5b82459672952250681686067d1a5f06dbb5a5cfc4f2e9d492ad2ad4530e78994b3bd6dcd5578997b26665f4a48e9d26e910c2b7da1083d71e96af95e6fe5b2d8fc188d3fce4903f188afb3327c4c3beb95bbc0d847e23aaa4caabc6fac36ca677255f710ef43c8d92e7921cd9c78c50c62acf93ca07a22b375f17f40dec1f8d2f59596f6", 0xe0}], 0x2, &(0x7f0000000940)=[@rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r0, r0, r0]}, @rights={0x1c, 0x1, 0x1, [r0, r11, r1, r0]}, @rights={0x24, 0x1, 0x1, [r0, r1, r1, r0, r1, r0]}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r1, r0, r1, r0, r1, r1]}, @rights={0x24, 0x1, 0x1, [r1, r0, r1, r1, r1, r0]}], 0xbc, 0x40000}, {&(0x7f0000000a00)=@file={0x0, './control/file0\x00'}, 0x6e, &(0x7f0000000c80)=[{&(0x7f0000000a80)="6079d5db67184b1c165d089ef976d1cac60aa6e05075d76a552d9e1464bb559d238a73640200b1d4b10a17ed0b1b851bd70d8ad60337cc5ba895e9fc6f3bba6755493f098dece42e3cac8ed409d4885925ec74e12dabaea535fcaf0060c5c7cefd57dd3bdf5cb6230c800cfcdd99aab5eb73327526ccce5db450ae9d5c0b9d3d30125b304800a56e880bc12e3a7e17417fcb232119bfa1b344925e56d0fd61312d243161d6d32f76a3cb17d9fee72082938ea825551d05e9923f9bb5a76e9eceb8d55afc6928df84afe2886aa3ff77b502ed35d1bfd3c494711ca2e78c801ac57a812ab9c7d0", 0xe6}, {&(0x7f0000000b80)="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", 0xfa}], 0x2, &(0x7f00000013c0)=[@rights={0x1c, 0x1, 0x1, [r1, r0, r0, r0]}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r12, r13, r14}, @cred={0x18, 0x1, 0x2, r15, r16, r17}, @cred={0x18, 0x1, 0x2, r18, r19, r20}, @cred={0x18, 0x1, 0x2, r21, r22, r23}, @cred={0x18, 0x1, 0x2, r24, r25, r26}, @rights={0x18, 0x1, 0x1, [r1, r1, r0]}, @cred={0x18, 0x1, 0x2, r27, r28, r29}], 0xd4, 0x200000c0}, {&(0x7f00000014c0)=@file={0x1, './control/file0\x00'}, 0x6e, &(0x7f0000001680)=[{&(0x7f0000001540)="146b5f484aaa6689987d554ca16986bcdeff54d914d9cfff2581ec7825489ae35778ab47f08ec72cc6a416b6bad071dbb5bdad276251be61bba7237e2d76727bea1e37e41431c9d06c533a4e17e9fa81b0e4b711d49ebd793c357f65993a420efd36f5cab2ce94a00e87301e27cf097eb93ab8e0ac82443c52a4f2caae247e8c4252e8705c6d82f6f2b9d33e4a4903d0e95ffd2f126cf1e092cf77fb1e11a6b9bfa78d4187bef3d5cfeab122e947b42e6141967e556f06a0aac268f9977938a08b9bcfae66ae3d20fb3480345f", 0xcd}, {&(0x7f0000001640)="8e", 0x1}], 0x2, &(0x7f0000001f40)=[@cred={0x18, 0x1, 0x2, r30, r31}, @cred={0x18, 0x1, 0x2, r32, r33, r34}, @cred={0x18, 0x1, 0x2, r35, r36, r37}, @cred={0x18, 0x1, 0x2, r38, r39, r40}, @cred={0x18, 0x1, 0x2, r41, r42, r43}], 0x78, 0x20000081}, {&(0x7f0000001fc0)=@file={0x1, './control\x00'}, 0x6e, &(0x7f00000033c0)=[{&(0x7f0000002040)="966b314c8f6b6fc52708b81eaf5093e4b142c2f8e6256cca7a31b37d3946225234ce5b238b9788a3138b1de387dd5afe1c05cbf5dd3348005eb73d609ed80c520dfec8fa91f414c2da3cb388dd6eced7962ef24839f31c0028b6816793a5ed4ec01b4159a0a059f13afff76d83af2c913e7565534153a6538b4e9131cad40d9592f3a766942ef1e74839167bfbfa2fad6f8f56b2ce084c22527fdf1b6e2d208bc09b29423e9d3d847a55f619c3d6970f0299626b791222", 0xb7}, {&(0x7f0000002100)="8db1cf00b17a3c7d3b0b1934045aeaed27aa85089c055906ea043b9cb9846cccb54aa4767d666ba013f1514e5b3cc277a801dd018c0a38c3aae406ccc957064b753525881bc892cfdd537f93898f93aa3f0f1431e411e187a0e9ea86484b1c486b450ac2a21a410930ce054acf95c837fc28a5370d856d9b389e458388c69a10046cafb3ffd87810c2be8b9d6b74d0be528d0c4b50fbf699c12c293b2872", 0x9e}, {&(0x7f00000021c0)="e1dd5e4a46676651cecf7de308a183ae66d67d9c13d94ce3c1aa757e20d15f4a01b52edf3a515a7be255fc0f82c5f6615b", 0x31}, {&(0x7f0000002200)="23b1a560428529d7c1135af0ea489c4d6bf221de7443173322a00cf68cca10c860e029aad370810344c2c641a03f5421e4accab1a85c922681100c7cef8c83c396f1f2d922a46f30d665d2ac4f825ae26e2b9fa263d93e2161967f3e52efe5aae3b5c79cc7cee62f46872b2b30f8ed82286e251dde5024a34f458e15b8f5f4fa279f5069b99199ac938ce8ef1069a39663cf1a8a0b0d80f54890c34204303a9ff200ccbbb6705ff35df8", 0xaa}, {&(0x7f00000022c0)="f9a7aa7a6158e835d0f120b08bb5367e56f9580712ab9573be921f53507d461e3ec4fc410005079261ca0ebc95abee9a72e9ff8daede2b19a813c7b6a24fd21bb562e410c3be650e1a3fe5350c06c3e4ea67e53c0b3a386d6046d7322f588323ae9ebb7b823003b25f0a80bbcbd5d5352d9ed17a", 0x74}, {&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="98d5a0b1e8c149a670a8d8ce66d9049776a3a7f0df9f5cb2cb7354ef593beb151845ae7848f2fdaf282cef297b65462c458e3d4b40881a0239aa2d97112ce1fab54476816e5e3d937536226b681b942d67e5b989108402c172f5bab359b1ca81485d28e73c9220c2825fa3", 0x6b}], 0x7, 0x0, 0x0, 0x4000801}], 0x5, 0x8000) 2018/03/20 23:59:00 executing program 6: [ 97.495671] binder: 12602:12607 ioctl c018620b 20000000 returned -14 [ 97.533011] binder: 12602:12614 ioctl c0306201 20008000 returned -14 [ 97.564800] binder: 12602:12614 ioctl c018620b 20000000 returned -14 2018/03/20 23:59:00 executing program 7: 2018/03/20 23:59:00 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:59:00 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000240)=0x5000) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x0, &(0x7f0000e81000), &(0x7f0000977000)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x20) sendto(r1, &(0x7f0000000140)="448ece3b450c66b502e040b28a011ce9c6e4762eaa7c07d57f9193b714a914074527b668a23b15855bfc745d8f43b68b8ec36bd53ade41da71d5ae", 0x3b, 0x4, &(0x7f0000000180)=@nfc={0x27, 0x0, 0x2, 0x6}, 0x80) 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x3) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x10000) getpeername$inet(r1, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10) r2 = creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@local}}, &(0x7f0000000200)=0xe8) connect(r2, &(0x7f0000000240)=@hci={0x1f, r3, 0x3}, 0x80) 2018/03/20 23:59:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x1100001bfffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x0, 0xfff, 0x6, 0xfffffffffffffffb, 0x80000001, 0x9, 0x9, 0x0, 0x1, 0x4, 0x9, 0x8, 0x7}, {0x3, 0xfffffffffffffffd, 0x8, 0x1000, 0x8, 0xa2c2, 0x10001, 0x3ff, 0x3, 0x1ff, 0x6, 0x3, 0x7}, {0x6, 0xfff, 0xffffffffffffff49, 0x4, 0x9, 0x0, 0x7, 0x81, 0x2, 0xffffffffffff42d0, 0x8, 0x5, 0x4}]}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x49, 0x1) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000000c0)={@loopback=0x7f000001, @multicast2=0xe0000002, 0x1, 0x6, [@multicast1=0xe0000001, @multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x17}, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x28) r4 = getpid() r5 = getpgrp(0xffffffffffffffff) tgkill(r4, r5, 0x27) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:59:00 executing program 6: 2018/03/20 23:59:00 executing program 6: 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 7: 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() modify_ldt$write2(0x11, &(0x7f0000000000)={0xffffffffffff04c3, 0x0, 0x6000, 0x0, 0xfffffffffffffffa, 0x2, 0x0, 0x9, 0x5, 0x6}, 0x10) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:59:00 executing program 2: select(0x40, &(0x7f0000000040)={0xcb, 0x1, 0xffffffffffffdfc4, 0xa25, 0x5, 0x9, 0x9, 0x6}, &(0x7f0000000080)={0x9, 0x5, 0xfff, 0x17f, 0x10001, 0x7, 0x81, 0x1ff}, &(0x7f00000000c0)={0x3, 0xfffffffffffffffc, 0x8, 0xed57, 0x8, 0xaf02, 0x7, 0xeaef}, &(0x7f0000000100)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 7: 2018/03/20 23:59:00 executing program 6: 2018/03/20 23:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0x4000000000000802) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x440400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x20c400, 0x0) sendmsg$nl_crypto(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)=@alg={0x108, 0x10, 0x800, 0x70bd2a, 0x25dfdbff, {{'echainiv(seqiv(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, [], [], 0x2400, 0x2400}, [{0x8, 0x1, 0xfffffffffffffffd}, {0x8, 0x1, 0x7fffffff}, {0x8, 0x1, 0x3}, {0x8, 0x1, 0x400}, {0x8, 0x1, 0x8f9}]}, 0x108}, 0x1, 0x0, 0x0, 0x10}, 0x14) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:59:00 executing program 6: 2018/03/20 23:59:00 executing program 5: 2018/03/20 23:59:00 executing program 7: 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) fstatfs(r0, &(0x7f00000000c0)=""/162) inotify_add_watch(r0, &(0x7f0000000000)='./control/file0\x00', 0x80000d50) creat(&(0x7f0000000080)='./control\x00', 0x10) getgid() 2018/03/20 23:59:00 executing program 3: 2018/03/20 23:59:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) dup3(r0, r1, 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:59:00 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000b6cff6)='net/udp\x00') preadv(r0, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0xfd4a}], 0x1, 0x0) 2018/03/20 23:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x0, 0x40020011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x1, 0x0, &(0x7f0000000040)='\r'}) write(r0, &(0x7f00000000c0)="2fd30cb0f37513b5ea8b207932ee5011c63035f3c319bceca7a428a94a9ce3959ab390602d597ebd7142e6fe73bf052372e7a0125d1836baf71d0e62e2eb8d3286fc9edcd254e54d58807d8394773a34011ce6c132db3509bfd755d4f2781d2f009f3d0a782d0890287c3b3546791523d5c4a700a41ad22d6bb5f960762454efe20a27404e779f8f569c9d06dda8d3db29e742b149245d6a2cb90f181271c0794db01966d418ff444029f5f8bd506fb042ee86ce78bf1e3aaf390f02a77587391e8d0486900d3c0f6bd91c89f4c1bf753af50f41b9af56604b582c071212", 0xde) 2018/03/20 23:59:00 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f0000000000)) 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000000)='./control/file0/file0\x00', 0x80000d50) creat(&(0x7f0000000040)='./control/file0\x00', 0xffffffffffffffff) [ 97.804704] audit: type=1400 audit(1521590340.336:47): avc: denied { net_admin } for pid=4291 comm="syz-executor6" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 97.829197] audit: type=1400 audit(1521590340.336:46): avc: denied { net_admin } for pid=6546 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/20 23:59:00 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@dev}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000ae5000)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x7f}, {0x0, 0x0, 0x0, [], 0xffff}]}) [ 97.853533] audit: type=1400 audit(1521590340.349:48): avc: denied { dac_read_search } for pid=12667 comm="syz-executor0" capability=2 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 97.878382] audit: type=1400 audit(1521590340.380:49): avc: denied { sys_admin } for pid=12675 comm="syz-executor5" capability=21 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 97.902802] audit: type=1400 audit(1521590340.385:50): avc: denied { dac_override } for pid=12676 comm="syz-executor6" capability=1 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 97.927416] audit: type=1400 audit(1521590340.440:51): avc: denied { map } for pid=12672 comm="syz-executor4" path="/dev/binder0" dev="devtmpfs" ino=170 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 2018/03/20 23:59:00 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote={{}, 0x0, &(0x7f0000fd0000)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}}}], 0x1c) 2018/03/20 23:59:00 executing program 6: r0 = userfaultfd(0x0) dup2(0xffffffffffffffff, r0) [ 97.984118] audit: type=1400 audit(1521590340.501:52): avc: denied { net_admin } for pid=6546 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 [ 98.008655] audit: type=1400 audit(1521590340.502:53): avc: denied { net_admin } for pid=6546 comm="syz-executor4" capability=12 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 2018/03/20 23:59:00 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(&(0x7f00000d0ff8)='./file0\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) pipe(&(0x7f0000000000)) 2018/03/20 23:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) r1 = mmap$binder(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000006, 0x10, r0, 0x37) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x1c, 0x0, &(0x7f0000000000)=[@acquire={0x40046305, 0x1}, @acquire_done={0x40106309, r1, 0x1}], 0x1, 0x0, &(0x7f0000000040)='\r'}) 2018/03/20 23:59:00 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) 2018/03/20 23:59:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:59:00 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000002140)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002100), 0x111}}, 0x20) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000000000fa1b"], 0x9) 2018/03/20 23:59:00 executing program 0: r0 = inotify_init() r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0x22000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000240)={{0xfffffffffffffffb, 0xf36f}, {0x0, 0x5}, 0xdd9, 0x1, 0x1}) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000040)=""/253) mkdir(&(0x7f0000042ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x80000d50) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$void(r1, 0xc0045878) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0xa9, 0x4}, {0x696e, 0x2}, 0x91d6, 0x2, 0x7}) creat(&(0x7f000001cff0)='./control/file0\x00', 0x0) 2018/03/20 23:59:00 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) dup3(r0, r1, 0x80000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) 2018/03/20 23:59:00 executing program 1: perf_event_open(&(0x7f0000aaa000)={0x0, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getegid() getpgid(0xffffffffffffffff) [ 98.092524] binder: 12694:12701 ioctl c0306201 20008000 returned -14 2018/03/20 23:59:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x40020011, r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000017c0)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f00000018c0)=0xe8) fstat(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000001780)='./file0\x00', r1, r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x42, 0x0) sendmsg$alg(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000140)="d53526ffe3819a6d5b5cb162ac98ee96b16dc9c1d4816adc38a0d497a3db5390d42a7deeb8c0f2c1d43d81f810a2e8db15f0819083009bd1d08c612be6bf1a36c4e69d397b1231e30f3c0cbb8d21f5e724795304f5d03482c9172377ea9e527e9be280004395ad39a2a880e59fb2304d95fabb919a0d1efc663397d10b128a8753a7851e11e9691c928e64658c2d07b0c1e3", 0x92}, {&(0x7f0000000200)="79d89f789619edb47f412c0829b7a2ef45770f16bbdb80098b14d849f4512f839e268e3ce855625d38c6c6f03c2b592f724a33c51bd763f9aaafae0501c4d68d4ae874a8eb6c7812", 0x48}, {&(0x7f0000000280)="a16b5b25b00d5b4fcccbef84370d54993e5fc73598284b9d1fad24835628732b60d0fcd3aea602d46665e205a92f7a7cfc7aa58b1fb2205cb388be6c22e1979f5c07529e146de97ecb07bfcd3a88270309ac0e929bc0d4b633b1c7f8af689923ff0011d0e79e9ee6e3865f03135dcac2916f1c", 0x73}, {&(0x7f00000000c0)="1db7ffa7a81e433e28a24e53d01d2d392b5acac3ad9ff918c3b4f51780872c0bfd3b79db274fc57d458ca0564a20c365718afa8343505616a1f94c600126", 0x3e}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="7ad24469e7c22bd15c9f89ee59aad01e339f5461466c18b98d0b9441df1411561c72c3171e73f65c86cb193da6c92de98709bb106f0cab7bda7dddb762b9b2ba0a07a581282068ce6c7c99872df97912c950ea64b6ee5429818fcb5fed1ead09da66da1ab931317646ad0d7a7988220ebf905656dd8d9c18049c7e0d9a6d26b2693446624c43a7cf43d67f0ff6a5d8f17c18d70fb173a8095793125c2b8b71e1f632ba1e89f2a35e2212257a9240d90fed46041b940c8fb37efbf020fc8bf81c165bf2b40189c1255953a905f6d53b966a230d776531", 0xd6}, {&(0x7f0000001400)="62d395c388ff80eea7ce4e7e9103554f6097898f5508458900b7afabd61a6f14345d3e", 0x23}, {&(0x7f0000001440)="07631003d09f98a7f3df1bc12a10af63452163c1f428e3f21f5cb6e7418e6f00dc22903182a33f19e1baa224e3dc14c3631e3b262303ce81cbc4cf2e31f0ecda802716419b61c2db9cc6f15362e1fde26a91dd9b", 0x54}, {&(0x7f00000014c0)="b1fc9f81cbbe8d331fefea40f398febf2fb4f80c1200b196a1b1997c2db5b9d91d8f403a49bfd74758d0962272ed621dd1c15f80cd538159d122f0f446a718af974e5579d83e2f354fa6bc2100b2690ce7a67c386817baa468e67651380eeb74c2b5b4992585bff6d0267918f55a870669d5530095e296", 0x77}, {&(0x7f0000001540)="4775aa520a51a950b3a3ee3b6ee04d", 0xf}], 0xa, &(0x7f0000001600)=ANY=[@ANYBLOB="100000001701000003000000a4a80e9210000000170100000400000009000000240000001701000002000000110000003dee16f0ecb0193f90e7b0e684a2a8a7bd00000048000000170100000200000036000000056de1863d9ae137eef252635f7018740333b081c7aa19e0377e1436de4c695fc0afba46972e41d84a27b17985101d7441348bf42f370000"], 0x8c, 0xc004}, 0x10) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x8000, 0x0) ioctl$KDDISABIO(r4, 0x4b37) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000001700)={'filter\x00', 0x4}, 0x68) 2018/03/20 23:59:00 executing program 3: perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sync() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000005c0)) getpgid(0xffffffffffffffff) 2018/03/20 23:59:00 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x0, 0x8042) timer_create(0x0, &(0x7f0000000280)={0x0, 0x4, 0x2, @thr={&(0x7f0000000100)="ebc5bb120bced10bf2b8fac9c0879962a0a9fe8aea45a38b2ff55625b50ade7e59d436f3a41f3245a429b5fb49965870b9ae6dfe73551fb7ed3f8ba6f83c71937fac8416f7a5f7087483df72384cf2ace235fc0fab60e57664ece03aee699f8eab24d5a02da12981ed4a714cb5badc5a11ea2dd6894f34c59a7da8d0acae0e", &(0x7f0000000180)="8becfa140f30f1eb4d8f0881a47c158faa547250050f892b9c18b4b4f58f6c2de66cb2fbdc28adfbe7f1f7ec9e3ce515a2f320b9ebab789291e79163d560fce7ccadc06bb436c7abd3eabd3c45abb83bfc889585c420cd9e2a776ff6d4a47d546f3a41fd4020c86dc5e2ce8f66a783d9037c82d15ddef78d57ee6773f37b8b2d03fe33d1d5b98791bfe3c0ee6b59b765fa15bd393a2e98506b607076661daa06a563892b360c502004aa9a094204b2b4f51cc32b5fe3132bd432ce81b117c6208ff5f62b86f360f751a5110bdf1c7584e1c6e62a9a222e7ad739af67d9beb9a66a85cd61a4171072"}}, &(0x7f00000002c0)=0x0) timer_getoverrun(r1) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"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"}) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f00000000c0)={0x3f, 0x0, 0x13}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r4, 0x4004ae86, &(0x7f0000000040)=0xb) ioctl$KVM_GET_MP_STATE(r4, 0x8004ae98, &(0x7f0000000000)) [ 98.210536] kasan: CONFIG_KASAN_INLINE enabled [ 98.215257] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 98.222659] general protection fault: 0000 [#1] SMP KASAN [ 98.228188] Dumping ftrace buffer: [ 98.231719] (ftrace buffer empty) [ 98.235447] Modules linked in: [ 98.238622] CPU: 1 PID: 12715 Comm: syz-executor7 Not tainted 4.16.0-rc6+ #270 [ 98.245953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.255289] RIP: 0010:rdma_resolve_addr+0x13c/0x26c0 [ 98.260364] RSP: 0018:ffff8801cb8e7630 EFLAGS: 00010207 [ 98.265700] RAX: 0000000000000042 RBX: ffff8801cb8e79f4 RCX: 0000000000000000 [ 98.272941] RDX: 0000000000000000 RSI: ffff8801cb8e79f4 RDI: 0000000000000214 [ 98.280182] RBP: ffff8801cb8e7990 R08: 0000000000000000 R09: 0000000000000000 [ 98.287424] R10: ffff8801cb8e79a8 R11: 0000000000000000 R12: dffffc0000000000 [ 98.294666] R13: 00000000000000a0 R14: ffff8801cb8e79d8 R15: 0000000000000000 [ 98.301911] FS: 0000000000000000(0000) GS:ffff8801db300000(0063) knlGS:00000000f77bcb40 [ 98.310107] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 98.316048] CR2: 0000000008452798 CR3: 00000001cb81c003 CR4: 00000000001606e0 [ 98.323299] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.330540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.337781] Call Trace: [ 98.340345] ? futex_wait+0x6a9/0x9a0 [ 98.344121] ? find_held_lock+0x35/0x1d0 [ 98.348158] ? rdma_bind_addr+0x1b50/0x1b50 [ 98.352452] ? lock_downgrade+0x980/0x980 [ 98.356572] ? futex_wake+0x2ca/0x680 [ 98.360347] ? __radix_tree_lookup+0x435/0x5e0 [ 98.364910] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 98.369726] ? wait_for_completion+0x770/0x770 [ 98.374281] ? lock_release+0xa40/0xa40 [ 98.378227] ? check_same_owner+0x320/0x320 [ 98.382519] ? find_held_lock+0x35/0x1d0 [ 98.386566] ucma_resolve_ip+0x142/0x1f0 [ 98.390599] ? ucma_resolve_ip+0x142/0x1f0 [ 98.394808] ? ucma_resolve_addr+0x330/0x330 [ 98.399194] ? kasan_check_write+0x14/0x20 [ 98.403406] ucma_write+0x2d6/0x3d0 [ 98.407005] ? ucma_resolve_addr+0x330/0x330 [ 98.411389] ? ucma_resolve_route+0x1a0/0x1a0 [ 98.415860] ? ucma_resolve_route+0x1a0/0x1a0 [ 98.420327] __vfs_write+0xef/0x970 [ 98.423929] ? rcu_note_context_switch+0x710/0x710 [ 98.428834] ? kernel_read+0x120/0x120 [ 98.432692] ? __might_sleep+0x95/0x190 [ 98.436640] ? _cond_resched+0x14/0x30 [ 98.440500] ? __inode_security_revalidate+0xd9/0x130 [ 98.445660] ? avc_policy_seqno+0x9/0x20 [ 98.449694] ? selinux_file_permission+0x82/0x460 [ 98.454511] ? security_file_permission+0x89/0x1e0 [ 98.459412] ? rw_verify_area+0xe5/0x2b0 [ 98.463445] ? __fdget_raw+0x20/0x20 [ 98.467131] vfs_write+0x189/0x510 [ 98.470646] SyS_write+0xef/0x220 [ 98.474076] ? SyS_read+0x220/0x220 [ 98.477681] ? do_fast_syscall_32+0x156/0xf9f [ 98.482151] ? SyS_read+0x220/0x220 [ 98.485753] do_fast_syscall_32+0x3ec/0xf9f [ 98.490045] ? _raw_spin_unlock_irq+0x27/0x70 [ 98.494515] ? do_int80_syscall_32+0x9c0/0x9c0 [ 98.499067] ? _raw_spin_unlock_irq+0x27/0x70 [ 98.503536] ? finish_task_switch+0x1c1/0x7e0 [ 98.508006] ? syscall_return_slowpath+0x2ac/0x550 [ 98.512908] ? prepare_exit_to_usermode+0x350/0x350 [ 98.517897] ? sysret32_from_system_call+0x5/0x3c [ 98.522714] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 98.527534] entry_SYSENTER_compat+0x70/0x7f [ 98.531914] RIP: 0023:0xf7fe1c99 [ 98.535248] RSP: 002b:00000000f77bc09c EFLAGS: 00000286 ORIG_RAX: 0000000000000004 [ 98.542925] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 0000000020000100 [ 98.550167] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000000 [ 98.557407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 98.564646] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 98.571885] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 98.579135] Code: 31 c0 e8 28 97 53 fd 48 89 df e8 d0 f5 f5 ff 4c 89 ef 48 63 d0 48 89 de e8 c2 c7 8b fd 49 8d bf 14 02 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 14 20 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f [ 98.598237] RIP: rdma_resolve_addr+0x13c/0x26c0 RSP: ffff8801cb8e7630 [ 98.605056] ---[ end trace 0954eebb7a7827d5 ]--- [ 98.609823] Kernel panic - not syncing: Fatal exception [ 98.615628] Dumping ftrace buffer: [ 98.619147] (ftrace buffer empty) [ 98.622827] Kernel Offset: disabled [ 98.626426] Rebooting in 86400 seconds..