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", 0x1000, 0x6}, {&(0x7f0000002c80)="890d24e5962f833fa498740408fec543c0a0521a967d16fbe3e87b9da343af1438597424162b4d33e7ea3cef09d261378a654d2ba74f99e7ccea4bd71d1fb3759b29b1044327fb313dc1842be25e04253d1509bd28ee3b04bd139761499306b2d12c4ef0b33ba1a13fd692785e1a41c310eae63ff1cca9da5d96badfb3bf933a53e778d546b90578a2cab71009c98c838bf5b287285dab3a86b61c8b9ba481e6fc205fa44b56e43d42290a6be296769e8ee19ec183b965d0b454255f81416597829c73b2a0", 0xc5, 0x848a}, {&(0x7f0000002d80), 0x0, 0xff1}], 0x10800, &(0x7f0000002e40)) fcntl$setsig(r8, 0xa, 0x22) accept$packet(r0, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000002ec0)=0x14) 2018/05/19 16:46:30 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x0, 0x4000) fcntl$setstatus(r0, 0x4, 0x400) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000100)=ANY=[@ANYBLOB="54000800ed0d6ba2ea23c7c1000800000100070000000300c1ff"]) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000002500)='net/protocols\x00') getsockopt$inet6_tcp_int(r3, 0x6, 0x1a, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$binfmt_aout(r2, &(0x7f0000000200)={{0x10b, 0x1, 0x6, 0x1b8, 0x6c, 0x10000, 0x2d5, 0x3}, "5e9ce655d043ab507d04ce31fec332f4d4290cd20ebe557f5b4fd42ce7aa345b1465d88730c2e2a86ae041a5e13e9e746b6846596a4965953bf061788e3b40115f46ce00918cdb3f22703a964889a220b3bd9c12a73fd9d868bb5294b965f2feeda8dd6dae955a790d7bd34e6a9b2bace6bbb2b0081cdf232c269151b5e0c6bdc52ef0d1586aa7c5e4a79249c2f2f80d5fb1", [[]]}, 0x1b2) openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x101000, 0x0) readv(r3, &(0x7f0000002480)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 202.061245] ntfs: (device loop7): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 202.069459] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 202.077950] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 202.090057] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 202.203505] ntfs: (device loop7): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 202.211657] ntfs: (device loop7): read_ntfs_boot_sector(): Primary boot sector is invalid. [ 202.220116] ntfs: (device loop7): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover. [ 202.232213] ntfs: (device loop7): ntfs_fill_super(): Not an NTFS volume. [ 202.240280] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.247104] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/19 16:46:31 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) 2018/05/19 16:46:31 executing program 4: r0 = socket$inet6(0xa, 0x800807, 0x200000000028) sendmsg(r0, &(0x7f0000000340)={&(0x7f0000000080)=@rc={0x1f, {0x1, 0x7ff, 0x1000000, 0x80000000, 0x280000000000, 0x30}, 0x100000001}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)="a4defbf930a19dc1c97eb3f6f638549da6223db6e18a12bb40c5d8831802a2c019aa84d8f87f6040490ea8bc2990d014e2f04b7713c368519abcc8837ab5c80debf9927b62a15f429815e91a7a180c2ec3e2ce8f94d40d5bb0690e885cd0ae", 0x5f}, {&(0x7f0000000180)="6b8b4e8e8244200f05208e2d29f5d2ae4d09326660c53963fe3ef3808a27b1ac3bf5aae711fd94a18dfea95fe1d6dcc20c2b7f4aaa633db7b10743b57eeef2c56591ac44265e5902491775f0adbe2837fb67060dd2cf6da835b0c4a6f2412b54e8c3c2bc056229b8c28b2c9b75600a7d91cd5871fbebf5fbe44bd45bced41319cb446dc7beb9871b76e8d589a307d60774de523331b938df26ba17bba6292155db1755ecef0cbe2e2a465b8120673a57a7a69679a629a139cc7e0e90824cd0ed61c1ffe16f", 0xc5}, {&(0x7f0000000280)="55a187dd6ffb03d2e1a5942d14f28d2d5e7d4c419210b3836e836db37d9c8675831a3c57fce3c0724e9b146b85341b086c6aaff5e39570a128a809fc5383904188834a9993858a64a0865c3bb380f3ac1c7355df267529e1863198556cf96c0555d0fc079dfa3186632b5e04cd2d61f3dee08bad0f5c7f90103d0bb1ea89a8c4071a1aa46365979e5c59d457a83f59d96ba88bec4fb9f84dbaf74dbb9f13385601ebd79d8a67c331410eeb6d08fadf80ebc495f1d150", 0xb6}], 0x3, &(0x7f00000017c0)=[{0x80, 0x119, 0x8, "f5e48524d5038ebe1d85eb18859bbbab644024db939c4e28ecfce05aa55744406cff3a6f80f09060d34725b85000f0a635f308bd618d593526ceacad1571b3ba4d83dc141984c748ca0ebdf37b4174dfde47e68f35ce147719988f92b1ec78e21f7a64dae9573a165ec07df2dc66e6"}, {0xa8, 0x101, 0x20, "440c22f5e5862061a52e373216c4665eea87653fd0076107629b3546a40e255e55bb14c13dbbc5307e70f6890bd1d1a8ac19d54a07c11e5477bd65081d7ff5a7c1a62c6ffa08c7fa05c51b8b4272dfcda086f8e4582e15a2767512fd5c0ae8a863d9ed6068df8c36b815448ca79ac429b41b644d9b5540de5828b1196f6c37b9d37e058e810eea6ef4d2a72da1383032a3f5fa7b"}, {0x10, 0x105, 0x2}, {0xd0, 0x11f, 0x6, "d34990f30ab329120079f030a62cb0ab44782495032b1a79b8b231628e7e1e6c0bea027f40a8980b6c970522dfaae92c9e928d37d57bad025ceac7b4d189970bd688556ccbc14ce9cb9f9c37360a040aad162eb3ad6cff9a9411c24ae42b7598990bf6e00dea36c32fb1042ff2277a081f7885663f5a831c94728e3e765e9e082849a353734748411fba0706c28f247af78f3f842548a04ace21fd75505a7dd756b893602cf5c235dc64b7bdde9a36bdb4ea7cdb2024163a6ddc79af"}, {0x1010, 0x29, 0x0, "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"}, {0x98, 0x113, 0x8, "7e668b17a61016f9a1ede014d2336767c01e7cac6ce905a383e564d1434b181ad34e8b68ce2174b77af1ee82107743295c197dd101f46994ee2cbd068b43cc27024861a8090d169707316c77004c8139128d350509aac547f152f25d5f5b33dc94816851ab7b42a54677c0a8a6241195d4750fb860565cb192903e23f23e1768bccb3f27f0dfed3b"}, {0xc8, 0x18d, 0x2, "ba4cba0f05ddf9eceeb17aca8ebeaf55646943da28962caabfc4c69d0bf9cfef14447828789dac00717fdb19ea9a2742aae202951f1dc7fadee72883786c435831a7211040c0541aba5b7595f200a98d02819a618b09a8167e5a8fb340e87a3e530fd8ecdee55f3c648da0594d1924620bf5f9f321326dd94ee83577fcce89b29d7f932ebac55e43db0e1acff87bbac274b39bfb008cd704d42d3a87cbf95046133f645b05d56c045d4b8428c416ee0a2f8d05bed833"}, {0xf0, 0x111, 0x35b000000000000, "21c720a5dd836c6c32910630b8aaed230a88258e62b808df3bc96b269ae6a44c02d67e8e92fc7f9b219104fb855a873c195c816c884d1d5223e9b1cbbf9b95672536967cb1e42ba86aa7cc9989b9a95cf9fcba9a13d0d1511d39b78e19314be975d544040db9435c99c42c7114df6aae1709e498448de78f0894073dc64515149fda04345e57a553337e6c96ac655c128149a2e1f526bd481e9e8e08d2e79bccd04faacb21f392ff5f856806790fcd7fbc1b0ebd85238db41318cb2ec748c302f3811d7f70aa6f137216dd33d8d4c12c0f934b2e06d2d1cefc"}, {0xd8, 0x88, 0x9, "651e51a66ab889796d1fa9f36b172a7f1b09ce7b3a2e61fd594fc2c56a8e2a02fc95f25b58e2e2994588b277445e7b0fa7357811ebd32c510eb39ca1af91a6f0ecf6d1add122b28a55d3f5bb5b5bc6f3c4009f0a3fa8f73a0fd6fc7ac41c2b451a88f8cb1a45556b4a5ad5cdb22c6e56a20d7cfd6665baf7ddd1a3347ff04e4bef18f96e04aee69fa2093a9573f02fec95ecaa32cbd9300ed4e4d26a3b1b40a748078b83a44f4cd4d32e2da63351bb95f3b73e97e4c262573427e2667461ef7a3690926ff04b06ce"}, {0xa8, 0x0, 0x720b, "9df82f747d4af237461d691c803d603c774e3a5a7511c9dde320bb7cfc67982ee780b56f0edaf9e502ec63ad068a7c67c4cfa5c40022abb4511622dfe478e15aaba103b7c02e82df49fd8abc80966ed48747865f6445bcb98bc197db4b7e28d355b06c4be30845a5ff24d952824493e1e44fe7148367379db01e7ef4c1230b349c1c03d169135917613133f7224b233303"}], 0x15e8, 0x40}, 0x1) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0xbc) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f00000003c0)) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000500)=0xfffffffffffffff7) syz_emit_ethernet(0x437, &(0x7f0000000700)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "c22df7", 0x401, 0x11, 0x0, @dev={0xfe, 0x80}, @local={0xfe, 0x80, [], 0xaa}, {[], @dccp={{0x4e24, 0x4e20, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "0087ae", 0x0, "ca8345"}, "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"}}}}}}, &(0x7f0000001780)) accept4$packet(r1, &(0x7f0000000640)={0x0, 0x0, 0x0}, &(0x7f0000000680)=0x14, 0x80000) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x9) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000006c0)={@empty, 0x21, r2}) 2018/05/19 16:46:31 executing program 6: socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r0, 0x0) [ 202.402243] QAT: Invalid ioctl [ 202.411385] QAT: Invalid ioctl [ 202.419829] QAT: Invalid ioctl [ 202.428527] QAT: Invalid ioctl [ 202.431938] QAT: Invalid ioctl [ 202.438268] QAT: Invalid ioctl 2018/05/19 16:46:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000051c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000005180)={&(0x7f0000000040)=@getpolicy={0x50, 0x15, 0x305, 0x0, 0x0, {{@in, @in=@multicast2=0xe0000002}}}, 0x50}, 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000000c0)=""/23, 0x17}, 0x8000000) 2018/05/19 16:46:32 executing program 4: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000107ff8)={0x0, 0x10040000}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e22, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, @in6={0xa, 0x4e23, 0x73d8, @remote={0xfe, 0x80, [], 0xbb}, 0x897c}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000280)={r1, 0xffffffff80000001}, &(0x7f00000002c0)=0x8) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x8000) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x80, 0x5, [0x8, 0x1, 0x1, 0x3f, 0x101]}, &(0x7f0000000040)=0x12) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x103800, 0x0) setsockopt$bt_BT_POWER(r3, 0x112, 0x9, &(0x7f0000000180)=0xf0d8000000000000, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x7ff, 0x8, 0x3, 0x2, r2}, &(0x7f00000000c0)=0x10) pivot_root(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00') setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="9f00d5000200b99b142e81e898fbe18220d7131d93cb5458511facaa82da819b2a7de969a9d9e9a58754230743"], 0x2de) 2018/05/19 16:46:32 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) 2018/05/19 16:46:32 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) pwrite64(r0, &(0x7f0000000280)="2f12cb56d0ef72d5f981f28a573fbb1266b497032682b3f18e617fb3ba613b0fe722e985a09ab4e3032dd8472a93d8ae157ab435951f630d7a21d0dbe913f714586572535068a773638b1ed79e0c6541c2ad993a126b7c645a214ea35fd01c58cbe9d232ec9e2124e8d23e744206220ff7f0f399bdbce03870993345841c2e27fb1f78d1c08042fa1500b3d9095beb017266b5c632b5dbd09658f4361e16f278cc3c749871cef31a581e1b072a6ad291a6751dcf6909ba0416e736a63888f3a070f9ebabe85267b7d9c2ab631867a7207b67746bbc81bb74a6d8090819e14b4ce7a94e6e", 0xe4, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x3, 0x0, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)}, &(0x7f0000000180)=0x78) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x90) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x101000, 0x0) syz_open_dev$sndmidi(&(0x7f00000001c0)='/dev/snd/midiC#D#\x00', 0x4, 0x1) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x7) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000000000)=0x369) 2018/05/19 16:46:32 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xe0a, 0xc00) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000100)={0x3, 0x3}) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0xc) 2018/05/19 16:46:32 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000200)={0x2, 0xffffffffffffffe0, 0xaca, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) sync() r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x20, 0x101000) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000000c0)={0x80000, 0x0, [0x589, 0x0, 0xbffe, 0x401, 0x5ced, 0x100010000000, 0xfffffffffffff001, 0xf56]}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000040)) socket$l2tp(0x18, 0x1, 0x1) 2018/05/19 16:46:32 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000006c0)=@broute={'broute\x00', 0x20, 0x1, 0x3b0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200010c0], 0x0, &(0x7f0000000000), &(0x7f00000010c0)=ANY=[@ANYBLOB="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"]}, 0x428) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x1, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e23, @rand_addr=0x1ff}, {0x2, 0x4e20, @rand_addr=0x6}, 0xe0, 0x25, 0x7, 0xfffffffffffffff8, 0xec0e, 0x0, 0x4, 0xef4, 0x9}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 2018/05/19 16:46:32 executing program 6: socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2018/05/19 16:46:32 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) r1 = request_key(&(0x7f0000000100)='id_legacy\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000180)='.-:em1\x00', 0x0) r2 = request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000002c0)='*\x00', 0xfffffffffffffffd) keyctl$search(0xa, r1, &(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, r2) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x0, [0x0, 0x1000000000, 0x0, 0x7ff]}, 0x5c) 2018/05/19 16:46:32 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x1006, 0x88001) writev(r0, &(0x7f0000000480)=[{&(0x7f0000000280), 0xfffffcda}], 0x1) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1f, 0x12000) 2018/05/19 16:46:32 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) r2 = creat(&(0x7f0000000040)="e91f7189591e9233614b00", 0x81) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x2400, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x1, 0x0, [0xffffffffffffffff, 0x1, 0x6, 0xf7, 0xd8c, 0x46, 0x4, 0x1]}) 2018/05/19 16:46:32 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2018/05/19 16:46:32 executing program 4: r0 = dup(0xffffffffffffff9c) connect$netrom(r0, &(0x7f0000000000)=@ax25={0x3, {"bcfadb9d7a1d9c"}, 0x400}, 0x10) setsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000040)=0x800, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000100)={r1, 0x98, "1b617d7bc4be5952fb7a97abdf2010e47e31275770ceccbefb341d090872610c7dfe88dcfad4dc407c6e288cb7333e41039c3738140fad6bdc61aefa3e662c90ab6db86d070e9fc56a5e84ad5dccbdedf1ac34e0b10650e40caaaaf0780d9bc6bc6edc7c244aeaf684929e931105a58bf87365b875870d75db9f577dd506dc16a9439248cc9beb49a40a695e36ba7aac3aba724e68d546ff"}, &(0x7f00000001c0)=0xa0) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000200)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f0000000240)={0x80000000}) r2 = getpid() r3 = geteuid() lstat(&(0x7f0000002e00)='./file0\x00', &(0x7f0000002e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000003200)={0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003240)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000003340)=0xe8) stat(&(0x7f0000003380)='./file0\x00', &(0x7f00000033c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003440)={0x0}, &(0x7f0000003480)=0xc) stat(&(0x7f00000034c0)='./file0\x00', &(0x7f0000003500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000003600)=0x0) r12 = getuid() lstat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000004140)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004180)={0x0, 0x0}, &(0x7f00000041c0)=0xc) getresgid(&(0x7f0000004200)=0x0, &(0x7f0000004240), &(0x7f0000004280)) r17 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0}, &(0x7f0000004300)=0xc) r19 = getgid() sendmmsg$unix(r0, &(0x7f00000043c0)=[{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000300)="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", 0xfe}, {&(0x7f0000000400)="52480b0c8ad8054a152edc3dfda3cd4308fc237bd9a64d2c2894c84b1ecf41864c3ee33163691a5be086d6675b1f3ed7bd7577fa4925e49b0e34f6c06d669795e0", 0x41}], 0x2, &(0x7f00000004c0), 0x0, 0x8000}, {&(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001780)=[{&(0x7f0000000580)="99815392c97ba8", 0x7}, {&(0x7f00000005c0)="79b57063d4f00b91abb06fd860581098737cef409b9fa596632ef99cd35ba6b0f2e7889925ae2b2fdc5356e2b221157613d07ef41c2b86ed5bbd8e28178f265c3a7b94ea6db8aa43f6f179765dd55998462b7a0923679ddb27aece412184540e2de88587c5d2857af5cf7477080c9155426db11c0dd7b084f9f1d337767148215176eb07d9e3619c75d28a11d65a6474e1d91a3d5e", 0x95}, {&(0x7f0000000680)="392b06172d6a3c5efa6397402dd9a1e1fc16888dda734ca60abe9219ffb4a5a29303e219144c10d651c9bf66234b579586ca82c5ca0afbf89aa7b87862533eb1581e89ee959de831b22fbc4f40cbda679070caeb86f148fc562dcdc005a4135f93f7713cd6e1f140db28e678243de493a043147a399215c5778149bd1a682d553a1d7c36ac81a64e22499d7f082ef8834870fe71372c04d2db183af5a9b44d076b50e4d0c1527d1f30c411a8ac6f300bf8e5b2173cd4e71850e0bee7fb1b807f38dc1257f6ea7b2b38ba28afd93826f50ffb92fe4a9a27a6b2186bd4db4adf86159672c0c8422e23250cc7bd3fd526fefc0488ed01e058e6065ce9e82a1a70f9330507b02e431730c1222c014dbd30be10a660aa9cf99c6e72a4aae0a48ac7df7e314c8dfd34917a030e6ec38f013e602d39aaae1da500593e9d0b2eebff3a6e9b54ef6873fa9d2bcb65010a6c8c9df2aad38536bc171b277e0866115e8334dfea77c046c4c843900862b7a5c550ba413bd1f5140a1ae9ee6356028dc55066795cec61e3bbbfde54a8a8e5b2d77648b32ca1789c74843e1cc61c93c263a43d2d7a08de6508cc0d55f4ba025d8565f9f34a141bc737d34b9c4151542f855c76ca8d4b777c93e5077d92065122bcec27122ae84ceab74ffb149eb4a9694a78ddbd583ef42ed1a640d79999a104f98a760f6369ec5473e958a536f58abbda6b5c1459b993b1049106b42082f1d456e2c5b4ef257e7d0e039cb077ed9c3524b45a0be6bf75a2cb204dab9b5b2a31a6760f41d54da6c39609c5e6bc70bf8ad067b2c2591e0ce2258fee22aab4891307ce61d7e46ddf003ecd5e110da47f3e680c60d61eb1eab3a0f976168a164993ebff6530f672049bb9116e4d4e9b7bb75a6bf34d451eea09601af03bb722bd25d81ce6ec44deb12cedb6b878fb612047061627a0d2b5900e395db6f14b836cd38e3d0ccd9e44f4655650c96382c17b080198c48deabc51f2a8281326c528ca786c6aef170da1c5b10ea8aa7ffedbc36c8ae941612fa61ff86b5e9e1d5d3c33b29843fb262e57af2b5ad6781cefd48f4ab94792e25f4739ada7f0098869489d362a0b7654f90cd1d085eba95795df69edefd661fd91017c75688a2fd46a9f9c756e4ba96a0679bebf3cf3c700c3072f057b86fd25d7470e6e06c52ceaf3842eff60f765aec7e20b0ec37d76f47e949db32e78c894dceb1e0d4356fd1f3339a5ccfc99cb717d7f5c87ac3d67e8ba34f7ed1db2dfe36242ff01cf4a8c725bbd5e0bb998cb2087f0cd08af61742ed8c250a825138b8241334625268ae283ddfc6c8dd3a409d27458ec4d25558435fab195cb57c21df6445e8bb92d99e1d1c539674159bcda005edfd05b0c9116777dc8b68fc9d2e34c036f848071edfc5328e48e9be2d29d6d03a843937caa7a643af1ff9657d571752f0cbcb8f8682b6cd7f23114b0b23adcf77b0f7180f28d4bdabe772293a1d504a0718964b58d683b5de70126da17e88ce6ddec34c4639ece881409e7ee4c0802a8fba78f657dca619a650c2990f295608ec39c81585e6a63e07d40096abc0bbf685b93109fc93296767068f496f32cb8b95b692d11df06740cd06fc98156a4b231f22127a8fae80344e4659d642df4b5300806960b953148e31a482f736b5a243f93d2f2979d831ee362d6587787ea6ff0213385f2849cef275d3bd59a347b27845f0b8c469b6b0e4b434580cbbcf3136949f944cb9be6306c41f1c2ac4c091f1e49e93176fdcdce9a3bee8eacafbf272ab49b72372965f8b4492b95b10a73702394b67df0329bc5e8a7c58dd463a30fba24711209c1cbad2e53fb33ad75402498486db79a94195374a437e38d83b8e3a56622970d600c671721548c101c78183205d557926281fc0abcc6a22aea72365958270265dd9aba3629afc57022d5f4a8c871437261e7d4ab7db46a14e11105cb392b19fb4821c776e05e58caf8f0bdba36d1d1b740b47114a845de152bc1ab2befb25d1b70fbac0a73eae1236253cbfd3f760c5b378024cd121aa826d91a22074ba295700d9102b3811604d03f1bc75b0f2f77dcf0a4d029cc2a376e65a6f8a7e0e7b8caae84264342316333aaa05555684ac98f570e42eecb4daa5a786d9110eb519992eb2ca590eae414a23831005a71dac2fd1aac43f521d6ff39bbdde8c80fe1dcd2746795777d721d50f15ae76e45dd9facea9391e7969454ef87759e0469a47a49b00b971b2a3300b570cfbb522ae794840ab3344ba5bc375fad8a7cc0769852010dc7bbed09531e789b60a2431610206a904a71ad673d6078aaffcc6fb839f236ffadc19322a0470beae5b176559ee0a764837faf7806386fb384d79aa66a9634550f3d851e8f342a1d2e69a7d27f18dbe5d19511179d7ad4b8c3e18f99c0cf6bc69b60a20d1b85653298827d9b5b415fa2a408721b75acf7fdf8d522c43c4157e265b1a09896ac8e1317d7ebc80890b3b3b1c80ba8e095902760d15d5cff565fc19ff15d36fac016b59dac24e2dee8361509100866435b9b8ca822228ef7cc479a0ad3a131f67133b5e26148d49c27783e83b3d9bcfe3dd94304c331678aa93b931b00d2d85841a0f9a793e7ee9a1b77167ea5d20ab8dfb07598f970ee9d1ebdea02687e773b6e41d31dad1077f389849dd3af62b29727811baa1ac6b52919e1363e78c4a89bebd5b8cf9715dd6fd3864f522166ca062dcac3cd8b1799edab41b3cb9aa003041654e7ccb7dc70fefdf9b55119f94cc0ba1e9d5488c2cfd5e5f575a007bec1dc0e9ca9ad6ca900dd3331529a46de57773066763764bca8b45789816a1be8d17340a4e8bab20cf395f3820b537a5ae676abd74fbe43c79e262300ae5fbc3cf58a03f8e3f35d10d4695a8edfe66d0377df219930d7a4f8c7784ef6c817bd911e6b139bb75303315105d3bdeb6a33a0cb6865d7d9ae8a41308c66d5fc64c6f50a1f31e77a995a2c7c311a0049d509cc1f83b3b90e8ab77f39872c06a3bc0f90b61e5b17e276f26b4ab19a396a2ef889557675291ebce6bcf153c5feec334a2dd4d0e818db031960a455d50475c7250f59fc8a724b57d401ba57b88491e76e4b99cabc9e9a7f20b6ff2d72b5f4e817405c3a64c4de638c2d75c2000ac0713f234c6a38567e3f989ed3ef407640e74d6ffc2254b99b751d24e3f21332de142d697e9f831b4c28adb95b895bbb0d001993ef09e2f429bf5558768ac9499148d998e91aa1c905b9661646b60208d24371d3da705ebcbbc583f7d1a3d4212940887a1ffc445332b3553f5308d8f19bd08ad807ca6211938c76c76d925cb6239c0bcb3777f778efb1995349c0401987c5706fd5a0b059484bf6b62bd291dba03b323fc6e0996856baaf9a5d22bd4110b4c476d312b9e7bf0498806217f834433ecf2980c6a92a0c7f04ba5819cb04829f0c072b12aa2b1d9f3481eb4d90681f7599fd679a9d8319df3ec29bd5cecf0337b97904797a313693ef0e531eeb5cb85d678e7cca7b37e28b740320fe479ddd70d4f2ba74eb540199064ec7ecd176b4b9acf50ae7f80d88338bfa93b6796385ff7af870ab6947e8d84047a606ca0f86a8a01c98065dcac0e09bc65674837f9baa422559a4393e1e8e7b35eb2bac77a9da0233b0e80d0769276e84d404d427bb6f1edff25063bb8a9770fdf3aa92595bb6b95b4b476f4bcc45996a5c6114680a9df6f242e34f4637327938796cc1ee79430266f9d998944da65bca1f866070c10d3fa91fe87aca40fab37613ac188659cd45e2e1e7ad703bc335ea8636d4e39f76de9a91e59d83d896c03546bfefc869499516275dfa24c577cbb0b2064dd93d2941b9811a53ab0dd15e774ac8dc728b12c770975f915da728ff39c0ed57558bb0e7bc04f1f39af3c8486557e6fc34d0289ea9c2a28cc7571afaaba39df1463dd9c805f2955a43645d3545524c3a0b4af44b13c22c4904c6088e3f7418bcbff89de8fc56fccb3c2e4d0d1189577e44f0dace8f8f92fab77eb62c4e242ca2ec5ef64aff5505a1a97d874b5177e837b23be9d99c7e756bb0e33851cb874f659f5a7549a9642e3c980a219e0ff426aaa6b1e336e00de3ac55009d48bfee7b759432ea16dcd658965359d09d2d6df4a789b04a875ea6633bad7e9539077eeb9db357e3a64dad44f841fdb28aa27ce3ecf880aa421612895e8c3572e90af587d8768dd9b86bb6d7b7426fbb2ef68243e1ed147068089a1a83a966bc6bbc9a080aed2650899b825147506140a96251b8229a935ad96782ae1cff19f882a17e22ea7fd3dc30cabb6cceaa668c9be5f8330510bcd7d730a08f187322a31fd01b201b3d42046d508d3d5e7f97b617e15d6075741d5f2c64c7d234adc8a2502d0fd1f45cb4c5cc88037be6fb508504f43bf5a256a50aec54e64e122add0882df08f04cbcb2b6e14948e8bd5488237ff7d2525fec48fa92e1afc2f9fc78a6e8f58477a64550f30890854622cae37cd334eb9af31e6e351ec6c4e45f007bc8557231411b63f9cf2979af091ec644ef932db11145f969103ff2941d8fc486961ce604914bf795779d85f961cf95beaeaa6376b77652b9903fb2444f6b05e8cb864e7de3b4a3fb531988f114e5c3a419337e68b28e63ba6c336a832fc18213962a2f98259cc11172f56b4d2032f496da2dc9616deb53c869f35727b5909322313d4eeb460c4339fe91584bf33a2645811b6a98f793a7500a7404af1e9a06a897efd7cfb4b50024041b3056bb6c28761007a8130c05c485536e8f2b90423e154a30a7912c3ce0306d10deea41917687124dd42c43fb96b1fecaa47692ec845c1762f4108e12578a30f7e9de7bff274a85b7714c03bb97201e8298227ffda1800fcaf7608d865115b93474cb668ddd87c71acc5a68f4574cd36ba8ef1bba02fe95ba1a7d17b19f6fb3baa420d1b699e624a6100dae37fcdacc57aa68a6b6d032076e99deec4ba83dd06c160adaa3c5d685f8f442246d65ed82b2bfeb2cc16459de20b2690666e54760b9e1ae7b70bf359e39a713851d1c6c538808f4abac67677fe523503ae3782d80d4aa2fdff7ff4f5028c091cd3421b3a2072b73ce9da0e3b03db572a2e4baf7d9a5f656f76ffb4652f9418ff14f495bfe6b9ede72bb8620f8b286cafe8bd9a1b51d29fbf93aa9cbb13029da973df9b8089db06d02b5b41aa7e269f448803d9a1e4e57e2d512843a74f8c05486022fb7b695bfbb1229c7c99ab3c7434060705ceca78513097b4e26850406ed03e42b5c010d1bc2de906ae509a722bca625a70d2e1db491ac6f42257d8d8c6ddc04f99901956a6719cd2e40cf192a88b3f488efe35cdcf18b70994c063b5933d20ab9de5b9631fa6ada1e8d2bf72a355d87663417fc62c90af30653ec0cd2c3af00cff687524efe3e40f75651853d395e7cb39409d88269c4406b1612e25bdac68c9d086c3318f99be4e0cbd59ea6a346702f75cd2bf840599241ba162ea66700069f272b442926187a8292708192662cb260bb5169b9be116751614ec213f4b5525342950d44de8c8d5cdb08ff1c6fe7da77f74a60e9a4a829fa3535117b6088efd1480f23fe757cdbba1c2a4bc77509872733d2e6ec7a283a9fd8d143c6d44805e5c3ca7bd21556479199562c95332ae414996de0f85c5355177d33ddd365b83dd7a5d7d393467d30cb5a88729d1b7f348e2991ea73e5664017b4f841662e444a14a7727b7e5cee2cf1a917fd9be7ba231f7212cf6297884762e6a7f752922ab5d439a0bfeb7d840df19b0d07", 0x1000}, {&(0x7f0000001680)="744e7083b02b731fb4d8271cfc6292eb715a5780ebb441282094737284abc147266fc96d75833ef39c60ba65c3c9e0ca10ab5eb2278d162502bdeb1fdac898adcee54d00e00cf3a596d7af21cb17951784481eb444595d656a79ced04671134dd82e7fd4163f3c24d68bdcad04c891eaa4098d1afe75d4b741490caa73eb831e4542e7abee0579f5e478210c156bdbb8c452e2269f71c55e35af5b988a570ec56022a79be0f377cc4fff1242c97f072c70239d1c371d4efa11076fbf5f9cd21be6f5d8f6f32eb56859026b405249c6241eaeeb45bf50a6860e2e0ab267c084a68eb4a6004ff78f87d7", 0xe9}], 0x4, 0x0, 0x0, 0x1}, {&(0x7f00000017c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002d80)=[{&(0x7f0000001840)="b4f9b8d1c20357545198ecc7326f289a7466ee6de871181a928dede318f63627eb46e0f94a3adcc8a5cc99bae079addede9352e04d2404a67da8cebbeee65dedff3e5276e075ae895621180810d72bac8b48ae9ddbd4532f0a31e58e2d00a60951f39438dd288cc6c322a5d68fe0b2a24cd9d97537ec082f39d708b657b24baa6bd75bd37e5b45f7b62d4a830323d919538324e56912f0172b926f670b928ea8d2076b250e348f582fd7c68610a95b9e4cc417b4643ca825d2035aacda1b41e6efee07e71ae77d20c2f6", 0xca}, {&(0x7f0000001940)="3da5d0dbfd5b0bb83ee719", 0xb}, {&(0x7f0000001980)="3244141e958b1abed0ab46e1be2babcacec1ae06dbf52e94cdac7478717c220de5cf69d6a9a343501583e07fed01798ae69640706149612f6c378f769ad6eb9bcfc9b821bbe1c6b6f49a7c977a5c8cfff9ce059711379c552f91f4a1bdb65b2593f98b64f77749c598b7725360f4663e06f030a195ddb0802af427b080359907da2e0aa31edfb59600961e218c00c74fbf0a0daa2a6338f5c24eebb8c8dcceefe3b61948", 0xa4}, {&(0x7f0000001a40)="74ea7249a3e2ad6f4622d638c31b1a7c2c757b83b986a6e85c1db8ea35a3ddeb72c7216972e64a1fe4bcc2691f88d7a924c057508ad9528dedbd99509456571b6eeb24f297897b7ce549a88f3759dfe3d2d093f79502195c52d8044030b6b09053f9439ef3632cec93e788aa6521340067d383238e6c812ff10a007d1c46913303f3f5ef530f5964f4ef5de5", 0x8c}, {&(0x7f0000001b00)="a029ab70c03820fdb60b4f739bee05ffd0fd1c7c16620f856ac88c54f4d134f87305a7ebd4a286c156ca02120e27d8b8ffd1bc42e4e437f5f0b445e3fdd14c02121563e8917e3793d48e87a767f91e9c2f5f92a939fbb62b08d48732f3a26179ccb9541b846d7f8f39a693543ca22204e0524e7fd5bb99269591819b889e9793f6f26a073c5297c7e754edeff19126aa79087c6bc7f2632f342f3f7d35c0fb0dcf8a77ba75bf4546397a2a", 0xab}, {&(0x7f0000001bc0)="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", 0x1000}, {&(0x7f0000002bc0)="533b7cf31c2a921ff75483fb439b6d026aaac6bc31a7970a84dcb7fee3bf7780dab0ca20e49ece4665d3762bbde7f1fefe566e878a737d49bdb25491a670cb813ef71a87574dad8bfa3f6137da31ffee55c2657170ca373926e8d063101567ac9bdc7a0e16d07a6e88365a9d1ea7a8265f3a43553cf384108cc5a0ece8f7c46477937a2ddd4560be6f57683cb3f25693e862caea528827bc8412", 0x9a}, {&(0x7f0000002c80)="ba1a455182bb10c2910b1a677a673be364ce82db6c073a8265705f9e62fe5de63f45c63246c30cfbdca33ab5e9d1268bf5dcc0da113e9e72ea272e17fa49b965e6650ee1ef947965f398373cef96aa63af9d466a3ac46915e541f94b405e9a76b6aa8c78db59ef0f5684761c275220eb331378f3cd7a4522f0b63c6b6741627e6cc54851d0f0dee660ee54e8b44507c2c2b0c8ca3bfa459dcd425048b5cf58f72920a610a3dacaba6dc44c180b04fea151d86148615d20ea91f36db194a23695ed836b08486453bf8a6fb4f9d9c89f5111f6300839e84b631662a886d9", 0xdd}], 0x8, &(0x7f0000002ec0)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x60, 0x50}, {&(0x7f0000002f40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002fc0)="be2941326a8e09fe64783bba0699d83ba45c7dc4c09c391753d2b1396d0924b8ec3c1f96175defcec63e6e24b433983c5d68ad852f7fd9dffa70b70e8d6581d908ad16cc7e42cc2829250e3dedc0a0e2d7ae1c45f3c9a076f57d4a4cb9de367c432e0681010d09800c02becadb866a4d733b64c2cc79b7ff3093c61371b4a736aea6e5d523837c9b69cb1ea89b7cea7b3a5d3909af1fcb628bdd2c0a1bfcb2a7516672b583de503d1524126405189d7a305b85d6b20e218467227a38d590c6821188770ab904092f01e5a80e5a50e357", 0xd0}, {&(0x7f00000030c0)="bce62cb404a3e031e202aa673c00a9f1cfc66138911da1db1e1b27de52e6314a76e67eef0246ec374faaec92b2f71edd56229df9f2a48f00a00f6b9728dd786650a06daee346f1e889c880a685c13269c0f5573bc9165db4902191d545d8ab43d008f9e1474156edfbf336eb105357a2ba30403f426beb15d83175c849e6a78a8982d4b8c4319988c3713b4aa7e0289ee06308ffc47c1a2f33341edf692c59030917bf9f7ff4a83a1ab81395eb50b2811d545746dfaa9768d0b5a91c1756d3f4112099", 0xc3}], 0x2, &(0x7f0000003700)=[@rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0xf0, 0x40001}, {&(0x7f0000003800)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003bc0)=[{&(0x7f0000003880)="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", 0xff}, {&(0x7f0000003980)="16903a31d2c89ac3ed908207dcd6217d499b15ef80a883dd4ff41413645301013305738fc93d81b6aee413126d5f8a2aa1f524a8", 0x34}, {&(0x7f00000039c0)="9dc37090d5b7b5fc9bbbdcc85874cddfedf976831b429a39809202bcf0c3322e0a96b9fdff29eb7491488c169c11eef481ec26", 0x33}, {&(0x7f0000003a00)="9dab8c6d954927974f4a4b5cdb50c78841", 0x11}, {&(0x7f0000003a40)="a514c8a37f2f53d1666d929cbf122f1cd909facd2df2485d6a2f01ec61698c62f893c0af28288ee5ee7898fb7ce7f5", 0x2f}, {&(0x7f0000003a80)="4903cfe3756cbaf001ffcd69544840c69823afae40fc49e895a2d29d0a22508cef8610b6b289d99d19fa6365171e49463a97c2eec8d3ba60", 0x38}, {&(0x7f0000003ac0)="0dc141d09e185e9d36eb8bb11b0d249412b8d6e992ba095fba94902814af3f330c3fb394d611a4b539b44b405f7b572161d0eca530956c4ef928cc90b1d2f66933b8026249e40dea900e7ac84fb748bce4dfaf73aaf6a8b0bc8d03dff1ce119d503be57288da9ad96cc002f369ee2a964b157b7d999319620504489d24ea4db3ad83fc0850aea4178cdf3984390a3d21bf6b208768807e73005041258e1567efd513c4e7ccd1a456dfbbcefbbc72a3b12af3288bc83d4eb868136009a72c57dcd3351ac993afcdc4e6894477044209a48e1b80d1b6d09bb0b8926b600cbf10a91797b896", 0xe4}], 0x7, &(0x7f0000003c40)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0x28}, {&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003d00)="b727e80302a236437ef70ef05a80144fdf36408d1cac", 0x16}, {&(0x7f0000003d40)="ecc29423871f163a96b8b4e325607a9af7836534ff549321197471fd6eb4f147b2f9066ddb193662d8a310d7fd6ab88c2e78280468bbe8792103effc290e3182f31aa09d09bb1341cad9b757c5177cd2c177d9d9c5f3bdf12b139e93ca8d2ddbbb1853f1519f16ddb578f584f121013942c8c1e7500951e2aa8a1ca87606efb82134d1d9801193217397a96274c35185f7c58dc9c18287ad6daf5489aee9b6e827cc6d8d620c5b3f0aa82b468e133de554dbfc218e5adc3ce360f87838f8f1686db52bc60d3e4c1ac24708dcb7bde70fd7315900e83c68d1481b68271fd8ba8eb8e86d2ccea476", 0xe7}], 0x2}, {&(0x7f0000003e80)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004100)=[{&(0x7f0000003f00)="c6e05077e9f01bce3efadf043192ca171fc3acad470daee3b45516dd634eb839e944f9b12d0ef51c6c958e88858b441931cf27fbd60bcdecab181125b62153cd25c66ce3915dc29c99f0baf9a2811986af0c8fa1173632c594abf0892fc3c472fc5f69e06b7556afde012b6dafd697732bdf5fdef246e54e3c8b04f821e60b64d6dd44", 0x83}, {&(0x7f0000003fc0)="c3176b6dfaca233135173c73b904e4f82e4eac9c00e4448377b943dd009b885343d4eed633ab00529c1d601a2db148f39d144c343c", 0x35}, {&(0x7f0000004000)="26f626bd450ff1c86a7960f193d7d804713dfff3c9c3997cb242351328d9d6b22f8dbdbf1a13892d6bcc24d7e5eaf640cdb9e0bfb103ea63e4917c6bb9ac11f8f50cf22f0ebbb6cb0d8427b11bc0a5e48fbe82b2695024c77b2cfabf5d597ab0ba022e7ad0b12f0db9071d58fa4c0ead316cf35472bd916cfd292a1e776a4759f531666ce94fc98ca01caaf69d19c3cd8079380bf50eca6f86c7a04194a8e11479b6d0f9bdef9aac4dfb1e1e8828ce78a946fe5a2bb0438f41e50f4e3344362bc243f8b1e79ddccd92e48d984743f8e0115749e308e7b442f0ee5046e496fe33de1aae383f63b52df22ab0", 0xeb}], 0x3, &(0x7f0000004340)=[@cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}], 0x58, 0x40000}], 0x7, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000004580)={0x9, 0x0, 0x10001, 0x4}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f00000045c0)={0x7, r20}) sched_getscheduler(r14) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000004600)) 2018/05/19 16:46:32 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) 2018/05/19 16:46:32 executing program 7: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000040000000000027db175d1100028d00007f7a95dd"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x20000000000, 0x0, 0xae8, 0x1, 0x8000}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x7, 0x0, 0x25}], {0x95}}, &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x80000001, 0x466, &(0x7f0000000300)=""/187}, 0x48) 2018/05/19 16:46:32 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x8006, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000002000)={0x0, 0x0, 0x0, 0xffffffff}) write(r0, &(0x7f0000c34fff), 0xffffff0b) [ 203.586565] binder: 14477:14479 got transaction to invalid handle [ 203.593061] binder: 14477:14479 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:32 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2018/05/19 16:46:32 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x8000) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000000c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x8, 0x9, [@generic='\n']}]}, 0x1c}, 0x1}, 0x0) [ 203.635793] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.676452] binder: BINDER_SET_CONTEXT_MGR already set [ 203.717704] binder: 14477:14488 got transaction to invalid handle [ 203.724161] binder: 14477:14488 transaction failed 29201/-22, size 32-16 line 2856 [ 203.756351] binder: 14477:14479 ioctl 40046207 0 returned -16 [ 203.772158] binder: 14477:14497 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 203.829460] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:33 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) 2018/05/19 16:46:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x10000, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000080)) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000340)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r1, 0x40046104, &(0x7f00000000c0)) 2018/05/19 16:46:33 executing program 7: unshare(0x40000000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000100)=""/208, &(0x7f0000000000)=0xd0) socket$inet_smc(0x2b, 0x1, 0x0) 2018/05/19 16:46:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = dup2(r0, r0) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f0000000040)={0x7, 0xfffffffffffffe01}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000540)={0x4000000000000082, &(0x7f0000000080)=[0x10001, 0x3, 0x800200, 0x55f2, 0x3]}) r2 = syz_open_dev$random(&(0x7f0000000100)='/dev/random\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000001}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@setneightbl={0xb8, 0x43, 0x10, 0x70bd26, 0x25dfdbff, {0x1c}, [@NDTA_PARMS={0x60, 0x6, [@NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x800}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x2}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x4}, @NDTPA_PROXY_QLEN={0x8, 0xe}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0xfff}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0x61}, @NDTPA_QUEUE_LEN={0x8, 0x8, 0x7}, @NDTPA_PROXY_DELAY={0xc, 0xd, 0x8}, @NDTPA_APP_PROBES={0x8, 0x9}]}, @NDTA_NAME={0x10, 0x1, ']self}eth0\x00'}, @NDTA_THRESH3={0x8, 0x4, 0x3}, @NDTA_THRESH3={0x8, 0x4, 0xa}, @NDTA_THRESH1={0x8, 0x2, 0x3}, @NDTA_GC_INTERVAL={0xc, 0x8, 0xc98}, @NDTA_THRESH2={0x8, 0x3, 0x1f}, @NDTA_THRESH3={0x8, 0x4, 0x3}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x10) r3 = perf_event_open(&(0x7f000000a000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0xa000003fe, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000580)={r4, 0x80000, r1}) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) ppoll(&(0x7f0000000140)=[{r2, 0x2301}, {r3, 0x2}, {r1, 0x228}, {r3, 0x40}, {r0, 0x8118}, {r2, 0x200}, {r0, 0x4010}, {r0, 0x4008}], 0x8, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={0x54}, 0x8) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000400)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x1c, 0x0, &(0x7f0000000440)=[@release={0x40046306}, @acquire_done={0x40106309, r5, 0x4}], 0x75, 0x0, &(0x7f0000000480)="e3510d40f41f9217b3085785f25e4de07b52c88344786dba307013af1e35662715b7a9e545b338cdbddfff3f3d695604a12a974f52b5f8544a91a7ca79a9926dbcb1b8f647bcb69bb6560b0b5e3ff619afbb8fee1315d4f61a3ece870223228954eb99565b12d85bb86715e2292a3a3c9c23a1ae30"}) 2018/05/19 16:46:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000003c0)={0x9, 0x20, 0x40, {r2, r3+10000000}, 0x5, 0x4240}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000440)={0x0, 0x100000000, 0x20}, &(0x7f0000000480)=0xc) fcntl$setsig(r0, 0xa, 0x35) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000004c0)={r6, 0xc2, 0x10}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x5, 0x8000, 0x10001, 0x6, 0x0}, &(0x7f00000000c0)=0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r5, 0xc02c5341, &(0x7f0000000500)) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={r7}, 0x8) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, r8, r9) sendmsg$nl_route(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}}, 0x1c}, 0x1}, 0x0) 2018/05/19 16:46:33 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2018/05/19 16:46:33 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) 2018/05/19 16:46:33 executing program 1: socket(0x40000000015, 0x8000f, 0x10) setreuid(0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x202400, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x10000) [ 204.625595] QAT: Invalid ioctl [ 204.650310] IPVS: ftp: loaded support on port[0] = 21 2018/05/19 16:46:33 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000000c0)={r2, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}, 0x7}}}, 0x84) r3 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r3, 0x0, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x20) r4 = semget(0x0, 0x3, 0x30) r5 = getuid() stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = geteuid() r8 = getgid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000280)={{0xc92, r5, r6, r7, r8, 0xde, 0x4}, 0x2, 0x8, 0x9}) 2018/05/19 16:46:33 executing program 4: r0 = socket(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x200, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'ip6_vti0\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f0000000080)=0x5, 0x1) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) 2018/05/19 16:46:33 executing program 6: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 204.673626] QAT: Invalid ioctl 2018/05/19 16:46:33 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x500, 0x0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000140)=0x4740000000000000, &(0x7f0000000180)=0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') pread64(r1, &(0x7f00000020c0)=""/4096, 0x173, 0x84000000000) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3c4}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) fcntl$getownex(r1, 0x10, &(0x7f0000000000)={0x0, 0x0}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000001c0)="cdb971d9c7d3203436539a2065bc24f6083440282ed2c010d3e294b3386705d5a3a115c7cd28868dd13723362006fcfa438efab020db29fe65d415ca65dccea5ab6310e3e57ea908d19f30f2885daa2b98ccc7f2f74bf39d5da60e0e60b761651c361968cf39284d57f16223c199dd803a4483be1f150bcd544085351f9f87154f15cf033088303e83f780179bc65e599d71e43b9db4ce6803a3bb7563d1ce897a", 0xa1) syz_open_procfs(r2, &(0x7f0000000040)='net/ip_tables_matches\x00') 2018/05/19 16:46:33 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x160) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0x80000000) openat$vcs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcs\x00', 0x400, 0x0) sendfile(r0, r0, &(0x7f0000000080), 0x3536) alarm(0x7fff) sendmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x1d}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@canfd={{0x4, 0x6, 0x1, 0x37}, 0x18, 0x3, 0x0, 0x0, "941d819a2f53e4690fe9f2077943800195f5d9a92ba2daf591080e0e2093c19e1bfeb19b848997aee25a783c27a7f712275df20d85434c14e050504fe247dc5d"}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x54) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x0) 2018/05/19 16:46:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000080)='/\\%\x00', 0xfffffffffffffffd) keyctl$clear(0x7, r1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000140)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}, 0x0, 0x2, [{{0x2, 0x0, @broadcast=0xffffffff}}, {{0xa, 0x0, @broadcast=0xffffffff}}]}, 0x190) 2018/05/19 16:46:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000080)={0x6, 0x3}) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x40405515, &(0x7f00000001c0)=""/235) 2018/05/19 16:46:33 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) connect$unix(r0, &(0x7f0000000000)=@file={0x1, "e91f7189591e9233614b00"}, 0x44f) [ 204.873132] binder: 14547:14548 ioctl 5429 20000000 returned -22 [ 204.902705] binder: 14547:14548 ioctl 40046205 0 returned -22 [ 204.921432] binder: 14511:14515 got transaction to invalid handle [ 204.927932] binder: 14511:14515 transaction failed 29201/-22, size 32-16 line 2856 [ 204.955215] binder: 14547:14548 ioctl 5429 20000000 returned -22 [ 204.974855] binder: 14547:14560 ioctl 40046205 0 returned -22 [ 204.979849] IPVS: ftp: loaded support on port[0] = 21 [ 204.990760] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:34 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:34 executing program 6: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:34 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x503000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f00000000c0)={r3, 0x1}) connect$inet(r1, &(0x7f00002f7ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendmmsg(r1, &(0x7f0000005300)=[{{&(0x7f00000048c0)=@hci={0x1f}, 0x80, &(0x7f0000004bc0)}}, {{&(0x7f0000004c80)=@can={0x1d}, 0x80, &(0x7f0000004f00), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000000000000000000000c4a227af9e08937c"], 0x10}}], 0x2, 0x0) 2018/05/19 16:46:34 executing program 5: add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, &(0x7f0000000200)="157f", 0x2, 0xfffffffffffffffe) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) close(r0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001700)={'team_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001740)={'ip_vti0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000001780)={@local, 0x0}, &(0x7f00000017c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000018c0)={'vcan0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001940)=0x14) getsockname$packet(r0, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000019c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001a00)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001a40)={'bond_slave_0\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001a80)={{{@in=@rand_addr, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000001b80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001bc0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001f40)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002040)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000002140)=0xe8) getpeername$packet(r0, &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000021c0)=0x14) getpeername$packet(r0, &(0x7f0000002200)={0x0, 0x0, 0x0}, &(0x7f0000002240)=0x14) accept$packet(r0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000022c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002300)={'veth1_to_team\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002340)={{{@in=@multicast1, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000002440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002480)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003680)={{{@in=@broadcast, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f0000003780)=0xe8) accept$packet(r0, &(0x7f00000037c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000003800)=0x14) accept$packet(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003880)=0x14) accept$packet(r0, &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000003900)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a100)={'sit0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f000000a140)={'vcan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000a180)={{{@in6=@ipv4, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f000000a280)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f000000a2c0)={'nr0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000a300)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f000000a400)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f000000a480)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f000000a580)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f000000a680)={@empty, 0x0}, &(0x7f000000a6c0)=0x14) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f000000afc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2801021}, 0xc, &(0x7f000000af80)={&(0x7f000000a700)=ANY=[@ANYBLOB='p\b\x00\x00', @ANYRES16=r1, @ANYBLOB="04082bbd7000fddbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="7c00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r3, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000008000100", @ANYRES32=r4, @ANYBLOB="800102003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000ea76948a029eeea208000400", @ANYRES32=r6, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e6700000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ffffffff08000600", @ANYRES32=r7, @ANYBLOB="40000100240001086c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="b40002003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r11, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="4400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000400000008000600", @ANYRES32=r15, @ANYBLOB="08000100", @ANYRES32=r16, @ANYBLOB="803fe1c4fd5ce3fd00fe00020040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003", @ANYRES32=r17, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="780002003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r20, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000008008000100", @ANYRES32=r21, @ANYBLOB="c4000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000400000008000600", @ANYRES32=r22, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040040000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000008000100", @ANYRES32=r23, @ANYBLOB="7001020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004003800000038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400ffffffff40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000100000008000600", @ANYRES32=r24, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000080003000300000008000400000000004c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001c000400020001060000000004000036080000000000ff06010000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r25, @ANYBLOB="08000100", @ANYRES32=r26, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000400000008000100", @ANYRES32=r27, @ANYBLOB="b001020038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000800000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040002000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r28, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r29, @ANYBLOB="3c000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000000c00040072616e646f6d0000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000300000008000600", @ANYRES32=r30, @ANYBLOB="40000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e636500"], 0x870}, 0x1, 0x0, 0x0, 0x10}, 0x80) 2018/05/19 16:46:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) getsockname$unix(r0, &(0x7f0000000080), &(0x7f0000000000)=0x6e) 2018/05/19 16:46:34 executing program 1: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000640)={&(0x7f0000000180)=@deltfilter={0x24, 0x2e, 0x535, 0x0, 0x0, {0x0, r1, {}, {0x2}}}, 0x24}, 0x1}, 0x0) pread64(r0, &(0x7f00000001c0)=""/241, 0xf1, 0x0) 2018/05/19 16:46:34 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) 2018/05/19 16:46:34 executing program 7: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x400000000b, &(0x7f0000778ffc)=0x100000001, 0x4) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000, 0x2) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000005c0)=0x2, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0xffffffffffff0000, 0x24, [0x3, 0x5, 0x8d, 0x9b, 0x83, 0x14b, 0x40, 0x539, 0x68a]}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f00006cdffb)="8907040000", 0x5) sendto$inet(r0, &(0x7f0000440000), 0xffe6, 0x0, &(0x7f00002ce000)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) syz_mount_image$ocfs2(&(0x7f0000000080)='ocfs2\x00', &(0x7f0000000140)='./file0\x00', 0x3, 0x4, &(0x7f00000004c0)=[{&(0x7f0000000180)="4bd7c040cae6c5b55949f075fc72927a2014077b8ce752d2e22bd3d0c91bae079732df376f4224eefa95503b7ca9e43d1acd48de2853eeb99e9ae1cccd4c6e09c3d3dd703376fc5f3f7f1bd83d140ba5691d439b4363ae764c1b69ac650cc93b7da8c738b129856a6ca758cba35fad3874298430d07d1a76a273775a3bdbfb3665283ed9d190bb856fd1d68fce15deefe2208a9073feb9a960ca6322bf59ed3f509b301a9604421ad4452e467dee48585b84ea790dc7bf9164229242419a6c6be79b5c7d3d9864bb", 0xc8, 0x6}, {&(0x7f0000000280)="b7273c48e9170208e38cce1bf1b1c40e80915f20bde4629e11d5cf3726862085d5c6977a7874bf6cd36e494d41a3b6d87508f638cd6f77330b94d7d40b2e101f3bc9996f7df8e6a9d090e62b7466651e0244f5d59d89882e1e480eb04e55ffd68e4ca9303fb6e07b95bc0c48cda7dadb70a8c37d63575d48cbf8de0697b6b5ef48556d08c2bb794e97afce41dc376779482cb61922ad51d7100ef5b3e6", 0x9d, 0x5dc4}, {&(0x7f0000000340)="b9b6051b73dd4184c74c8d05738dae6296619f73fa0a86d015b96247de782f10a7c316bbb1de675bcfe5862e766627fb28aa82f876b35af017ee1b69e60aaa8bc718744e89bc3fc1ce7935ee8281065bfa04e5dd170fd456ac1449d2a34d3ac328dd848d3f754dee48bf5386ea5de3ac6e52a433c8eb0f9b474b855f3022bb73ac4608136279732c390ac738b16dfd6f40e610c19ac23135c4295585bfb6d199df3f61f2d3b0a36d9590cca3a7a8f858e78339fa6f92d8ac70c806753e93bbb561ddf6ca497aefed8244fe593a5935eb", 0xd0, 0x9}, {&(0x7f0000000440)="3f4b2e7d8416b0b232cb6f832c516d7be9496cb7932d2d498ca13f04f0f9bfb7d9aaf9f46941bd94af94a4aaf23ac884b0c90b7ff3644845347af5a7b09b6cae5aeb690566", 0x45, 0xba}], 0x1000000, &(0x7f0000000580)='/dev/vcs#\x00') recvmsg(r0, &(0x7f0000000540)={&(0x7f00000000c0)=@nfc_llcp, 0x80, &(0x7f00000004c0)}, 0x2101) 2018/05/19 16:46:34 executing program 6: r0 = socket(0x0, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:34 executing program 1: r0 = socket(0x2000000011, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0xa, 0x4, 0x3, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000600)={r1, @in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x84) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000140)) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000200)={"15fd14449d6035d157f8d256c0646e1ecdd477ff541a93211cc9d0e3843ac9e549bf21f4ad5ce6bdde03332ed74756cd023b03c3f95c81e124bd18bcaf501f5f7ae0d03fb282ee44c4ad7b4799e94a6eaeee6d12f8460e5c9f6944c86acd1e19220f1983129d734c3385abe8a734f66ec977aa36ff11c7eded9f0efa58f3f9fdc220d3e0c0094b6f7ab56aa529c0b9994ef8249b7f0175ccc79e06888774a574313e9b0554a4293263139d25e5972538146b4fbc762fdb0111b9266627fec0ea877e03a2ec32c769c3349c60c92a6926b118c593eb00592dc78d6c80d6a98b6e988e41f74516012f367feee4bfdb69022cff7f652455f9f908f4d4e13761dfbb69b3a3543f32ef7eed3c0db608a8e29eb3fe71971d4d566bde35482b889bd85794da7d1669a75bb01157dc4ac45af1e663c14566eabfaf1c81f1d4e2ff0054bdf8cf01e5a94b3f0ad0e114d8b04a3f9999a3ec35332d2ee0b929c0c6adb2e7a668a63246f84e55ac5789bdfcf823e9a374d18ea03e817e64654cb9adb8492d1bf3d2dc77c75ba20a9aaeaa1c68b507f2ac326fd5223c91ffba1d7b472e6e4d5bc772262f922c4f0c132becf9b4a2f92e648fc5f09c8eab6786f83b7fee2b36f89faee7218d670d5fa8144b6588f8ac9fbba13e0a5cc4d886a8dbea11be1d2b6523983a1cb5132f292e44f46d6798148b0d204042397a5251fe827a10c7617210bd24c70113b25ca3e1d6344b0a266c40e62fc454c147d3824b62f1f2b9be3b87283d370ed087996737faa60712307a7b432974eabab407678d165858475a1fb5ff02c1140ca7cb3c4ce59a78158bc504b141cf01a1f17069d2af91a056b45f5496ade88a9669fe86d88b7f802b1cd1b57ae0a686618c707176286c4137c108326396c63cfc243e5c68987a91f50f163056f795d5d4483cc6c7b36a5a6c871581d27c712158118156ad3564143178ddfb4a34851e76a088ef7558f457c7d3bb1b3d7d13d88d10dbdfec32e0e3b4e499ff7049e4e6325455fafeb60fa45881f56fc08f82fe13a734523b138014d277b67a5d4734ba1e2bdff7c835cc7be10d0d46caa92694e663adb5659ca85fa8ed99867b0ce13d31eeb46e5d073c5c49ca10f4bee9d2b08689b097b7e8c2ba1c22e4ec9feed0230e2ab560f5a47b7cb09d9f12098421ba00bbe43ee77cfb1833b05c4bb57e67e66a06a1d33020c7d2d9f5472fb855960e34916f5ea5df659a4938521353084506d8ecd4ddbb21b7081c0373668ff8f60f2ebd3c82c85372309c28a76cf3a9fcb0fbac41c04e3c7a7a9249cc0eff58dd3f2114530ca8dc8b1ba4ab20ae25bfb2a54e87f13a7f6dfc12c7191e45a27d7b7d6dcb4de0783354ed7ab0772fedcc1e51590b75402ba6e0992ce1ff8dd24dc1ac42d55fefa8a9d277596074a2a12f65a53ba5a7ee70b75baf8220d37e"}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000000)="0f22df0f01df0f477100c4e219aeee66b86b008ed067f30f2344ea3ddd20520800f4b804b138cb0f23d80f21f835400000500f23f8f36567640f00d9", 0x3c}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x1fff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/05/19 16:46:34 executing program 5: r0 = memfd_create(&(0x7f0000000080)='ppp0\x00', 0x2) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f00000000c0)={0x8000000000, 0x8001, 0x1}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="4626262c8523bf012cf66f") r2 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0xd, 0x4, @tid=r2}, &(0x7f00009b1ffc)) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="6024cf6ba3c51a896f046d8b0c896c35", 0x10) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000180)="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", 0x1000, 0xfffffffffffffffb) r4 = add_key(&(0x7f0000001240)='cifs.idmap\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a, 0x1}, &(0x7f00000012c0)="13a524d5cccc19866b6be965f15b9d6d1f0b797ea36e05e4a6ceab4cdccd0b278abc493ba989f722b6d8232f33192fd47d11c8082940bd20d2f007d4453fd0b113bf7043590a21b9c53c6db82c30065505d9182158daa38f1b84d8187e4744afca803713f819d460", 0x68, 0x0) keyctl$instantiate(0xc, r3, &(0x7f0000001180)="93a7d3e4e26e7a3620b859b940c4bcba443c873ef9db733b0fabd827e2d7ed7dd43e9acb95f4045529274f49209b3e6d39a07a4b1ae05a9c2a6adb245377c0b146c86d0bae6e7db1354a9fd7a048c6e33fd6e6f65d357c504a3ff01045ccecefc3ce35430e4e12c293ab3c6cf21cba0c6569060b9a273c2d07b993c0ca317fd0da276f1b2b1f9129db38f1cb18086ea6be36453afe6492f296", 0x99, r4) 2018/05/19 16:46:34 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0xd, 0x2, &(0x7f0000000a80)=@raw=[@ldst={0x3}], &(0x7f0000000b00)='syzkaller\x00', 0x7, 0x97, &(0x7f0000000b40)=""/151}, 0x48) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000)=0x1ffc00000000, 0x4) 2018/05/19 16:46:34 executing program 4: add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000180)="d9", 0x1, 0xfffffffffffffffb) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) sched_setscheduler(r0, 0x7, &(0x7f0000000080)=0x80000000) [ 205.819807] binder: 14582:14584 got transaction to invalid handle [ 205.826371] binder: 14582:14584 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:34 executing program 6: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:34 executing program 5: r0 = socket(0x3, 0x4, 0xfffffffffffffffa) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e1e0067726f75702f73797a3100", 0x1ff) 2018/05/19 16:46:34 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vsock\x00', 0x1, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snapshot\x00', 0x80000, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000280)=r3) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000500)="0f01b70000000066b81b018ee03e64f082309066baf80cb80cc6b588ef66bafc0ced3e0feafb0f32440f20c0350b000000440f22c09a79000000780066ba4100ed0f30", 0x43}], 0x1, 0x0, &(0x7f00000001c0), 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xc000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r6, 0x500, 0x70bd2b, 0x25dfdbfb, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5d}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1b3ca00000000000}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 205.948200] binder: undelivered TRANSACTION_ERROR: 29201 [ 206.034052] Unknown ioctl 1074048775 [ 206.183014] Unknown ioctl 1074048775 2018/05/19 16:46:35 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:35 executing program 6: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:35 executing program 4: r0 = socket(0x2000000000010, 0x20000000000003, 0x0) accept4$inet(r0, &(0x7f0000000000)={0x0, 0x0, @multicast2}, &(0x7f0000000040)=0x10, 0x80800) write(r0, &(0x7f00000001c0)="220000005e000725004f10f7e2bacaf5fe2a0f638bb7b45e9b313ee9bebe8d6a53b078c904ea5016244c5d72fdfa326c31a5f5f62b717e19500e11454289bd622f5a5ce5998d3a26", 0x48) recvfrom(r0, &(0x7f0000362f74)=""/140, 0x8c, 0x0, 0x0, 0x0) 2018/05/19 16:46:35 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000005000)='/dev/sg#\x00', 0x0, 0x8002) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0186415, &(0x7f0000000040)={&(0x7f0000ff7000/0x2000)=nil, 0xcd8, 0x7ffffe, 0x0, &(0x7f0000ff7000/0x4000)=nil}) writev(r0, &(0x7f0000000040), 0x146) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x2000, 0x0) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0x8, 0x2, 0x7}) 2018/05/19 16:46:35 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r2 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r3) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) 2018/05/19 16:46:35 executing program 5: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f00000000c0), &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'gretap0\x00', 'eql\x00', 'dummy0\x00', 'nr0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @empty, [], 0x100, 0x198, 0x1e8, [@limit={'limit\x00', 0x20, {{0x0, 0x3}}}, @limit={'limit\x00', 0x20, {{0x0, 0x8}}}]}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0xffff, 'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x5, 'syz0\x00'}}}}]}]}, 0x2f0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x1e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000000), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x9, 0x0, 0x0, 'nr0\x00', 'ifb0\x00', 'nr0\x00', 'sit0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0x70, 0xf0, 0x120}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00'}}}, @common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x258) 2018/05/19 16:46:35 executing program 3: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0x1}, 0x0, 0x8) pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f0000000140)="ea", 0x1}], 0x1, 0x0) ioctl(r1, 0x800000000000009, &(0x7f00000003c0)="2b543758a0e08ac53b07df86acb368e032816107cc28823bf6183cc8cf2249abbe09cf109930a26668037293b624c1ebf38bb805627502000000000000002595674ef81bbeb03e6eed8ac3af5af5b2dbfc74e822965fa96b13af6b862dd3102b8af675c11e8f3d124daf73c9c3731e9ac49232741415f9c80d8b82428ecee525ce60306607a5f4c9c8b809ae7f000000820220af4bf0a58b90f0f21777501b438e00d7bc70af1f9b91a6bb9e2222a2c515db3bec36f26600000000000000000004000000") writev(r1, &(0x7f000000b000)=[{&(0x7f0000c01f96)=',', 0x1}], 0x1) rt_sigprocmask(0x3, &(0x7f0000000000)={0x4}, &(0x7f0000000040), 0x8) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") dup2(r2, r0) 2018/05/19 16:46:35 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x10001, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000000c0), 0xfea4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x3, 0x0) [ 206.742559] kernel msg: ebtables bug: please report to author: bad policy 2018/05/19 16:46:35 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4040aea0, &(0x7f0000000080)={0x5d, 0xfffffffffffffff9, 0x1, 0x0, 0x100, 0x4ca, 0x1, 0x9f, 0x4, 0x1, 0x0, 0xf85, 0x0, 0x9, 0xe9, 0xf1f, 0x0, 0x7fff, 0xba}) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0xffffffffffffecc) 2018/05/19 16:46:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000001e00fb034d564b00000000014f97dea6940bc4ef320222b9a852c13567cbca7d2a863370fdab5fc3892a014bcc3580098625973cc239773d0a7e0acbaaf4f2137bd4b2afffc20cd7af768c886b6e04099d549857e7b7a53e307f536b130e538dd0a280773c65ab8bb187853cefec29307a452547568fc8759259a3e309142786fde1d6db7834492c8665e8b79902aec09c5a6172950e"]) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x10, 0x0, 0x277]}) 2018/05/19 16:46:35 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9) setresuid(r2, r2, 0x0) setresuid(0x0, 0x0, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000040)='veth1_to_team\x00') [ 206.794550] kernel msg: ebtables bug: please report to author: bad policy [ 206.840537] binder: 14656:14659 got transaction to invalid handle [ 206.846997] binder: 14656:14659 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:35 executing program 6: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:35 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)="ed20291de807f750874bc4854d6c17b6f27d41628a29685c7a5cb79c32fd2dfdbbcfc7a3188081206480dab39d2e676304da102ac1db2603f0bc7a83b30f6b7d9801aec6ebcd65c1abc43d9a3fb7edad72f5023b19eb5606747e4a2639d1eaf28621bd00e600092dca9de4ba296ef7a8541d0b106f71e51aa04211ba3908be3dd018b52a31b9f34a8f43bc73d7a1ffed1bc3b0110820f963af594e1b40ee4f6e5f6d15d8afb3fb0821d1171552cda73ae19f961702ccef0bdfbd38bb290b59b9ffd1b2a8f49c3958f0aa6cf87545b779404e25eb50c4f67af66531cbcc08067d8ef7bef9b72ee3eedc0408ef2720f1625cab7befec439368ebe086ba043725ef56e160ac49265cee30e670b81dcffa0a80d41f4ce9e51646c2e0ddbbde367569f708a74b2602d6de39ca35abafcd90ab8d8f753fc8ca99710a0a4b9c1592bc7dea6231918993b8f60abcc098da68fb9f849060294d7214bdbaee766bf03590c89ebbe47f0e17960fe1b394fc6b246e25e932ceb4aaddceba1c27480aad7dfb28d232292b560f6933a5caf0a14304ea6da699ddc0c2487efc0231f76c5252fd1c5ee2e0f8c160a7ca3f613808658d6e4e6eac550e05754efec0d87af6acdbbb4bedce7d20c2b5d25077a60579787348998f83d6f11277ac816c5d374b68a92a991439e8d76440131691e9f08361ecf813fa718d3457e00f4899ccb8b56f432018e83a1711f5b7cd018aea8976aae67e4818795f6328eee6fb13c73015792c00f757afab815bbfe73bcb9106c8acd769e2629096f95a1c515205104749baae4896551081a3a5c4d5f7f5aa03ab33ce2e8a5919cb6725ccc610e78569758eb48be9c0adad493144c29c087f73c3d807eb8245df1e6fa87773106c984fc6f998222af4b0d6e6", 0x284}], 0x1}, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x81, 0x400000) syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x400) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0xc0145401, &(0x7f0000000340)=""/4096) openat$ppp(0xffffffffffffff9c, &(0x7f0000001340)='/dev/ppp\x00', 0x101100, 0x0) [ 206.927836] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:36 executing program 1: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0xa, 0x8080f, 0x2) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0xff, 0x6, 0x1ff, 0x54a, 0x8, 0x9, 0x4, {0x0, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x4, 0x9, 0x200, 0x1000, 0x7}}, &(0x7f0000000000)=0xb0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000040)={r2, 0x3f7, 0x9, 0x1, 0x5, 0x100000000}, &(0x7f0000000180)=0x14) socket$inet_sctp(0x2, 0x1, 0x84) bind$can_raw(0xffffffffffffffff, &(0x7f0000000080)={0x1d}, 0xf) 2018/05/19 16:46:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) 2018/05/19 16:46:36 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-aesni\x00'}, 0xffffffffffffff17) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) read(r1, &(0x7f0000000000)=""/93, 0x5d) [ 207.231408] binder: 14698:14700 got transaction to invalid handle [ 207.237787] binder: 14698:14700 transaction failed 29201/-22, size 32-16 line 2856 [ 207.306775] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:37 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x8) 2018/05/19 16:46:37 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000002c0)) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000100)=""/251) io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x77359400}) 2018/05/19 16:46:37 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket(0x10, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x2000, 0x0) r3 = inotify_add_watch(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80000800) inotify_rm_watch(r2, r3) unshare(0x400) r4 = memfd_create(&(0x7f0000000000)='.#\x00', 0x2) setsockopt(r0, 0x65, 0x10000000003, &(0x7f0000000040)="f0000003", 0x4) ioctl$KVM_SET_CLOCK(r4, 0x4030ae7b, &(0x7f0000000100)={0x0, 0x7}) 2018/05/19 16:46:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:37 executing program 7: syz_mount_image$msdos(&(0x7f00000000c0)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x0, &(0x7f0000000400), 0x128005, &(0x7f00000004c0)={[{@gid={'gid', 0x3d, [0x33, 0x35, 0x32, 0x35, 0x32, 0x32, 0x31]}, 0x2c}, {@check_strict='check=strict', 0x2c}, {@nocase='nocase', 0x2c}]}) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x1, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000080)={0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}) prctl$intptr(0x1d, 0xfffffffffffff2f9) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000440)={0xffffffff, @random="59922dfc306a"}) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) semget(0x1, 0x0, 0x9) futex(&(0x7f000000cffc), 0x0, 0xffffffffffffffff, &(0x7f0000000500), &(0x7f00000005c0)=0x1, 0x1) write(r0, &(0x7f0000000380)="a50519db9b3f4d2e9a0f10aee74ef586b88687939d56ccf0cb004984b374c12ce83d0e7c6fcd04708322eb4d046edd99ce8179d7c73867b3788e500e33d1eb06616e3af69dfd32ad9731ecce895e3e5d55dcd0d3d7fbb070747bd4adb9fc957713be5e2c31de963818407862037a098e986d26260f5cdc3859ed064372175c9dfa87b61b05e64b4dcdd5", 0x8a) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x18, "446627726db3311a5367f6e4307c7ab2bb31e239d9f304e4"}, &(0x7f0000000540)=0x9) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000580)=@sack_info={r1, 0x200, 0x3}, &(0x7f0000000600)=0xc) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x98, r2, 0x308, 0x70bd2d, 0x25dfdbfc, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xa0}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x100000001}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0xdac1a3f90a4fb9a1) 2018/05/19 16:46:37 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xffffffffffffff54, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="66b822008ec0ea00100000fb000fc72a0fc7690b0f32c4e1ff70b600480000fe66baf80cb8d8b54f8aef66bafc0cb820650000ef0f3066bad00466b8007866ef670fc74f00"}], 0xaaaaaaaaaaaaa1a, 0x27, &(0x7f00000002c0), 0x296) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x7fff, 0x10000) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000000c0)) 2018/05/19 16:46:37 executing program 4: r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fchmodat(r0, &(0x7f0000000280)='./bus\x00', 0x100) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x0, 0x0) syz_open_dev$random(&(0x7f00000002c0)='/dev/random\x00', 0x0, 0x10800) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0xfffffffffffffee9) r3 = accept$alg(r2, 0x0, 0x0) sendfile(r3, r1, &(0x7f0000002ec0)=0x50, 0x7fff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, 0xd, 0x7, 0x208, 0x70bd26, 0x25dfdbff, {0x7, 0x0, 0x2}, [@nested={0x14, 0x72, [@typed={0x8, 0x30, @fd=r0}, @typed={0x8, 0x1c, @fd=r0}]}, @typed={0xc, 0x38, @u64=0xff}, @typed={0x8, 0x2d, @pid=r4}, @typed={0x8, 0x94, @u32=0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4) accept$alg(r1, 0x0, 0x0) 2018/05/19 16:46:37 executing program 4: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80003, 0x0) bind$packet(r0, &(0x7f0000000480)={0x11, 0x2000000000000003, 0x0, 0x1, 0x400000000000000, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffffe}, 0x4) socketpair$inet(0x2, 0x5, 0xffff, &(0x7f0000000080)) syz_emit_ethernet(0x1e, &(0x7f00000004c0)=ANY=[@ANYBLOB="8724a6beebce0180c2000000000c000000000000001ba1cf5286f00a2e42605364154b210f0d1c454ea25fdc37d13566e70be58f13f52b0c19fdcc1540450cb550a7c0e345fe3ba74e54b290750520d2f05a063cffbc7ef8b7276990305b824f05002b943a1ed6b7addf223637d466ad64a7889d3243bb99e253d825561fddaedd05509d81004c4272022cfe2ed5d4f47cf0f4e955492ecc9ffeb527b78ab3b387fc35e30062b0624dce58788c49d8c354b772f4b7aba984e0726ee19da935dd2d5b19f75a7e48fa29455f1bc1d0feb3c3e5b23f2bb7f5fd1372ab57fe9aa37d7d8d13e4f2cc3ed7651b77c031a566f04fd05695d5ee84c8b9a9d050c06a15178df88e0a941869c612ad08050fd5a1bb566908879f73fec7fab83506bdff4baf375759dfd873a85bdc9f3bc1aece7cd3e3557046ff0cf0a4479176c49787509ab8f620ed9cfe6b9929863427c614e7477a86e0b19db4b499b87e7fa0dc54be141c2fb711d946cad7647e4bb8c34ef8a08795ba70b37e636c3f759d97ec956846f3354206a191660102d7ce888c3145defa86bad4ace12104e788121a99591288138e2a9c3a0906000000f5bf34e803f33149432012c33117c4799e6724b79ef7e047f0cfd957159f000000000000000000"], &(0x7f0000000000)) 2018/05/19 16:46:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:37 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r0, 0x0) fchdir(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10) sched_setattr(0x0, &(0x7f0000000240), 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x800, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xfe, &(0x7f0000000080)="d7fb8fad1e0d16ac46578e2b0f01b0405b7c6f4238419ca2250d99eea5682ec2896ec07a3366423fac1a5b215a0dd2d3b487f4dea5db7c23c8884c83e8cf1092bbe17e2be21d1ee06f794df1a3d028ebf506bc38cfacc7bc0b3c3007f936fbe5af327507aaaad5948fdf0b70bfed426d81e7e611e0fb85a506a6715469a702eca7ffc87df2480ddf83c15648c84801cdc52c97a093092a22e8a097b886493f75e7d7c29720c7fba24adfa58772dc8feee0fcc15bb543c18b8fd7509ffc59bfc2a8f088", 0xc3) [ 208.219519] binder: 14727:14731 got transaction to invalid handle [ 208.225947] binder: 14727:14731 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:37 executing program 3: socket(0xa, 0x1, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r1, r0, 0x0) 2018/05/19 16:46:37 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:37 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-twofish-3way\x00'}, 0x58) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x20000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000300)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast2}}, &(0x7f0000000200)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', r2}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="0a0775ffd5e383e5b3b60ced5854dbb7", 0x10) r3 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r3, &(0x7f0000000a80)={&(0x7f0000000480)=@pppol2tpin6, 0x80, &(0x7f0000000080)=[{&(0x7f0000000280)=""/92, 0x5c}], 0x1, &(0x7f0000000a00)=""/111, 0x6f}, 0x0) [ 208.281549] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:37 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, {0x0, 0x3, 0x0, 0xc1b6}}, 0xe) r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x800, 0x200200) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x7, r1, 0x1, 0xffff, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) pkey_free(0xffffffffffffffff) 2018/05/19 16:46:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) [ 208.513591] binder: 14765:14768 got transaction to invalid handle [ 208.520091] binder: 14765:14768 transaction failed 29201/-22, size 32-16 line 2856 [ 208.528975] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:38 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:38 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}}, &(0x7f0000000100)=0x84) accept4$unix(r0, &(0x7f0000000600)=@abs, &(0x7f0000000680)=0x6e, 0x800) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r1, 0x1f, 0xa0}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000340)={0x6, {{0xa, 0x4e24, 0x80000001, @mcast1={0xff, 0x1, [], 0x1}}}, 0x1, 0x3, [{{0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, [], 0xb}, 0x2}}, {{0xa, 0x4e22, 0x100000001, @mcast2={0xff, 0x2, [], 0x1}, 0x2}}, {{0xa, 0x4e24, 0x5, @empty, 0x4}}]}, 0x210) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="df05050000004c0b0b0009000100"], 0x12) listen(r2, 0xffffffffffffff7f) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000580)={r1, 0x7, 0x7, 0x80000001}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000740)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x80000000, {{0xa, 0x4e21, 0x2, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in6={{0xa}}}, 0x90) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000005c0)=0x13f) 2018/05/19 16:46:38 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x400000) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) open_by_handle_at(r0, &(0x7f0000000100)={0xc8, 0x101, "4408d219b8eacf00cb9d00fb32c556cfc937e5e0e6c271e441721173e2d81d3d68146796942d9da95d82d3e6b9fbdae3ea4e9b0cc171001aaff732957e873456a6645bd79b51775e80aa4b00794601939d0328cba43f913afb5087ecd86c0df8c291536282d163d9ae0df817de54483c27aaf20388b333e2ca20e15d04fab5d4a83780adf73428367c27105dc09460308b62ef12abbcfe552f5319cd1e0edffeb3833c7d4a914aceb6600577cc07e6897d6bf51fd6833c6f4d0ecd76dbdbe7cd"}, 0x1) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000240)={0x0, 0x1, 0x81, 0x10000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000002c0)={r1, 0x9, 0x10, 0x0, 0x7}, &(0x7f0000000300)=0x18) r2 = semget$private(0x0, 0x7, 0x400) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000340)=[0x10001, 0xffffffffa7329a71, 0x3f, 0x2, 0x7, 0x0, 0x101]) write$binfmt_elf64(r0, &(0x7f0000000380)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x5, 0xfffffffffffffff7, 0x2, 0x4, 0xdde47e02fc11610b, 0x3e, 0x1f, 0x171, 0x40, 0x2ff, 0x1000, 0x6, 0x38, 0x1, 0x1f3a0000000000, 0x3, 0x2}, [{0x3, 0x3ff, 0x33, 0xbd, 0x4, 0x3, 0x5, 0x400}, {0x6474e557, 0xfffffffeffffffff, 0x800, 0x800, 0x1, 0x8000, 0x9, 0x4}], "61037191b5d1dc0ca115208fe404d5579db029d15597daf50d81c9d27d64ec032a9c9dad573a5c7e0b522442c5ce5ed011ddb46f230fdfcfb7b4d719f275f7074bae6b75f7be1fdd1da15438da832a2feaf25c894db62fa3153449b62875a76b471ff8cf103c722a3ffde06875df3542937d9c20f5faa0d9e7842173f1064e017e0ed2a3cf7fbc3f22aa7170b6557d6147e09512fdaf3a77b2b9f273f7de93cb9d53c95b6499c4d76f98719e5b983f9928eb89080d6199eb0f9f683e2f76ad"}, 0x16f) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000500)={0x3cf1}) timerfd_gettime(r0, &(0x7f0000000540)) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000580)={r1, 0xa3b, 0xfffffffffffffffa, 0x2, 0x2, 0x3, 0x200, 0x475, {r1, @in6={{0xa, 0x4e23, 0x7f, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffff}}, 0x4, 0x6, 0x0, 0x101, 0x7}}, &(0x7f0000000640)=0xb0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000010c0)=0x0) r4 = geteuid() lstat(&(0x7f0000001100)='./file0\x00', &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000011c0)={0x0}, &(0x7f0000001200)=0xc) r7 = getuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001240)={0x0, 0x0, 0x0}, &(0x7f0000001280)=0xc) r9 = gettid() fstat(r0, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000001580)=[0x0, 0xffffffffffffffff, 0x0]) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000015c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001600)={{{@in6=@ipv4={[], [], @multicast2}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000001700)=0xe8) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001800)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001840)={{{@in=@rand_addr, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001940)=0xe8) getgroups(0x2, &(0x7f0000001980)=[0x0, 0xffffffffffffffff]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000019c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a00)={0x0, 0x0}, &(0x7f0000001a40)=0xc) getgroups(0x4, &(0x7f0000001a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f0000001bc0)=[{&(0x7f0000000680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000700)="007859f1dde21f5bdaa5efaace455a0b2e056482b600f130f425028cd30938", 0x1f}, {&(0x7f0000000740)="d200bfce0d86eb55fb8e7c479d0064c01b60cb855ab6230ff41357f37feef2028da6ba4ffd6859f492df6355fd8de7fedf4b8e1be17bdcd7131250728a0fa6b56c71822eed53dac78e6cd4854e0ccbcb13044a7ae0b80be54deb472cc1a4554b14d5518fd8f23a12da29047f0aa3415c6c252b15efb328632099218b2d4e244d9784a64387da1aa0774b0293c1189058a182b3b012b36890ae8fe16467bc8f0d6ae52550b6415efe1252d3bd5a9fd67be8fec94991394791476ce71b50fc4e744824078f8c0876776e5ed46d2e04ab9a2b06a9c530d303acfa0c165cad010a77bca92fad1ad7e594d410539714", 0xed}, {&(0x7f0000000840)="1cbfd95d636e98f037e64604cb5d295ee085a215ab8756890bea328356a5879d3df1fd9c5c7c64c048d3", 0x2a}, {&(0x7f0000000880)="a08a63cfc2902d3d7ff57dc603deabc72f0d7164e909d85426c5f42778d2b081b88dd810112ec93eeba42e320c7b28469929b2854d21b3917bfdfd8f4df1cd69b5edc4eb000ea782e79ad6b2acbf3470689fb2aaa34d93e42432a872f652fcd375f0c0f8bfbeb406c027ec6363dad35314fe242cb81935d76f9fec74df78e7e473321db1cff1ca6e3cb81f15027bbe2f4aa396323c4ec7d3d9409a6dc06a3ee38a96bd5ab03f89992bb94f8de0bb398641fa6d0240c23162f8dc88a6a790971afa234854de154a6b7c3f22736b6c20d7f942a2d9a628aeb541fa34a97f1dc600fa", 0xe1}, {&(0x7f0000000980)="8a0f55fc85f21ece04221a6ab421d2768ccdacfc164911c9f92fb3561adf0745", 0x20}, {&(0x7f00000009c0)="4764734d1e7896c20fabef9572403f199df083731d192e05bdc7b1b0f72c71dd43fbb6364520cfcc687d7ec61298071676b17f3fdcd523", 0x37}, {&(0x7f0000000a00)="07fc50d27aa0584ee0829e02e952", 0xe}], 0x7, 0x0, 0x0, 0x4}, {&(0x7f0000000ac0)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000b40)="bf1628ef5791b4374a08e3e18d8c9c04d5b651d102d7bfd70b4dcfe73b04c476762b45dd24a5da992a9b63c4c279b4024b4c6c327ffde9c4d43b444ef5c40562edc3ebf0eef8e24612a056accb7aad47e96ebeed2ed81ac6d66a9e88dfe2b2ae7addc4b38f1fbb9ac46875ead2f6291ef3922adc13b4a0f660c9fa7e30a7b222fb4e843fb5d1b0438b4dfe6b825933bbd1f0845a99fb9c730e1e45172b655f4c8f0285041d20", 0xa6}, {&(0x7f0000000c00)="f2b48ca3528841688e87c349e4b3df6b3df029a420212490ce26089d967cb7fbc2cd9d9e4a03ad0215115ec690214931b7a05e25cf3657b5126c48dcf070798db88b5d079565e00e89915ea2d86fb89255ea3dfe02c3312691bc0f9f6a861415349d59225a63c1c55287463561bb7bbe109e2ea8d6b4046eb4566edfa913e9eea14a3874166e113f9fbdc56f90a9f2fb4dbb1761c252c6a6cfb5025af66bfdf76b5622df25a770c4965d2b8aa2999c30daf6c488553d710043bce3aeae2698d87adc2ac67542468d81cdf1c3d7bcd8d4cf9bd814", 0xd4}, {&(0x7f0000000d00)="d5a105d7055cfac48491c0cf05b39d45a92ee02a9928d5e80efe0b5f263f05ef199df9b57a1b18f4acdbfca749ff66b9451b85154480722060ad0554ac682bf830d1ffa882e791", 0x47}, {&(0x7f0000000d80)="f5b6a86d69c6948d91b1a61f4a407022dfa9770e98d3f382cac9150c83e71b319e2d3c927cf3d4587220c78e1a527c3e2689cfd56ed08e959364a47066e718a600f7c8385c76988541d1805281dfaa9fb205b710773b88687f8c04373d62d398bebac7d573c8a5816deb331d8077b1295f9f2089154a3ac51f479c0d97ea310141dbcf59194a15dda214e4bcb8ac7a725ed0", 0x92}, {&(0x7f0000000e40)="c09d0b4e30dbbe4d821c57d0e638bdd85114f24246b6958ee6856efea3264ac466cb39b9bcb9c6ab1568b155027033609b8d", 0x32}], 0x5, 0x0, 0x0, 0x4000}, {&(0x7f0000000f00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001080)=[{&(0x7f0000000f80)="a797f2cb1a8720b82f209e610bf2bab337020cb8a2a9f332ba83469a3028e11967c0f849c8d3a02dba25157a3f7f5f541723632985959b322ef2beb0269d1079b689e036e5d51cf0b3ae2ca8e291f106af53bb4e70a67f838e3fbc7253bee25320e775a6ccac3a3d5030db157227f711f6231b28ed5519c684e4f1206d587e9b295467da1ee9fe97a56180a2565b7ae98b7e90ebcac85eab044f5f18eca4a9205b94da", 0xa3}, {&(0x7f0000001040)="0df1f13ee2eafc281e7a2b484fb0a5", 0xf}], 0x2, &(0x7f00000012c0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x78, 0x4000}, {&(0x7f0000001340)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000014c0)=[{&(0x7f00000013c0)="fa69867f5a1fc4efc2c363c4e2baa897b3795ebbbd2aefbf0e53e7e8", 0x1c}, {&(0x7f0000001400)="a3a8083669889a2c5f8be7", 0xb}, {&(0x7f0000001440)="ba78286ea5fcb9263ecc9bea5585877e9e2027e2f6cc9d0f7f8dabbb3a8d5e8a34ec0c2cdafa87245e5921774ed98f3b294ffcb455949c6eb1e39049328cf295e07802937c5b684e61892f18c7b1bf6bf9ad0fbfadf3210b25feaea3ba1f647545f562be0defb1a563d1dd74945e0da0f6", 0x71}], 0x3, &(0x7f0000001ac0)=[@cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x10, 0x1, 0x1}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xf8, 0x4000040}], 0x4, 0x1) 2018/05/19 16:46:38 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000010c0)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}, &(0x7f00000011c0)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000001200)={r1, 0xb4, "d20424bcdfc9707b5471731d702d5385bd167645d7d3f8abc11ca15c88dbed5875fc6c4561928d3d95fcb91b6477923d096a5e6537c6fac84ec5c0c46a079c4262514efb623a8576bb816bc3d283b6667933be975c5a7e1ede3c91a2fabebd41cf48141a0812fc5b9cbb98e852e580c153e85adbfc5d7d33f3818fff593f74f3d63b00a2d261b74d35a7b185e7f609fd1d42722f8768a29aa387423ab16b7355b39509acbaaa11a506604fe038b16e7064cb924d"}, &(0x7f00000012c0)=0xbc) r2 = syz_init_net_socket$llc(0x1a, 0x4000002000000004, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000001300)={0x3a, @multicast2=0xe0000002, 0x4e24, 0x2, 'lc\x00', 0x26, 0x76b3, 0x3e}, 0x2c) recvfrom$llc(r2, &(0x7f0000000040)=""/4096, 0x1000, 0x1, &(0x7f0000001040)={0x1a, 0x5, 0xfffffffffffffffe, 0xf5, 0x6, 0x10001, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}}, 0x10) setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f0000000000), 0x4) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000013c0)) 2018/05/19 16:46:38 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:38 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$evdev(&(0x7f0000000280)='/dev/input/event#\x00', 0x2, 0x0) ioctl$EVIOCSKEYCODE(r1, 0x40084504, &(0x7f00000002c0)) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x200000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000100)=""/251) io_setup(0x8, &(0x7f0000000000)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000040)=[{}], &(0x7f0000000080)={0x77359400}) 2018/05/19 16:46:38 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) shutdown(r0, 0x1) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) 2018/05/19 16:46:38 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:38 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x0, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 209.127419] QAT: Invalid ioctl 2018/05/19 16:46:38 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)='./file0\x00') sendmsg(r0, &(0x7f0000001800)={&(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x1, @random="694dbd04f6aa", 'ip6gretap0\x00'}}, 0x80, &(0x7f0000001780)=[{&(0x7f0000000280)="8367c20b234416bf91c74ebb3ae794fe7f011c077a381fa57a57e1c565ba80fab993b9a220726431e8207ee8185c1bf0082d1ce20b0a4c1104656aed9982ad3364dda485936ac6e53baf69ba6dfb858c0e4f66ed89ecce8e1ff0cae068e0414ab6ebbb7ee69ea9f1af4f473df1449da63f127d9e0664cd991df8482fa099aa8e9c3c9d1c0caa423c386bc223ca3d446b6ef1eaf4a7acda7a230328d8b74b79ce6d90e540d1e2474d04f3f66ad260a7cff5503a3d5569ae755a779ca94448748d2ccb2546529cec8f097c7e9445", 0xcd}, {&(0x7f0000000380)="1cc4622a18f0a2d0a9c4a2667c40ebb451cfbed62d07f95bb0f708f51134e5f72b748e564c6bdb0284be7a3d8da59e228f6475d9cb80fdde364d927b3a778a9ceaf33280d921b170ce97653626b151e988d63b5383c3457240470953c84963d5c9acb99f19989d751de341db5ea5ba74", 0x70}, {&(0x7f0000000400)="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", 0x1000}, {&(0x7f0000001400)="33bbc324be789595ab18e441414bf0159070e537b9751beb48953feb1fc538c3d953108fb7842a55666bb770f5ab8f65fdf77ec6478ae2765b5d76e11cda26ca0cd35c59c4c45caf016c5c13c4598a39c1bc2a6cbbd495afcf7a126a60", 0x5d}, {&(0x7f0000001480)="9201f9428f3292a7e62c7dcab0435b6646bf8609d4200d833c51527f3c6ae115c2deaf560403143c41892016412b1896a2a90435574649615cedcc7347df1418c4650a8e7959f5d21b20f970594d652b5397f69a8c29332702b6d3bb5d4b58a24a6b1696015e3e029d4df9c6a0eff7a0508a0ffa7aa3f9ef5a1bf7c7887f276b01008effc255f72a819fb4af24db9847d09de955ef98b861786081de6f432feb0718fff0dfcaa5c7e0c3e6c8a4a76d44ff77c49b98049938a8641bd71f064ce6a4de74ee91d2bec3f9f648ceab4c7b32df0e2b890d791cea7a582e192edbc8d78d59196bd5077771e4", 0xe9}, {&(0x7f0000001580)="2e8e686e39fa00e490837ffc517fe534e6c107e168ab225ff75b9423da9f65505b67c84ebf0a366801621e5bfc4abf2a3fae5b42faa70c178fb8f400731c20c2fb8fcda8e3efff1083220779c6d66bf8971f43469be6f5ca64bc9d59cc8dda831b0d6f188e41f817f93faf954dcdaf7d6ee5d3919f687129271ae507f7724a726ae1930785934ef93e0ba12fc0c9501bd5f7024c1fdee96ea06ade060b", 0x9d}, {&(0x7f0000001640)="0d44223c78937306096e5803d0a4e885ef8bd2ff58d8c1aa29e62c82da69ee78814cd56040912e712a993a03a607bd72ddb14fcef93a7d3a51b3b86f33b32b672c87b80679da4192aa4fe301561a09df81bff5f6964b06fb7bfc705eedbe7212543d4876038ed809e9696d3df8ca73a9ec1ce8deffcb6cb6c4084ffb1492fc97c976270cf8f6f81b0797b1d0af0f2335a53b7a2c0112995d47f8b9e749b063b5779a3459eaa8f79f8bded643d777cf7a97a41769f472f0c3", 0xb8}, {&(0x7f0000001700)="47e66329c743c80b5c79cd7f5ca220361f9032089c08eced7b1559ab8f3b3aa62bd1577c7a4a7a2db2403ad85fef7bfd4727694348c4caaed5c3a9c96343a5fe411fde714ae9665d011099eec9e31ec5e7b43f63f8382c552437553df97e9582c74dd6ecc5e1f548d8", 0x69}], 0x8, 0x0, 0x0, 0x10}, 0x800) pwrite64(r0, &(0x7f0000000080)="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", 0xfe, 0x5e) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x1, 0x0) 2018/05/19 16:46:38 executing program 5: r0 = epoll_create(0x10001) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x1, 0x450900) ioctl$EVIOCGPHYS(r3, 0x80404507, &(0x7f00000000c0)=""/97) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x0, 0x9ffc}, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r5, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r5, 0x1) epoll_create(0x5) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000040)) [ 209.166297] QAT: Invalid ioctl 2018/05/19 16:46:38 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) write(r0, &(0x7f0000000100)="c3", 0x1) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f0000000040)=@buf={0x84, &(0x7f0000000140)="2fd452b08c301bd23ff6522d73ed16e57e1ad67e4a2992955deb523d48c979e10c70d4eb364fa43a710cc4915f83b6b41ba27e9d57bffd978834edf3c2e60742f15077e756b907e254072c5615b0ec469ce2bf2fef64af814bd564ab89098f5bb8a6ffe6453c7ba272ee522c44a83622a74f789a33ecea2f6c89e1a7aace1885148d161c"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffeff}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000300)=""/208, 0xd0}], 0x1) dup2(r1, r0) [ 209.193712] binder: 14784:14787 got transaction to invalid handle [ 209.200146] binder: 14784:14787 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:38 executing program 3: r0 = socket$inet(0x2, 0x3, 0xffffffff) write$binfmt_elf64(r0, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0xffffffffffffffff, 0x2, 0x10000, 0x7, 0x3, 0x6, 0x6, 0x323, 0x40, 0x24d, 0xff, 0xd47, 0x38, 0x2, 0x820, 0x7c06, 0x8}, [{0x6474e555, 0x100000001, 0x1ff, 0x5, 0x8, 0xfe, 0x6, 0x3}], "2888f43be1e5777f33f2489a86640ac0597b7da798c974c6c705bbe6b4dc428186a147ac7fe49348db624181cc3d7c5339c53dc697351077d5315d9aa39b4250da1b6ad7921d98df5f9c16571d27922d15729fb396d8f58213ce2639cf94718d3180ee664d33332d9fa95ebccb45dd6852f18074e681e53ee971757f135da84960a5f366fe1012d67ced", [[], []]}, 0x302) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x20000000002) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x41, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], &(0x7f00000001c0), &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x1, 0x0, 0x4}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$BLKTRACESTOP(r3, 0x1275, 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f00000001c0)=0x3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) pwrite64(r2, &(0x7f0000000100)="25dcd656c6288b3a02fd", 0xa, 0x0) 2018/05/19 16:46:38 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 209.245481] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.272832] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 16:46:38 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:38 executing program 4: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") shmctl$SHM_LOCK(0x0, 0xb) [ 209.328752] tpacket_rcv: packet too big, clamped from 65536 to 65392. macoff=96 [ 209.478724] binder: 14822:14823 got transaction to invalid handle [ 209.485240] binder: 14822:14823 transaction failed 29201/-22, size 32-16 line 2856 [ 209.518706] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:39 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:39 executing program 7: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_GET_KEEP_ORPHAN(r1, 0x2288, &(0x7f0000000140)) 2018/05/19 16:46:39 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x20000, 0x0) sendto$ax25(r0, &(0x7f0000000080)="1687bd9a7b7bc8754ffc651c3f6e11", 0xf, 0x0, 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x417, 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") readv(r1, &(0x7f0000000000)=[{&(0x7f0000006f07)=""/249, 0xf9}], 0x1) fcntl$setstatus(r1, 0x4, 0x20000000800) 2018/05/19 16:46:39 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:39 executing program 4: r0 = socket(0x14, 0x10000000000803, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000003840)={'veth1_to_team\x00', {0x2, 0x4e21, @loopback=0x7f000001}}) sendto(r0, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f00000001c0), &(0x7f0000000240)=0x4) recvmmsg(r0, &(0x7f0000003780)=[{{&(0x7f0000000040)=@in={0x0, 0x0, @dev}, 0xa88, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247}], 0x36a, &(0x7f0000000280)=""/4096}}, {{&(0x7f0000001280)=@nfc, 0x0, &(0x7f00000025c0)=[{&(0x7f0000001300)=""/50}, {&(0x7f0000001340)=""/78}, {&(0x7f00000013c0)=""/81}, {&(0x7f0000001440)=""/67}, {&(0x7f00000014c0)=""/62}, {&(0x7f0000001500)=""/188, 0x276}, {&(0x7f00000015c0)=""/4096, 0x122}], 0x96, &(0x7f0000002640)=""/56}}, {{&(0x7f0000002680)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x0, &(0x7f0000003700)=[{&(0x7f0000002700)=""/4096}], 0xa4, &(0x7f0000003740)=""/30}}], 0x40000000000033b, 0x0, &(0x7f0000000000)={0x77359400}) 2018/05/19 16:46:39 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x121000) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000040)={0x9, 0x27, "eff64e342f7fbced9bc0899d88872bf9471e4164db9cc058b35f9344d65dd0171c7a8c0981eb7a"}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setown(r0, 0x8, r1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x73, "50960b34da94a9544b4c7a538e061429de80b7db6ec129eff6840d373157b23fbf82739c328070555677c9bf6a00fcafd8c36ff0975c25de0dae68e4adf7a44ddd006fc6092204ca686b944a1ed52a6acf4e1ee856d270b7a3a788d915ee1570021b5642368299962786065a9fe1f24102d81b"}, &(0x7f00000001c0)=0x97) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={r2, 0x0, 0x20}, 0xc) setsockopt$inet_int(r0, 0x0, 0xa, &(0x7f00000002c0)=0xbf95, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000300)=0x7fff, 0x4) r3 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@dev}}, &(0x7f0000000440)=0xe8) setreuid(r3, r4) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000480)={0x2, 0x8, [0xd, 0xaae]}) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000004c0), &(0x7f0000000500)=0x4) prctl$void(0x1e) r5 = shmget(0x0, 0x4000, 0x40, &(0x7f0000ffc000/0x4000)=nil) shmctl$IPC_INFO(r5, 0x3, &(0x7f0000000540)=""/192) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000600)=""/224) getgroups(0x7, &(0x7f0000000740)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) fchownat(r0, &(0x7f0000000700)='.\x00', r3, r6, 0x400) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000780)={'ip6_vti0\x00', @random="7fb4328ba045"}) r7 = add_key$user(&(0x7f00000007c0)='user\x00', &(0x7f0000000800)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000840)="5b55d5b5ff3157abf7c94fdef37fdbed9963d2ecfd88452d0c8d6f62bd6e96b465fc35b573469e27f077a7be24", 0x2d, 0xfffffffffffffffc) keyctl$describe(0x6, r7, &(0x7f0000000880)=""/106, 0x6a) tkill(r1, 0x28) recvfrom$inet(r0, &(0x7f0000000900)=""/165, 0xa5, 0x2000, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f0000000a00)={{0x1, 0x0, 0x4, 0x2, 0x7f}, 0x0, 0x2, 0x5}) keyctl$search(0xa, r7, &(0x7f0000000a80)='logon\x00', &(0x7f0000000ac0)={0x73, 0x79, 0x7a, 0x3}, r7) write$vnet(r0, &(0x7f0000001b80)={0x1, {&(0x7f0000000b00)=""/4096, 0x1000, &(0x7f0000001b00)=""/118, 0x2, 0x5}}, 0x68) getsockopt$inet_int(r0, 0x0, 0x22, &(0x7f0000001c00), &(0x7f0000001c40)=0x4) 2018/05/19 16:46:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:39 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000000)=0x13, 0x4) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'broute\x00', 0x0, 0x3, 0x80, [], 0x3, &(0x7f0000000040)=[{}, {}, {}], &(0x7f00000000c0)=""/128}, &(0x7f00000001c0)=0x78) 2018/05/19 16:46:39 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 210.208260] binder: 14843:14852 got transaction to invalid handle [ 210.214695] binder: 14843:14852 transaction failed 29201/-22, size 32-16 line 2856 [ 210.223796] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:39 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0x10001}, 0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) utime(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x2, 0x9083}) r2 = openat$cgroup_procs(r1, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0)={[0x30]}, 0x1) 2018/05/19 16:46:39 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000900)='/dev/vhost-net\x00', 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000006c0)=ANY=[@ANYBLOB="05000000000000000200000000000000a300000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000009600000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000170000000000000a400000000000000", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000001000000000000000000000000000", @ANYPTR=&(0x7f00000000c0)=ANY=[], @ANYBLOB="000000000000000002000000000000001100000000000000", @ANYPTR=&(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000040000009afe78e56104d0a8bd20f265c1aaff0cf9b1ae0c6cf4c472c6188473deb81694f6a00bb7219b4e4ab8b3a77f757786e22d77c9cf9a51c7f6efb77863e242fff30adccd71596bcb66ec362d17866a"]) 2018/05/19 16:46:39 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) r3 = openat$md(0xffffffffffffff9c, &(0x7f0000000140)='/dev/md0\x00', 0xa000, 0x0) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000180)=0x6) 2018/05/19 16:46:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:39 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[]}, 0x1}, 0x0) [ 210.364831] binder: 14841:14849 got transaction to invalid handle [ 210.371249] binder: 14841:14849 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:39 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 210.431815] binder: BINDER_SET_CONTEXT_MGR already set [ 210.460607] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.462631] binder: 14880:14881 ioctl 40046207 0 returned -16 [ 210.524611] binder: 14880:14881 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:46:39 executing program 0: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:39 executing program 5: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0xd7a8, 0x3, 0x1, 0x4, 0x10}, &(0x7f0000000200)=0x98) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r1, 0x6, 0x10, 0x9, 0x28}, &(0x7f00000002c0)=0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r2 = socket(0x11, 0x100000801, 0x0) r3 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x100) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f0000000540)) fstat(r3, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000600)={{0x1d, @multicast1=0xe0000001, 0x4e20, 0x1, 'lblc\x00', 0x8, 0x1ff, 0x47}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e23, 0x0, 0x9, 0x7b8000000000, 0x8000}}, 0x44) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) syz_fuseblk_mount(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0xd003, r4, r5, 0x34db, 0x2, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80}, 0x0, 0x0, 0x2}, 0x20) getsockname$ipx(r0, &(0x7f00000004c0), &(0x7f0000000500)=0x10) 2018/05/19 16:46:39 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r1 = socket(0x1e, 0x80804, 0x0) connect$ax25(r1, &(0x7f000056eff0)={0x1e, {"03491f08f5ffff"}}, 0x10) 2018/05/19 16:46:39 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000001a00)=[{&(0x7f0000000600)="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", 0xde0}, {&(0x7f0000001880), 0x0, 0x2000000000000}]) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x3, 0x1, &(0x7f0000000180)=[{&(0x7f0000000080)="b06bc2ff79eb3b5ab7c7fbf4e7178621ef74d6c503274f31669b64d8927379166dfbf6c1a6d6a1ed167139840efa21314a9507a0192b2adafe502e6c67409c7d5011f7297e780d09f65ee705f78c71ce479dc0c809a731e6d121df2dea6c2515cf79badd505ae3f539adb3c4fa2658c5def22563c58e1ea9318a0eeac3f3e2efa95a664c0f401bff2a6d00d6a2f5c10a5aff13a56b0906f2dde1917bcb2f77cd86cd17e5ecd3e9f9061f8ecb0f7e2f9f83a6d7807607964ee6615504fb7b87250e60c4bbf5ede60ce6dc996772854cfd729afe9ac9745b9c9cbaadfb74e7c6af3af0eb3d7b16c4863ccabffe7dbd30", 0xef, 0x8}], 0x1140454, &(0x7f00000001c0)='\x00') r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mixer\x00', 0x400100, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000280)={0x20, 0xff, 0x7, 0x8cb9}, 0x6) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000200)) 2018/05/19 16:46:39 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x6, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000180)={0xe0003}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="266464f2f0806ead000f08c744240007000000c744240200980000c7442406000000000f011c24d0f0c4e1fc5a685866baa000ed66baf80cb8b14cb385ef66bafc0cb033ee0f20c035040000000f22c064f4c4e1781726", 0x57}], 0x1, 0x63, &(0x7f0000000180), 0x0) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000040)={0x400000000000000, 0x4001, 0x2, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 16:46:39 executing program 3: r0 = socket$inet(0x2, 0xffffffffffffffff, 0x7) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x11, @rand_addr, 0x0, 0x600, 'wrr\x00'}, 0x2c) r1 = request_key(&(0x7f0000000180)='.dead\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)='wrr\x00', 0xfffffffffffffffb) request_key(&(0x7f0000000080)='trusted\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)='veth1_to_bridge\x00', r1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000000)={'veth1_to_bridge\x00', {0x2, 0x4e23, @multicast2=0xe0000002}}) 2018/05/19 16:46:39 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:39 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000007c0)={0x4, 0x0, &(0x7f0000000040)=[@exit_looper={0x630d}], 0x62, 0x0, &(0x7f0000000080)="49ddc710a157c33aea0510868c10c793b5d052836d5e9be38601ba5d52a717e288fb3b9edf15cdf5b38862ba8ef794f236c8941612573dc198766553a51688d9c40eeb8b335440989f9f4882a58511d36fbfe5ccf2b57d9de83e6d8f16d164d6c0c8"}) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x101402) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000100)=0x6, 0x4) 2018/05/19 16:46:39 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg(r1, &(0x7f0000007b00)=[{{&(0x7f0000003040)=@rc={0x1f}, 0x80, &(0x7f0000003140)=[{&(0x7f00000030c0)="c2", 0x1}], 0x1}}, {{&(0x7f00000031c0)=@generic={0x0, "3103c46ba045c3bb5b9aad4aabe1b3598ccddbf701fee1e2855dda69c26835d22c30cc5da820ee782448eb8231db0d633bd7788e247d96f5bc3c372753422299a3557903d0df2ba8f595072837302a60bcd6a7a201d8682bd2e8e8e05bec44c6c69d4aaf25b5f5a790b694da49f622e0aeb99af35836b6c1c1a367bc8eb6"}, 0x80, &(0x7f0000003340)=[{&(0x7f0000006b00)="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", 0x1000}], 0x1, &(0x7f0000003380), 0x0, 0x4000}, 0x100000000}], 0x2, 0x400c001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000100)=@get={0x1, &(0x7f00000001c0)=""/227, 0x8001}) 2018/05/19 16:46:39 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 210.772230] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 210.786266] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 lblc [ 210.809376] loop1: p1 size 1745560 extends beyond EOD, truncated [ 210.854403] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20000 lblc [ 210.892620] binder: 14906:14909 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:46:39 executing program 3: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[]) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getdents64(r0, &(0x7f0000000080)=""/92, 0x5c) [ 210.928988] kvm: emulating exchange as write 2018/05/19 16:46:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000000e20000000008000000009d20"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) 2018/05/19 16:46:39 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) getsockname$inet6(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x1c) [ 210.964666] loop1: [CUMANA/ADFS] p1 [ADFS] p1 [ 210.974328] loop1: p1 size 1745560 extends beyond EOD, truncated 2018/05/19 16:46:40 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:40 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c6f66f0000040000000108") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r1, 0xaf01, &(0x7f00001e3000)) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00008ffff8)={0x0, r2}) r3 = dup2(r1, 0xffffffffffffffff) ioctl$VHOST_SET_VRING_KICK(r1, 0xaf02, &(0x7f0000182d45)) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r3, 0x111, 0x3, 0x1, 0x4) [ 211.061652] FAT-fs (loop3): bogus number of reserved sectors [ 211.067596] FAT-fs (loop3): Can't find a valid FAT filesystem [ 211.204711] FAT-fs (loop3): bogus number of reserved sectors [ 211.210696] FAT-fs (loop3): Can't find a valid FAT filesystem 2018/05/19 16:46:40 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:40 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x8, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1a00000}, 0xc) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f00000001c0)) pwrite64(r2, &(0x7f0000000340)="466307eed5e13abdea26db76422331187b5e425294864f63d79d3dee492fa87488f09254459870120da7903c3d8b38d56833ddb9f3169c4cc875ee31d7d94b7ca2", 0x41, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="66ba200066edc4e1792edfc744240000000000c7442402f927397cc7442406000000000f011424b805000000b9833400000f01d90f18c9c4e2790ece670f20d466baf80cb86ddd9286ef66bafc0cb064ee66ba6100b80aad0000ef266526652e0f01ca", 0x63}], 0x1, 0x2, &(0x7f0000000480)=[@vmwrite={0x8, 0x0, 0x9, 0x0, 0x80000001, 0x0, 0x7fff}, @efer={0x2, 0x1000}], 0x2) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000004c0)={0xdef, 0x8d}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000500)) r4 = shmget(0x1, 0x4000, 0x10, &(0x7f0000fea000/0x4000)=nil) shmctl$IPC_STAT(r4, 0x2, &(0x7f0000000540)=""/31) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000580)={"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"}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r3, 0x40405515, &(0x7f0000000980)={0x9, 0x7, 0x4, 0x9, "dfef1dc5db45b14cc82bf9479afb80fb4c84517208fa45cf14a0afcd68ad6820e2bd86d7dfa56b11fa3e008e", 0x1}) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f00000009c0)=""/110, &(0x7f0000000a40)=0x6e) r5 = syz_open_dev$tun(&(0x7f0000000a80)='/dev/net/tun\x00', 0x0, 0x400002) getsockopt$inet6_tcp_int(r3, 0x6, 0x14, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000b40)={@in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x200000000000000, 0x100000000, 0x100, "84f3ea2efd2f5a66ab970d18d5dffd9e7a3b5f144f8425c15ebeb64ff7063bde87e79e54e9f1b1dc7a04bb0f9384cd847cedd3c53020ff24ac64a8a35dfd00f7133c0ba62f41a813bdefb79073b28bb3"}, 0xd8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={r1, r3, 0x2, 0x1}, 0x10) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f0000000c80)) ioctl$KVM_S390_VCPU_FAULT(r3, 0x4008ae52, &(0x7f0000000cc0)=0x4) bind(r0, &(0x7f0000000d00)=@pppoe={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'syzkaller1\x00'}}, 0x80) ioctl$EVIOCSREP(r3, 0x40084503, &(0x7f0000000d80)=[0x4000800000000, 0x20]) bind$alg(r3, &(0x7f0000000dc0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000e40)={{0x0, @multicast1=0xe0000001, 0x4e23, 0x3, 'lblc\x00', 0x10, 0xffffffffffffffff, 0x33}, {@dev={0xac, 0x14, 0x14, 0xf}, 0x4e24, 0x10000, 0xffffffff, 0xffffffffffff0000, 0x9}}, 0x44) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$ipx(r1, &(0x7f0000000ec0)={0x4, 0x296, 0x6, "56225153748f", 0xc9f}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000f00)={'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) ioctl$VT_RELDISP(r3, 0x5605) 2018/05/19 16:46:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = socket(0xa, 0x1, 0x0) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x404000, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000280)={0x100000001, {{0x2, 0x0, @multicast1=0xe0000001}}, {{0x2, 0x0, @rand_addr}}}, 0x108) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000100)={@multicast1=0xe0000001, @broadcast=0xffffffff}, 0x8) 2018/05/19 16:46:40 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000000c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000300), &(0x7f00006fcff0)) r0 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r2, &(0x7f0000bf5000), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0x8d) r3 = getpid() getpid() fcntl$setown(r1, 0x8, r3) fcntl$setsig(r1, 0xa, 0x12) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) tkill(r0, 0x16) exit(0x0) syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x5, 0xa0402) open(&(0x7f0000363ff8)='./file0\x00', 0x401, 0x0) 2018/05/19 16:46:40 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x20800, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0x8, 0x0, 0x2, 0x7, "385fc5bddcc436a75b5d5231734080f0d76987f711acb49335141577ea557f031432d09f6a0cbb41840d31dc", 0x7fffffff}, 0xf4, [0x800, 0x80, 0x6d0824f, 0x0, 0xb5da, 0x7a, 0x86, 0x3f, 0x4, 0x9f6, 0xfffffffffffeffff, 0x3ff, 0x81, 0x40, 0x3, 0x80, 0x5, 0x0, 0x2, 0x8, 0x9, 0x100000001, 0x8, 0xffffffff, 0x7, 0x2, 0x4, 0x99, 0x6, 0xd00b, 0x3ff, 0xfffffffffffffffb, 0x1d5a, 0x3, 0x3, 0xe473, 0x4, 0x20, 0x0, 0x800, 0x4, 0x7, 0x437b, 0x1, 0x100000001, 0x4, 0xaa, 0x14f, 0x6, 0x20, 0xc1e3, 0x9, 0x5, 0x1, 0xab75, 0x100000001, 0x8, 0x9, 0x4, 0x4, 0x5, 0x5, 0x8001, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x10001, 0x4d, 0x10001, 0x3f, 0x1, 0x27, 0x7ff, 0xa09, 0x7, 0x6, 0x6, 0x6, 0x0, 0x3f, 0x1, 0xffffffffffffbc52, 0x1, 0x6, 0x19a, 0xa47, 0x7, 0x3, 0xffffffffffffff7f, 0x9, 0x8f5, 0x7fffffff, 0x6, 0x2, 0x2, 0x9, 0x73, 0x7, 0x9f, 0x3, 0x7, 0xffffffff, 0x9, 0x6, 0x1, 0x8, 0x1f, 0x7, 0x75a, 0xfffffffffffffff7, 0x0, 0x2, 0x7, 0x8, 0x7ff, 0x8, 0x1, 0x5, 0x6, 0xffff, 0x7fffffff, 0x8, 0x3, 0xfff, 0x5, 0x1000, 0x100000001, 0x85a], {0x0, 0x989680}}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x2}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e20, @rand_addr=0x7}}}, 0x84) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='mqueue\x00', 0x0, &(0x7f0000000000)) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000002c0)=0x800, &(0x7f0000000840)=0x4) r3 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) lseek(r3, 0xfffffffffffffffe, 0x0) 2018/05/19 16:46:40 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000)=0xfffffffffffffffe, 0x4) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x1f}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e23, 0x3f, @remote={0xfe, 0x80, [], 0xbb}, 0xfff}}, 0xffffffffffffff80, 0x800, 0x3, 0x5, 0x80}, &(0x7f0000000180)=0x98) 2018/05/19 16:46:40 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0xd}, 0x2c) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f00000001c0)='./file0\x00', 0x1, 0x2, &(0x7f0000000300)=[{&(0x7f0000000200)="acd262e02e8dd18641c971f445f9acc0c1aecdc6f0b1e3", 0x17, 0x810000000000000}, {&(0x7f0000000240)="f084959c5772cd6db6f534f4bfa709ed3794553de298fd3972ad28330886b18b5aa54fbd2caabf6ac9138f51b11e4bf5a27d4cf1813e578088a84ccb3069eb97a90d28839f51b816696547badcf0648c0b6ac74fafdd7cba8b91bb69aa10add61b94f85d37a9e1df9123a52b4d405b97abf830ad7962afa035895d9ecaaba349cd0a1e726920b904103b1d", 0x8b, 0x4}], 0x100a000, &(0x7f0000000340)=ANY=[@ANYBLOB="746969655f6f66667365743de55b663ba16f34c16965742c71756965742c64656275672c00"]) mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4007, &(0x7f00000003c0)=0x20000009, 0xfffffffffffffff8, 0x5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r0, 0x28, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140)={r2}, 0xc) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000080), &(0x7f00000000c0)="14"}, 0x20) close(r1) 2018/05/19 16:46:40 executing program 4: prctl$getreaper(0x4, &(0x7f0000000100)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x404000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000040)={0x9, 0x1, 'client0\x00', 0xffffffff80000005, "0220c0f81aebf0d6", "23261aaf66534d5377eaa57bac668c43cb89a327c4a9171b9ceca5f5cbd94870", 0xfff, 0xac}) 2018/05/19 16:46:40 executing program 3: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) mq_open(&(0x7f0000000000)='^&\x00', 0x40, 0x0, &(0x7f0000000040)={0x0, 0xa, 0xbb76, 0x0, 0x0, 0x2, 0x0, 0x5}) 2018/05/19 16:46:40 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012c") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:40 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00003de000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x2, 0x800) r2 = socket(0x3, 0x803, 0x400) r3 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x200000) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000001c0)={r2, r3, 0x5, 0x8a, &(0x7f00000000c0)="40e0f3884f73fee4b462d5d2ac8592784811d7706917852642cea1a17f979a2a5177150833a7a7fab34c4bed0bbdbec92698939b2d631853daaf2e6b131975777c9a4f5836ca7621ebf975c93f53652553b7d97948cf7b223cf676536072cf526dc48fd22953aeb4feb8e151e7c39aabf5e497b46edc19b929dc5ecfaea5e1f58e239cec64aeaaeba2035c3aed247547cd1c394d4b92983a21d1f6273e44b5ee3429e90baed3c9fb710b607fdd2889031b9c59a3b2b60504a9344b89f240954d477c4e", 0x80000001, 0x6, 0x9, 0x1db, 0x6, 0xe0b7, 0x2, "acefb3cf5d1a5d8e34cdf38659738a08d52d41b9b0656e4f5f5d575db3aeee9718d19116b37836f36ba76137faabe62567610c1dddfa4c41dbfc4be40f5c12b2ab6fe40b1bbf0e5822388607150aeb3faa9b07f0f038f6074ab48f6d2a94f0abb933367e8d505522abbd95b7778275de7fff764ab9584fb103f282e95cb2df4e3abd4a99b2ba3b32716ac7fd467eaf1bac1d56899dd98ad850de00ed11778c7eba324b898c1985ea61dc54e9bab543a6676aeec6af0227ffca0d4872820a5f03296eb1c19ddacd39ea8f5142efc456ea147eae76242e9a415c171b0b1b4fda075ba383a910"}) [ 211.593839] binder: 14996:15004 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:46:40 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000000c0)=0x2fb3, &(0x7f0000000100)=0x4) sendto$inet(r0, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f0000000080)={@multicast1=0xe0000001, @multicast1=0xe0000001}, 0x8) recvfrom$unix(r0, &(0x7f00000006c0)=""/242, 0xf2, 0x0, &(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e) accept4$inet(r0, &(0x7f0000000000)={0x0, 0x0, @loopback}, &(0x7f0000000040)=0x10, 0x80800) 2018/05/19 16:46:40 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) r2 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:40 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000080)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x3, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) inotify_add_watch(r1, &(0x7f0000000140)='./file0\x00', 0x100) [ 211.922802] binder: 15041:15043 Acquire 1 refcount change on invalid ref 0 ret -22 [ 211.930706] binder: 15041:15043 got transaction to invalid handle [ 211.937077] binder: 15041:15043 transaction failed 29201/-22, size 32-16 line 2856 [ 211.952884] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:41 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:41 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-des3_ede-asm\x00'}, 0x58) accept4(r1, &(0x7f0000000140)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000000)=0x80, 0x0) 2018/05/19 16:46:41 executing program 3: r0 = socket$inet(0x2, 0x4, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x2d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x800, 'lo\x00', 'teql0\x00', 'ip6_vti0\x00', 'bcsf0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x1e0, 0x210, 0x240, [@ip={'ip\x00', 0x20, {{@remote={0xac, 0x14, 0x14, 0xbb}, @broadcast=0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2d}}}, @comment={'comment\x00', 0x100}]}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x348) 2018/05/19 16:46:41 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:41 executing program 1: r0 = memfd_create(&(0x7f0000000000)='ipv6header\x00', 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001b00)={0x3, 0x0, [{0x6000, 0x1000, &(0x7f0000000b00)=""/4096}, {0x3000, 0xbe, &(0x7f0000000040)=""/190}, {0x6, 0xcd, &(0x7f00000001c0)=""/205}]}) r1 = open(&(0x7f0000f04ff8)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000300)='./file0\x00', 0x0, 0x4) fcntl$dupfd(r1, 0x406, r2) accept$alg(r1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b000000050000006007000048040000c0020000ffffffff00000000880100009006000090060000ffffffff900600009006000005000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="0002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400188010000000000000000000000000000000000000000000000004800686268000000000000000000000000000000000000000000000000000000070000000001bc0000009e0781000004fcff7f00ff07090008000400ac001900070004000600100030006672616700000000000000000000000000000000000000000000000000000200000000000000ff0f00000102000048004e45544d41500000000000000000000000000000000000000000000000001f00000000000001000000000000000000000000fe80000000000000000000000000000a00684e2200000000000000000000ffffe0000002fe8000000000000000000000000000aaffffffff00000000ffffffff00000000000000ff97813bbaffffff000000000065716c0000000000000000000000000064756d6d793000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000003300ff0766000000000000000000000000000000f0003801000000000000000000000000000000000000000000000000280069707636686561646572000000000000000000000000000000000000000001800100000000004800534e4154000000000000000000000000000000000000000000000000000104000000ac1414aa00000000000000000000000000000000000000000000ffff0000000705000066fe800000000000000000000000000019ff010000000000000000000000000001ffffffffffffffff00000000ff000000ffffffffffffffffffffffffffffff0076657468315f746f5f7465616d000000626f6e645f736c6176655f3100000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000107010000000000000000000000000000004001880100000000000000000000000000000000000000000000000030007372680000000000000000000000000000000000000000000000000000006b03050400000000000000000000000048006e666163637400000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000008000000ff020000000000000000000000000001000000000000000000000000000000004e20af860000000000000000000000000000000100000000000000000000000000000000ffffffffffffffffffffffff00000000ffffff00ff000000ff000000ff0000006272696467655f736c6176655f30000079616d30000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000016000307200000000000000000000000000000000002480200000000000000000000000000000000000000000000000038017274000000000000000000000000000000000000000000000000000000000700000008000000010000006600000019020000ff020000000000000000000000000001fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000000000000000ffff7f0000010000000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000bbfe80000000000000000000000000001000000000000000000000000000000001ff010000000000000000000000000001fe80000000000000000000000000001300000000000000000000ffffac1414aaff01000000000000000000000000000100000000000000000000000000000000fe8000000000000000000000000000bbff0100000000000000000000000000010600000048004d415351554552414445000000000000000000000000000000000000000004000000e0000001000000000000000000000000ff0100000000000000000000000000014e23ff030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x7c0) lseek(r1, 0xfffffffffffffffe, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r2, 0x891b, &(0x7f0000000100)={'gre0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/05/19 16:46:41 executing program 5: r0 = socket(0xa, 0x803, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x56, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@canfd={0xd, {{0x6, 0xffff, 0x5, 0x1}, 0x35, 0x3, 0x0, 0x0, "ed4f0698a43e4e7fc071496a8b7a645eedb230efa958a3a9296afe19bcf973b3508e901423cfff36510fbcd952ab8cd7e5ebd0fe572a126b4f417a64775f8550"}}}}, &(0x7f0000000100)={0x0, 0x0, [0x0, 0x0, 0x200]}) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x80) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000000c0)) close(r0) 2018/05/19 16:46:41 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x100000000, 0x400000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x0, r2}) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaab1aaaaaa000800470000240000001000009078ac141400ac1414b3473ebd0c50f53b0300009078e0000002"], &(0x7f0000000040)) 2018/05/19 16:46:41 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:41 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) sendmmsg$unix(r1, &(0x7f0000005240)=[{&(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000680)=[@rights={0x18, 0x1, 0x1, [r3]}], 0x18}], 0x4924924924926c2, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000002c0)) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x2482, 0x0) 2018/05/19 16:46:41 executing program 4: r0 = socket(0xb, 0x4000000000001, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000140)=0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fstat(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(r5, 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) r7 = shmget(0x1, 0x1000, 0x10, &(0x7f0000012000/0x1000)=nil) shmctl$IPC_STAT(r7, 0x2, &(0x7f0000000000)=""/58) fcntl$getownex(r6, 0x10, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(r8, 0x0, &(0x7f00000001c0), &(0x7f0000000200)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f00000002c0)="66b9800000c00f326635008000000f3066b9024d564b66b80f0c000066ba000000000f30640f220466b8008000000f23d00f21f86635000000040f23f866b860d4a8810f23c80f21f86635000050000f23f83e3ef9160f01592d0f01c9806d7f00", 0x61}], 0x1, 0x0, &(0x7f0000000340), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 16:46:41 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x5, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000d1c000)=0x2c, 0x4) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) [ 212.807295] binder: 15058:15060 Acquire 1 refcount change on invalid ref 0 ret -22 [ 212.815186] binder: 15058:15060 got transaction to invalid handle [ 212.821527] binder: 15058:15060 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x200000002000003, 0x8011, r2, 0x40000) r3 = memfd_create(&(0x7f0000000000)="8176626f786e65743000", 0x1) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) 2018/05/19 16:46:41 executing program 3: sysinfo(&(0x7f00000000c0)=""/114) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaac0aaaaaa000000000000080045000030000000deff009078ac2314bbac1414fd05ff907800000000420000e6ffffff7f00040000ac1414aaac141400"], &(0x7f0000000040)) [ 212.867673] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:41 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x100, 0x0, 0x0, 0x0, 0x0, 0xbe3, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000004c0)={0x10000, 0x0, 'client1\x00', 0x0, "a98ef4c994af1efe", "34e783dd8ba1fb7b802e82455f7baa55a541061ce9576c3ad7cc620c489f7a2f", 0x1}) rt_sigprocmask(0x2, &(0x7f0000000000)={0x7}, &(0x7f0000000040), 0x8) 2018/05/19 16:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf6") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:42 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:42 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:42 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2000, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000000c0)={r0, r1, 0x0, 0x3}, 0x10) set_mempolicy(0x4003, &(0x7f0000000000), 0x7) 2018/05/19 16:46:42 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000000c0), 0x4) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet6(0xa, 0x8000000000002, 0x0) sendto$inet6(r1, &(0x7f0000c21987), 0xfdfd, 0x0, &(0x7f0000824fe4)={0xa, 0x4e20}, 0x18) syz_emit_ethernet(0x0, &(0x7f0000000100)=ANY=[], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x301]}) 2018/05/19 16:46:42 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0xd6f2, 0x301800) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x2, r1}) r2 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) read(r2, &(0x7f0000003380)=""/4096, 0xf) getxattr(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000000380)=@known="73656375726974792e6361706162696c69747900c9bd3012983e02155960196a2a84585f19c1c826172982a8de1ccc4cdc6987ffc9715cef22cee4c673d4388d5e5604a0b838afb35bd352e4c9ee649a771208309ca436bf919fd9636bfa255ff4b31f40f88ecc9c2d812171c412624f0c142fc54f65f49239f27686c17d489e925da19bf31e30ec75cd92237957661ce8a1568418e6d3d428174f89a11cc821fbf64122a36f6b411c", &(0x7f0000227f74)=""/140, 0x8c) 2018/05/19 16:46:42 executing program 5: socket$pppoe(0x18, 0x1, 0x0) r0 = socket(0x400000000001e, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x5, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000140)={'filter\x00', 0x0, 0x0, 0x64, [], 0x0, &(0x7f0000000080), &(0x7f00000000c0)=""/100}, &(0x7f00000001c0)=0x108) 2018/05/19 16:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:42 executing program 4: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r1) keyctl$search(0xa, r1, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x3}, r2) 2018/05/19 16:46:42 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000400)=0x6b65a878, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000180)="bc7808458196127ff14de8cd0941", 0xe, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x1, @dev={0xfe, 0x80}}, 0x1c) [ 213.322798] kernel msg: ebtables bug: please report to author: Wrong size [ 213.336988] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. [ 213.345976] kernel msg: ebtables bug: please report to author: Wrong size 2018/05/19 16:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:42 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) r1 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x5, 0x105000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = msgget(0x3, 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000200)=0x4) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000140)=""/3) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x200000, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x60, &(0x7f0000000100)=ANY=[@ANYBLOB="726177000000000000000000040000000000000000000000000000000000000000000000"], &(0x7f0000000040)=0x24) 2018/05/19 16:46:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) recvfrom$ipx(r2, &(0x7f0000000200)=""/150, 0x96, 0x10020, 0x0, 0x0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xe, 0x8, 0xa, 0x8, 0x0, 0x70bd2d, 0x25dfdbfb, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d6}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d2}, @sadb_sa={0x2, 0x1, 0x4d6, 0x9, 0x17cc, 0x9c, 0x1, 0x1}]}, 0x40}, 0x1}, 0x80) sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) recvmmsg(r0, &(0x7f00000019c0)=[{{&(0x7f0000000800)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1, &(0x7f0000001980)=""/50, 0x32}}], 0x1, 0x0, 0x0) [ 213.400449] netlink: 'syz-executor4': attribute type 5 has an invalid length. [ 213.437152] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/19 16:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 213.437188] netlink: 'syz-executor4': attribute type 5 has an invalid length. [ 213.457929] binder: 15130:15133 Acquire 1 refcount change on invalid ref 0 ret -22 [ 213.465846] binder: 15130:15133 got transaction to invalid handle [ 213.472214] binder: 15130:15133 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:42 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xa00, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x8, 0x1ff, 0x1, 0x9, 0x1, 0x7f}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100), &(0x7f00000001c0)=0xc) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000240)={"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"}) 2018/05/19 16:46:42 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/128, 0x80) lseek(r1, 0x5c689bef, 0x0) getdents64(r1, &(0x7f0000000200)=""/54, 0x36) [ 213.540672] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:42 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:43 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:43 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x101000, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x14) prctl$void(0x0) 2018/05/19 16:46:43 executing program 5: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1, 0x200000000031, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100), 0x4) 2018/05/19 16:46:43 executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = gettid() setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000ee4ff0)={0x77359400}, 0x10) r2 = dup(r0) listen$netrom(r2, 0x1) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0xffff, 0x19}) timer_create(0x0, &(0x7f0000ee4000)={0x0, 0x12}, &(0x7f0000044000)) accept4$inet6(r0, 0x0, &(0x7f0000000040), 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000016) 2018/05/19 16:46:43 executing program 1: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) prlimit64(r0, 0xf, &(0x7f0000000040)={0xfffffffffffffba6, 0x9}, &(0x7f0000000080)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = fcntl$dupfd(r1, 0x406, r1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x80, 0x7, 0x6762a86a, 0x23, r2, 0xbd1}, 0x2c) msync(&(0x7f0000ef2000/0x3000)=nil, 0x3000, 0x88b3169a346e4569) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000280)={0x0, 0x5, 0xa75}, &(0x7f00000002c0)=0x8) 2018/05/19 16:46:43 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:43 executing program 7: mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc0109207, &(0x7f0000000140)) 2018/05/19 16:46:43 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x11, 0x4000000000080002, 0x0) sendmmsg(r1, &(0x7f0000000080)=[{{&(0x7f0000000040)=@hci={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000000340)}}, {{&(0x7f0000000040)=@nfc={0x27, 0x9}, 0x80, &(0x7f0000002740), 0x0, &(0x7f00000012c0)}}], 0x2, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000000)=r2) 2018/05/19 16:46:43 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:43 executing program 4: capset(&(0x7f0000a31000)={0x19980330}, &(0x7f00009b3000)) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xff, 0x1ffffffffffffd) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0x0, 0x6, 0x0, @buffer={0x0, 0x1b, &(0x7f0000000200)=""/27}, &(0x7f0000000440)="ea571ee726b1", &(0x7f00000003c0)=""/126, 0x0, 0x0, 0x0, &(0x7f0000000580)}) 2018/05/19 16:46:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCCONS(r1, 0x541d) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x401, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) setsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000080)={r3, @broadcast=0xffffffff, @loopback=0x7f000001}, 0xc) dup2(r1, r0) [ 214.596604] binder: 15178:15190 Acquire 1 refcount change on invalid ref 0 ret -22 [ 214.604560] binder: 15178:15190 got transaction to invalid handle [ 214.610905] binder: 15178:15190 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bind$alg(r0, &(0x7f0000001680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x200002) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x4) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0), 0x0, &(0x7f0000001400)=""/6, 0x6}, 0x0) [ 214.661918] device bridge_slave_1 left promiscuous mode [ 214.667696] bridge0: port 2(bridge_slave_1) entered disabled state 2018/05/19 16:46:43 executing program 7: r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) connect$netlink(r0, &(0x7f0000e8f000)=@proc={0x10, 0x0, 0x1}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) semtimedop(0x0, &(0x7f0000000240), 0x0, &(0x7f0000000040)) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x4, 0x3, 0x4, 0x0, 0x3, 0x3e, 0x7, 0x2d3, 0x40, 0x33c, 0x1f, 0x9, 0x38, 0x1, 0x40, 0x100, 0x4}, [{0x7, 0x2, 0x3ff, 0x401, 0x1ff, 0x8, 0x8, 0xffffffffffffffc0}], "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", [[], [], [], [], [], [], [], []]}, 0x1878) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x6, 0x410000) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x2, 0x4) [ 214.760731] device bridge_slave_0 left promiscuous mode [ 214.765438] binder: undelivered TRANSACTION_ERROR: 29201 [ 214.766430] bridge0: port 1(bridge_slave_0) entered disabled state 2018/05/19 16:46:43 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) set_thread_area(&(0x7f0000000140)={0x3ff, 0x20001000, 0x6800, 0x7, 0x7ff, 0x7fffffff, 0x8, 0x4, 0xd024, 0x7}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x410000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000100)={{0x1f, 0x20, 0x7, 0x81, 0x7, 0x5}, 0x6}) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x3e18) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x1, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r3, 0xae03, 0x400) ptrace(0x4207, r2) ptrace$peek(0x5, r2, &(0x7f0000001180)) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) ptrace$cont(0x3f, r2, 0xf1ac, 0xb9e) 2018/05/19 16:46:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xf, 0x4, 0x4, 0x8, 0x12}, 0x2c) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000080)="6353a5270f3b81f2563208d6115555dc2ef4e1a08c8ed7fbbf5f990c6a87f3cdea09980eb7b4b685212022eee41025155c3009db792174aaaa9e0ebb31528bb938e95325405ec8c18543ad3c2ac88e4d4c29b88dead3db6a45720b3360fed38dc50622de26d2c2e8c044eaccadaf730d4cf38a01c806b0aa488ca73118fd37f18210bb0c6f8a52f5c02c1a1ce768c3068fe14bad15ebd8d38b205510541859ecca1168947942aaf63bbc11a311eea65dc32ac4eee08f9ed1df9292a29d900f40d91b1ed20281a5d1b1df80f8fbff6bebdec950345111b4b404a8c7f50a1d8875bb0fe466ee608098", &(0x7f0000000180)=""/145}, 0x18) [ 215.006370] team0 (unregistering): Port device team_slave_1 removed [ 215.036222] team0 (unregistering): Port device team_slave_0 removed [ 215.058744] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 215.097647] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 215.167707] bond0 (unregistering): Released all slaves [ 216.428719] IPVS: ftp: loaded support on port[0] = 21 [ 216.796789] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.803230] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.810786] device bridge_slave_0 entered promiscuous mode [ 216.836568] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.843653] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.850893] device bridge_slave_1 entered promiscuous mode [ 216.876051] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 216.902419] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 216.974494] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 217.002364] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 217.113770] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 217.121095] team0: Port device team_slave_0 added [ 217.145366] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 217.152524] team0: Port device team_slave_1 added [ 217.177613] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 217.204782] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.231568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 217.258378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 217.496888] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.503309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.509962] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.516359] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.395874] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.481580] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 218.567802] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 218.574109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.581318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.661980] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/19 16:46:48 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:48 executing program 3: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x3, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0xba, 0x4000) ioctl$KVM_GET_CPUID2(r4, 0xc008ae91, &(0x7f0000000080)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x101) sendto$inet6(r2, &(0x7f0000000280), 0xfffffdf7, 0x20000004, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) shutdown(r2, 0x1) 2018/05/19 16:46:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00009b4fd0)={0x4, 0x0, &(0x7f0000009ff0)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:48 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = semget$private(0x0, 0x2, 0x30) semctl$GETPID(r1, 0x2, 0xb, &(0x7f0000000180)=""/176) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'TPROXY\x00'}, &(0x7f0000000080)=0x1e) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x5, 0x570, [0x20001480, 0x0, 0x0, 0x20001688, 0x20001790], 0x0, &(0x7f0000000000), &(0x7f0000001480)=ANY=[@ANYBLOB="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"]}, 0x5e8) 2018/05/19 16:46:48 executing program 1: prctl$intptr(0xe, 0xfffffffffffff2f9) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f00000001c0), 0x1) 2018/05/19 16:46:48 executing program 4: r0 = socket$inet(0x2, 0x80003, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fc, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000140)={0x2d, @multicast2=0xe0000002, 0x4e21, 0x0, 'sh\x00', 0x8, 0x2, 0x26}, 0x2c) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/248, 0x3, 0x2000000440012000, 0x0, 0x267) 2018/05/19 16:46:48 executing program 7: r0 = memfd_create(&(0x7f0000000040)=':bdev\x00', 0x1) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)="fe", 0x1}], 0x1, &(0x7f00000006c0)}, 0x0) r2 = fcntl$getown(r0, 0x9) move_pages(r2, 0x4, &(0x7f00000000c0)=[&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil], 0x0, &(0x7f0000000100)=[0x0], 0x2) [ 219.218239] IPVS: set_ctl: invalid protocol: 45 224.0.0.2:20001 sh [ 219.247363] IPVS: set_ctl: invalid protocol: 45 224.0.0.2:20001 sh 2018/05/19 16:46:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) syz_open_pts(r0, 0x189103) 2018/05/19 16:46:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 219.274551] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 219.281645] binder: 15511:15513 Acquire 1 refcount change on invalid ref 0 ret -22 [ 219.292865] binder: 15511:15513 got transaction to invalid handle [ 219.299696] binder: 15511:15513 transaction failed 29201/-22, size 32-16 line 2856 [ 219.309438] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING 2018/05/19 16:46:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:48 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = syz_open_pts(0xffffffffffffffff, 0x201) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0x2, 0xfffffffffffff801, 0x2, 0x81, 0x4, 0x2}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x1b, &(0x7f0000000200)={0x0}, &(0x7f00000002c0)=0x10) close(r3) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x4, 0x0, [{0xd, 0x93, 0x5, 0x7ff, 0x4, 0x8001, 0x6}, {0x0, 0x18, 0x4, 0x177, 0x800, 0x101, 0xe83}, {0x40000001, 0x7, 0x0, 0x2, 0x80000001, 0x1f, 0x2}, {0xc0000007, 0x8, 0x6, 0x0, 0x4, 0x1, 0x7ff}]}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000)=r4, 0x4) close(r1) [ 219.361845] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 219.380085] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:48 executing program 4: ioctl$sock_netrom_SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) recvmmsg(0xffffffffffffffff, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000003840), 0x0, &(0x7f00000038c0)=""/239, 0xef}}], 0x1, 0x0, &(0x7f0000003b80)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000040)={{0x2, 0x4e22, @multicast1=0xe0000001}, {0x306}, 0x2, {0x2, 0x4e24, @multicast1=0xe0000001}, 'veth0\x00'}) 2018/05/19 16:46:48 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:48 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(0xffffffffffffffff, r1, 0x0) 2018/05/19 16:46:48 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000100)="c626262c8523bf012cf66f") write$rdma_cm(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYBLOB="11010000000078770b61ee796138ab4ad05b61dd4be163610e10f851d8e76133ab93c266e9f91952cabfed660a3147b2c1689965c823a9ddb58ca3239d6d2d7481c9af4c7f29a4b0a149da1f25806e04224bd3437c9f844dd1d60f7f1427fd3cdc20bbfae29232478eb5207e6199e596024e7b0a79a5fd4e1d245ab02af6e399669df4dad1af1eafe74875183bb8a1d2abb1279a74bcbd3d993bdadf46fdf9dbd24b6e54e9a610d9f52f4e7e20ef43e2d289952f87efb8bbb321bb6857466eb1b750fc9ee7b50000103ea8f48d1b8ffefe0ec08ababdb2a73c67263f29a5d6746cd62e09c27102c9246332519a00c97c0f51ad0ff5ac536a824d21fb631ccaac016e7a2882763e10d4f12e379b97159b80a4bc66bafc676709fa231e418a4405a508d6d5761772daf3b97fb74279f36ca2e24dcce93b360f17b6f449fa16a97d30f6ed405d8467c2678aa327d002c1a0b3fca33aa4c2ae81098812ec7f092c84a9efc62732a71c07b152503b94261b"], 0x17f) write$rdma_cm(r0, &(0x7f00000014c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x48) [ 219.544561] binder: 15544:15545 Acquire 1 refcount change on invalid ref 0 ret -22 [ 219.552772] binder: 15544:15545 got transaction to invalid handle [ 219.559110] binder: 15544:15545 transaction failed 29201/-22, size 32-16 line 2856 [ 219.604812] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:49 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:49 executing program 1: r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000100)=0xc) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x948449eb22927fb5) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000040)={0x8, 0x8, [{0x200, 0x0, 0x1}, {0x3f95, 0x0, 0x1}, {0x800, 0x0, 0x8}, {0x80000000, 0x0, 0x3}, {0x8001}, {0x5}, {0x0, 0x0, 0x57}, {0x3a25}]}) setresuid(r1, 0x0, 0x0) setpriority(0x2, 0x0, 0x0) 2018/05/19 16:46:49 executing program 4: mlock2(&(0x7f00005ee000/0x800000)=nil, 0x800000, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x1c) ftruncate(r0, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)) r1 = getpgrp(0x0) r2 = syz_open_procfs(r1, &(0x7f0000001780)='smaps_rollup\x00') readv(r2, &(0x7f00000016c0)=[{&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000004c0)=""/146, 0x92}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f00000005c0)=""/171, 0xab}, {&(0x7f0000000680)=""/14, 0xe}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x6) ioctl$TUNSETLINK(r2, 0x400454cd, 0x102) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0xfffffffffffffe5e, "ed4ee27b1e45d11c481985a9e6d576482415795301aac92e61f0a3384935aa257e350612fd1f3acb95f9d6642984ff612f5fe6989583d8dfbf9959f209a7e922fcde71f44da12d4e97e77a81d4ea39e95ddd0ee89b5c0d9aea865f75b406cdc6ccc266874c0fa0a875c49dab410c5e67e590073d030d1121d6b60b71c24ff0f4"}, &(0x7f0000001740)=0xa4) munlockall() ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000180)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000440)={0x3, 0x100, 0xc7, &(0x7f0000000340)="e23f48328e5f10e34467b378f88d1d14b2bd34ea7e26d8ed445e62864dabd47831b72d1f5407e4b60e1cbccb93162e3dba61648dfc00183215d7991acdfbecc725d52e2bd7aedc7fe66787f7ec4c6d656c067a66a5c4597a0e0d5fa248372016224caab25b8b0292abc9b6c6cb0b7e59b7ebf3e7d5ab342a907ad91f61e8e296e7dc744486694f0676f364e47379ca3773e2ad8f9debe2bf7be3b9d21cd452e7026be1f06b504e2fe3a2350fc14dc42d19f77cdc19dafa6cc914d38d98e84d262fa9dc815f59ee"}) 2018/05/19 16:46:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000000)="706964732e63755b8e94727265", 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x7fff}) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) 2018/05/19 16:46:49 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="00000000180000fa0000000000000000", @ANYPTR=&(0x7f0000001700)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0200000000000000"], 0x20) write$rdma_cm(r0, &(0x7f0000001780)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x4e20}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, r1}}, 0x48) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@getnetconf={0x14, 0x52, 0x410, 0x70bd26, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1}, 0x4) 2018/05/19 16:46:49 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r1 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/19 16:46:49 executing program 7: setrlimit(0x2, &(0x7f0000cc0ff0)) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1, 0x90) ioctl$TCSBRK(r0, 0x5409, 0x80000000) prctl$setmm(0x23, 0x2, &(0x7f0000ffb000/0x4000)=nil) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000040)={@remote, 0x0}, &(0x7f0000000080)=0x14) sendmsg$can_raw(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x1, 0x0, 0xd, 0x3}, 0x28, 0x3, 0x0, 0x0, "603e9ee9e4d7b06244352359958e7548d511ba546ea4b133df95a4857af92b70aa280f14c0bfdee8384f9d6b8a7e14472f34b16f62942a2c4343b8d467682407"}, 0x48}, 0x1, 0x0, 0x0, 0x4044080}, 0x4000) 2018/05/19 16:46:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, 0xffffffffffffffff, 0x0) 2018/05/19 16:46:49 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000000c0)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x1, 0x0) ioctl$TIOCMBIC(r2, 0x5417, &(0x7f0000000080)=0x1eb70f21) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000000040), 0x4) 2018/05/19 16:46:49 executing program 6 (fault-call:5 fault-nth:0): r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:49 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="441109210000000000e24b77c716cceec7b9004dd60800000013", 0x1a) getsockopt$inet_opts(r0, 0x0, 0x200000000000004, &(0x7f0000739ff1)=""/15, &(0x7f000024bffc)=0xf) 2018/05/19 16:46:49 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x4000000000008912, &(0x7f00000000c0)="4626262c8523ec75c1426f") write(r0, &(0x7f0000000100)="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", 0x1000) bind$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffffe85) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x402400, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000040)=0x100000001) fdatasync(r0) 2018/05/19 16:46:49 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x80, 0x4) mlock(&(0x7f0000003000/0x1000)=nil, 0x1000) [ 220.495343] binder: 15579:15581 Acquire 1 refcount change on invalid ref 0 ret -22 [ 220.498396] sock: process `syz-executor7' is using obsolete setsockopt SO_BSDCOMPAT [ 220.503284] binder: 15579:15581 got transaction to invalid handle [ 220.517850] binder: 15579:15581 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:49 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:49 executing program 1: r0 = socket(0xa, 0x200000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) r2 = dup(r1) write(r2, &(0x7f00000003c0)="1b0000004a001f0fff07f4f9002304000a04f51108000100020100", 0x1b) sendmsg(r2, &(0x7f0000000200)={0x0, 0x3bc, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="240000002e0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) connect$ipx(r0, &(0x7f0000000080)={0x4, 0x7, 0xf395, "bc692c755be2", 0xbbbb}, 0x10) pread64(r1, &(0x7f0000000000)=""/88, 0x58, 0x0) 2018/05/19 16:46:49 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x101000) fcntl$setstatus(r0, 0x4, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) [ 220.640588] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.674259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. [ 220.752799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/19 16:46:50 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:50 executing program 7: r0 = memfd_create(&(0x7f0000813ffa)='ramfs\x00', 0x0) ioctl$TCSETA(r0, 0x4030582a, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) ioctl$sock_proto_private(r0, 0x89eb, &(0x7f0000000100)="3a47c8309926738242153688a3e70d1afe7352c0597d1c2968d84e11838a2e6315c8550abf4c588a3cdd8b51e90a0648c380bb51e6415ca47dfe37108dbfa8b3fdf23fbaa44390e78f2bb54d371feaeda5e8a86811c818e1bf01ccabe8ed2e21dafdb57217e821c6f02fc402943aeb8340626e5387d7c17e6adfad831eb0ea351869fc38e316596f834c5dd4ae3818ffcb3b795328c8510c1d7bb515c43e356fc5dbc7816d958441220fd4c705a0c3c8633d368281b06f19") 2018/05/19 16:46:50 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, &(0x7f0000000980)) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) fanotify_mark(r1, 0x0, 0x20, r0, &(0x7f00000000c0)='./file0\x00') ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000140)) readahead(r0, 0x0, 0x0) statfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=""/115) 2018/05/19 16:46:50 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='hugetlb.2MB.max_usage_in_bytes\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000100)={[0x0, 0x0, 0x0]}, 0x3) read(r1, &(0x7f0000000080)=""/16, 0x10) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000200)=""/111, 0x6f}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/239, 0xef}, {&(0x7f0000001380)=""/152, 0x98}, {&(0x7f0000000040)=""/61, 0x3d}, {&(0x7f0000001440)=""/209, 0xd1}, {&(0x7f0000001540)=""/173, 0xad}, {&(0x7f00000000c0)=""/18, 0x12}, {&(0x7f0000001600)=""/185, 0xb9}, {&(0x7f00000016c0)=""/3, 0x3}], 0xa, 0x0, 0x0, 0x8}, 0x10003) r2 = dup3(r1, r0, 0x80000) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000001840)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000001800)=0x1, 0x4) 2018/05/19 16:46:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x100000000000000) 2018/05/19 16:46:50 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/05/19 16:46:50 executing program 3: unshare(0x4000000) r0 = socket(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r1, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r3 = socket$netlink(0x10, 0x3, 0xc) writev(r3, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000003031900030007000000068100023b0509000100010100ff1ffe58", 0x1f}], 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x17, &(0x7f00000000c0)=""/84, &(0x7f0000000140)=0x54) 2018/05/19 16:46:50 executing program 1: r0 = socket(0xa, 0x1, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") llistxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=""/76, 0x4c) 2018/05/19 16:46:50 executing program 5: socket(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="670f080f01cf0f22e50fc7ad003000000f34c4e2ad91a4a800000000b8a7d71e8a0f23c00f21f83501000b000f23f8c4c1c971d4e90fc79b8a3568bcb9800000c00f3235002000000f30", 0x4a}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 16:46:50 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x21, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xbe, @loopback={0x0, 0x1}, 0xc8}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0xfffffffffffffffa, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffff800}, @in6={0xa, 0x4e23, 0x1, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, @in6={0xa, 0x4e20, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x3ff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}], 0x30002d3) 2018/05/19 16:46:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x1000000) 2018/05/19 16:46:50 executing program 7: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000040)={{0x5, 0x7}, 'port0\x00', 0x20, 0x4, 0x4, 0x7, 0x100000000, 0x400a, 0x5, 0x0, 0x5, 0x9}) mmap(&(0x7f00007fe000/0x3000)=nil, 0x3000, 0x0, 0x8132, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000800000/0x4000)=nil, 0x4000, 0x1000000) 2018/05/19 16:46:50 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x80008916, &(0x7f0000000280)="c626266d83add80ccc41f3b68c3b2e12c2d360450ce5b44d7c71139fc5e3055b7b26d1576686ab7cf4c2c8949772a929566c0f8fa941170695054b6aad16fdd4e22f3147d5ed5620ef169dc9bee8e563bccd49fc6f68ab01eee593c739e9b4417c39cbc7f09eb6ddb9bbd0537893a250c4ed52a8e40f6d0bee4b5971ceba0000") sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000000)) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0)=[{{&(0x7f0000000b40)=@l2={0x1f}, 0x80, &(0x7f0000000f00), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800d702000000214fff06e100000000e20d4357f877ee5f24b38451a049079c286853d6167168fdb18fd5013889f7d37b0e2d6da3bd7beb48b584a607d0dec4674e905fdf6c0d411de7155d93694d4a6342bce599983008162bc3e928f1aa62e2f113c21a8b"], 0x66, 0x10}}], 0x1, 0x0) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f00000001c0)) sigaltstack(&(0x7f0000001000/0x1000)=nil, &(0x7f0000000080)) getsockopt$bt_hci(r0, 0x0, 0x1, &(0x7f0000000300)=""/171, &(0x7f0000000040)=0xab) 2018/05/19 16:46:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) sendmsg$alg(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0xa81}], 0x1, &(0x7f0000001600)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/19 16:46:50 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) rt_tgsigqueueinfo(r2, r3, 0x3b, &(0x7f0000000040)={0x6, 0xfffffffffffffffd, 0x3, 0x9}) fcntl$getflags(r1, 0x401) 2018/05/19 16:46:50 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000080)={@rand_addr, @dev, @multicast2}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000000c0)=[@in={0x2, 0x0, @loopback=0x7f000001}, @in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}], 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000040)=[@in={0x2, 0x0, @broadcast=0xffffffff}], 0x10) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000000)={0x61ea}, 0x1) 2018/05/19 16:46:51 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/05/19 16:46:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) keyctl$set_reqkey_keyring(0xe, 0x6) ioctl(r0, 0x8912, &(0x7f0000000240)="af26262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(sha256-generic,cts(cbc-twofish-avx))\x00'}, 0x58) 2018/05/19 16:46:51 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0xffffffffffffffff) 2018/05/19 16:46:51 executing program 7: r0 = socket(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x81, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0xa, 0x5, 0x84) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000100)=0xfffffffffffffff8, &(0x7f0000000140)=0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x5, 0x400) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000000c0)={0x2, 0x8001}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000000)=@ethtool_cmd={0xb}}) 2018/05/19 16:46:51 executing program 3: perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x3e6, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000feb000), 0x4) recvfrom$inet6(r0, &(0x7f0000e89f47)=""/185, 0xffffffffffffff3f, 0x0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x41, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x498, 0x280, 0x0, 0x280, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000040), {[{{@arp={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffffff, 0xff000000, @mac=@random="07f78b33f86a", {[0xff, 0xff, 0xff, 0x0, 0xff, 0xff]}, @empty, {[0xff, 0x0, 0xff, 0x0, 0x0, 0xff]}, 0x1ff, 0x0, 0x1, 0x2, 0x3, 0x111, 'veth1_to_bond\x00', 'tunl0\x00', {0xff}, {0xff}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @loopback=0x7f000001, 0xf, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @dev={0xac, 0x14, 0x14, 0x16}, @loopback=0x7f000001, 0x3}}}, {{@uncond, 0xf0, 0x130}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x0, 0x8001}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e8) bind$inet6(r0, &(0x7f00008a8000)={0xa, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x3, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/05/19 16:46:51 executing program 1: socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$inet6_buf(r0, 0x29, 0xfa, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00'}) 2018/05/19 16:46:51 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) shutdown(r0, 0x0) getsockname(r0, &(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x80) connect(r0, &(0x7f00000000c0)=@can={0x1d, r1}, 0x80) 2018/05/19 16:46:51 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x7, &(0x7f0000000040), 0x4) 2018/05/19 16:46:51 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$unlink(0x9, 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x3ff, 0x10000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0], 0xa, 0x8, 0x1, 0x2}) getitimer(0x2, &(0x7f0000000100)) 2018/05/19 16:46:51 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x1000000000000) 2018/05/19 16:46:51 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001600), 0x0, &(0x7f0000001680)=""/67, 0x43}, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000440)={'security\x00', 0xc0, "7a7fa33a104bb754d78486ee08e116477532911372ff83784578f6c49d36dd16ce1c06f08d3a30177e0a1d0730ed90c400c4c7cf5cdc3d9a078717980c4dee2daf2e554a5a1096639fbee0b6fe2a9c287ece11ef25bd2bef77445c1e183ef048a89c23923a650bc157767ead862e5801b105a5d54da1d1e67c5d13eae6fe71b3ab10bb6170efda60894887cfd328376de5a224ab74ba886e940566258ad200d09e69b82202646e5e2d03cd96c4afd44ce58dc5bc691c626322851b2151a29052"}, &(0x7f0000000540)=0xe4) openat$nullb(0xffffffffffffff9c, &(0x7f0000000400)='/dev/nullb0\x00', 0x400000, 0x0) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0xd332}) ioctl$DRM_IOCTL_GEM_CLOSE(r0, 0x40086409, &(0x7f00000002c0)={r2}) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000580)=ANY=[@ANYBLOB="05000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="00e7f872e6a2b150d17625d689287f3c73bbfacd22e3404cffc1fcd5b04498fb6ca7db4d27e844bcf371b4d13e"], 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x7, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x48}, 0x1}, 0x0) 2018/05/19 16:46:51 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:51 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) getsockopt$packet_int(r0, 0x107, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x40045564, r1) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x100000000, 0x2, 0x1000}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080)={0x100000001}, 0x1) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) 2018/05/19 16:46:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCGSID(r1, 0x5434, &(0x7f0000000040)) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000080)=0x1) 2018/05/19 16:46:51 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) r1 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100)=0x2, 0x4) sendfile(r0, r1, &(0x7f0000000000), 0x101f7fffd) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r2, &(0x7f00000000c0)='status\x00') ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000140)) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={0x0, r1, 0xb, 0x3}, 0x14) sendfile(r0, r1, 0x0, 0x2) [ 222.507415] binder: 15733:15742 Acquire 1 refcount change on invalid ref 0 ret -22 [ 222.515552] binder: 15733:15742 got transaction to invalid handle [ 222.521922] binder: 15733:15742 transaction failed 29201/-22, size 32-16 line 2856 [ 222.556357] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:52 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xff7ffffffffffff9, 0x2) 2018/05/19 16:46:52 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x100) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={r4, 0x9, 0x7, [0x8, 0x8, 0x279fab31, 0xfffffffffffffffc, 0x2a1da5cb, 0xa00, 0x6]}, 0x16) 2018/05/19 16:46:52 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x3, 0x0) r2 = getpgrp(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/fib_trie\x00') sendfile(r1, r3, &(0x7f00000000c0), 0x80000006) 2018/05/19 16:46:52 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0xffffffff00000000) 2018/05/19 16:46:52 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="c96194d7d400000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80800) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) ptrace$getenv(0x4201, r1, 0x1, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x2000cf5c}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/19 16:46:52 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:52 executing program 3: r0 = socket$inet(0x2, 0x4000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x240, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000540)=ANY=[@ANYBLOB="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"]}, 0x2da) 2018/05/19 16:46:52 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000001c0)={[0x38, 0x16, 0x31, 0x30, 0x37, 0x32, 0x38]}, 0x7) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x0, 0x70bd28, 0x25dfdbfd, {0x7}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffff}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x21}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x5f}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x4) 2018/05/19 16:46:52 executing program 5: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x200400, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f00000001c0)={{0x0, 0x3}, 0x1, 0x3, 0xfff, {0x7, 0x6}, 0x5, 0xffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x2, 0x40) r2 = getpgid(0xffffffffffffffff) ptrace$getregset(0x4204, r2, 0x4fd91528ee11bc59, &(0x7f00000000c0)={&(0x7f0000000040)=""/96, 0x60}) [ 223.464515] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/19 16:46:52 executing program 1: r0 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdfe9}, 0x0, 0x0, r0, 0x3) 2018/05/19 16:46:52 executing program 7: r0 = socket(0x200000000000011, 0x3, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x20000, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/51) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={"6772653000000000001e00", 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000040)=""/61, &(0x7f0000000080)=0x3d) sendmmsg$inet_sctp(r0, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 2018/05/19 16:46:52 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000000200)=0xe8) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000280)) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000240)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, r1}, 0x14) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/xfrm_stat\x00') ioctl$KVM_ASSIGN_PCI_DEVICE(r2, 0x8040ae69, &(0x7f0000000080)={0x3, 0x4, 0xffffffff0000000, 0x5}) ioctl$LOOP_CTL_REMOVE(r0, 0x4004556e, 0xa) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x9, 0xbcbf9b5480dcc423) [ 223.536481] binder: 15769:15773 Acquire 1 refcount change on invalid ref 0 ret -22 [ 223.544440] binder: 15769:15773 got transaction to invalid handle [ 223.550818] binder: 15769:15773 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:52 executing program 6: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x2042) ioctl$sock_netrom_SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080)) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) 2018/05/19 16:46:52 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffff, 0x20400) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x901, 0xfff, 0x2b, &(0x7f0000000100)="b03d6ead46c915c93749d17d9410d42d5dd82a831818158f80ca45923a4d32a45bb2034f763cb31f4c3ab4"}) r1 = socket(0x40000000015, 0x805, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0xd2071e72ef392fbe, 0x0, 0x2, 0x1, 0x1}}) bind$nfc_llcp(r1, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "0bf3e18dbe0a5a5b4cec8da20224a0b61aa854154cdb24fe6a5477ea79c81724018b25d160ed23370643bb330a6e5ed5502651e4f2fd4ea6ebe793b32f2172"}, 0x60) 2018/05/19 16:46:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) connect$inet(r0, &(0x7f0000d9dff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth1_to_bond\x00', 0x10) sendmmsg(r0, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netstat\x00') setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x9, 0x4) 2018/05/19 16:46:52 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x40000000084e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f00000000c0)="d9afa317cf51107df7b6eebddba5a253016980ab037230eb292f284143572e3bab34e3f05db575596e1aa63751564a6175f8286f43d1a2b33955cea54cc60bdf16f8130dc32f9df3c5b3e5ba9e5695c56a4ba977ebb7c328f6ce01de821d17f19938f059b18a7c526b90aee9b98086ab04a96ccd97e7f34c17fb476499cfc2ed039a33f01abc81a1f8effba35a5384d9e394de6594227bde82475ac4e23b7ae8036bebbe835cc66c5f", 0xa9, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x11a, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) [ 223.717800] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:53 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x2) 2018/05/19 16:46:53 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x400000, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @multicast1=0xe0000001}, 0xc) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0xb053c7bca510397a, &(0x7f0000ffd000/0x2000)=nil) 2018/05/19 16:46:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x1, 0x0) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000080)={0xdfc7, 0x6, 0x800, 0x80, 0x10, 0x1}) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000280)={0x0, 0x70, 0x8, 0x2, 0x7cca, 0x100, 0x0, 0x2, 0x20008, 0x2, 0x6, 0xf5e2, 0x20, 0x8, 0x24, 0xffffffff, 0x9, 0x3ff, 0xef93, 0x1, 0x7ff, 0x8, 0xffffffffffffff15, 0x2, 0x100000000, 0x4, 0xfffffffffffffffe, 0x5, 0xe6b, 0x5, 0x6, 0x8, 0x9, 0xfffffffffffffff7, 0x101, 0x1, 0x8, 0x6, 0x0, 0x6, 0x1, @perf_bp={&(0x7f00000000c0), 0x1}, 0x20, 0x8, 0x7, 0x7, 0x0, 0x101, 0x4b5}, r3, 0x9, r2, 0x1) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r5, r4, 0x0) 2018/05/19 16:46:53 executing program 4: r0 = socket(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000080)={0x9, 0x0, [{0x5, 0x4, 0x0, 0x0, @irqchip={0x50000000, 0xa800000000000}}, {0x3ff, 0x3, 0x0, 0x0, @irqchip={0x23, 0x8000}}, {0x95f, 0x4, 0x0, 0x0, @irqchip={0x6, 0xfffffffffffffff7}}, {0x3ff, 0x0, 0x0, 0x0, @sint={0x2, 0x8000}}, {0x3, 0x3, 0x0, 0x0, @sint={0x4, 0x1d98}}, {0x4f2, 0x1, 0x0, 0x0, @msi={0x7, 0x2, 0x101}}, {0x1, 0x2, 0x0, 0x0, @msi={0x10001, 0x7f, 0x3}}, {0xbf6, 0x5, 0x0, 0x0, @irqchip={0xfff, 0x9}}, {0x4, 0x4, 0x0, 0x0, @adapter={0xfff, 0x8, 0x9c3e, 0x0, 0x8}}]}) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000040)={0x14, @dev={0xac, 0x14, 0x14}, 0x0, 0x4, 'rr\x00'}, 0x2c) 2018/05/19 16:46:53 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2803, 0x0) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000000c0)={0x10000, 0x6, 0x0, [{0x8, 0x52, 0x6, 0x4, 0x1ff, 0x400, 0x8}, {0x0, 0x7f, 0x100000000, 0x9, 0x800, 0x80000000, 0x800}, {0x1f, 0x1, 0x401, 0x9, 0x91f, 0x1, 0x1}, {0x1, 0x6, 0x5, 0x100, 0x7, 0xffffffffffff2445, 0x1ff}, {0x5, 0x7, 0x72385683, 0x800, 0x7, 0xa2, 0xcf20}, {0x6, 0x6, 0x81, 0x40, 0x8001, 0x380000000000}]}) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 2018/05/19 16:46:53 executing program 7: mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) write$binfmt_misc(r0, &(0x7f00000004c0)={'syz1', "a8551a689883a77960bcb81a096f04b048e3837dcdaf343ce2afd53b6b1408a17b6a4d2139156c453fee9151456c44e26987377a05d0ae"}, 0x3b) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x9, 0x1) ioctl$TIOCSBRK(r1, 0x5427) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vcs\x00', 0x80001, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x10c, 0x30}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000340)={r4, 0xa6, &(0x7f0000000300)=[@in6={0xa, 0x4e20, 0x100000000, @remote={0xfe, 0x80, [], 0xbb}}]}, &(0x7f0000000380)=0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0x10) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000480)={0x4}) setxattr(&(0x7f0000000100)='./control/file0\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="747275737465642e636f6d2e6170706c652e73797374656d2e536563ff0700007900394baae1629843645f5882da564075636159f4fbc3a1fe53ec4df8a19b34fd041b91c8e573748b8be4"], &(0x7f00000001c0)='+!,$mime_type\x00', 0xe, 0x0) unlink(&(0x7f00000000c0)='./control/file0\x00') accept4$bt_l2cap(r1, &(0x7f0000000400), &(0x7f0000000440)=0xe, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000580)=""/119) close(r3) socket$inet(0x2, 0x0, 0xfffffffffffffffa) rt_sigaction(0x22, &(0x7f0000000140)={0x3, {0x100}}, &(0x7f0000000200), 0x8, &(0x7f0000000240)) 2018/05/19 16:46:53 executing program 5: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) pause() write(r0, &(0x7f00000000c0)="8d", 0x1) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = getpid() sendmsg$nl_netfilter(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x86000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x28d4, 0x0, 0x3, 0x200, 0x70bd2c, 0x25dfdbff, {0x1, 0x0, 0xa}, [@nested={0x11ac, 0x2a, [@typed={0xc, 0x2a, @u64=0x8}, @typed={0x8, 0x58, @pid=r2}, @generic="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", @typed={0x54, 0x10, @binary="6ec687e381adb3e2389fb1e44aedda3bff6877386039077d2665fd1aca5e5274e40fbff8f036712da45e3a408d9017cf8544daa99d1022b92a0b4862631a8fceb88bce73a6a6bb248e874221e6264062"}, @generic="d3d27ae89e43a0dc1dd4cd3cb3036935500263f83358561698f032c605790c6632e55bbad4a25286aa6e697a4315c21a07be7b105a7a727eef58a0f971129c8a829a336accba3dd6e6ce2b44bb53dc862e097890ee761ecd06a9c9e601dee757d253e7276ec71978156e70a8e0cd2f9049c300155e9a1dc0756970ca57a7bb99634d5479e70907115cdafa678aa71c3d93870361ea43cb1534c7e2b6b7fb74d0644a5782638269d8910f8c391e19172fd94076c09f", @generic="66b32813f3a24d407538e59c6e65b0d53ff6bfe43b2aa100f3f4fdbea6350696b5424dbf636ce0d0d756498b06d347f29deedf8d21d797b239c98c33f0137f44a71a72e359b34f0e72329e2eb21e9e29c93a16b43c1ab87cb8cd4dfae30b0a4e86040a0dea9b0797861af191ec2b7206f52945b9916a6f327e2b758b0c9f6d7201bd82da6e1bd2b5c96810"]}, @generic="d390a23e6eba4a7dfcaa304bc236a012798b407130709dd21bd4ac3c7cb61adfc104a6580ecb14577d9ca4ff609fdaaced7f3fb0f50a0ff5cb38068a328ced16c300174a39e9a789b11d2ee331ded38ec62689eec5b15a602bc6857d723a95bc32724786f6d15cb0775485b447955915d04974b17552b3ff8eae49dca1203e540149a221243cd84253441148193788bbe582383ea751b9cb9246", @nested={0x122c, 0x6d, [@typed={0x8, 0x5f, @u32=0x5}, @generic="3d12dc0eec36e29f76b88b54dc23494cd574c351203b328f1fe5816752d08273b61551b3a592f0dcf2d5ca2049082418e5577ff2fa5bff88bd8b1f364b65b3938540153fd54518cf8e4e2eb518e7cfd61b4d5193f9e9455c6f233484c0dcf577c97ed00d7333d07cab34617940ee965f0daee37306076bd71035b00f70f659f4d81f144420beaf81ffba35412d3397eea92b3920d110d2", @generic="8d065f94b258b744aafb431434b7614efd981064acf5b532810537e65acffd0d61b0b489391b106cf8af440749a86cdcb65c738de6b7e4595620e38fd87149f100ba5c1577b213ec7be493dcb69165c2004090cd425c33a532f8d50826ce605ea054299612825098e7b17c0656f1a324d6f870930275237730f6261b0f23163658587e678afc75e867659f61b16b75bc54e617271078339a507c55", @generic="d9b17b0027e0bd6766a4bbebd2ca3256d14992f27e3d03a1731361ecd7877ee25bc23e41355d8fe949ffa604e3075b77fa9ed65322eaa62f8d7ebbebc5efeb9dcaa5186c848e759b6a1b987f7b9e8d86c9a121db8277ec823a92b17fb4533cdaf78ac6d4af9f345570849954f287d93b0778d528daf037f1c7728f28f8ed45807a98ee0f119ca41e2625cf53200b92964cb4274171b830912adc814f2ce0ab49080cb6634af2cd97adef694cec1b9563a4d5de167d5c2dc1ecfc940596b10b9ac343958f07b7563022e4ff92249b8da3419af45d879cde987922f59728d08b0b39387eebc8", @typed={0x4, 0x56}, @typed={0x1004, 0x46, @binary="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"}]}, @nested={0xb4, 0x5f, [@generic="d9dbc372a7baeef95268cca44548a4dd31b230b015731ba93c13c77aa22896bdcbcbb0bd9d0ebab0bc9d37abe6ff5b093ebcf642598bf3a3d89b1141ae4a23bb9955c590a50eec39578eb805d2133b67d5a83be5c1a0020f854d3c669d7464a0521de523542748d31b0e956c23c85c3bce855f7c4b62b27a01fa71ed47de1330b444fdd2b862cb208d41d3a7762e4e843a8d19eb8a01a6032f2065ad0af101c3964b6ee31be0ebe60f8effc0b9"]}, @generic="03e633a451bb1674163ab6fb3ac0091e3f2dd667cbc7e4a2b2820bc7c54e4bf7ef93a73e44961a5464795cdd183c94ef70bfdd3cec1a203a9422674b7e2f683bcb40dde6e8b6221de5e2a94f3792116be456f0d048d2b35a25d15577e8a3ff03355d1aaab51c03a8364d92e57a876b7e2580e61408b83a85f8ffebbc9d934dfbf04616edfc1a4c3d768c1ccbb6d9ff943c268fcaa48f82a8302df3655ac78861b0d36dc352413f439b87524246608d2413642b324afc248d86df657d75017d51314b51a828c7e59f7c7da2079aec80e8ae75d0776d98437c0ea2d1dfcd9a7f974769a493f703df0031750cd2", @nested={0x148, 0xa, [@generic="07808efd7dd9602cd9e396c36c86ff50129407bda6252a1777a264206ee8e5944a35a7678c38699a9e2cb386157dbedf8b787569293d85fec90146f400ce7434dd378324a67709bc29072b", @typed={0x8, 0x29, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}}, @generic="519dfe0fe6077427371d12963ede271657dc1d171a7c62b4e84dfd6c3e3fc9122149fb36cf960a4a7063bce51ff8250bf185697bc9c1e3c3008c58b89fb1c0cf31af3cbdda7035d25f7648a8441f5146232c99cb54f76dbac2e975613d7445157e403b91ac672c978aea3ebfd7441541a666a660a04e5a08a60bbf481ce108efb7e278a13cb4298807f5f5bfa5a4b82a02603b1b1720e38029f15619ec0df94aa2e33c368fe97bdee5599ae4dc2acaa6c323085ec8886d1d03611d2b7d11fd37be0c40a20ee67eb7cf19e1f4b077f3edc7d2e8eae006387c857bbdecad9871e51651350a00b333eea3b8ae781218"]}, @nested={0x164, 0x23, [@typed={0xc, 0x64, @u64=0x5c8}, @generic="610d0623a96811154a9c03afe7403c52c31445f2dd3b7ecf99254428023344edffe67d0ea83b9e60b02b73238704522da4fd34112611bffd9e300c62f368c724f97d97a98654cd22a084c06c6571e12dff34f09919d786bf9caa6f555ec1edaabf571efa3282e972de3e4ca71ff6686340be581df9e0eb9e5f8b0bf89bf307b08e33cf05090320ef2e597fdf62068a31e6346e5cba85086b490b863d47b25306ec5ad04c8be127d7be", @typed={0xa8, 0x5f, @binary="e7b08f3d2d05e21f80b34e76cfba25ffa3abbd1fb0ee19a45001906a81ee61860a4ef78cb2e6051705120456512b68e8f552677f0c855121b3ec9d5df73ad68420154f04152988be4e8596e837c1cf9091548a0b54a8d0a8ba60532003722791924ea6607f446a3c20a9d6f0f0c7cb085bfa5e5b119aae523fb943b6012c720e76b0d23de8af98c9ff0d0f56ac289d6510436150e7a19fb299e3a187cb6ce8468563"}]}]}, 0x28d4}, 0x1}, 0x10) ptrace$peekuser(0x3, r2, 0x8) read(r0, &(0x7f0000000080)=""/52, 0x34) 2018/05/19 16:46:53 executing program 3: setrlimit(0x9, &(0x7f0000000000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x5d8, &(0x7f0000720ff8)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x220000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000240)={0xd, 0x100, 0x80, 0xffffffffffffff01}, 0x10) getsockname$unix(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x6e) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x8, 0x40) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000080)={0x0, @loopback=0x7f000001, 0x4e21, 0x1, 'none\x00', 0x10, 0x0, 0x33}, 0x2c) [ 224.309562] IPVS: set_ctl: invalid protocol: 20 172.20.20.0:0 rr [ 224.339513] binder: 15831:15836 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.347426] binder: 15831:15836 got transaction to invalid handle 2018/05/19 16:46:53 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x2002712, @any=0xffffffff}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) get_thread_area(&(0x7f0000000080)={0x10001, 0x1000, 0x0, 0xffffffff, 0x69, 0x2, 0x20, 0x47380000000, 0x7, 0xfffffffffffffff7}) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2616, @host=0x2}, 0x10) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f00000001c0)={0x0, 0x70, 0x40, 0x2, 0x3, 0x579, 0x0, 0x1000, 0x8, 0x0, 0x40, 0x10000, 0x8, 0x1, 0x7fff, 0xf4, 0xb, 0x8, 0x80000001, 0x1f, 0x8, 0x10001, 0x9, 0x8, 0xffffffff, 0x101, 0x0, 0x3, 0x6, 0x8000, 0xe, 0x5, 0x4, 0x41, 0x3ff, 0x8, 0x8, 0x56a, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000100), 0x4}, 0x40, 0x3, 0x2, 0x7, 0x9, 0x0, 0xff}) bind$vsock_stream(r0, &(0x7f0000000180)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) 2018/05/19 16:46:53 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x13a) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0xff, 0x20000) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)={0x303, 0x33}, 0x28) recvmsg(r0, &(0x7f0000000580)={&(0x7f0000000140)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000500)=""/80, 0x50}, 0x162) 2018/05/19 16:46:53 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x6c4940, 0x0) [ 224.353751] binder: 15831:15836 transaction failed 29201/-22, size 32-16 line 2856 [ 224.362449] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:53 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:53 executing program 3: r0 = userfaultfd(0x0) r1 = socket(0x1, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$kcm(0x29, 0x2, 0x0) poll(&(0x7f0000000000)=[{r0}, {r1}, {r1}], 0x3, 0x7fffffff) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000000080)={0x7fff, {{0xa, 0x4e20, 0xa00000000, @remote={0xfe, 0x80, [], 0xbb}, 0x2}}}, 0x88) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000040)=0x9, 0x4) 2018/05/19 16:46:53 executing program 4: socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$mice(&(0x7f0000000240)='/dev/input/mice\x00', 0x0, 0x202) r0 = semget(0x2, 0x0, 0x0) semctl$GETVAL(r0, 0x3, 0xc, &(0x7f0000000180)=""/184) select(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x3ff}, &(0x7f0000000100)={0x200081}, &(0x7f0000000140)={0x77359400}) 2018/05/19 16:46:53 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp6\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-avx\x00'}, 0x9) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f000025d000), 0x1000) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 224.512904] binder: 15865:15866 Acquire 1 refcount change on invalid ref 0 ret -22 [ 224.520884] binder: 15865:15866 got transaction to invalid handle [ 224.527242] binder: 15865:15866 transaction failed 29201/-22, size 32-16 line 2856 [ 224.617279] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:54 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:46:54 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18c775c94f0f000000000042ed662912c5a9618a90046f3e000280"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000300)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff6006118"], &(0x7f0000000080)='syzkalleP\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xd, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x20d, &(0x7f0000000300)=""/187}, 0x48) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xfffffffffffffffc) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000080)=0x61) read(r1, &(0x7f0000000040)=""/11, 0xb) r2 = syz_open_pts(r1, 0x0) ioctl$TCFLSH(r2, 0x5437, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x0, 0x0) bind$ipx(r3, &(0x7f0000000240)={0x4, 0x3ff, 0x6, "91523ba9994a", 0x8}, 0x10) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f00000001c0)) r4 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f0000000280)={@local, @multicast1, @multicast2}, &(0x7f00000002c0)=0xc) 2018/05/19 16:46:54 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r2, r2) ioctl$KVM_SET_LAPIC(r2, 0x4138ae84, &(0x7f0000000180)={"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"}) 2018/05/19 16:46:54 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl(r1, 0x8910, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x5, 0x0, 0x8}) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x9) 2018/05/19 16:46:54 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x24}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0xe, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x88}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x0, [], 0x0, 0x10000000000}, 0x48) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x2000) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) 2018/05/19 16:46:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x2000000008912, &(0x7f0000000240)) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:54 executing program 2: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7f}) [ 225.449289] binder: 15905:15911 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.457207] binder: 15905:15911 got transaction to invalid handle [ 225.463534] binder: 15905:15911 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:54 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x400) setsockopt$inet_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000000c0)="3feb79b6ab7d3356f25d49037a484851dd9836abeedec8d0307fbf71087845e8714839f50e9910a63522abf1c2c1266618703310f76d1eff114f9bce4c252be151faeb6aabbb97c9c7279dfdfa8d7fddd771332ceadc7a03a8e56e7fdcd03462708a0c77ea8aae11cb14f139f97a7d2ead98fccae5f90c566e61d6dd1d3e65fa118e003e6600b8cc5b6c8d740d1274456cc92a24bd330d623a62cf34f29f0a030264ea35d5ee4244af8eef1651589aae502dc49338c6cacb3350192983f40589c68027608be8492e116796137be28e68e47b0b", 0xd3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00') sendto$inet6(r1, &(0x7f0000000280), 0xfffffffffffffedd, 0x20000004, &(0x7f0000000080)={0xa, 0x4e22}, 0x1c) r3 = accept(r0, &(0x7f0000001cc0)=@rc, &(0x7f0000001d40)=0x80) close(r3) 2018/05/19 16:46:54 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x4006, 0x4) sendto$inet6(r0, &(0x7f0000000140)="04010000008b00ddb846070000005b4802938207d9033780398d5375a41640939029ef0712f295133e05e0f1a6e793c1f62e03f08faba46f8f2575eb15ce43af6a8e2f61a1945aa0353c72e475f7fd54482c03ac4db09698c0e2d2000004000000fffba3", 0x64, 0x0, &(0x7f0000000080)={0xa, 0x200000800, 0x9}, 0x1c) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x98) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000000c0)) 2018/05/19 16:46:54 executing program 4: syz_mount_image$xfs(&(0x7f00000003c0)='xfs\x00', &(0x7f0000000400)='./file0\x00', 0xffffffffffffffc0, 0x1, &(0x7f0000000980)=[{&(0x7f0000000840)="770c157424aa86f6a74c41fe6156805a0afdfb67fe6b1c772d470bb0dceb5599a92062acdba9", 0x26, 0x8c}], 0x8, &(0x7f0000000a40)={'nouuid,', {[{@noalign='noalign', 0x2c}]}}) 2018/05/19 16:46:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = fcntl$getown(r0, 0x9) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r5 = dup3(r4, r3, 0x0) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f0000000300)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x5, 0x7, 0x12, 0x91, 0x0, 0x401, 0x0, 0x8, 0x8d, 0x6, 0x72, 0x80, 0x9, 0x7fff, 0x6, 0x7ff, 0x999, 0x2, 0x94d6, 0xfffffffffffffff9, 0x0, 0x6436, 0x1ff, 0x7, 0xffffffffffffffff, 0x7fff, 0x80000000, 0xe7c, 0x86, 0x5, 0x9, 0x8, 0x40, 0x2, 0x2, 0x5, 0x0, 0x7, 0x5, @perf_bp={&(0x7f0000000040), 0x2}, 0x11000, 0x2, 0x1, 0x4, 0x6, 0x8, 0x5ede34d1}, r6, 0x10, r2, 0xb) 2018/05/19 16:46:54 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xffffffffffffff66, &(0x7f0000000080)={&(0x7f0000000100)={0xfffffffffffffc89, 0x5e, 0x201, 0x0, 0x0, {}, [@typed={0xc, 0x76, @u64=0x1}]}, 0x62941cc4f20dc4e5}, 0x1}, 0x0) [ 225.557901] binder: undelivered TRANSACTION_ERROR: 29201 [ 225.587370] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 2018/05/19 16:46:54 executing program 2: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:54 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r3, 0x4008ae48, &(0x7f0000000040)=0xf000) dup3(r3, r2, 0x0) 2018/05/19 16:46:54 executing program 1: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_open_dev$adsp(&(0x7f0000000000)='/dev//dsp#\x00', 0x2401, 0x4006) [ 225.720305] binder: 15947:15949 Acquire 1 refcount change on invalid ref 0 ret -22 [ 225.720599] XFS (loop4): Invalid superblock magic number [ 225.728284] binder: 15947:15949 got transaction to invalid handle [ 225.740091] binder: 15947:15949 transaction failed 29201/-22, size 32-16 line 2856 [ 225.839975] XFS (loop4): Invalid superblock magic number [ 225.851303] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:55 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x7fe, 0x1000000ff) sendto$inet6(r0, &(0x7f00000000c0)="6a725a5f62d02a6be55afd02d999", 0xe, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x4, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x2, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0], 0x2}, 0x20) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000140)={0x9, 0x80000001, 0xa0, 0xffffffff, 0x80000000, 0x200}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180)=0x1, 0x4) close(r1) recvmsg(r0, &(0x7f0000000300)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/106, 0x6a}], 0x1}, 0x2000) 2018/05/19 16:46:55 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x82) fallocate(r0, 0x42, 0x0, 0x7fffffff) 2018/05/19 16:46:55 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$poke(0x5, r0, &(0x7f0000000080), 0x4) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0xa100, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000180)='rdma.current\x00', 0x0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x7) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$lock(r3, 0x25, &(0x7f0000000000)) 2018/05/19 16:46:55 executing program 7: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000200)={0x2, &(0x7f0000000080)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r3, 0xc0086421, &(0x7f00000002c0)={r4, 0x3}) write$rdma_cm(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="10000000300000fa", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="04000000000040000a004e2008000000fe80000000000000000000000000002180000000fd1450dc90a5d734679ad116c08f3b8d6054d6ce1d156f0de90c9414bf59d1500a623c303b7772d17ab86e975b48de5e3f66ba2de73818ff3778a9a57954aa847f8d3f9f5a1b5ba557850eda42df9ab4e7ab35ab8077bb2dd42ade0060a7", @ANYRES32=r1], 0x38) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000000)={0x5e, @multicast2=0xe0000002, 0x4e20, 0x0, 'sed\x00', 0x8, 0x1ff, 0x4a}, 0x2c) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) write$rdma_cm(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000000000fa", @ANYRES32=r1, @ANYBLOB="06000000"], 0xc6) write$rdma_cm(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB='3\n\x00\x00'], 0x128) close(r0) 2018/05/19 16:46:55 executing program 0 (fault-call:2 fault-nth:0): clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:46:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x1}, &(0x7f0000000100)=0x8) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r1, 0x0) 2018/05/19 16:46:55 executing program 1: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f00000006c0)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x2, 0x1, {0xa, 0x4e23, 0x3ff, @remote={0xfe, 0x80, [], 0xbb}, 0x4}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)="99e6dcc98679ce9b9cbb772db49851b2969d7912f8b0a33acfdbc57bca06a348590e90df6710783e5645fb6b98f17b95a422c2dc6800677dca192e388a1ce44c7a82e9a19deabc3ecea9a90136cd471b63ce0725bb6e54936bb267c671ef259b79deb05782b56b11bc92cfaae526e911e379f7052f0d9bc1cadefcfd3d0e8735cce8eadf74f7a91e7fe758571e1380664b27f22373148576982bb526fe5d419392181499ff95911af462aa2462ef29f8cde7d0763d9a033589f6343908ee34c24a434eb4e57b9051c2ac12dd56fa3edf370c311c01bb5699a82f71cb4228913112672b7a694f676c19b9f447", 0xec}, {&(0x7f0000000280)="e0ce6f7c4a8f42efb5e987e84b5ea7901ad3803241d16062f793e2528222718a1c631834f951745fc85f10a88871f9a9c405da29f5478092550b949e9ea5aa8d582e37", 0x43}, {&(0x7f0000000300)="c663f4b9ff693ac20a0109d941814383765163fb2c5ca78a19fbe6b6a57be6d9c8f8d1fc3506f5e183ec8b449b47f32e5c7cfbea869580c28224270880fb92cfda2c1860676a0d027a71395e6dfc491b7fc1d8a6955f127311ca67440091a41fc81058bce7c428295c6a86ed93c9be58ca65eb3e652bec6ad77e1d17535e420ecf0e0f2c4b413a3a288dbe8ce121a9f2b661c831dfc746c1a1f80a4cdc326105634bff9a2cca76b38a2c70d54e4a978c29e6854e7300f883c6005ce9", 0xbc}], 0x3, &(0x7f00000003c0)=[{0x30, 0x11d, 0x2, "2a75ded3ccac8fbe2b449644328a965ae66f5c32ea0eecdb80f9f00127cf1ea1"}, {0xf0, 0x0, 0x5, "95a75968933f2d5f403da072d41375451c9908bb6fcb0f44b573d477c09da25675d33c7d97842663f7fe0453e0d2fc698ec50cc75b467e7e4ad2508b58af6041c66d99f07e22961c3e3dda39c106270c1f35b9625bfb8d89c86f618e8c7237eaa457b6ad66799b6ceccf0290bf258380285570ae8e4bfd2eafb3bf837a45bdb2cc968a906d2a6029b2a25062d1e31338b97faa1793b3dcc6a4b890320e9990857a20e9de10e4204e76cf6f5b18ae21c4fc89fcbdc444ffb07f4018c41c40795bf41e1a1423cdd19dadd620753cbbff3e6bfbe69eb51e812441ef7c4c9ed0a531"}, {0x68, 0x103, 0x7, "6eabba9d23cc582e79203a67c49e481a32a67639c3d157114ab2ad39ac759cc24f9e2754cd3521372e5089d95f8256f17150079d4e7cc4ad89b2c1b0b65f532484e351c250e0920b5e5a25c9f52cb77dca7f3694"}, {0x98, 0x19f, 0x6, "84aa23bf0a267e4179f01c3fe04317042f0986b9622bca570000a61ae1f6a7ff4b52d52ba3a3c0f16f707aa4452d5146133677e67b55b11739a747e4e4542fa55c423e8faf029d7f72f116ec6d4dea44902d5f0f2340142ad915d804ce24b42301e9c6a9e5e18af6e18b565aade4ccb8769870f96a92e80e30d60e66f57fd1bce4e450d1"}, {0xb0, 0x101, 0x7fff, "dfce0720eb7cd027d3098d9d9e3b954dbe5a6edeb45db315e69d117d9e9c368f54ad5384948a0e4166fc09bca994f764077c9c0ed1f23e152860c4d9e571109936b37db4bb6faa2f490c9f5fde4024fb87ae3925367dadc87f40d1e1d531f8518fe0807b24294f91e5bb23dc9b13b0b58d2370322c506148767deb022870b5d09bb8eb8ab867638e1281a74f5c7d80b6ec17a44fa3536ae739230f445b8eb6"}], 0x2d0, 0x40}, 0x7}], 0x1, 0x10) recvfrom$llc(r0, &(0x7f0000000700)=""/172, 0x35, 0x102, &(0x7f00000007c0)={0x1a, 0x307, 0x8, 0x3ff, 0xffffffffffffff4e, 0x5c9b, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) clone(0xfffffffffffffffe, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000000)) 2018/05/19 16:46:55 executing program 2: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 226.458724] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000 sed [ 226.467732] binder: 15985:15994 Acquire 1 refcount change on invalid ref 0 ret -22 [ 226.475725] binder: 15985:15994 got transaction to invalid handle [ 226.482102] binder: 15985:15994 transaction failed 29201/-22, size 32-16 line 2856 [ 226.491858] binder: undelivered TRANSACTION_ERROR: 29201 [ 226.514925] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20000 sed 2018/05/19 16:46:56 executing program 4: syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="f8bf88df5b1b", @remote={0xac, 0x14, 0x14, 0xbb}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, @rand_addr=0xffffffffffffffff}}}}, &(0x7f0000000100)) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) 2018/05/19 16:46:56 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket(0xa, 0x80b, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000003940)=[{{&(0x7f0000000280)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/227, 0xe3}, {&(0x7f0000000400)=""/77, 0x4d}, {&(0x7f0000000100)}], 0x3, &(0x7f0000000480)=""/73, 0x49, 0x1c0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000500)=""/67, 0x43}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/128, 0x80}, {&(0x7f00000006c0)=""/200, 0xc8}], 0x4, &(0x7f0000000800)=""/38, 0x26, 0x100000001}, 0x5c}, {{&(0x7f0000000840)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000a00)=[{&(0x7f00000008c0)=""/165, 0xa5}, {&(0x7f0000000980)=""/109, 0x6d}], 0x2, &(0x7f0000000a40)=""/34, 0x22, 0x7}, 0x6}, {{&(0x7f0000000a80)=@in6, 0x80, &(0x7f0000002e40)=[{&(0x7f0000000b00)=""/202, 0xca}, {&(0x7f0000000c00)=""/4096, 0x1000}, {&(0x7f0000001c00)=""/28, 0x1c}, {&(0x7f0000001c40)=""/252, 0xfc}, {&(0x7f0000001d40)=""/4096, 0x1000}, {&(0x7f0000002d40)=""/101, 0x65}, {&(0x7f0000002dc0)=""/89, 0x59}], 0x7, &(0x7f0000002ec0)=""/53, 0x35, 0x7909bc77}, 0x7fff}, {{&(0x7f0000002f00)=@ipx, 0x80, &(0x7f0000003100)=[{&(0x7f0000002f80)=""/149, 0x95}, {&(0x7f0000003040)=""/35, 0x23}, {&(0x7f0000003080)=""/74, 0x4a}], 0x3, &(0x7f0000003140)=""/164, 0xa4, 0x64}, 0x8}, {{&(0x7f0000003200)=@ax25, 0x80, &(0x7f0000003300)=[{&(0x7f0000003280)=""/4, 0x4}, {&(0x7f00000032c0)=""/40, 0x28}], 0x2, &(0x7f0000003340)=""/124, 0x7c, 0x480}, 0xff}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000033c0)=""/5, 0x5}, {&(0x7f0000003400)=""/19, 0x13}, {&(0x7f0000003440)=""/138, 0x8a}, {&(0x7f0000003500)=""/237, 0xed}, {&(0x7f0000003600)=""/201, 0xc9}, {&(0x7f0000003700)=""/176, 0xb0}], 0x6, &(0x7f0000003840)=""/234, 0xea, 0xfffffffffffffffc}, 0x1}], 0x7, 0x0, &(0x7f0000003b00)) sendfile(r5, r2, &(0x7f0000003b40), 0x3) 2018/05/19 16:46:56 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:46:56 executing program 3: r0 = memfd_create(&(0x7f00000000c0)="7dbf2a78892d764fd34a556b884fc44e1d3903c25662e82a6cdc43eba6e41224d1a37a7a85f41eccfcf6b65f5fcaef1b9d0e50771b4e5b81921550c50e061708af0a75d844397a9e52086a68cea96adaf842848d122eeb959a0ab24dc7d1874ec54f7322fc0cfafe", 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000001200), &(0x7f0000000040)=0xc) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x51, r0, 0x0) readv(0xffffffffffffffff, &(0x7f00000021c0)=[{&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2) 2018/05/19 16:46:56 executing program 5: setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000002000)="24b38b20d0ef3254115223ef6cf758327575c041e002a8089496079b1b45009349041eca724fdec73fab9b04e4a4a5af1d03000000000000007faa62b9c0d263274f4a010c4f93ef85516b042511f32764171ba9bd278cbe360c22f184073fe215dee02fe37161246323ee9c82c790add905b90a64adab9fef855d72abb637d460fc6fb5a9eec5535b119c9dfbde3f76323a5af634e4235a33d57e226460104ca0dedf1f0e8365cd43d106c41d009976034d6557bf8917cad630598f6e58fd1770012d78aabb64ffffffed0000464caeedf840d001fe92b08c3f7b8e1596417d7dcd645413be450000000000000001c122283846253398a04d99ca8680deb20632834bc027c44d4cf3fd102724d6748de61eebb06801048dea7636f3a248a9bf3123882ca9fc66b4e70b06d43045", 0x12e) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000002000)={{0xa, 0x10000000000, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x1}}, {0xa, 0x0, 0x0, @empty, 0x1}, 0x0, [0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000002000)={0x0, 0x0, 0x9}, 0xffffffffffffff0a) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x40, &(0x7f0000001fde), 0x4) 2018/05/19 16:46:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:56 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"79616d300001178b00", 0x4012}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x468541, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x8, 0x4) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000080)='/dev/urandom\x00', 0x10000, 0x0) ioctl$BLKIOMIN(r2, 0x1278, &(0x7f0000000100)) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000180)=ANY=[@ANYBLOB="00008302615dfdfc46c0298d44a2f873ae05e388ca1e2991fb20cb229340f52255e75f9a6ca57e6f3230e3215934412284b88ed182dba5a9dbb04487581d12bfbb66ffa8f7858c780ea5142cc7f25a6833df61275f663e2f95ebfc2f242b5896e2277774ddf684ee7ab5a3eef8ce6adfcf47c323fcda4dad422ce1ccc6179c3b7c6c5ac351d17675b48ded8d437f1300713ca850"]) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2={0xff, 0x2, [], 0x1}, 0x51}}}, &(0x7f0000000300)=0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000003c0)=[@in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0x9}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in6={0xa, 0x4e23, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0xa0000000}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x5}, @in={0x2, 0x4e22, @rand_addr=0x8000}, @in6={0xa, 0x4e22, 0x6, @remote={0xfe, 0x80, [], 0xbb}}], 0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000340)={r3, 0x10001}, &(0x7f0000000380)=0x8) 2018/05/19 16:46:56 executing program 1: r0 = syz_open_dev$sndpcmc(&(0x7f000000b000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) ioctl(r0, 0xc0884123, &(0x7f0000001f64)="96") setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000001c0)=@req={0x2, 0x5, 0x0, 0x8000}, 0x10) ioctl$TTUNGETFILTER(r0, 0x801054db, &(0x7f00000000c0)=""/229) getsockname$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, r1}, 0x14) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xc4, "a1cdbc719a58536a8d0a290fb16f21e13643ddb3eeb3acd9a99e498af8a95a6bf6cdba27ee51f4c84377020e8223f288c4770fdc2469ee0cc2e7b8ec677103fd41cece88543b9369fc2d062b98f0826369e0710730b77d80b4a95a06ea4ea24d513b228016e34c6f002753e7668c17c1c040a1b96432787d8e2a7b896c0cbe48ee98414cb6b5d1729caa0f34a36fcb8180971b30ff926b64770ec18dfe61e9203d707bf687c355e093ee01f37b1ea113e9124a5a5f8e4030451f0521df41838b1538e41f"}, &(0x7f0000000300)=0xcc) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000340)={0x0, 0x52a3, 0x80000001}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000003c0)={r2, 0x3, 0x101, 0xe235, 0x10000, 0x4, 0x8000000000000, 0x0, {r3, @in6={{0xa, 0x4e24, 0x800, @empty, 0x3}}, 0x9, 0xffffffffffff6627, 0x7fff, 0x1, 0x1}}, &(0x7f0000000480)=0xb0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000004c0)={0x2, r0}) [ 227.494953] Unknown ioctl 8706 [ 227.513921] binder: 16013:16014 Acquire 1 refcount change on invalid ref 0 ret -22 [ 227.521802] binder: 16013:16014 got transaction to invalid handle [ 227.524481] Unknown ioctl 8706 [ 227.528157] binder: 16013:16014 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:56 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x11, 0x4, 0x0) ioctl(r1, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f00000002c0)=0xfff, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) 2018/05/19 16:46:56 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = syz_open_pts(0xffffffffffffffff, 0x2) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x1c, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x200402, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000100)={r4, 0x70, "a5e50697e022f1529d15c3964311952362785a9551e97343caf599fb325fc6462a1657aa3492ef3641634721b581a99ffffb2d949800b3e19cbabcfa1c21847e53609a612e79a0442b002f3ed9a5892bb5cc519413d510ce6d5f2caf2ddc029ec4b1e1860b57db56eea07091e23e0fb8"}, &(0x7f0000000180)=0x78) close(r0) 2018/05/19 16:46:56 executing program 4: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x3) [ 227.561795] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:56 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:56 executing program 7: r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f0000000100)=@sco={0x1f}, 0x80, &(0x7f0000000300), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="500000000000000010010000800000008cc46ef5ba125badc71edaa083c4f1eaccfc315870578d2cee705af4c100be8d4898de951fc4c54c35051d085cfc58d6fc1a41098de3b6165b7200000000000098000000000000000101000006000000"], 0x60}, 0x0) write$binfmt_script(r0, &(0x7f0000000180)={'#! ', './file0', [{0x20, '.request_key_auth\x00'}], 0xa, "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"}, 0x101e) r1 = add_key(&(0x7f0000000080)='.request_key_auth\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, r1) 2018/05/19 16:46:56 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000072]}) r3 = dup3(r1, r1, 0x80000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@remote, @in6=@ipv4={[], [], @remote}}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) 2018/05/19 16:46:56 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:56 executing program 4: syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/softnet_stat\x00') ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x1000, 0xffffffff, 0x0, 0x7, 0xfffffffffffffe01, 0xfff, 0x8, 0x1, 0x101, 0xc0e, 0x5, 0x6}, {0xffff, 0xba15, 0x80, 0x400, 0x3, 0x3ff, 0x6, 0x0, 0x7fff, 0x80, 0x5b80000000000, 0x4, 0x6}, {0x4, 0xd5d9, 0x9, 0x4, 0x100, 0x7ff, 0xfffffffffffffff8, 0xf4ed, 0x3f, 0x80, 0xae1, 0xffffffff00000001, 0x7f}], 0x401}) [ 227.799926] binder: 16060:16062 Acquire 1 refcount change on invalid ref 0 ret -22 [ 227.807867] binder: 16060:16062 got transaction to invalid handle [ 227.814198] binder: 16060:16062 transaction failed 29201/-22, size 32-16 line 2856 [ 227.840153] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:57 executing program 3: keyctl$set_reqkey_keyring(0xe, 0x400000000000007) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x24800, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f00000000c0)=0x9) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x400000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x84000, 0x0) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 2018/05/19 16:46:57 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x7f) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = epoll_create(0x8000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) fcntl$setpipe(r1, 0x407, 0x5) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0x7) 2018/05/19 16:46:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x80000000, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x4) dup3(r2, r1, 0x80000) 2018/05/19 16:46:57 executing program 2: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:57 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x8}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x22, &(0x7f0000000200)={r3, 0x0, 0x0, 0x2}, &(0x7f00000002c0)=0xc) close(r2) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x857c, 0x7, 0x1, 0x0, 0x7, 0x3, 0x6, 0x7f, 0x205, 0x40, 0xc4, 0x8, 0x5, 0x38, 0x2, 0x7, 0x500000, 0xfb}, [{0x0, 0x40, 0x3, 0x0, 0x0, 0x8, 0x5, 0x400}], "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", [[]]}, 0x1178) close(r1) 2018/05/19 16:46:57 executing program 4: r0 = syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x5452, &(0x7f0000000140)=[0x8, 0x8]) r1 = dup(r0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x800}, {0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0xfff}, 0x3, [0x5, 0xffffffffffff8000, 0xffffffffffffff00, 0x2, 0x1, 0x80, 0x6, 0x24]}, 0x5c) 2018/05/19 16:46:57 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), 0x1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x13, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/19 16:46:57 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff63f00, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) [ 228.566848] binder: 16080:16084 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.574696] binder: 16080:16084 got transaction to invalid handle [ 228.581092] binder: 16080:16084 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:57 executing program 3: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000040)='v', 0x1}], 0x1) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1}, {0xa, 0x4e21, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0xfffffffffffff801}, 0x3ff, [0x4, 0x7, 0x1c75, 0x9, 0xd9, 0x2, 0x7f, 0x8]}, 0x5c) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/151, 0x97}], 0x1) 2018/05/19 16:46:57 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000080)=0x80, 0x800) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f00000000c0)={'teql0\x00', {0x2, 0x4e21, @multicast2=0xe0000002}}) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1d, &(0x7f0000000180)="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", 0xfd) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000002c0)=0x5, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300)='/dev/uinput\x00', 0x20000, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000340)={0x9, 0x0, 0x10000, 0x4}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000380)={0x766a, r2, 0x3, 0xff}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r3, 0x541a, &(0x7f0000000280)={0x0, 0xd, 0x0, 0x1000, 0x0, 0xfffffffffffffff8, 0x0, 0x3, 0x2}) 2018/05/19 16:46:57 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x311d0da, 0x80000) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:57 executing program 5: r0 = socket(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4044000) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180)=0x40, 0x4) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x14, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="6cfca64d2d564b6d8fc2093576b484f10010"]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x40000, 0x0) write$binfmt_elf64(r0, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x3f, 0x0, 0x6, 0xfffffffffffffffe, 0x7ff, 0x2, 0x3e, 0x9c, 0x266, 0x40, 0x1f4, 0x4, 0x34, 0x38, 0x1, 0x59, 0x3, 0x100000000}, [{0x6474e551, 0x8, 0xfffffffffffff0bb, 0x9, 0x1, 0x40, 0x6, 0x5}, {0x6474e553, 0x2, 0x7fff, 0x6, 0x7, 0x6, 0x81, 0x2}], "d86ef11c99f8a88fd4a76f1c7f5548ec232dce198d65974dda199ee9625a374d65164d53d04b872bf7ba5200d3bde155640c224ccb45634b22c4d2a5c49e08dcd18901d242143df354ce0fb5c7324150136a35bac2bb342d717b8cf8b2327263f5f04e73267b9dd9171bd391ea8dc1c61860c94caa1240dea5d5951a068e91c5891282c43b124de759c62780c3734d29c708fdbb32eaa917", [[], [], [], [], [], []]}, 0x748) fstat(r2, &(0x7f00000005c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0xc3e}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r4, 0xfff, 0x10, 0xff, 0x8}, &(0x7f0000000580)=0x18) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000480)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000500)={r5, r6, 0xda63}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="12634807001b653c61943d9f140039ea8ec13cc5ee4772db087b0e30faa89aa164221f1d9e480d78395baffb26cdad942ae97965ef9ba0947a5811876cbdb2e7b8fe7122957bb9d8091d1e30a8c1fbe31f7c0ca2c6d7815c34461e9b9d2e60a73396aa6685c03bbe4f20d4238a34ee770d3bd0e277cf13c7b598ca6652b7f36556545df214bc46ac09fd7d092346e353cae0aee35cb10000000000000000000000755ac867d5e07b898496a6e4142839bfcc715af55a483d4ddcb2f0c4e7504c16ce6ff4baa4"], 0x0, 0x0, &(0x7f0000000280)}) ioctl$BINDER_WRITE_READ(r1, 0x40046208, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, &(0x7f0000000340)}) 2018/05/19 16:46:57 executing program 4: syz_init_net_socket$llc(0x1a, 0x2, 0x0) mprotect(&(0x7f00000f6000/0x400000)=nil, 0x400000, 0x2000000) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x6, 0x40000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x40000000000000}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x2a6, 0x80, 0xe000000000000}, &(0x7f0000000180)=0x10) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x44200, 0x0) getsockopt$llc_int(r2, 0x10c, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffc94) [ 228.651276] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:57 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 228.759503] binder: 16108:16109 transaction failed 29189/-22, size 0-0 line 2856 [ 228.834638] binder: 16119:16120 Acquire 1 refcount change on invalid ref 0 ret -22 [ 228.842645] binder: 16119:16120 got transaction to invalid handle [ 228.848152] binder: undelivered TRANSACTION_ERROR: 29189 [ 228.848977] binder: 16119:16120 transaction failed 29201/-22, size 32-16 line 2856 [ 228.900735] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:58 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x82002, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x0, 0x0, {0x6}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4}]}]}, 0x20}, 0x1}, 0x0) pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$TIOCNXCL(r1, 0x540d) 2018/05/19 16:46:58 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x4, &(0x7f0000001400)=[{&(0x7f00000001c0)="950425f137cb4fe9143b4ef8f0e563003857d08413fb36d1d34c17f72b839c8ceceebba7a540231cd930916a94400df28d3228bd098b9b392d41398318104c3bc662896b62345a876b5b364436efaf8c496d1ab24d09f8c1e205c434d6ab565bea54a613a73b98c71e992f3674de7e33824e8e70d27de481435a81467fbebb69d0aeea8fb14284628d765d2ac4acb426b08f9fbc1d2957a7f0d27f67e8cd42e13909a17ebb5bc7e27b9deccf9d23c02101170f213a3620c6d029c53dddc811f2b63f3e32ea1585daca0b565df9d5f33e69d7be26a3b8725f40f414889735c7", 0xdf, 0x304}, {&(0x7f00000002c0)="720e21d91c327b5fee47fde7d53ca5788288d473dab669bf0256fc3bd60eaeed9012f7091ad6035a4ea407c8e8ba23e65ef865efb7d9e1e0c7d7d07c2796b48f9e226d2fffce89707497a9132cefa7e4256ea9c3fdd2c9861da370989b169800cec2f4e314b045cb331fd47345591643c786920fa66c9d1c10b515a6b0807641", 0x80, 0xe9}, {&(0x7f0000000340)="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", 0x1000, 0x8}, {&(0x7f0000001340)="a73a21dac1a51937b541484731e1723522f369c65e40926137187e245d6151931819fd3d4d47bdd4ecf635ef145d041da45c521fcbb0135b215bfa6612241a95945cda08afb190a0634ff95fc624a446ed62fb383a876ba3ebf91a5dab1eaa6ca6d41ec9f1e41af050e437d25bc9b549336b2babe81f24dc5e629866dd18ea9b3038c7a6dffe9762a8389b11f9895a183fa584a86305e434ee64c3573627a2d3ed425262a788eacb3bd62fdf24cc21ce38bbab4a82b210b9c7", 0xb9, 0x10000}], 0x12040, &(0x7f00000000c0)={[{@localcaching='localcaching', 0x2c}]}) 2018/05/19 16:46:58 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f5ff9a22b1c353cae605486a1bcf6f94fe969ed173a8a877449471eb2a524dc2cb57e77e505ef5f3eb667138820718d9ecca14619d18b5e779f98527e7ce0c6d5dc1e7bff089228b60c4fa856b68bbf284548d422ba9f12633906b0fb60") semctl$IPC_INFO(0x0, 0x0, 0x13, &(0x7f0000000080)=""/198) 2018/05/19 16:46:58 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000200)=0xa) ioprio_set$uid(0x2, r1, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/05/19 16:46:58 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x440, 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x8, 0xa00) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:46:58 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:58 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff64000, 0x0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:46:58 executing program 1: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="4ae30000000000000200000000000000020000004000000000b1ee00000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000008ac00000000000000000000000000000000000000000000800000000100000000000000000000000101000000000000010001000000000009000000000000000000000000000000000000000000000004010000000000000000000000000000000000000000000000000000000000000000000000000000000088df5e0f2b9b"]) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 229.577420] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 229.594510] binder: 16135:16136 Acquire 1 refcount change on invalid ref 0 ret -22 [ 229.602488] binder: 16135:16136 got transaction to invalid handle [ 229.608823] binder: 16135:16136 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:58 executing program 4: futex(&(0x7f000000cffc)=0x4, 0x9, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0xfffffffffffffffe) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{}]}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x0, r3}) futex(&(0x7f000000cffc), 0xa, 0x0, &(0x7f00006f7000)={0x0, 0x989680}, &(0x7f0000000080), 0x1) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000140)={0xffffffff80000000, 0x9, 0x5, 0xfff, 0x3, 0x20, 0x9, 0x5, 0x8, 0x4}) 2018/05/19 16:46:58 executing program 7: mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8001, &(0x7f00000000c0)=0x1, 0x40, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") io_setup(0x5f24, &(0x7f0000000000)=0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x800, 0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f0000000280)="208e2006e778f9899156f94de27f2fe46283252f5890ab2f68bb56408ec474fea165ce08781c3048329cd37bfa4b4798cb1bd64670bf8c81eed907a13c353926bbc272263ee0ad0a17824a40f6c239514f1150abc5733c5d8cae4087f678e487cb03554e00f1e366f925ab3f1309de64a8b8015e2feac7e7079bc19b2230267e8d5614184ea20b5388ef5c9f3f6fa9b7fe6d3716dcb89602019cf9d59d16c08968a35126e7f48a2c2425b847da34772c247a9695ca46744f5b45e59cca30ae46bf4a73f3fb9c61c0c868e377ff1fa6d9b3f278b0f9ea6e2d", 0xd8, 0x9, 0x0, 0x0, r2}]) get_mempolicy(&(0x7f0000000040), &(0x7f00000001c0), 0x1ff, &(0x7f0000ffc000/0x4000)=nil, 0x2) 2018/05/19 16:46:58 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) rmdir(&(0x7f0000000640)='./file0\x00') r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x101000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x4, 0x8, 0x2, 0x100000001, 0x0, 0xfc3, 0x40010, 0x0, 0xc6, 0x4, 0x9, 0x0, 0x1, 0x0, 0x7, 0xb12c, 0x7ff, 0x8, 0x8, 0x9, 0x5, 0xfffffffffffffff9, 0x1ff, 0x6, 0x7fffffff, 0xffffffff, 0x4, 0xffffffffffff409a, 0x4, 0x3, 0x0, 0x6, 0x7fff, 0x9873, 0x1, 0x10001, 0x0, 0x0, 0x2, @perf_config_ext={0x1, 0x7f}, 0x1040, 0x2, 0x2, 0x2, 0x800, 0xfffe000000, 0x100}, r2, 0x1, r1, 0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1ff, 0x80000) accept4$alg(r3, 0x0, 0x0, 0x800) 2018/05/19 16:46:58 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00\x00d\x00', 0x20, 0x1, 0x3b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000900000000000000000073797a5f74756e000000000000000000626f6e645f736c6176655f300000000076657468305f746f5f7465616d000000766574683000000000000000000000000180c20000000000000000000000000000000000000000000000f8020000f8020000280300006270660000000000000000000000000000000000000000000000000000000001100200000000000000eaffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000608100000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006970767300000000000000000000000000000000000000000000000000000000280000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000434f4e4e5345434d41524b0000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff00000000"]}, 0x430) r1 = getpgid(0xffffffffffffffff) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x0, r1}) 2018/05/19 16:46:58 executing program 6: r0 = socket(0x800000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000280)={0x0, 0xa4, "0fb3fd727aa3a1591cd3fb96f351a5514b33762a97a65358f17d614d9d02cecefcfffa703db6add729db2edcc004d6de0fd87ca1b62d4fd9a852b1853470254b6de38f8f42ac4586af45ff87638cdbe8d453335efb5ebbb7717dc02bfbb3e368292e0d0313729b4315bbc3622fee76f11c9b4f6e227cc1a5f3f9ca0dbf777774ede0793143822dde389aa73340d47c0f2491411ea5acd2149e0efee7dfae7274bebe6c3e"}, &(0x7f0000000100)=0xac) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x0, 0x401}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x90000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000005c0)={@pppoe={0x18, 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'vlan0\x00'}}, {&(0x7f00000006c0)=""/142, 0x5f}, &(0x7f0000000780), 0x21}, 0xa0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0x3, 0x6}, &(0x7f0000000380)=0xc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r5, 0x401}, &(0x7f0000000400)=0x8) getpeername$unix(r4, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000500)={@empty, @multicast1=0xe0000001}, 0x8) dup3(r4, r1, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ptype\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000000c0)=0x1a, 0x4) [ 229.624235] netlink: 'syz-executor3': attribute type 4 has an invalid length. [ 229.685101] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:58 executing program 3: r0 = socket(0x10, 0x80002, 0x0) connect$netlink(r0, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x24000000}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10, 0xf0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002e00030000000000000400009f000000d8bd0000"], 0x18}, 0x1}, 0x0) 2018/05/19 16:46:58 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 229.861640] binder: 16181:16182 Acquire 1 refcount change on invalid ref 0 ret -22 [ 229.869587] binder: 16181:16182 got transaction to invalid handle [ 229.875918] binder: 16181:16182 transaction failed 29201/-22, size 32-16 line 2856 [ 229.916657] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:46:59 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1f, 0x200) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0xbd, 0x9, @scatter={0x1, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/249, 0xf9}]}, &(0x7f0000000280)="0e00eae0ae94b50f906136226d4a75d68674919583a1b4656458f5e663d3fb54996e478ba465001c1febadd6e29b55e4d1c08b97462a0a9f24f302ea8adb9c8e0117d702db30a08a3f10f9238ce3dfd0c055fcbcd9b70b5ad0538a681e761c6a52cd742ec838f73a5c9ce606594412e5982d84a2c4fcb59abdd56db769efad49cb3829756546af552bee7ed658760141f4c1fbbba6febd2a0a14b583a75217f669023697c778e7c6b061c1d7ef876de519ced00f65bd900cd283d3d794", &(0x7f0000000200), 0xc89, 0x4, 0x0, &(0x7f0000000340)}) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000240)) getpgrp(0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000440)) dup(r1) 2018/05/19 16:46:59 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x4000000000000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:46:59 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = open(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x40) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x30100, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000000c0)=r3) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) dup3(r1, r4, 0x80002) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r5, r4, 0x0) 2018/05/19 16:46:59 executing program 7: getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000600)={0x0, @in6={{0xa, 0x0, 0x8, @loopback={0x0, 0x1}}}}, &(0x7f0000000080)=0x84) kexec_load(0xba63, 0x1, &(0x7f0000000040)=[{&(0x7f00000000c0)="ec1f8d9411a060ada5facf84f3ab0717af00a6fc3ba5f18e713d80f9ffe615185f982f4b0d6e6ae99593051c828ff41f545e7788ad0966", 0x37, 0x42, 0x1f7}], 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x10000, 0x2) 2018/05/19 16:46:59 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000001c0)="e626262c8523bf012cf66f") socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000040)=0x1f) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000080)) ioctl$void(r0, 0x5450) socket$packet(0x11, 0x3, 0x300) sendfile(r1, r2, &(0x7f0000000000)=0x5c, 0x80000003) 2018/05/19 16:46:59 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0), 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:46:59 executing program 3: r0 = socket(0x1, 0x80000, 0xe41) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r1) 2018/05/19 16:46:59 executing program 4: r0 = socket(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x10001, 0x8, 0xdbd, 0xffffffff, 0x80000000}, &(0x7f00000001c0)=0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e20, 0x9, @mcast1={0xff, 0x1, [], 0x1}, 0xe440}}, 0x100000001, 0x8}, &(0x7f00000002c0)=0x90) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x3, 0x412000) fcntl$getflags(r0, 0x40a) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000300)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="ac8be4abd0f79d6325ae476aab5970a3131f2fb4bbfb3c75500e33d0612f430d"}) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000180)) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="44000000ff00000004000000030000000800000001000000090000000800000000000000ff0f0000"]}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0xc, 0x2, 0x1, 0x40, 0x14, r2, 0x401}, 0x2c) [ 230.836359] binder: 16203:16205 Acquire 1 refcount change on invalid ref 0 ret -22 [ 230.845101] binder: 16203:16205 got transaction to invalid handle [ 230.851442] binder: 16203:16205 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:46:59 executing program 4: fstat(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0]) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x3002, r0, r1, 0x3, 0x180028) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000140)=0xda, 0x4) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000100)={0x5, [0x0, 0x1000, 0x6, 0xfffffffffffffafd, 0x9]}, 0xe) r3 = gettid() rt_tgsigqueueinfo(0x0, r3, 0x0, &(0x7f000058a000)) 2018/05/19 16:46:59 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x800, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f0000000140)=0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000280000000000000000000000000095000000000400003c1c969818faabb5a8e6a96fe142ddac69541fbc0923d75ae5bae61528d8a5cfe5f8ff0783498a344770bf6552e1d82fabd4fd674bdcccfbb109a4db60cf7a3c39b057122cf2cd96e04f0454a76f8fb57a2ab81b257aa3d975147f9c3e8b856271abdad314f2102c7554c57a0abaeb6037ee5d126281b6b3467948198dfa30b0f73323fcaf60fe9b30"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x107000) 2018/05/19 16:46:59 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xe, &(0x7f00000000c0), &(0x7f0000000080)=0xfffffffffffffe8f) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x8, 0x1adf}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r1, 0x7eb}, 0x8) 2018/05/19 16:46:59 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = creat(&(0x7f0000000040)='./file0/file1\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000200)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x0) recvfrom(r0, &(0x7f0000000000)=""/43, 0x2b, 0x0, &(0x7f0000000240)=@generic={0x0, "cc52c03189ed57de5bf6f5d61bb491eaa2c010c4d5d790cd54f454d6fab8966c107d94840b6e419fe1a7213825f9c0d570e50a39cc41a813444edf30125e8fdecedb8e1727b36fe9fb05d206330a8f0bc34a399d346415061f8dfa89708f8346686f048354cc331fb341fa5422a53357bf838f4f1f53ff1f45dfb9701145"}, 0x80) 2018/05/19 16:46:59 executing program 6: socket(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x800, 0x80800) r3 = mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000002, 0x33, r1, 0x0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f00000000c0)={0x0, 0xffffffffffff5b96}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x64, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b6300000d6300000f630c4003000000010000000000000000634040000000000000000004000000000000000000000001000000000000000000000030000000000000000800000000000000", @ANYPTR=&(0x7f0000000080)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000100000000000000852a687700010000", @ANYRES64=r3, @ANYBLOB="0200000000000000"], @ANYPTR=&(0x7f00000003c0)=ANY=[@ANYBLOB="3800000000000000bd2b0b992a20386c077549011730fa8c7d7bbd7c16dedfa3e47e45602a4452d8f18fd268b3a84929f89693422ccaa03c684ce27a55ea56c7ff0648e464f470bcfaeab2b91c15b059fbc9ffabb43fec19dc87b3b233749d6bfa9968d02130eeaca9c37bdbec31c11ca9f2ed1e3586edb8d3"], @ANYBLOB="0663044000000000"], 0xb5, 0x0, &(0x7f0000000300)="4faccadde0403e709cddb15ea46fc2b0f6e013b1be23bd083756aa097ac28a89e57148153134c32a068c6327020b1e4a01d185a50ef18da6efcced2016c6f3ba4add8d9368070bd80e40e2a4f1bbfaf163be1e0de86558102efbc3f60d130f10ed1cebdf8e2f4e2cf7e052580c4b2b7668c18c125f679e57e10de3c8c8e880e801595f15f969d0be26006b800cf7d88965094d034df62bcec4b03da794f410fffab0f7c1f06e28f9f163bcdb3ee8878cd6e0a9b012"}) dup3(r1, r0, 0x0) 2018/05/19 16:46:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="08030037d0283b476846a98c77630610996bad"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 230.936776] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:47:00 executing program 4: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) r1 = shmat(r0, &(0x7f0000ffc000/0x4000)=nil, 0x4000) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x600) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000040)={0x4, [0xfec, 0x6, 0x7f, 0xfffffffffffffffa]}) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) shmdt(r1) 2018/05/19 16:47:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = getpid() sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x184, 0x3c, 0x8, 0x70bd25, 0x25dfdbfb, {0x16}, [@generic="1f9dec3ff7fbd55bc3618792256c1d91d200aee54c7ccbee38ca3157c605c1e9ade78be6750fdcf2ac0bbe332b87aa75beb6d5db30b9a0b567db25f580074c416dada6a1e9306efb7d31d1cfdd3ae2047870919b41ae307d27a59308e80c0d7c3550f9ae0f7942d48bfd9cae525e48ddc4766a48606d3f631cd10239caafb76b4c493bf08332a023bc5aa733d27239ffe1c7f6664966c51108f40b398d255e3282f4eb8c65196914d27ab9b3d9", @nested={0xc0, 0x6, [@typed={0x8, 0x64, @pid=r1}, @typed={0x8, 0x43, @u32=0x6}, @typed={0x8, 0x67, @ipv4=@dev={0xac, 0x14, 0x14, 0x14}}, @generic="032ba293002baad3dbbbcdba37840a93ab42c58195b61b4e6068ff9118243b0eb88a0724a9bdecd8c6a0d812c47dc0b0b2146868b94e890b9e1d7a0657cfecfd0a7c8a1aa444f89be39c1be13825785b3daa28ff552ad3cca5977e11b45040549b4ec5aceac23829a46d5c22c0ae5d0a25ec1c4d9e7240ded2d555f64cbdd9929be93a14a62dc6575eae73c0c4237ce03ceb1879ec562821d8d2c92b19fcd67fb3"]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000}, 0x8005) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0x260, &(0x7f0000002940)={&(0x7f00000024c0)=ANY=[]}, 0x1}, 0x1) sendmsg$nl_generic(r2, &(0x7f0000000080)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da1f}}, 0x14}, 0x1}, 0x0) ioprio_get$pid(0x0, r1) 2018/05/19 16:47:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r2, &(0x7f0000000000)=@get_event={0xc, 0x8, 0x143, {&(0x7f0000000100)}}, 0x10) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup3(r3, r1, 0x0) fstat(r1, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) setregid(r5, r6) syz_open_pts(r4, 0x10040) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x9e, "c66c9bf6b1fa22fe12dd802d3de8d0e482403258104f820a457d120c75605feae03a01ade9300a4cf4820567ad965d39bfa61be373bfdc54840717a91740ef5964a6f316f110efe0736cad7e7508dee2c1adfa0902b2c861d189fe207930f35152c509a125df0e6a1b5861965cc9e438779ad1248461d57f0d798449e00e340f4d6cc2840e6a1b673fb2c85969474cd55c1eafaf16782ab4d873a9d8c243"}, &(0x7f00000001c0)=0xa6) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000280)=@assoc_value={r7, 0x80000000}, &(0x7f00000002c0)=0x8) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000040)={r4, 0x6, 0x0, r3}) fstat(r3, &(0x7f0000000400)) 2018/05/19 16:47:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0), 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 231.189924] binder: 16247:16250 Acquire 1 refcount change on invalid ref 0 ret -22 [ 231.197871] binder: 16247:16250 got transaction to invalid handle [ 231.204202] binder: 16247:16250 transaction failed 29201/-22, size 32-16 line 2856 [ 231.240517] ucma_write: process 1042 (syz-executor6) changed security contexts after opening file descriptor, this is not allowed. [ 231.249347] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:47:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x68}, 0x1}, 0x0) 2018/05/19 16:47:00 executing program 6: r0 = socket(0xa, 0x80000, 0x6) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0x38e41, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x0, 0x4}, &(0x7f0000000100)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}}}, 0x2, 0x80, 0x401, 0x8b5, 0x40}, &(0x7f00000001c0)=0x98) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000380)={0x1ff}, 0x4) dup3(r4, r3, 0x0) 2018/05/19 16:47:00 executing program 7: mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x0, 0x1, &(0x7f0000000080)=""/200, &(0x7f0000000180)=""/212, &(0x7f0000000280)=""/196, 0x10d000}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xd1, &(0x7f0000000000), 0x4) 2018/05/19 16:47:00 executing program 1: r0 = socket(0xa, 0x0, 0x9) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) getsockname(r1, &(0x7f0000000040)=@in={0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80) 2018/05/19 16:47:00 executing program 4: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000400)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}, 0x1}, 0x0) 2018/05/19 16:47:00 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x8081) accept$packet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000000)="0f01f7660f017b000f00d00fc75f810fc7a5000066b9b10b00000f32f30a1cba400066edf20f58db66b9800000c00f326635010000000f30", 0x38}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000040)) 2018/05/19 16:47:00 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0), 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:00 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x100000000000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) [ 231.839070] binder: 16274:16282 Acquire 1 refcount change on invalid ref 0 ret -22 [ 231.847060] binder: 16274:16282 got transaction to invalid handle [ 231.853398] binder: 16274:16282 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:47:00 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000001c0)=0x0) capset(&(0x7f0000000200)={0x20071026, r0}, &(0x7f0000000240)={0x2, 0x7f, 0x6, 0x1b3, 0x6681a03b, 0x7}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r1}], 0x1, &(0x7f00000000c0), &(0x7f0000000100), 0x8) 2018/05/19 16:47:00 executing program 3: r0 = memfd_create(&(0x7f0000000080)="7b10", 0x3) fcntl$addseals(r0, 0x409, 0x7) io_setup(0x404, &(0x7f0000000180)=0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000140)=0xe8) accept4$packet(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000003c0)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @rand_addr, @dev}, &(0x7f0000000500)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@rand_addr, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000780)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000007c0)={0x0, @multicast2}, &(0x7f0000000800)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'syzkaller0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in6=@ipv4={[], [], @dev}, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000a00)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000a40)={@loopback, 0x0}, &(0x7f0000000a80)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x2a8, r2, 0x110, 0x70bd29, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r3}, {0x104, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xffff}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x40}}}]}}, {{0x8, 0x1, r6}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x138, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}]}}]}, 0x2a8}, 0x1}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000000c0)="e5", 0x1}]) 2018/05/19 16:47:00 executing program 7: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=@ipv4_getaddr={0x18, 0x16, 0x8b3d08176484ea45, 0x0, 0x0, {0x2}}, 0x18}, 0x1}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000280)=0x80000001, 0x4) recvmsg$netrom(r0, &(0x7f00000006c0)={&(0x7f0000000340)=@full={{0x3, {"267fba492eadac"}}, [{"0d629c1f8a8e17"}, {"d9624cff6e0d81"}, {"e12726dad6fad8"}, {"c2d1892d6dd303"}, {"f5a65b7c49b969"}, {"0bd40931648469"}, {"f3c0367bbc3d42"}, {"e606ec2a53d0b6"}]}, 0x48, &(0x7f0000000640), 0x0, &(0x7f0000000680)}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) 2018/05/19 16:47:00 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, &(0x7f0000000500)) dup2(r0, 0xffffffffffffffff) 2018/05/19 16:47:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) fsetxattr(r1, &(0x7f0000000040)=@known='security.ima\x00', &(0x7f0000000080)='/dev/sg#\x00', 0x9, 0x2) dup3(r3, r2, 0x0) 2018/05/19 16:47:01 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) socketpair(0xb, 0x803, 0x73, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-cast6-avx\x00'}, 0x58) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) r4 = dup3(r1, r0, 0x80000) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, &(0x7f0000000080)=r4) close(r0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x9) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000200)='lo\x00') r5 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendto$ax25(r4, &(0x7f0000000100)="ea", 0x1, 0x1, &(0x7f0000000140)={0x3, {"2846a35f95bb31"}, 0x2}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000280)={0x401, 0x38}) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BINDER_THREAD_EXIT(r5, 0x40046208, 0x0) ioctl(r3, 0x1ff, &(0x7f00000000c0)="f5215cff") 2018/05/19 16:47:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0xffffff9e}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)={0x1c, 0x26, 0x2, 0x1, 0x0, {0x2}, [@nested={0x8, 0x8, [@generic='$']}]}, 0x1c}, 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x20400, 0x0) faccessat(r1, &(0x7f0000000100)='./file0\x00', 0x42, 0x0) 2018/05/19 16:47:01 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000000080)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000000000)={0x0, 0x989680}, &(0x7f00000000c0), 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) fcntl$addseals(r0, 0x409, 0xa) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x100, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/233) 2018/05/19 16:47:01 executing program 4: r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000180)='sched\x00') mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f00000e7000)) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000000)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r2}) preadv(r1, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1000000000000205, 0x0) [ 232.081545] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:47:05 executing program 3: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) open(&(0x7f0000000640)="2e2f66696c65302f662e6c6530f0", 0x40003ffe, 0x0) truncate(&(0x7f0000000280)="2e2f66696c65302f662e6c6530f000", 0x8) unlink(&(0x7f0000000080)="2e2f66696c65302f662e6c6530f000") 2018/05/19 16:47:05 executing program 6: r0 = socket(0x10, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") chroot(&(0x7f0000001900)='./file0\x00') lstat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000214}, 0xc, &(0x7f0000000380)={&(0x7f0000000580)={0x1328, 0x16, 0x2, 0xf596, 0x25dfdbfb, {0xa}, [@nested={0x1e0, 0x5, [@generic="e9ffc4c3ccd35dfc862ef4fa904ad09eb19a4827600744bc10c0884abe19ebb6a6816964a4b7d315a1b6dc0cf97bb562bb85943dcccad6f05617856b6275eb5ea791d0b78e5d79a361f5c3a29ada22416327d10c5ca09fdad1e99931677631bb", @typed={0x98, 0x8d, @binary="497e6f809e131b7844596e454a90deb47d02ce9ca2040c55550378aba790add17b41849013c34c243f3691fe144f6d2e87e43eb105ae0102a16ed9ef8448261cc0b5ca052f357cf979a03af451f0a5f44dc08eb40ba9d9d1d9cf29ba4cd8ada66fd25407718e62f4c86f10b9077b57d52b14abe3cc59397d1fe74f5cefc38c30d754ab9704fdd55533027092cc5cfa466b948d86"}, @generic="fb32f0d949976263035cd117046400f1683def5d1bfd9a9230f401b091afd007b654ebe0a21024d0315673c24f4e12f3febf45ba7573c20021ef550fe1effc62058aec3007cb83e402dee535734654deaf646293b2992e912ae599e39708819cd7ff12d471f8d5370ad54fbbdefe5140b86b1e225ab6745c285514d196e0d7d71613fca6c916be19848353e4bf29d5511b1573371b7a79c492996246c642815b24a1455fe3f6786f7c4138bca067a3533ae75b", @typed={0x8, 0x53, @uid=r1}, @typed={0x14, 0x5e, @str=')procwlan1wlan0\x00'}, @typed={0xc, 0x6e, @u64=0x1000}, @typed={0x8, 0x7b, @ipv4=@dev={0xac, 0x14, 0x14, 0xd}}]}, @typed={0x4, 0x78}, @typed={0x8, 0x96, @fd=r0}, @generic="72de954bb615edc81a3ba10c589cbf19dccc9ffb85a5eceff5f05aa3f2f9992665fc713709bb7bdfb1dfc34fb5e725d149d579bfc17025eba4002b778feef4ac44550b4e95bbd43053a2723135f1af1f5d852475e4b336b91be5fe601a192d0895bf549368a694a5d2aa1c10d5f670582a39344f9087f99b5c6b54dfc77cb96dd59ff0e6c9d01dd06622d2a4d0b0bedb6e8734333d6808a5a82c31fde5ffbec86209ada9afee5ca6566f48fd398288646add60fe8b7330dbe582f0be0b05f757e6f4bd1056f0825d7508e25b", @generic="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", @typed={0x8, 0x61, @fd=r0}, @typed={0x8, 0x43, @ipv4=@rand_addr=0x7}, @generic="802747e2e03e2b921cc63c8444455c157c8eebc2511aa9797b96cd331fe2cb2bc7ccc3cabed8b8975bd8ebf72470e06a688ed3fae58c8c03a63f5577c78225947c169b3b1ce15de7d29f1192"]}, 0x1328}, 0x1}, 0x4881) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f00000018c0)) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0xb4, "0c61181e4aab809a5a78ae6c5094d6dfa198ead897f35d5a87609edbe84accb2df127d5ca950bc50199744bbf84080d84a790631a1738ea2833aeeb288c67da6b78a2c11d36361401e61e4ebebb4bed0c8d1735238b0623b5b4dcf423113899585a3fcc5939f0a6d195e83a8ce40440192248ebcd3f31dfeb0ba3935df9a7689d986792255c45a59881577d42f230a386843fcc2fd347ec0603a3b3e19f82f645ad3f6ed802f14146f404cfd666f6ccf631b5ca3"}, &(0x7f0000000100)=0xbc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000001c0)=0xe7) 2018/05/19 16:47:05 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:05 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a000007000000000000000000000005001a00fe800000000000000000000000000000ff020000adce1700000000000000000000000102"], 0x38}, 0x1}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f00000001c0)="da8e671b708fc7b599336dc922ad5ea9d2dd6d3c4251cf24c0726561ffbce4fff839862876af9ca302f2cfdf4c4a4a1de7f2a962d4c871f74273881fbd8878e7660602def7f8ae25b335a9710a07c7b2fbf46b9861e655045a73a0d7b2ac5ae4407faeed1534c7f9ef2e7bfea8ef9a9cc17e3bb9f5cce61d9cfcec1281364dee9d96ce10b4304524880670ad900460af39cda1f0437e7d7e22a0920f2eaf3676f7518c129d26ff7c8bbffee12e82a478cff0ae73979f4f25c7142589b1405d15d2f1c837cfc9866e1b863b", 0xcb) 2018/05/19 16:47:05 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x3f000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:05 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002580)={0x5, 0x0, [{0xf000, 0x1000, &(0x7f0000000340)=""/4096}, {0x6000, 0x23, &(0x7f0000001340)=""/35}, {0x7000, 0x20, &(0x7f0000001380)=""/32}, {0x0, 0x1000, &(0x7f00000014c0)=""/4096}, {0xc2224ee44142010c, 0x84, &(0x7f00000024c0)=""/132}]}) fanotify_init(0x0, 0x48400) syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x3, &(0x7f0000000240)=[{&(0x7f00000000c0)="ddc53be649c58e58840f520b3176016622efcd40ff0a1cc3898bdace266879780fd6e95cbf1490b011af516f39e594d7b581724452307175a50aa1", 0x3b, 0x5}, {&(0x7f0000000100)="dc4016c40106cddb98c4914af2ceb78b13e2dcff2204c2fe33dc4228c3d9cb84b2d4958af4f5f7dbe1275967e5b07f0a529b8abbdeff2d4236881fa90cb4113dd47ec831a49c308c385003212336bf6bfee1319fd4fe60489dfe5bea9cd8f823451155b544a86944b594800fae0b0513801170b71b4bb718537d75b94283a9b9557b7fe15f315c08d788843174cec673dcc8744c9e734a3f2c15f967af9222d6bbe93991e1ae2f99ee28a8ad119b733565a21143432f8ddf1fba505ca9db17153a574de6811c2fcebd5cc12d719f8cb55a847ef2386dc35327bb8a64f16226bf1da643faf9241646169c7db37513", 0xee, 0x3a}, {&(0x7f0000000200)="38590f941f15", 0x6, 0x7}], 0x800000, &(0x7f0000001440)=ANY=[@ANYBLOB="0140030b91621916c1b610d6fd0a54d501a239218fb996694ee1861bbf2ef3c8986b2ca69567ed2ab77f559906de73f41986e43980e0d8c507f4e7f54f075c0a9d422eae004cb8677c3106f2d3818c4077d1cfd3da2b78a3d95f37d70c55c6ff1d347a7c9c6a7ac70cef9e4f"]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001400)) 2018/05/19 16:47:05 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000004fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x0) ftruncate(r1, 0x81ff) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r2, 0x0) getsockopt$inet_mreqsrc(r2, 0x0, 0x0, &(0x7f0000000000)={@loopback, @dev, @rand_addr}, &(0x7f0000000040)=0xc) ioctl(r0, 0x40044104, &(0x7f0000001f64)) 2018/05/19 16:47:05 executing program 7: r0 = inotify_init1(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000040)=0xc) fcntl$setown(r0, 0x8, r1) syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x101, 0x280) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x3, 0x4) r3 = creat(&(0x7f0000000100)='./file0\x00', 0x120) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000180)={{0xff, 0x3, 0x7, 0x95, "b8452c2548de36fae31841727223acf72547ca93d030165d09ab322886816f55b1529a90ece9e4b40d4fe9e9", 0x3}, 0x0, 0x0, 0x4, r1, 0x7, 0x200, "b496d397b860570c08d009ddf30495304991c9c29a6d0944f14810cf4dd54dd2f773bdf7071ea98355d41556af046e574005eb0ed789e569a81549dab6ed181a", &(0x7f0000000140)='\x00', 0x1, [], [0x3, 0x0, 0x9, 0x1]}) ptrace(0x4207, r2) ptrace(0x4208, r2) ptrace$pokeuser(0x6, r2, 0x0, 0x0) 2018/05/19 16:47:05 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x3, 0x3a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f0000000100), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'dummy0\x00', 'bcsh0\x00', 'sit0\x00', 'bridge_slave_0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xc0, 0x110}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz1\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1ff, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x2, [{{{0xf, 0x0, 0x0, 'eql\x00', 'team_slave_0\x00', 'syzkaller0\x00', 'teql0\x00', @random="d4be885e0ef2", [], @empty, [], 0x70, 0xa8, 0xd8}, [@common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xffffffffffffffff}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {{{0x3, 0x10, 0x9300, 'bond_slave_1\x00', 'ifb0\x00', 'teql0\x00', 'bond_slave_0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2}, [], 0xe0, 0xe0, 0x128, [@stp={'stp\x00', 0x48, {{0x0, {0x4, 0x0, 0x0, @random="e9e304a0a103", [0x0, 0x0, 0xff], 0x0, 0x947e, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x4e20}}}}]}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x418) 2018/05/19 16:47:05 executing program 1: r0 = socket$rds(0xa, 0x2, 0x11) sendmsg$rds(r0, &(0x7f000000afc8)={&(0x7f0000004ff0)={0xa, 0x1}, 0xfffffffffffffe96, &(0x7f0000010000)=[{&(0x7f000000c000)=""/4096}, {&(0x7f000000e000)=""/79}, {&(0x7f000000f000)=""/255}], 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="14000000000000000000000000000000000014010000080000000000000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000b7785ccdef242b6794898aa2bacfb5d99696285f69a78aa4f7e6a06fb847eb24a1f772013d5075b5c66f9090fe5eb286a140326d72e5ecfe9942751dc80503020a4afb7adb95ca06ec5a21cc47b2efb2501f3e65067ed32ba7e104bfbb21bd0b3e28791ec250fe5b27ffd0b22a42e616b946a51c02a2231bb0ddd909cedcb7e960f17c97c7a23c14e8b9c6a51d1f880344c4956712deb9e44c29ec8ecdef79282523c9121c5046aa3b9c688ee236146f7d8b9ce3170fe2"], @ANYPTR=&(0x7f0000008ff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x0) accept(r0, &(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f0000000080)=0x80) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x101000, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0xff) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000100)=0x4, 0x2) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x1470c0, 0x4) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000180)) [ 236.759528] binder: 16351:16352 Acquire 1 refcount change on invalid ref 0 ret -22 [ 236.767717] binder: 16351:16352 got transaction to invalid handle [ 236.774135] binder: 16351:16352 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:47:05 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="1b006b5241b4deacc1e45c60159ed342f76f00000000") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 236.806886] kernel msg: ebtables bug: please report to author: NOPROTO & 802_3 not allowed [ 236.828087] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "@ ‘bÁ¶Öý [ 236.828087] TÕ¢9!¹–iNᆿ.óȘk" 2018/05/19 16:47:05 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x3, 0x12117e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x80dc5521, &(0x7f000035dffc)) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000080)='./file0\x00', 0x49, 0x1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="599643ec2fb7195a53a09f9dd53530fbdb4b497297d77b23fb24df05d743b06f5282977aca053c097c01ac0a17aae32ea847256ec7735985bff12d97d25f0b63defe9e895088e7d1d40526", 0x4b, 0x1}], 0x2, &(0x7f0000000200)) 2018/05/19 16:47:05 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcd, &(0x7f0000000180)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x5c) futimesat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x0, 0x2710}}) [ 236.865146] binder: undelivered TRANSACTION_ERROR: 29201 [ 236.957886] REISERFS warning (device loop5): reiserfs_fill_super: Cannot allocate commit workqueue [ 237.089644] gfs2: not a GFS2 filesystem 2018/05/19 16:47:06 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file1', [{0x20}], 0xa, "2ac2a68620d8bf67a7ee09eef18f6e23536fa203cc80a4dbbe5018eaafd2aad1779627ffe99135d955393a2f57aa57e1c1aba7ba86cec5b7a5e11fda335aa3261929be9d936ccc2a50edf013edc234128d64bb00b9752e5feb0919a29a98ed6a46658417a85201d9133976d670012adec61e7fd25ebbbbb7b033b3907c0b8ac32e1645f081d35ff74b695201331b240b04a5abacfdd6513bf8ee4b28be600e99146d79d6855d4a2e2bc391f5b7271958879ae3d4253b536e8184ef29dc0abe02eb167cf7d96d5d8185c3a1e17b300e6286f7f48e795c1b5236d649c05d62a193c4516d9d42e345cb2242bf6152c3b688fc740ce52bbe"}, 0x102) sendmsg$can_bcm(r0, &(0x7f0000014fc8)={&(0x7f0000004000)={0x1d, r2}, 0x10, &(0x7f0000002ff0)={&(0x7f0000014000)={0x1, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d8451aa777ccf6f9"}}, 0x48}, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x5) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000140)={'ip6gre0\x00', 0x200}) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f00000000c0)={&(0x7f0000000040)={0x1, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0xffffff7f, 0x0, 0x0, 0x0, "7f65db78b282958e"}}, 0x48}, 0x1}, 0x0) 2018/05/19 16:47:06 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000002800000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x200000, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x0, 0x3, 0x2000}, 0x4) 2018/05/19 16:47:06 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:06 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup3(r0, r0, 0x80000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x200000}, 0x0, 0x80000000, 0xffffffffffffffff, 0x0) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x7, @mcast1={0xff, 0x1, [], 0x1}, 0x6}], 0x1c) dup3(r2, r1, 0x0) 2018/05/19 16:47:06 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$getownex(r0, 0x10, &(0x7f0000002540)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002580)={0x0, 0x0}, &(0x7f00000025c0)=0xc) fstat(r1, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002680)=0x0) r7 = geteuid() fstat(r2, &(0x7f00000026c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getpid() stat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000002900)={&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000024c0)=[{&(0x7f0000000200)="e71e2aa869a5fc66f0362e836e7cc6ca959d289efc5a8c3f8414f3856ea4eeb056c5413f0cf4805eaed3ee93521510b9aeec945968bd49773ceaea1143511b24d2cda0d52ef1f049ce0779c97ea440e7969fb2255b8f60839fab93e0ffb76b775921e7417065ac354d1b416057242f9b714fac1b3dfcef7a6b821bc7b640094e8ac8bed929eb415399d7b7bcd9910584b35b378f38b716ac81a36f821683e10d3becf1a0115782481b077190ba01304ae93479e36dad6dbe2c8180dfbf163c4ddbd7c6a241580b238728521f7015806c71174b371e50c0a3d5f965edbb66c9871d134a66fcbd55", 0xe7}, {&(0x7f0000000300)="c7", 0x1}, {&(0x7f0000000340)="942941676d036456ce2d3b02360fdd33351b9688eaec5e7a432c111fc059fb8ddc46cc18932cb35f81145793872f8e6d584ad3fe507dfa8b8f5ca80baec0a2a203d380e99e1506cf2b19b1032497c2a63e26f95b7812f8d2ce14a4308c1676a06f3beda35ea1011622ad1d3e776c362fc8bb11d7e2d8e0b11aed552f41dbb41f9b1f9e452585a32c51e4295732ff2e5875ec7a550ba5b66e87c41d38ee92c766214d83f67d42e1182dca8adf28cf08b39824db771c8ad65b8b5d961b84c453ded4991a5cd74128fa1c13048c5fc6eaa03801279f125d8efea25edb05908c8de4bdbeb4c69e63be9876467e20bfa9b6f23b6a9175013a5c216e1fd29c16ce7722ecd0ecb905a667578afcdb04183d43efa306fcb9381faabc929302b0872e97ad6ea928bb4a70f9f311e25b527f4101bdda9fa352f134183ab5ac808544d2d93a77b1e034832602eafda528c73720be7f94f985a5c00ae130b422e7dd54b4ec09c0786f9d3364edfd92e8da774ebca7b174e523d5c2884a6bbc1e130d75a5f0a4ac8f86a6740b77dd0ca72dda43346123c489cff50a66c5af21d242d82a2193806d85a528419fff1f2bd13c5a22d8a30bb83c7156c41d1810091d1459e6a2988657d90b7217ceaf32ebece135c717a553964010737ebf829960c94852a8a12741c4689d98eebe78ccfa91d84687ac534324c60c3e8f5c3de883b89a18f777668f8440ef45d139c995d885cc544085518da5cddd27a5f64679af0d44f70b89cefdf1d351e6eeb203186900512e32080d57c3abf6049311133b4c1c05e27bd16171d25a0b14693c6c378a754f557fa9c095a14038fe48ce8dfea853f3298f46ad52a8d660f2a92560af5def241eec32e721255700598a92de302aa4089bd1494984f740feb60175e8cc8013b29b3c031348ee808dd6236e960639b4b3db9ae5d764f644736d0a1135f0c8d3d5676fecc7d2a766e11d3a3a71cd33cf02c87098791347a6dfcff7c5343abe275b8bc61dd2614169b0ed4af780ca20401b22117c374072348635f921ecd47e89217b51d6f99c2d3ebda93da42d009018c9c7d84f137590a8bd898171746ab30e97c3e7ff2bfeb360b80bcfa89555f36ea0501993642527bf2ab569cef1638cb39aa4bdf62a07ff187263437cb1a5764506e1babfeccb167872946851a98a81ca3cc58c31c49ddc64d00d4ec65eda565d126524f6cbac658dfa3ea4af2518fb83580b67d3365058a590991254e1f342609fab4d84df56ca4e124bca8386ef1286f688ddd20623239a93f0eb19af9e780099f66e163d8afacfb411fc265894ab627ceafc59646c5e7cea3377eb41e912b0b1291b5cf6884a16041582273804b60d475085184aedf96a7ba1584130f059d135d131b6c27ef0c80f24f8c2d58c714d1a5e5772a0fbca4129909bbed10ea6c0624b9ce4576622d367ff483cc358d2cd72ec9f7c5bcbb102fe81a799827e88c7677e65808582d8bfd2cfda7fda8041d4a46868bee6fb663733a875ec68512cd5054345e438ef6f9cb06022bc48ab374f8c8e8e0e03119222b701f1a53a2c421ce2333cf3c049ddcba9a147185c375f23b252eb7584717a43b5a034ea29d5253f7a639536d12724aa8c7e4c156c4af4938ed1b35bdca301c152a55cddbed20c1869715a3e44d97e2faffd2d57503a14c856189f2eabdecb33cdfddf8a2501e79f8c0b31a9ab0d43bf6e9358d89a9fd837ce9e5b037d1bdf4b708ea7605863a8bea8189acf9c412ef7217d17410db0040c6d71d444ffb1fe7e9e33938fc80f412429b5442ed797403eae34a2d1af99e17b27d13864b6fecd03f0a239ba0af728d495e2851990a37291d2f646dbd440a6e4532e9b37e2c7eb88ac1dc75a4afac05cf7b5e5a0ff592fec6d2cc962c0e6da4d5057193e81662e2d46ee054fbdd9c3001665dda18394ba4fac38736610ed3bdadfca3368f274a996d7794adc6d4fa50074cbe6509bab31a4f81e6e254db588c0e3385abf3dd03f960dcffafdbbe290fa754991a026f21c7356baf70668409c48ddf6a31edb203d4f3dfec48b32a797262e7b0e6bdb116bc67171ad05a220843fabf3df67fa04b3d35881e739cbddff78e21b233b594869f2973a122d506be99f4685eba1f3c0dcc2e80c97c6df86b19d02db8812cffa80b38f9b59ec237471bd0f250ea99a36132a71261fe3bac24993a5432e2fec0115d21872ca72bfc0046f251bfacf07890dee332b3777cb2e12dbb585e55eb6d38ffbaca5df9de7bc48dabb4f28859bca9a597d09eb9a7067a63c99ed3b71a5a339952c8e2bc9a88fa636edb6e1396d3596b8d053d1f5e599b5a359444bb8eaca337b66b1f9245cae244969dc8acd4b01e3644c6e0ad7777a8a8e03291d92aead6df0f72f8c43a9f2321c88035894b2b815d37547603133ab5c7f7c1ae96368b9ece7f0841720c292cb497919f093dc56542166a65bd6dac85fffa3402ab08e1eae3f51a5975484bf718e4a9677ffdf5b0abc98f318d1005c835311a1c42f7a71ef8cc01564e801f44e07b5a20a34f19b2d4db16e257eed0b13fec940cfb9b6ddf582becafeba8293f918310146ab4acc4c8561c0d323d5687ead87c0ea971135812e6b4a6c4528cf3a7f4d8acae40fb5512d2f4034a7ac28e07290007eff1cdc08488e1fdb9b3452e2ce0ed252f27073a72938664936c0d1643c1972cf72dcdfc769ae172ea6358b7d08d1f47c2d80d652df982d0b431f1d0b1cff4e7c8a267bee519116d0cbbd51c7dbe61d679ff8dcdab3dffd7f491c6df3498166a5dc296c07c20be8ad711f6e853c4ab082dbd71150c3603b61847068923f15606a8c3e0efb4d3fd5cca98b63884338fd006781ceb5bc0f4ca2523715bae7d7db379df2fbce617690f980119ca56149b4c0a04fb8c02c8a84a1968f981b7c82c40de6455d629ebe5e74c89e714bbef1a8a8c9be69b14d03a604c998820cdc34543ca0f4b4bee3bf73ee238ebf07c5337261dd57edf8693b02114cccd96c3c5bd59c9adf8f69e1c9882c581b1ee5f0979ea9193630077a6fad03965d7ee588123c013ff38546c09c02d808f6c4408a571341d7fbe9cdfa94e68efad44866328eb65332010fd2ff8578caf3ff68f8c76b27d31854c0d56b5b7db14132648e61c9218e0d43317207420ac628d9c2a3e000639f1211bf25d815dddd920bd411de8095696da50a8db6745960be3395b2fb1ca02db68e227247bb4aac432316f18b6c5590ae15efbeadeb9b8f4b44693142ea3070e95608ce43a9d7c12c2b6e1c227c331728593b9fb1b1a1a564285be294967357ea3c9a7ec8451a354e90fe71eeff1b5936e86da903f39afa898909105673ab541cfbfe7057d7d744ee7f12131967f7a2dc4e467ab87fa0ea12401ae122de660a8e350cdd1a50ee0719642f1caf3167585ff62bb2c5456d6886295797178959e84c0b400aa7806f25ae707572c84a41ab530c7d183945012cb6ca0ec8b3bd589b62e7533d013fba1f761be0db88c7e927f0f55c09638b3618e59315339d341b13fe80ea5baa6d8c4086f93effbc52d0d57bf1d829d3ef4483131e88dde2d3fdc3e944f8ea26e3809d80db3eb1b14a992a54327c73045e8c166a95ebf1d7a9d4f4898befa39daa6be5acb837b3b3a8900c99565ecada2c5649e09bb1aa66d2fe0eef3aaaff00ec132616cdbb9af8f5010095f837e7be9e11c3c1b11842a9ecff83db049d29b84f95ed319e43f0e831aa494717ca5fe7e7d158568b25735ccd2797f2940f73043d20377aab5c9764e6ec4c50eb97ab9b79c4b6a68bafee0e57d93017c9a879b66b493700083633cb6bc6f9dc00ca24ca1a6f93b46e783ba53bab1e024105e6543c564df890364b238859f27af25134078a6b133b9501d0722770025d20fcd778118ecc7663799d45da355a0783c7abf8ad4694374b3ac856d094a7d165bfd3bdba7d3e585b84bb6b99262fc4f916f76f9eae739ce8d4051dd91eb27e1508e7ce810fcd49cf234cbaf937e138bafef6e6a87093bf6f5c18b31648a21d597b36e0b709e954b5ac8f2bfb3b6cb4fac760735a4cd159ab7fb7b79823b88eb86b7fa3084a54e6d8a3a4affe7dae98cbc24a1554dfe1319ad085db18a294a04fe60e08bfa9fe83c4a747ef8fe54ff12e34c025a6e28460d68ef12ed83dd688ea6960f0b5af1247a5fc9eed29b10f188473ab6c5165d3c00a188ca777c0e2f5db7122fca25e5d13c68191a29cde876d49bbbd65f427698e1371592a8993e72887cf6b84f59185776ab1b101d97fd0f988d3c11ce67a14f6cdfb90279ec38266478e6e2c67d3f505acbd0312987be8b44e7ef918bee6340867233778c33489171736183729be258f7dc35ccd06000ea7db1f6c72059af5615e02c181d60d36622216a86472e8f78dfd6e186a83ecc494f6824f25243b1c07dd928e6328bf24b0ace4ee43f3f7cdad985d310250c377ea0a2b70dd301eb5e9d2c97b4d83f3063a886e60f5803a8c9a694e842e6b243bebfe1ac03a5f088a99356f0d1aee9ed5899b2d35ad38cdf8511b7187e62fd8d3cfc0d227fe017970c45fe7a58bedad8c14b5ad2cfb013e967104fa00be52c108fac03b5809cdfab4e8383ade5fc934d01c7dbdc0fa862ba214eaaad53f17d5e3d3bf326be549ac38102759bf09db0a969aa1018a2d651d7a1d2c01c6fced98a083316c58889bfb87647ee7623fbdb77e29b934d3356f0cdfc53fb347c0d2b5af7b694c3da2a23cf9ba914e36843d095d2fa3b2977e01d11058dafc479cb73115ba29ce0e56aa072042c7c5c5e8ff2abd2a53c9400aa36293788c98fd278a58841ec7a4548df26794b5819e7a0a2002418df3f2faf2edfe67840d1f847585652bc1387f55086614f9fbf681019b760e41946635fa7744495c3f45c49a09565a53cf51fca090fa0a26a4d1d3281f09e7668b3b3f763049566048670396a4089c4657d700c280dbe37031428ad61960e66158e0cf4317b3cb7e798f80296e451826fe513ee266dd0a8b78a3dbd8ad7dee5ece3d202321945bf4dd0dc547e9baea221b0d4d6ddc9239de8436b8a83ebdcf8e7bf45468fae7f80e4ee61089fe1d4524c7e5779ac75cd89bf23698ded053badd364ad4d0333428b4646b424f10040e02e60364ce7ef816c7dd546b24e65f39985d4897fa7629a00cccffcad75d64e7de0ba94de2fef0d86bfb9bc311c15c13709c54dfdb7e4b17f71179de6b800b2fa91dac5f65ff8ce25fc686cea05b82bbc84ed7e1e4c7f15da1f66a0eec84873ba23817b65a1fb361513ad1d428c3c97a0bffb43f3f9488c7b7bf0103d578e281d270b7ab1da64ffe3f3212e3511a980ed6cec637f542bb677dda80c6b8423d9bd16072a009a3203d64b3e89d9b170d1aa1c22c87eb1b33d65ca7e92ac1088650bd1ea1651f249a052053c5b251349647ffd8c839496f1b29aae27f3776faffc5c94eb64d5d36f59be14788c46f5333ed62a285a57220f3ffed859d0cd8f5a6378d9d69b5ba19e06c38dcbd2a4c2b1a9ba8a4e78e91349b7233f3de1a68117effbdc9c9a1209571b1048ab461099514e21197407c82510bd09dabaee283e3770b8ed9e892817ebb45d18960b062a98a695e4dcf43dd66d09c3b3ac3ce6b578c9775f21ce5378fcf119f68bb2ff7ecae4565f60257c0fe8147d9ddd2cffcb21c4d99d2a308cd31fc1c7d395d7b0ef57b240ec563b19d0aa4b7824d519758d67fc3cf0f4e1c405b57b463735c81612f507f3038956d184eed7d7caa7883a6f17260e9f3becd", 0x1000}, {&(0x7f0000001340)="255a7a2d7a114acbefecdcf85e1795687bfa4e88575c5759d1dc9fd6d98aba24538b5bed6d5550d7e0611daa1dfa651001731571c8b133b56b59ecb4e0670c4f2b7f77906176ba55e30506cabe8cd74f75d44a46a1041406153db6b5f2556a246d7af769ac865825e10c7ab21d319b078e80ffea9b3e6026db39aaf60fdb44df2aa6c3d4438cb3d79d5542d9aeb9c6b6a66fa93dccafc166b78d4f62b29ec2d57c987a8fa5e7b5ca9124f4be8a165b612fdcde9f32928c5cd38d500e43e456b1d6ed4275a1e39058c58de9edb17f861849f42ef717c9fc19242541ba24c8b129ec047e081cf1", 0xe6}, {&(0x7f0000001440)="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", 0x1000}, {&(0x7f0000002440)="0e62c8b9007b7cb3a44d6b0623551515c3d39423dcdb7efec1fc5ed64d2438b2088e5c92037879582f4799d3496d9b862788e904928791ba7cc14062d6a50078a51178d087bdcb2b5444ff0d0d6b8e11b395e3f7280894702f5fc841182e0c70b2c54acbe2b3c315c6", 0x69}], 0x6, &(0x7f0000002880)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x60, 0x40000}, 0x4000) r12 = epoll_create(0x420000000) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r2, &(0x7f0000000000)) sendto$unix(r1, &(0x7f00000000c0)='C', 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100)={0xb5f4, 0x0, 0x200, 0x6, 0x6, 0x3, 0xeaa, 0x7ff, 0x6, 0x164, 0x20}, 0xb) epoll_wait(r12, &(0x7f0000000140)=[{}], 0x1, 0x10) 2018/05/19 16:47:06 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x280800, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x1, 0x7, 0x1ff, 0x8, "2dc210caef7321d530e023a33d80aabf7219304f3dcf6a5324dd4880cd86c1a3"}) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58e116bb", @ANYRES16=r1, @ANYBLOB="040028bd7000fddbdf2503000000440001000800050000000000080001000a00000014000300e000000100000000000000000000000008000500040000000c0007003900000003000000080004004e230000"], 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bridge0\x00'}) 2018/05/19 16:47:06 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x3f00, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:06 executing program 1: bind$alg(0xffffffffffffffff, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300), 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007400)=[{{&(0x7f0000001840)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000001ac0), 0x0, &(0x7f0000001b00)}}, {{&(0x7f0000001d00)=@hci={0x1f}, 0x80, &(0x7f0000001e80), 0x0, &(0x7f0000001ec0)=[{0x10, 0x117, 0x3}], 0x10}}], 0x2, 0x0) 2018/05/19 16:47:06 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) accept4$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14, 0x800) connect$packet(r0, &(0x7f00000000c0)={0x11, 0xb, r2, 0x1, 0xfd, 0x6}, 0x14) r3 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="3a44ef5252d9cf3d1f25bf2522d55c233937e4d34ecaba154328e733ace74ada8552bdee31e8ce259fe4c87dfe", 0x2d, 0xfffffffffffffffc) keyctl$update(0x2, r3, &(0x7f00000002c0)="95461da2061a204be3b3dff5b07c20f56888f9c0eb850fea1ddfe3ad7abbd2dfd5df48cf3af433d96493c80d2cc3be16d97a8b9ecf6b8ea54e95954f49e90679ba1d1c7905aa7a531aec6b67aaac06058d18ac1788da1c3116b9d5358e9c2b2750efb6b24261b70cf5bc69c9fea86a6c3d26c93ebe5d8e01585b66fb0d2ac77df91ca10966f1e0", 0x87) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vga_arbiter\x00', 0x2000, 0x0) write$eventfd(r4, &(0x7f00000003c0)=0x40, 0x8) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r5, r1, 0x0) 2018/05/19 16:47:06 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x400000000000004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_tcp_TLS_RX(r1, 0x6, 0x2, &(0x7f0000000140)={0x303, 0x33}, 0x4) bind$inet6(r0, &(0x7f0000cb8fe4)={0xa, 0x4e20, 0x100000001, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000180)=0x7f, 0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000040)={0x0, 0x16, "eb902a2353ebc3a992c2c54408bfe4af9c07764e1e05"}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={r2, 0x2}, &(0x7f0000000100)=0x8) r3 = socket$inet6(0xa, 0x801, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) 2018/05/19 16:47:06 executing program 5: r0 = socket(0xa, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00') ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x133000, 0x0) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000100)={0x9f86dbf091b389d, 0x1000, &(0x7f0000000280)="fe475ad6073b7907c11137cf1b876d288619e3f44d772067375061d73085f44d313f1ce6299bd10028ffcee04e0bb6f90fb7142c82d898973d30c559c6f32e772a6ae551930f3d08648039b08450d60727185f8d7c0747f8330e7924cae2dbd4bfa3d948bd9bdf7bfcc5e039f199eb364fe99a24287a35def904b3e434fdba500d29e63606c0f9f21a70f39014e3f2f6864e3faaae12fc9d0544288b34cc61004bbddbfe5bd4e4821afad15f8b280a9c25776057687da0e9be86b1dcfa1eff33d400ebb6ac41e7fd3ae17571c41e4bee20d5b934d5aa86c77642a3bcd46f6e96729129296c663356608ebe91c039d1a4277d810a23ed6d78e45a149308c950b8434780151452ef862b85e8c19633740188488687ec01a32899e3e7f2b854184ed7b6b3d11cf5253102ab86c77a41c8377dbe1e3ba079f77bdc401408389bf238153e86d18944060a37c9e620de45e667e4edbd0c0c1d732f6b8a3f5657c74ad02c3d5f752afabbbd0b1a9429f54f12d9daf7fde8dddcb1fabf32bed7453e94d93ab19fa2f6a5ea2ac68d8fc1c9e799cbb14f6ae94298231208db26036711ed47cb87f079cc3ecb92075325afa7f3fb55c8e32907a4f13bd1add27927f891067d913ffe4491e95e79afc57a99d249255b3e72431a64ac8d9f65b7127c6497a0d72f97a78907b0d5ff6b50a2da94e0c534958fc5a3a509d0ae1e6d7d5ce07e5f1bc1475de00100f7e2ecedd66a6196022016c2a3bedaed5611909d67d56eb155e8721f20d522179feda810a601ab0a1e3f334b8d98f5c54aaedc13594ee1031d8ea0346496efd6daa8d619cd5e7790adddb053ca538f9ba0c47f1c98a5474159e5ae3fc4c54886243441a2595bddc5f0d1e90f31aced4a61f30e6df2c4aeea9d4418f6dd2684aeddd9f98d130ce3fb37a3904edd227b8f3d285b8be656b5f85ec43596a0fdf97fa18793428caa543d18145f2b156d801336fea08178f09182c7baf9a12ce6a3846d38968e0b6bc0e3c856662b6326bfc6c7577d62a9af968c9a338524a84ada5d9fa80f5947265f568d26266f42559b034dda4394dbd7a7f6e110f2718d2178898ceba8f0cc0884eb1b8493229ec65ea2e9b6689ecad08860cad721017850ffc2eb90f2060e2bf3b99f75be2c53f67fa9de16304bcd7a7119a090d05c74faff281baa3d9aa41a87b3a7440c223e88835c4fbf02ebacd527c748f0253168dea57e21cb4967de2fd9bc42e22e35c6b1c6ebafbe18289512b0f514c8889de04ea1137c649e94356c0677211a0337327d9f7b2ab91a0d964ba7d5344de2161f6666819974f242abc59b9c5f43b2f3a3ac1a6cae0d11d298e4719e0d4452bea03f673cd0421935aa6e40a45ba2b2f68a09c3547e2c6a556650a954bd020706ce5accaaf18ee40c24739630584b82ef0eeae2fd70a884365cae384d9d59ae17e80e946796552d694383cba34baaf41b783212b45b3abd2217c49a8b68acc391672fafbd1b987ce3379c19adbb0849641cddfd8d615047058272c29491cf0d65b65aa655a84a66d326615a374e361f96001a03cfd73a17baf68599e6cf698c69033f887b3e3cacd8550d6c29e85fb2c9ef43ccfc8fb169b13d4ce02ea4b5014e0ae9c866d857cfbe2a401cce3547131536d614ebc15877f8e3176f2405c14e68cd21547a2400d3e76b0edb55b3e4a0ac6aaf01074619918ae7f307f5810e8377b8eb333fa1efaf6b2e75aa6270f754846b8e89c82fdeb00bf95958dee874998f1c0fb8a12e78b97e61494ce1f74d51e5284aea09d24d19cb62d96cf5f58de222ec076a848403ea10e0b0ec5061fd84c3856822ca6637d7a659d505935d444c21021bb67fecf1c8c98ed8a862e2cfd827b826f6761598fb2692ce29b3e0402cf2aef63b9c3571a98f2be1c950bab83e4fbb515ef42fecde42aacd573c4740a7adb778a48fbb802ae3c37b70b46b628c2b2f62e27231a6db76a8de6e36000a612b1aee05b78c82b778dc300680a362e254458a92a77c09a29c389c5abd5e06a3881035ff2f96fff31c126bca176912e48df0517ea43926ec7fbd93d62446d816098b102d23d38f816fbac0af4ad7af444a287ed6e2fdb918457ede6bbe2af89435d30da1062ccd73e57700d079f8ebabcc0dbc8ae25a488550c9091f802eda64704c8fcc847ec48fc591fe76cc39a78186ce0773189196d682f5524ff995b4bc2503eca4f30d7f6c81149a796135103bd72ac57035ac57472e1a372c6565ead6a78284d1e805faa51f9929ff81ff62303adc91f4ab45b9a7063e642e67a969d0265e4fb9f54a5d5521c57570a2e63c5b20dfca2dffca78a242a85e07d9602ff4f35bdf1ffd0bae891312c28c2a3e4a6f7d09177c6708d4873aeb9fc5984fb0c898afebdf3bf1e2dcc8fd93d3a8f37e9ca4a31305d66aadbaeaa1ab519a80f57be7cd79ccbce1e6fe428d2abdbe83f9a2054c580cbdd53c41bebb9bee54ffd9fe4e33f0e4af39cc7843869baca0063e0eca0be7f8635ea4c556fce724d63b475378ed6136aee32e30f15ea55fd265cf86cf1f4e96129d0f4f77b998f3f7dabc1e397201471508410204f8a0b4c0f1e93827b38cb5d3d2bd8a66db6c7862d6cf9f57e6e3679fad66d5a978661924b3b6cffef16d8ea3351ec608f9061ff40fe2851d41461679af2fca87b72ab490642e2d558f811a1f2c2103aff7cb08cee7325d5d3c964a1af09241301a50c1e9a93957ac1a5156359606d41ce23b766d6a6b3c1e7344b4b1d8b163b31bb4f080508e0083ea0ee00e27d025879655cf1be89b2b541c47a3c05694917e65115fbdfc0d21ab4aafebfe63bc5ca720fc60bdc9e425bcf45210983f8db41defc11b92b7e22e43d9c69861b9db69b1e0e1580aa6a9c71eff0a178f6252c0d8c1c7ff8ee81fd544ca6c0670d5cfaded8434c9a5ab7bd812df4d7169a21e7e093768e2cba71e0646b749e344ce218780e3645edfb9851e0c345592e2a145a20267abe5714d819bad1370c5c1e833b69fb297e747fe18271b8dbef10c68c4e457066fd2589b90695324b55fa70f86b2c0da07244a45205330423474279f99a21749702d3edf22098723accbf77138c15b6847b626d37fe0da30eb395b2f3c266e46e1bd75d09ba518af68f0f96a80b7a1174a1c99e920b45fd2a3032a6c7cf2ebfd07f8b55744bb0b1e4a466d38f9d739dc6debc0ecf0007c8b6aadf6acedd06f6aad269f0738612ed370b9186cc7c7a0bdb45a6b437f7ade2fb8018a4495a46744b4894c88434d6a3205e1813c1c3c6284136180846407a2bd9628e756d4123b1741f34c9f4d81256bec0b46a6e3dd3aa426bde2a4a56d3a379cf81d1147640d1b8f04651dc84f2af32db8f186679b9fea8c8121b9a1fa890e491fa9ef1824144412694d1785e8476924d08f1bb73b9deff967ac14bac9db556cca68e9118bab608fc715347e4707bcf70846e429ff7d84c2d3030e7e79ef6b8a4c785d47e139c2826b6adda37ed247bf8f6f79f544207465d6cc5855b8e75fc5e19f2934086fcbccdb80c8167644e0edc3304b6f2ce9b605d6dfe8b5a1f7a1696437007a2af18a9d5694fa449d1bcde19f44fd800ab2abe01a910b4456d572882192c9d07ae255ad35aafa440365ec0fc7295a691d3bbc14cf72e7b4976ab1d6c53716ce9aa274e4d05d8da5105252a8948ca3b37c323878ffbc31c40975777b854bd35a01ccfcc0b974c4d3e94601d0fdb1f97af844ef739aab0fe5e64f340bbc1b43473f5d66e91a6a408ee5c4f515b9f5799d05a9480db715c9f098c795db8d73ae9ac17305d2c50ecb1b01812439b0998970926e0fbf6e819a538a7c5c4fdaa98c872c66296a332084a92c8d60314c34ab13e693d0a9ca6a8204bf0c9039cbf8335e4c4b8f46bd715cc1a9dd9cbf6df126dcf4e276f01620a11b46b878551462c9ee87765ae344b502f13dc5a46d60d66fc1d5933841c42a14da1ecd07073cce8023ee50946855ea2cb05d063d62828c128171912d71471ecbafa3d509f03a33a64d541a42b4ca27b6a3bfb6b5f743fe31ed08770f5fa5bd4e8d219bbcff9e41797422e6e05e1807f592f2dde63193f2129afbbf81562cfcf43fb119ff035a41479de23df978bf23ee5c4f1954158cf93780aac470c86a9ecf4830a25b1efc10c98bd91deb3b5a56624a1503b4a02133568bd4669ac3b469b43956381d1d56c2e0ee7eadfe13248c49ea7d7ea914416111282616f2ab8becc17f333bd780da3c4cd0282ba63af6e1ef6a4b293061c8e7b06ffb3c44f6f3d22c269cff4967285602b28755713e054a9ee92203af809cf88cc96c0b382de652347ce1a84ff0e6bd1d50fb9715a4aba1cd92ad668d9776b6c4c44363b56a35ae40e598bdcc1f02abc11af03d5d09f10f3541f384c2cc2086a3d2370b201994b3dd589b611f192e44785bdf931465f49f01eba9ef7c5b439cc28327cec6faef234b4b68646508c35dc28c7d506cb6012641f7a49d29c62cb5ab65d99e51c8eba7d786c700ef1a4da3c8d2221ea84026f744df9a824af0aaa0c345be1195ebf88c1a6cc08d7f39ebf58e5758d0265438793c9d7f58081bcf4f3dd8336d2198bf3371303ab289662f85a851858d000d15cc7ba7432850907553da527970395d4fc0d18832e104bed4778271e3010e0a05beee2da7c138fa00b2c795209614e0bfa09d29657e538a2a2880b82f96756c4e6bfc600942d99c2492d104e4cc41df0e2da68c9e3e9f598faa14110fd3a973dc926fe9c2357c39102987b6fd672e7429932b7cf96cd9d72fe9742a4891ef64ce96a41a1d3fcf80ef9d064eee17d4d88f087a20b9b0f7b92ac3bfb1d3bb371ce51cd4a851a6c6e794d5df341eabc1b4d5ccd5e4cdae8d63fad202007f1c531cf0a14a973c7cf833187e90d049327e4dfe7485667b5782e9312414e52b9e70adf2ed1e0c4aa6be132cfd908917d92753512cb8edb67e5b635d16ed1f162ce6e1bbae90c0498fc7165f67065315f5556aace515ac499e464ca13edfb36f65ac93b4b20ae78ce68126f12a0256d77ec4c373b9f74566c5de8fbce1a045431eaa386c098b1ba70f9395eb3b50a6cf2241005910ea2f9be0c2b3d87162f92f8a0638c0fe98f2b5cf9f67403f1a0f4d54ca9c4508b80ce80c9ca59013db0f0b6ea533bec87c4e80a9ec76d0bbb2e13681bfd5b7031386c26d30b53e0dee01e603bc7f7a5d9a278646476e6fef88031489266cca25016c651ec5c99356f0d0727bb4b3c30a0ec869907bade99da4390b9f35e8cfcdf9e5f95c96267890da70635e9772ed00602e55f7b3c685f4a73bb4f1985fd03e388771afae8171ee8a0eda838f287992245d8be0458818087bc6be68f5d189923458c139aa15b927392871be367b62f0c4af2f948ef1ec64849dc50450a41fcf1eca750b206d1c80825b27fed2fc3cb057779d6fe1addff9bad4b364b6696cde3ac5cd3175c31b948cd534d03057ccd4b72e58eb713707b2c3dc6a68e856f89286cad3ba8d73dfc3b0fe105c5ecf5a343660cd21069d5758a8fca5204f65d45cf2e1cdd433179e5074e277abed0e41b4631cc89b0955470f11d2ce27e2caad20e93965259fd718830098d6bdfc03ff390fc3a1e258d6f21b0ced37a0efde46ef8708344367aa975ec8edcbfa04047e74e71725c8dc86c47edfc8883737277a67201adf4db0dd8945a57bf7eb0d7e7ba4e78a2d389743575023a8b99b3864f44f76f10b1843405a1b09fbe21184e673d32a70d5b96dc2934af8835aef0b34f0e7563f"}) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, "6970365f7674693000000d7d24acf7ff"}}, 0x1e) dup3(r3, r2, 0x0) [ 237.774668] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.780477] binder: 16423:16426 Acquire 1 refcount change on invalid ref 0 ret -22 [ 237.781450] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.788903] binder: 16423:16426 got transaction to invalid handle [ 237.801652] binder: 16423:16426 transaction failed 29201/-22, size 32-16 line 2856 2018/05/19 16:47:06 executing program 7: mkdir(&(0x7f00000000c0)='../file0\x00', 0x0) chdir(&(0x7f0000000780)='./file0\x00') umount2(&(0x7f0000000040)='../file0\x00', 0x8) rmdir(&(0x7f0000000080)='../file0\x00') mknod(&(0x7f0000000100)='./file0\x00', 0xc000, 0x100) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 2018/05/19 16:47:06 executing program 3: creat(&(0x7f00006e9ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f00000000c0)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) 2018/05/19 16:47:06 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000032fe8)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000140)={'security\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x9, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e20, @broadcast=0xffffffff}, {0x2, 0x4e23, @multicast2=0xe0000002}, 0x9, 0x100, 0x3, 0x55b1, 0x7, &(0x7f0000000000)='bridge_slave_0\x00', 0x9, 0x7fff, 0x7f}) shutdown(r0, 0x1) [ 237.923153] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:47:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) creat(&(0x7f0000000000)='./file0\x00', 0x0) 2018/05/19 16:47:07 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffffffffffc}}, {{@in=@multicast1=0xe0000001, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80}, 0x0, 0x1}}, 0xe8) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/05/19 16:47:07 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/route\x00') getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000100)=r1, 0x4) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000140)=',', 0x1}], 0x1, 0x0) fallocate(r2, 0x20, 0x0, 0xfffffeff000) 2018/05/19 16:47:07 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') r1 = gettid() ioctl$SNDRV_TIMER_IOCTL_STOP(r0, 0x54a1) fcntl$setownex(r0, 0xf, &(0x7f0000000000)={0x2, r1}) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) getdents64(r0, &(0x7f0000000200)=""/78, 0x24) getdents(r0, &(0x7f0000000080)=""/188, 0xbc) 2018/05/19 16:47:07 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="c626262c8523bf012cf66f") r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x44, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x7f}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xaf}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3b}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004800) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00') sendfile(r1, r3, &(0x7f0000000040), 0x10000000000443) 2018/05/19 16:47:07 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f00000000c0)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, @remote}, &(0x7f0000000180)=0x10, 0x800) ftruncate(r0, 0xffff) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000200)={0x5, 0x72b, 0x7ff, 0x10000, 0x8}) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x1000, 0x404002) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) 2018/05/19 16:47:07 executing program 5: syz_emit_ethernet(0x81, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x21}, [], {@mpls_uc={0x8847, {[{0x2, 0x583b, 0x5, 0x6}, {0x0, 0x2, 0x10000, 0x7fffffff}, {0x3, 0x54b, 0x8, 0x6}, {0x401, 0x2, 0x7, 0x6}], @llc={@snap={0xab, 0xaa, "129f", "e01633", 0x0, "420cb845f8cf3e87e8e9cd2a185cddd4aea7c23d08b221b937664a3ffe6e8bd0bc0792fbaa84557d1a93b280c5cc44b7b185158ea76126bb20cc1248b9051d58d8a47d104da9f3012b99482195236e4efb6f0318e08287c62ddd"}}}}}}, &(0x7f00000000c0)={0x1, 0x2, [0xac5, 0x6d4, 0xdda, 0x99]}) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x8, 0x800) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000140)) syz_emit_ethernet(0x6e, &(0x7f0000101000)=ANY=[@ANYBLOB="cd390b081bf20180c200000086dd6002290f00383a0000000000000000000000ffff00000000ff0200000000000000000000000000f30f00907800000000609433df00003200ff020000000000080000000000000001fe800000000000000000000000000000802a08000000006b"], 0x0) 2018/05/19 16:47:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:07 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x7fffdff60, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:07 executing program 6: r0 = socket(0x8000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000040)=0xc5, 0x8) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x460080, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x100, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x8) dup3(r3, r1, 0x80000) [ 238.814730] binder: 16495:16507 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:47:07 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000499000/0x3000)=nil, 0x3000, 0x4000080000000002) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x2, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_buf(r0, 0x0, 0x9, &(0x7f0000000080)=""/217, &(0x7f0000000180)=0xd9) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, &(0x7f000016e000), 0x5, 0x80) 2018/05/19 16:47:07 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x75, &(0x7f0000000280), 0x130) close(r2) close(r1) 2018/05/19 16:47:07 executing program 6: r0 = socket(0xa, 0x1, 0x0) read(r0, &(0x7f0000000280)=""/4096, 0x1000) r1 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000100), &(0x7f00000001c0)) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001280)={r1, r2, r3}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163880) r5 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$sock_proto_private(r0, 0x89e1, &(0x7f00000012c0)="8ba342f45238b049d51a03c325b42cf89a715403fd07a8a43e95b9f0a92cca758509a2d0bc57db7010b6186d58cf87aaf69167b0de66d3978eb20368d73f5ebc8a4fb329df23d2a41f144c16500de42ef13e82d8fbd58122f128e4") dup3(r5, r4, 0x0) getresgid(&(0x7f0000001340), &(0x7f0000001380), &(0x7f00000013c0)) 2018/05/19 16:47:07 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='wchan\x00') r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x9df, 0x40) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000180)="640f2187c4c299388e00000100360f21020f09c4c1fd5bf10f21c8650f01d10f09b82c0000000f23c80f21f8350000c0000f23f866ba420066ed", 0x3a}], 0x1, 0x20, &(0x7f0000000200)=[@cr0={0x0, 0x60000000}], 0x1) ioctl(r0, 0x8912, &(0x7f00000000c0)="c626262c8523bf012cf66f") r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) connect$inet6(r3, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) recvfrom$inet6(r3, &(0x7f0000000000)=""/105, 0x69, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, 0x1c) write(r3, &(0x7f00000002c0)="a5", 0x1) 2018/05/19 16:47:07 executing program 5: r0 = epoll_create1(0x0) r1 = fcntl$dupfd(r0, 0x0, r0) close(r1) close(r1) 2018/05/19 16:47:07 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:08 executing program 5: r0 = mq_open(&(0x7f00000009c0)='.mime_type){[\x00', 0x0, 0x0, &(0x7f0000000a00)) mq_timedsend(r0, &(0x7f0000000000)="160b07588fbc38cb5150d1b9c59aa92544cb662385b3dfc42b143510791cd6593cea6ec356948a8672a8442b59355010e55996786ca3c731a3aa4c6fb57642181319d6dbdf4192c9d038ac43a80a99a40adce6395887db2db7aa5c9911706aaec4458dabc429a4854eedae0f64d16f4ff4cc01fdd4a3cdab1e7701205712b340b23001c9f446a6365835134c95ebf70b4c23e9315e8ba6ed210f9f1b78c99c84deeca9f1a46332364293181adc60556bf5f9e89701485a3933e9af5211276855f485b0620de05e9d74", 0xc9, 0x1, 0x0) 2018/05/19 16:47:08 executing program 4: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) r2 = inotify_init1(0x80800) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000300)={0x0, 0x0}) tkill(r3, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/19 16:47:08 executing program 6: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:08 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000346fc8)=@framed={{0x18}, [], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0xfb, &(0x7f0000000080)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000005780)) r2 = dup3(r1, r0, 0x93513bfb5c11a285) getsockopt$inet6_buf(r2, 0x29, 0xf7, &(0x7f0000000200)=""/146, &(0x7f0000000180)=0x92) r3 = socket$inet6(0xa, 0x1, 0x9) dup3(r3, r1, 0x80000) [ 239.073122] binder: 16538:16539 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:47:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)=""/250) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x480800, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000040)={0x8, 0x0, [{0x80000001, 0xaa00, 0x380000000000000, 0x4, 0x8}, {0x40000000, 0x40, 0x3, 0x8001, 0x4}, {0x80000008, 0x9484, 0x847f, 0x3, 0xdb}, {0xc0000007, 0x6, 0x2, 0x34bb4299, 0x8dca}, {0x80000001, 0x3f, 0x480000000000, 0xfffffffffffffc01, 0xf58}, {0x80000001, 0x80, 0xca, 0xa959, 0x2}, {0xc0000005, 0xbc6, 0xfff, 0x800, 0x100000000}, {0xc0000004, 0x9, 0x18, 0x7ed7be68, 0xaa}]}) 2018/05/19 16:47:08 executing program 4: ioprio_set$pid(0x0, 0x0, 0x80000001) gettid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) r2 = getpgrp(r1) wait4(r2, &(0x7f0000000000), 0x40000000, &(0x7f0000000040)) 2018/05/19 16:47:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f00000000c0)=[@acquire={0x40046305}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x9) dup3(r2, r1, 0x0) [ 239.329201] binder: 16570:16573 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:47:08 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$2(0x2, 0x4b2, &(0x7f0000000040)=""/50) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) 2018/05/19 16:47:08 executing program 6: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r1, 0x17}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) 2018/05/19 16:47:08 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x60fffdff07000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:08 executing program 3: r0 = socket(0xa, 0x800, 0x0) syz_open_dev$urandom(&(0x7f0000000140)='/dev/urandom\x00', 0x0, 0x193000) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x713302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'vcan0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', 0x800}) ioctl(r1, 0x1000008912, &(0x7f0000000080)="c626262c8523bf012cf66f") r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x12}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000001c0)=0x1) dup3(r0, r0, 0x80000) 2018/05/19 16:47:08 executing program 5: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000400)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x7) r1 = open(&(0x7f0000000080)='./file0\x00', 0x40, 0x68) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000100)=""/201) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000440)=ANY=[@ANYBLOB="01cc53ebf0f2e190bbec00431d0000062eb47be226e0aaaaaaaaaa1aaaaaaaaaaa20aaaacbaaaaaa0180c2000800aaaaaaaa1fffb17b2394764aeb9e25eb4eaaaaaaaaaabb"]) r2 = accept(r0, 0x0, &(0x7f0000000000)) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) syz_fuse_mount(&(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x0, r3, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./file0/file0\x00', r1}, 0x10) bind$can_raw(r2, &(0x7f0000000380)={0x1d}, 0x10) r4 = geteuid() syz_fuse_mount(&(0x7f0000000040)='./file0/file0\x00', 0x6002, r4, 0x0, 0x0, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x3) getgroups(0x0, &(0x7f00000003c0)) 2018/05/19 16:47:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14130005000000e8fcffffff00000000006a867b202881067165ea000000000000"], 0x14}, 0x1}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f00000000c0)={{0x800, 0x4}, 'port1\x00', 0x2c, 0x1030, 0x8001, 0x3, 0xb3, 0x4040000000000000, 0x8, 0x0, 0x1, 0xff13}) 2018/05/19 16:47:08 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626267f8523bf012cf66f") r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$BLKROSET(r1, 0x8912, &(0x7f0000000500)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x8, 0x30, 0x4, 0x2}, &(0x7f0000000080)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x1}, &(0x7f0000000100)=0x8) 2018/05/19 16:47:08 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 239.921114] binder: 16598:16600 got transaction to invalid handle [ 239.927523] binder: 16598:16600 transaction failed 29201/-22, size 32-16 line 2856 [ 239.958045] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:47:09 executing program 1: r0 = socket$inet6(0x10, 0x3, 0x2) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000018007f5300fe01b2a4a280930a06000000a84308910000003900090035000c00060000001900150000000000000000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x10000000000000b2, &(0x7f0000000400)}, 0x0) 2018/05/19 16:47:09 executing program 7: io_setup(0x8, &(0x7f0000000100)) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @rand_addr}}, &(0x7f0000000080)=0x80, 0x80000) setsockopt$inet6_dccp_int(r0, 0x21, 0xb, &(0x7f00000000c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) r1 = add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$clear(0x7, r1) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x252240, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000280), 0x4) 2018/05/19 16:47:09 executing program 4: r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0x3, 0x6, 0x80, @buffer={0x4, 0x4, &(0x7f0000000040)=""/4}, &(0x7f0000000000)="3c1a016b527d", &(0x7f0000000240)=""/41, 0x0, 0x0, 0x0, &(0x7f0000000280)}) 2018/05/19 16:47:09 executing program 3: r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={r1, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x1, 0x2, 0x0, 0x9, 0x4}, &(0x7f00000002c0)=0x98) perf_event_open(&(0x7f0000000080)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000300)='/dev/qat_adf_ctl\x00', 0x0, 0x0) accept4$ax25(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80800) semget(0x2, 0x7, 0x200) 2018/05/19 16:47:09 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:09 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) 2018/05/19 16:47:09 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x40000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:09 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$unix(0x1, 0x5, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r1, &(0x7f0000008880)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008840)={0xffffffff}, 0x13f}}, 0x20) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000040)=0x7) write$rdma_cm(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="03000000000000fa0a00000000000000ff050000000000000000000000000001000000000a00000000000000ff01000000000000000000000000000100000000", @ANYRES32=r2, @ANYBLOB="00000000fe9e340a78da40b4153bc3612d9a953a4dc6b270018f85ae7f9e126cbade8088de2f911b94ee67c2beb428df1ff4fc8fae714579c3c69116c78b33b52c9c6e1b65faac183d89a7a11237dc7152ed9c5f827ace2a5c66bd6c769c4c29feb9bc2d31088402378c7c02a2048915432ae7c4706288a72cb94fc1929c22a9347d289209f3a55cff2f1ff766f12106519c200ebf5632036f597f1d9adb23b02e91e34c"], 0x325) fcntl$setlease(r1, 0x400, 0x1) 2018/05/19 16:47:09 executing program 4: clock_getres(0xffffdffffffffff5, &(0x7f0000000000)) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6b, 0x8200) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x20, 0x7, 0x40, 0x9, 0x80000000}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0xa234b0, 0x8, 0x1ff, 0x400, 0x8}, 0x14) 2018/05/19 16:47:09 executing program 1: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x10000, 0x0) r1 = geteuid() sendmsg$nl_generic(r0, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x5000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)={0x1350, 0x33, 0x773f34b6da1919db, 0x70bd2a, 0x25dfdbfd, {0x14}, [@nested={0x170, 0x19, [@typed={0x8, 0x93, @uid=r1}, @typed={0x8, 0x33, @u32=0x3}, @generic="dd68e07263829a08ff094a45509bed288d28f693db21d332b371b5938be02753deb332c67eb66d2b1353c8ef6159b66d81b12a3fc94eec02636ef58f9b35b717e4183e192e771cd6d7f9f6eab46431fc5da78e950e39c9a59e5634da5a4aff0561a2d9e4b226a626ed8821d825dcb824129bd1f7b7127c54c527f606c53ed0721cdde29ecd31e7908bf4d13bb6085bc816ab97c1acb55288a788047a2c24f58e0c30a38863bbcff3114f34afd2c72819f5da03b3cbb1d01f0baca148a41094553e666415a8f02e810c3c8f7469d839b3f840af988f4040502cb2b13d194d1e97", @typed={0xc, 0x93, @u64=0xe231}, @generic="131bc98249a838396e38e4e6a735d43168e104f87014dac99ba4c705dfe195f3609df49799a0ebd3dc5c95934d0c3feaef97269fc7edfeedc99961b7275393a044103d078a1775fcdff3ac5d97855dcd09bbad495e97b4f74a85825ec9826a935f42af7e8d3c", @typed={0x8, 0x31, @u32=0x81}]}, @typed={0xc, 0x8c, @str='wlan1\x00'}, @generic="18efde8fc70f95c71cd3f69c2c7861380cfd210be806cee15e4dc4af652dacceb6664f356cb286ccc5a399c6543841a09709a9bcef74ae9f3ac45565c4a9474b2079d89c7d2c68a9e2dbaa71a03407181b401c7a", @typed={0x4, 0x6a}, @nested={0x1168, 0x2b, [@typed={0x8, 0x88, @ipv4=@rand_addr=0xce0}, @generic="ef40a6fb492cfad63a4777210ce4a1fd2bc0d47e4e60339ef4fc1b5a3298ca649cd598aab5715a175523891bfe25be22c95c625042ef79541004e5d9e43f860bde56b4c03e06513e046021e50014b05a7bd7f28f4640ce6c8e1b5d9cac0f623c3163ddf7e1dcb87d9786070fc11007e51770e295d5a9950e43eb0ae3b299d20af2b571d01bcd847f2c2a6abc9e1bc19aa008cf905d81ca8042ec2bc7ad1850f0156024177eeab73547bb9a1a91ddcb130dddcb7aeb4f", @generic="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", @generic="fbf3154a1569889c44f40710bde72c44c737716e559f5e36a4f8af961479f7e7f38f53146dbe991e0646968680b5df207db1b2e59dcf4dd9c4847201300980bd2935dabeb6effc966b77667f52823dad7b58edc285bfc293d803e3b3a71db0ab833e24dca42098458b231938febcb117f1ee5fdd13738adb65227484bca87b8dd0025ee87e34ff01f6f2b4a8930ca7c7b7b785eb67e2a68180ecb76ba216dcfbeb8ef34537"]}]}, 0x1350}, 0x1, 0x0, 0x0, 0x8000}, 0x8001) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0xca41, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000001800)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = getpid() getpgrp(r4) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000000)=@broute={'%route\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=ANY=[@ANYBLOB="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"]}, 0x230) ioctl$sock_inet_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000280)) [ 240.907068] binder: 16629:16634 got transaction to invalid handle [ 240.913483] binder: 16629:16634 transaction failed 29201/-22, size 32-16 line 2856 [ 240.946680] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/19 16:47:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000080)=""/165) sendmsg$nl_route(r0, &(0x7f00000018c0)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x34, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x14, 0x2b, [@nested={0x10, 0x4, [@typed={0xc, 0x0, @fd}]}]}]}, 0x34}, 0x1}, 0x0) 2018/05/19 16:47:09 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0xa, 0x2, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000380)={r2, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23}, 0x10) getgid() syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x4, 0x20c400) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fc, &(0x7f0000e68000)={0x2, 0x4e24}, 0xfffffffffffffcdc) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000180)={{0x2, 0x4e24, @loopback=0x7f000001}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x20, {0x2, 0x4e23, @loopback=0x7f000001}, 'team0\x00'}) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={r3, r4+30000000}, &(0x7f00000000c0), 0x8) setsockopt$inet_tcp_int(r0, 0x6, 0x17, &(0x7f0000000040), 0x4) dup(r1) 2018/05/19 16:47:10 executing program 7: setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000000)={0x1, "7457526c3000100000000003004000"}, 0x14) add_key(&(0x7f0000000080)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000000), 0x1b0, 0xffffffffffffffff) r0 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7, 0x1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000380)={0x8, {{0xa, 0x4e24, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x7f}}, {{0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x8799}}}, 0x108) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20004900}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c010000", @ANYRES16=r1, @ANYBLOB="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"], 0x13c}, 0x1, 0x0, 0x0, 0x2404c011}, 0x800) 2018/05/19 16:47:10 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) times(&(0x7f0000000040)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:10 executing program 4: r0 = socket(0x1, 0x1, 0xb3f) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fanotify_init(0x4, 0x1) [ 241.064244] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 241.078576] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/05/19 16:47:10 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 241.127789] netlink: 'syz-executor5': attribute type 4 has an invalid length. 2018/05/19 16:47:10 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x4e20, 0x0, @empty, 0x80000000}}, 0x7, 0x9, 0x9, "11008d7060900924415d6285b51bb6fb8ff013060000000000000028ea3e93a0cd770900000000000000b143f224caa7f02d05c4110cc867762a01000080000000003a9a1021338eadf89308212222ce"}, 0xffffffffffffff1c) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x7, 0x800) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000001200)=""/145, &(0x7f0000000100)=0x91) 2018/05/19 16:47:10 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00006dbffc), 0x4) socketpair(0x1a, 0x6, 0x8, &(0x7f0000000000)={0xffffffffffffffff}) openat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f00004b3fff), 0xfe31, 0x0, &(0x7f00002b4000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) [ 241.178389] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 241.217426] binder: 16679:16681 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:47:11 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x10000000080004) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000280)={{0x400, 0x7, 0x7, 0x3e, "b94f87fad4050f5714dbc87ae126f4256c42d9404f696118bbee0cdb12cd7bebd3d8f8b350581fea600ab63f", 0x8}, 0x0, 0x0, 0x6, r3, 0x3, 0x3ff, "b4e3fc66a303b0ac50001d043c9899af859d9f0703fc688a3fd53394acaf3ed9f6c4f44586e290e582e3928f5631fc877d0d4b1d553b5b868c5d4a167aeb26e4", &(0x7f00000000c0)='@*selfppp0ppp1[)ppp0:{\x00', 0x17, [], [0x401, 0x9, 0x0, 0x7]}) 2018/05/19 16:47:11 executing program 1: syz_emit_ethernet(0x2d, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty, [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0xf401, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x80000000, {[@timestamp={0x44, 0x4}]}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000002c0)={0x1, 0x1}) syz_emit_ethernet(0xef, &(0x7f0000000040)={@random="71a9c40a5547", @random="4ca1c3c8db63", [], {@llc={0x4, {@llc={0xfe, 0xf9, '9', "f9e5ec37d4d985dcb9fd6062bc32f771caf429f7b6292523be2bc8441839027d334820b443123f60ec7252a968e892e8faca1d2931793f70ff8e36e1886ee8797801bc35df00592881b012eb94bf78eab74afc381f4f5802d55301b9bdfa2f09637b701daed505cc3c61fc26ee7cc2802bd90785cab99a635da6da63222a2e9feb523bb347b1a9be246fab6d3fe75b6351401beeecdb3a9bd633123543c529b3225547b97f302e0a3a8610c55446b95e803b26985cc7642b4fd2881434ee21cdb183d07e7a27d33859ff9015207c7fc64ed362c6b5d76c7c0c456e140888"}}}}}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x6, 0x406800) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) 2018/05/19 16:47:11 executing program 5: r0 = userfaultfd(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x2000000d}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0xffffffffffffff9c, 0x1, 0x1, 0x4791, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) sendmsg$netlink(r1, &(0x7f0000000300)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x800000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="10c49b9de43ee7a6d98a98134885894dea360000002900200727bd7000fbdbdf25"], 0x10}], 0x1, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x38, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0x50, 0x40800}, 0x4000) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x115100, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000040)={0x0}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000003c0)={0x0, 0x201, 0x7ff, 0xffffffffffffffff, r3}, &(0x7f0000000400)=0x10) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x112, r2, 0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000140)=[{}], 0x1, 0x0, &(0x7f0000000180), 0x8) epoll_wait(0xffffffffffffffff, &(0x7f0000000100)=[{}], 0x2d4, 0x0) 2018/05/19 16:47:11 executing program 4: r0 = socket(0xa, 0x1, 0x0) recvfrom$unix(r0, &(0x7f0000000080)=""/250, 0xfa, 0x40, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001880)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000040), 0x0) sendmsg$rds(r2, &(0x7f0000000e00)={&(0x7f00000003c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000000780)=[{&(0x7f0000000400)=""/230, 0xe6}, {&(0x7f0000000540)=""/55, 0x37}, {&(0x7f0000000580)=""/99, 0x63}, {&(0x7f0000000600)=""/98, 0x62}, {&(0x7f0000000680)=""/194, 0xc2}], 0x5, &(0x7f0000000cc0)}, 0x0) 2018/05/19 16:47:11 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") userfaultfd(0x80800) r1 = socket$inet(0x2, 0x4000000000000001, 0x18) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x1, 0x2, 0x3, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) fcntl$setlease(r1, 0x400, 0x0) sendto$inet(r0, &(0x7f0000000400)="8a06c3168e1441ec996c", 0xa, 0x20000001, &(0x7f0000000440)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = open(&(0x7f0000000480)='./file0\x00', 0x40000, 0x100) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000540)={r1, r0, 0x8, 0xff, &(0x7f00000004c0)="b4ae6d52bf3ced4d1eb6f8a3a95f1ee16da456e48830c64d9ba2f6396264374387e51ffccce6bdfd338e279e9f236e5b7e7732fad395079819f32aa32f4029f927ad42a6e03fe6fe20a219e71e10db2ca511bb11ff59c831396c39f3ba70494c81b18ad3ebf6f5a4fe9916", 0x7, 0x18, 0x7, 0xaad5, 0x1, 0xe22, 0x1, "c6bd424d80f256c1dcd2902b9a3bbc0d40497f305239f85bd5ea727958c56dd4a3c21ab1e31620cea6f420562a9f120057838118f45e25f27e1c579f6272d052a14ae0466e5d5e9be9b96150223ee9f566ead1e32fb306ca8cc4db35b299970bf9fe703bfc375978116739edab45d19b39e48d88f75a24b53975b419ad1110f207dbf2e9dd0fca75a58b5c141ce7b29335101051c3a34d2d4da2282d72149762eef1b164c77393ebaf"}) setsockopt$sock_int(r1, 0x1, 0x1d, &(0x7f0000000180)=0x10000, 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000380)={0x0, @remote, @remote}, &(0x7f00000003c0)=0xc) sendto$inet(r1, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x146c3, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000000c0)={0x4, 0x3}) write$binfmt_elf64(r1, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) 2018/05/19 16:47:11 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0xfde5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0x0, 0x0, 0x10301, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) delete_module(&(0x7f0000000100)='/dev/audio#\x00', 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x240000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)={@any=0xffffffff}) 2018/05/19 16:47:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:11 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x4000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:11 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)={0x1}) unshare(0x400) fcntl$lock(r1, 0x7, &(0x7f0000010000)) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000140)=[{0x2, 0x719c}, {0x3, 0x101}, {0x8, 0x3f85}, {0x8, 0x561}, {0xe, 0x7}], 0x5) r3 = dup3(r0, r1, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000040)={@host=0x2}) 2018/05/19 16:47:11 executing program 4: syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x6, 0x400) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f0000000000)=0xff5, 0x4) fcntl$setpipe(r0, 0x407, 0x35) write$cgroup_type(r1, &(0x7f0000000040)='threaded\x00', 0xfd87) lseek(r0, 0x0, 0x4) getrusage(0xff7fffffbfffffff, &(0x7f0000000100)) fallocate(r1, 0x0, 0x0, 0x26b4) fallocate(r1, 0x3, 0x5e00, 0x2cbd) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x7f}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)={r2, 0xf, "40fc09b6c3b3152e568c0c14e18e8b"}, &(0x7f0000000280)=0x17) sync_file_range(r1, 0x2000, 0x0, 0x2) [ 242.081988] binder: 16705:16713 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:47:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xa, 0x1ff, 0xfcd6, 0x3f}, 0x2c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x8001, 0x1, 0x3}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in6={{0xa, 0x4e21, 0x80, @remote={0xfe, 0x80, [], 0xbb}, 0x800}}, 0x52, 0x4f10, 0x800, 0x2, 0x8}, &(0x7f0000000180)=0x98) 2018/05/19 16:47:11 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x1) getsockopt(r0, 0x3ff, 0x1, &(0x7f0000000080)=""/191, &(0x7f0000000000)=0xbf) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000380)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x10) flistxattr(r1, &(0x7f0000000280)=""/201, 0xc9) accept4$alg(r3, 0x0, 0x0, 0x80000) dup3(r3, r2, 0x0) 2018/05/19 16:47:11 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:11 executing program 7: r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000000)=@fragment={0x3a, 0x0, 0x6, 0x7, 0x0, 0xb15d, 0x67}, 0x3b0) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000001480)}, 0x0) 2018/05/19 16:47:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x5, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000000)="4f8f2539b8c2c9451ae21989a19a861d99a90222c678093a10", &(0x7f0000000080)="d452d6dc5d009db8594ca64f14161a57eadbf6f8f4d27df84faccdc4a595b00494a8fa05ef20f1a5e6a7ae20841c1b9482078d5bbe0f392fac82ea3f0cd5124f1950a3a726a75c44e5c9a59b893363"}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200), &(0x7f0000000240), 0x2}, 0x20) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x48000, 0x0) sendmsg$key(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="021801021900000029bd7000fcdbdf250800120002000000bf6b6e0007000000060032007c0000000900000000000000ac1414bb00000000009c74be0ba6df580000000000000000000000000000000000000000000000010000004e210000010014000700000002000b00190000000600000000000000010016004e20000005005a92818a1a007f000001000000000000000000000000ff0100000000000000000000000000010200141005001a00ac14140b0000004e0e434759c11eea531f18e8000000000000"], 0xc8}, 0x1}, 0x0) 2018/05/19 16:47:11 executing program 5: eventfd2(0x4, 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)=@ipv6_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0xa, 0x37da}, [@IFA_LOCAL={0x14, 0x2, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}]}, 0x2c}, 0x1}, 0x0) 2018/05/19 16:47:11 executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00001dcf48)=ANY=[@ANYBLOB="02030009160000000000000000000000040003000000000000000000000000000000000000000000000000000000000005000600000000000a0000000000000000000000000000000000000000000000000000000000000004000400007a00000000000000000000000000000000000000000000000000000200010000002c44cd824c98d7cf0000000000000000fff305000500000000000a00000000000000fe8000000000000000000000000000ff"], 0xb0}, 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) utimensat(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{0x77359400}, {0x0, 0x7530}}, 0x8c7091face9e8155) [ 242.332555] binder: 16751:16752 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 2018/05/19 16:47:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x2, &(0x7f0000000040)="c626262c852318d6238e02000000fc46666f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:12 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0xd85, 0x4) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000140)={0x7, 0x7, 0x8, 0x2, 0x1, 0x5c4}) futex(&(0x7f000000cffc), 0x5, 0x0, &(0x7f0000000040)={0xfffffffffffffffc, 0x100000000000000}, &(0x7f0000000080), 0x0) 2018/05/19 16:47:12 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x3f00000000000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:12 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup(r0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x10001, 0xfff, 0x1f}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r3 = request_key(&(0x7f0000000080)='syzkaller\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='vmnet0\x00', 0xfffffffffffffffb) keyctl$unlink(0x9, r2, r3) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0x6, 0x6, 0x80, 0x80000001}, 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) r4 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r5 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r6 = dup2(r5, r4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f000002b000)={0x0, 0x0, 0x0, 'queue1\x00'}) 2018/05/19 16:47:12 executing program 7: pipe2(&(0x7f0000000100), 0x80000) r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000085dff0)='/dev/sequencer2\x00', 0x200000, 0x0) r2 = getpgrp(0xffffffffffffffff) fcntl$setown(r0, 0x8, r2) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f00000001c0)={0x6}, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = dup2(r0, r1) delete_module(&(0x7f0000000000)='\x00', 0xa00) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) 2018/05/19 16:47:12 executing program 4: r0 = userfaultfd(0x10000000000000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/248, 0xf8}, {&(0x7f0000000140)=""/157, 0x9d}], 0x2, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000240)='/dev/amidi#\x00', 0x80007fff, 0x0) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f0000000280)) ioctl(r0, 0x0, &(0x7f0000000040)) 2018/05/19 16:47:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:12 executing program 3: semctl$GETZCNT(0x0, 0xfffffffffffffffe, 0xf, &(0x7f0000000040)=""/61) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) ptrace$setregset(0x4205, r0, 0x3, &(0x7f00000001c0)={&(0x7f00000000c0)="f886f4bf7c56d99d535eade7cdd6a9a0b6cfc99a9f706bdf330e482c5a3c4d402f8e14606b604d220ee06087c7b1dc4e27c0e719c3150e637b41dcbcc2fe8e9bc9f4cab24f9424e9b0064bc5cf3f12b0bed1c904346e852de7e01af03715f134f37ec9431e8fb529bfa8070a8dcc61e4aa6c01bca0cd1342eff3a098e770fe19abe21e2212c95132a16d45b6b3f5e991f1460908f3a3f44ced6a18f0423f098e5ec61a47cdb990538dae6cb47ef25aa378deffa2562fa5d1a434e92ce82f0477d7b02638ff8090d9598370b3ea5f1e615284d28d5dd0b0c44e2dc20ed255762100c0a0c5ece704f0dfc30b8bcad6868cc85ba7", 0xf3}) semget$private(0x0, 0x3, 0x8) r1 = socket$inet6(0xa, 0x5, 0x3) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/hwrng\x00', 0x80600, 0x0) accept$netrom(r2, &(0x7f0000000700)=@full, &(0x7f0000000780)=0x48) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0xd}, 0x6, 0x1, 0xff, 0x2, 0xcc07, 0x56, 0x3f}, 0x20) [ 243.283901] binder: 16779:16782 transaction failed 29189/-22, size 32-16 line 2856 2018/05/19 16:47:12 executing program 7: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x800) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SCSI_RESET(r1, 0x2276, 0x7fffffffefe0) 2018/05/19 16:47:12 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x18040, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="62007b38e6e404eb5f63410523e3bc031e26766dc5871616d08d77cb799682f8cccbd70a4ded211b9b2bf101a814448d2f08187c03a2e691ff31ab266262a7cab6bdda8aa74c73346befd6791f46aaf15b14e43f1bb6bc0f6e5014593a964fa0d25f46462ec9efe0aa42ff318b97d635304973183bf5ce945cc1ffcd7ebc23b6abdbc3b90256e4987ca687c37d5b90d54309f58492b62fba4f2357194c74b56dbbfbfe46f49b2ca46e63a02e965e605b20b8627d566f95599001d722c82512085e1b93eb1adb97b27559e5084a5efedf42a663dec52e3df07f", &(0x7f00000000c0)="a74bc934184ebd050fc129f2f249dec425c0fb2f38f51ef1b5c4669f66fa13a73c66c8f483d9c143294227058ab3cc2166cbc946f648f60aa4d6856091b049961adebd9fa28ff08d054be2c3f251ddce3d", 0x1}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000080)={r1, &(0x7f0000000140)="0bada5fd36162a75f7b2baa0594d7d2313e803a5e00397929877bbd5d583df1b6e243797492308d77254e76858a731188704b7fd80c4f80733f04f34a64378e46f36bec19b038e54b001df931de47003482daa13629e7c1798751821cd1d870700000000000072cafce424", &(0x7f0000000440)=""/4096}, 0x18) 2018/05/19 16:47:12 executing program 1: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x6003, 0x0, 0x0, 0x0, 0x0, 0x1000000) r0 = memfd_create(&(0x7f0000000080)='*}/vmnet1][(\x00', 0x2) ioctl$SG_GET_ACCESS_COUNT(r0, 0x2289, &(0x7f0000000140)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000180)={'syzkaller1\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={r0, 0x7, 0x1, 0x100, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}, 0x20) 2018/05/19 16:47:12 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000040)={0xffff, 0xbc, 0xe561, 0x0, 0x9, 0x3}) dup3(r2, r1, 0x0) [ 243.340634] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:12 executing program 3: socket$key(0xf, 0x3, 0x2) 2018/05/19 16:47:12 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3f, &(0x7f00000001c0)=@routing={0x3c, 0x0, 0x0, 0x9756, 0x0, [@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @mcast2={0xff, 0x2, [], 0x1}, @empty, @empty, @local={0xfe, 0x80, [], 0xaa}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @dev={0xfe, 0x80, [], 0xf}]}, 0xffffffffffffffd3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x14, 0x10, "efbde5990aed115d2316955ca3beb1100e7734d00eb1693e89ce2711b48d6944f0d8388190f433e42aae304617d11352e6d8ec4a10a5d621abbc834ee62a40bc", "dab97e87eafd555c0c341dd75d8a3a95fdecebfe243d8807463cafad58f11a8e", [0xbf32, 0x3]}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f00000000c0)=0x1) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x2) 2018/05/19 16:47:12 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x9, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:12 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x250}]}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000002c0)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x100, 0x0, 0xffffffff, 0x100, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x98f, 0x2, 0x1}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x1d}, @empty, @gre_key=0x6, @gre_key=0xffffffff}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, @icmp_id=0x65, @gre_key=0x10000}}}}, {{@ip={@multicast1=0xe0000001, @broadcast=0xffffffff, 0xffffffff, 0xff, 'eql\x00', 'tunl0\x00', {}, {}, 0x2, 0x2, 0x22}, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x400, [0x1, 0x40, 0x7, 0x34a5, 0x7fff, 0xda62], 0xffffffff, 0x1ff, 0x1be}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @multicast2=0xe0000002, @multicast2=0xe0000002, @icmp_id=0x66, @gre_key=0x6}}}}, {{@uncond, 0x0, 0x98, 0xd0}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @dev={0xac, 0x14, 0x14, 0x10}, @dev={0xac, 0x14, 0x14, 0x1e}, @port=0x4e20, @icmp_id=0x67}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4a8) 2018/05/19 16:47:12 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r1, @ANYBLOB="3c0002007738000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000a00000008000400000000"], 0x58}, 0x1}, 0x0) [ 243.594889] binder: 16828:16829 transaction failed 29189/-22, size 32-16 line 2856 [ 243.660970] binder: undelivered TRANSACTION_ERROR: 29189 [ 243.830445] device bridge_slave_1 left promiscuous mode [ 243.836102] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.848639] device bridge_slave_0 left promiscuous mode [ 243.854239] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.887321] team0 (unregistering): Port device team_slave_1 removed [ 243.897661] team0 (unregistering): Port device team_slave_0 removed [ 243.909989] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 243.929647] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 243.957972] bond0 (unregistering): Released all slaves 2018/05/19 16:47:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000001c0)="d179f20600000000001c14b1048c5b1bd2e7fcd330451c64b8614fcff9671a5cf54ab025", 0x24) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x10000, 0x121882) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r3, 0x0) r4 = dup2(r2, r1) sendto$ax25(r4, &(0x7f00000014c0)="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", 0xc41, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000380)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/05/19 16:47:13 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb}, 0xc) getsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000780)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="24000000180011047e865cf32fbd723698280d000000000000000a0000000000000600000000080008002300000078a46d3db21cf3b47fdbb349c3ec8a1d92a4bc376fd1d7ec780004000000000000fa20d0431735"], 0x1}, 0x1}, 0x0) 2018/05/19 16:47:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000280)={0x1000, 0xffffffffffffff80, 0xfffffffffffffffe, 0x0, 0x0, [], [], [], 0x5, 0x19334310}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r2, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r3, 0x80000) 2018/05/19 16:47:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) semget$private(0x0, 0x3, 0x404) r0 = semget$private(0x0, 0x4, 0x0) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000380)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x3f, 0x3f}) 2018/05/19 16:47:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:13 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fremovexattr(r0, &(0x7f0000000000)=@random={'osx.', "5bbe76626f786e65743163707573657473797374656d3a6c6f73656c662a00"}) sendmsg$nl_xfrm(r0, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x32}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) 2018/05/19 16:47:13 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x1000000, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:13 executing program 7: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in6=@dev}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000002600)=0xe8) r1 = socket(0x1d, 0xa, 0x7ff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000100)) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400), 0x0, 0x0) mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f00000001c0), 0x20, 0x2) [ 244.289413] binder: 16852:16857 transaction failed 29189/-22, size 0-16 line 2856 2018/05/19 16:47:13 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'veth0_to_bridge\x00'}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x200100, 0x0) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000100), 0x4) accept4(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80, 0x80000) [ 244.343912] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:13 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x10) 2018/05/19 16:47:13 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') geteuid() r4 = fcntl$getown(r1, 0x9) timer_create(0x4, &(0x7f0000000240)={0x0, 0x38, 0x0, @tid=r4}, &(0x7f00000002c0)) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x12002000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="080b25bd7000ffdbdf25050000001800030014000200627269646765300000000000000000000800050048e20000200003001400020076657468315f746f5f62a669646765000800080070000000"], 0x54}, 0x1, 0x0, 0x0, 0x20040800}, 0x20000000) syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0xc1, 0x40) 2018/05/19 16:47:13 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x40000000004e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, [0x80000001, 0x4, 0x101, 0x1000]}) 2018/05/19 16:47:13 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)={0x4}, 0x8) r1 = getuid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, &(0x7f0000000340)=0xc) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001780)=@broute={'broute\x00', 0x20, 0x7, 0x1330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000100), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{{{0x11, 0x10, 0xfbfb, 'team0\x00', 'tunl0\x00', 'bridge0\x00', 'ip6gretap0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0x0, 0xff, 0x0, 0x0, 0x0, 0xff], 0xa0, 0xd8, 0x108, [@cgroup0={'cgroup\x00', 0x8, {{0x77d7, 0x1}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0x2}}}}, {{{0x0, 0x8, 0x22eb, 'veth1_to_bridge\x00', 'bond_slave_0\x00', 'veth0_to_bond\x00', 'syz_tun\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x13}, [0xff, 0x0, 0xff, 0xff, 0xff], 0x70, 0xa0, 0xd0}, [@common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffd}}]}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffe}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x2, [{{{0xd, 0x4c, 0xf005, 'bridge_slave_1\x00', 'lo\x00', 'ip6_vti0\x00', 'bridge0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x16}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xe8}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x8, 0x80000001, 0xffffffff0000, 0x1, 0x0, "aebb5d6beaca0aee74c318b3fa7818489eba99444fcb1c84156a88fa3412dd8190a0edc46c175ff8c8f05c5d6ee9e4f529a4fafaf10a7870c42afc3fe58a9240"}}}}, {{{0x0, 0x5a, 0x9318, 'ip6gretap0\x00', 'veth0_to_bond\x00', 'teql0\x00', 'team_slave_1\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0x0, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, [0xff, 0x0, 0xff, 0xff, 0xff, 0xff], 0xe8, 0x138, 0x1b0, [@devgroup={'devgroup\x00', 0x18, {{0x2, 0x5, 0x1, 0x100000001, 0x1}}}, @realm={'realm\x00', 0x10, {{0x9, 0xffffffffffffff41}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x1, 'syz0\x00', 0x1}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x0, 0x4, 0x1, 0x0, "30636243a07685eeccfeb99abba7e7e2a4c161f88a47b6dc3ed449a410affa46f58fd87e73c64b699bcf0d522384ca331d64d044b80df96315bc0b74cb46ebc4"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{{{0x13, 0x1, 0x9, 'erspan0\x00', 'lo\x00', 'ip_vti0\x00', 'syzkaller1\x00', @random="92790fcce5fe", [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @random="fb622657dc97", [0x0, 0x0, 0x0, 0xff], 0x70, 0xe0, 0x158}, [@common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}, @common=@dnat={'dnat\x00', 0x10, {{@empty, 0xffffffffffffffff}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0xa00000, 0x8, 0x0, 0x0, "3b90ce2d8739d66a9924f2046042c12230c5bb459e776a284d0ce0817d53d530378321c69b058927cfe224ec948b42981258ecc53cf138fcccd7562304f0f723"}}}}]}, {0x0, '\x00', 0x5, 0xfffffffffffffffc, 0x2, [{{{0x3, 0x1, 0x4, 'lo\x00', 'bond_slave_0\x00', 'erspan0\x00', 'team0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0x0, 0x0, 0x0, 0xff], 0x980, 0xb00, 0xb78, [@comment={'comment\x00', 0x100}, @u32={'u32\x00', 0x7c0, {{[{[{0x401, 0x2}, {0x4, 0x2}, {0x4}, {0xffffffffffffffff, 0x3}, {0x3ff, 0x3}, {0x4, 0x2}, {0x1c, 0x2}, {0xea5}, {0x1, 0x3}, {0x6, 0x1}, {0x400, 0x3}], [{0x5, 0x401}, {0x4, 0x1000}, {0x5, 0x5}, {0x6, 0x1000}, {0x100, 0x80000000}, {0x9, 0x1}, {0x7, 0x1f}, {0x3f, 0x5}, {0x1, 0x4}, {0x7, 0x9}, {0x5, 0x4}], 0x7, 0x5}, {[{0x3, 0x3}, {0x4, 0x1}, {0x6, 0x2}, {0xbb1, 0x3}, {0x9, 0x2}, {0x305}, {0x2, 0x2}, {0x7f, 0x1}, {0xc7b2, 0x3}, {0x1, 0x3}, {0x1, 0x3}], [{0x2, 0x1}, {0x8000, 0x7}, {0x7, 0x7c9}, {0xd63, 0xffffffff0000}, {0x1, 0x6}, {0x3, 0x400}, {0x1ff, 0x8000}, {0x2, 0x8}, {0x0, 0x7}, {0x7, 0x7}, {0xd3, 0x401}], 0x4, 0xffff}, {[{0x7, 0x3}, {0xe496}, {0x3, 0x1}, {0x3f}, {0x7, 0x3}, {0x400, 0x3}, {0x93, 0x3}, {0x0, 0x3}, {0x7b, 0x1}, {0x2749}, {0x8, 0x2}], [{0x5, 0x400}, {0x8, 0x9}, {0xffffffff, 0x7ff}, {0x7, 0x8000}, {0xffffffff, 0x5}, {0x0, 0x100000000}, {0x80000000, 0x5}, {0x9, 0x2}, {0x6, 0x2000000000000}, {0x5, 0x6}, {0x9, 0xffff}]}, {[{0x0, 0x2}, {0x7fff, 0x2}, {0xd5}, {0x49, 0x1}, {0x8000, 0x1}, {0xfffffffffffffbff, 0x1}, {0x3ff, 0x3}, {0x4, 0x3}, {0xc7}, {0x0, 0x3}, {0x5, 0x3}], [{0x0, 0x7ff}, {0x9, 0x20}, {0xecbf, 0x58}, {0xba3, 0x6}, {0x100000001, 0x7ff}, {0x0, 0x4}, {0x401, 0x400}, {0x7, 0x2ae7828b}, {0x8, 0x2}, {0x5, 0x6}, {0xfffffffffffffff7}], 0xb, 0x2}, {[{0x7, 0x2}, {0x3, 0x3}, {0x5, 0x3}, {0x200, 0x2}, {0x3, 0x2}, {0x20, 0x1}, {0x5, 0x3}, {0xa07c}, {0x8c00, 0x1}, {0x0, 0x3}, {0x8000, 0x2}], [{0x984}, {0x3, 0x7ff}, {0x400, 0xfffffffffffffeff}, {0x7ff, 0x1}, {0x2, 0x6}, {0x2, 0x8}, {0x5, 0x4}, {0x2, 0x2}, {0x9eb, 0x7f}, {0x75c, 0x2d}, {0x7, 0x5}], 0x7, 0x4}, {[{0xfffffffffffffffa, 0x1}, {0x7, 0x1}, {0x0, 0x2}, {0x0, 0x1}, {0x6b1ba8b4, 0x3}, {0x80}, {0x3f, 0x3}, {0x6, 0x2}, {0x1, 0x3}, {0x8000}, {0xfffffffffffffffc, 0x1}], [{0x7, 0x1e}, {0xfc2, 0x1}, {0x8, 0x8}, {0x10001, 0xfffffffffffffe01}, {0x3648000, 0x292b4dfa}, {0x7, 0x8001}, {0x314a, 0x6}, {0x200}, {0x5, 0x5}, {0x2f, 0x3}, {0x80000001, 0x7ff}], 0x8, 0x5}, {[{0x1}, {0xfaab, 0x3}, {0x100000001, 0x2}, {0xfffffffffffff800, 0x3}, {0x1, 0x58d034bcb8926a28}, {0x7, 0x1}, {0xfffffffffffffffe, 0x3}, {0x9, 0x3}, {0x80, 0x3}, {0x4, 0x2}, {0x40, 0x1}], [{0x3f, 0x1f}, {0x0, 0x200}, {0x1, 0x40}, {0x20, 0xfffffffffffffff8}, {0xfffffffffffffa1a}, {0x2, 0x3}, {0x8, 0x2}, {0x101, 0x4}, {0x10001, 0x3ff}, {0x862, 0xa3}, {0x7, 0x2}], 0xb, 0x6}, {[{0xcd, 0x1}, {0x2, 0x2}, {0xff, 0x1}, {0x10001}, {0xed4d, 0x3}, {0x6, 0x3}, {0xc6, 0x3}, {0x92d, 0x1}, {0x3ff, 0x3}, {0x9, 0x3}, {0x8, 0x3}], [{}, {0xfff, 0x2}, {0x1, 0x4}, {0x3, 0x6}, {0x1, 0x1}, {0x7, 0x9}, {0x8, 0x3}, {0x80, 0x9}, {0x9, 0x5}, {0x200, 0x101}, {0x80, 0x1}], 0x3, 0x2}, {[{0x3, 0x3}, {0x8}, {0xdbcc, 0x3}, {0x9, 0x1}, {0x0, 0x3}, {0x100000001}, {0x0, 0x2}, {0x7, 0x3}, {0x8, 0x1}, {0x3, 0x3}, {0x80000001, 0x2}], [{0x9, 0xffffffffffffff7d}, {0x6, 0x2}, {0x9a9, 0x6}, {0x6, 0x4}, {0x2, 0x214}, {0x8}, {0x4, 0x1ff}, {0x9, 0x7}, {0x5, 0x8000}, {0x2, 0x6}, {0xad, 0x2}], 0x6, 0xb}, {[{0x1, 0x2}, {0x1}, {0x0, 0x3}, {0x2, 0x3}, {0x4, 0x3}, {0x6, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x40}, {0x1944, 0x3}, {0x6, 0x3}], [{0xf0, 0x3}, {0x1, 0x6}, {0x5, 0x5}, {0x5, 0x3}, {0x7, 0xee7}, {0x0, 0x7}, {0x6, 0x7ff}, {0x6, 0x6}, {0x400, 0x9}, {0x20000000000, 0x7}, {0x4, 0x9}], 0x5, 0x7}, {[{0x5, 0x3}, {0x4, 0x1}, {0x6, 0x3}, {0x7, 0x3}, {0xe6db, 0x3}, {0x3001}, {0x5, 0x3}, {0xfffffffffffffff7, 0x1}, {0x3, 0x3}, {0x5, 0x2}, {0x2, 0x3}], [{0x7f}, {0xfffffffffffffffd, 0x100}, {0xc00000000000, 0x8001}, {0x1, 0x100000000}, {0x1f}, {0x1, 0x7fffffff}, {0x9, 0x8}, {0x8}, {0x8, 0x3}, {0x100000000, 0xfffffffffffffffd}, {0x6, 0xd45d}], 0x0, 0x3}], 0x6, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x80, 'system_u:object_r:hald_cache_t:s0\x00'}}}, @common=@log={'log\x00', 0x28, {{0x1000, "8d1f2512f51a5800bed2cbc3f41444f049fd1c58e6bc60427e3b66dd0575", 0x6}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x8001, 0x9, 0x0, 0x0, "21d916e801ee9896a616fd4590e35ef3f7feb646880a83154d7bebfd29d280cad60c621188712e312213bce4e8f022d27e3970bb01332c5627000eab05e1f2ab"}}}}, {{{0xf, 0x14, 0x8917, 'bcsh0\x00', 'team_slave_0\x00', 'bridge_slave_0\x00', 'team0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x20}, [0xff, 0x0, 0xff, 0x0, 0xc431d681a068ea87], @empty, [0xff, 0x0, 0xff, 0xff, 0x0, 0xff], 0xb0, 0xe8, 0x130, [@owner={'owner\x00', 0x18, {{r1, r2, r3, r4, 0x4, 0x3}}}]}, [@common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}]}, @common=@ERROR={'ERROR\x00', 0x20, {"8affaeb78bb59305e187da1846cd39817d967ade86d2d82a7876c5575d83"}}}]}]}, 0x13a8) 2018/05/19 16:47:13 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:13 executing program 3: socket(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$KVM_IOEVENTFD(r0, 0x40086610, &(0x7f0000000040)={0x800000000, &(0x7f00000000c0)}) 2018/05/19 16:47:13 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x80) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100), &(0x7f00000000c0)=0xe8) r1 = socket$kcm(0xa, 0xfffffffffffffffe, 0x0) sendmsg(r1, &(0x7f0000000680)={&(0x7f0000000200)=@in={0x2, 0x0, @rand_addr=0x1000a9fe0000}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000500)="ec", 0x1}], 0x1}, 0x20000844) [ 244.601834] binder: 16885:16888 transaction failed 29189/-22, size 0-16 line 2856 [ 244.617645] EXT4-fs warning (device sda1): ext4_resize_fs:1914: can't read last block, resize aborted [ 244.671109] binder: undelivered TRANSACTION_ERROR: 29189 [ 244.679253] EXT4-fs warning (device sda1): ext4_resize_fs:1914: can't read last block, resize aborted [ 246.065766] IPVS: ftp: loaded support on port[0] = 21 [ 246.429116] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.435540] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.442843] device bridge_slave_0 entered promiscuous mode [ 246.469678] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.476082] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.483411] device bridge_slave_1 entered promiscuous mode [ 246.509695] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 246.535506] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 246.606955] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 246.635530] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 246.746851] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 246.756097] team0: Port device team_slave_0 added [ 246.780399] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 246.787570] team0: Port device team_slave_1 added [ 246.812356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 246.841182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 246.868789] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 246.895779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 247.132974] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.139393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.146081] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.152465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.027862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.112357] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 248.196055] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 248.202300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 248.209642] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 248.291176] 8021q: adding VLAN 0 to HW filter on device team0 2018/05/19 16:47:17 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, {0x0, 0x7, 0xfffffffffffffffc}}, 0xe) 2018/05/19 16:47:17 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) arch_prctl(0x1003, &(0x7f00000005c0)="75d9dffe88cee61aa4bb6659aa49c6384923e36539cf5535b1e8f1fa0ec75c78709599b64e2c9a6320d1f10d195f8416ea0e34b690b42615359ebfc46e01d0854f0504a8d30b1722ccf433bedcb0894ed46574c33509393734018225f6ff5e1f5eb4eddca75e2129ed809f269a997bdca618cc5c8e9be01fe96e49d9c1a1e5996984435942b7c9377504170b5be5d1fddfb2f0a91d92e086cdfa47ba8f5007c6b9272fe297db84ae884a51c582107c53ad81aa02abddaffb2f6c0224f7ce821aa9fdc5c1660224cc75ac6863a249715ebf187d05f97db53df4acc6a2f1b9236ddf02e2f73bd77a32f220dccf43c06cbf8b15558fa04336107652e9d26dd1fb6133704c91a2ec3a4961d008c55d26737eeb58d751a53ef42de65936939b8e73da1ce1d83c351ebda8c1e4e82ccb4f6881ab15b04088db29bbe969051598497ac896253f47617fba051e9dada9015213bdde5a3bfa895a9f6d2ded1dcd9809e67a302edfb70b58f6bae7404b55d15c33daff14cd697fa395b4e0f60d7b3a15eb40db3b1dfdc29b803979a96e621d177914ea372f0f7fdf93e1ea13cfa05ec9ab316a9e317dd5d72128d4cf6bfb3d1059a7cc5cb1ebc838f0aab6f2f90969a3129774ef5f6ff8bf18dcb37b402425b8e0db4711f7664a7f642ccd6f1d311fc181830fd4d5d81dcef21c9f6555217763d8b89106fa7e59ceee1accc89bb6cf159cbacd71c3933371bbce411c86e7a6e33a808286999c997cae67d611298e4b30c8f957341ae5340c472864678359e781c851c2f44d6b9e3251818627f89af44fa845dbcafcede25210dacbe2993ee8eb252fdfd1c71f33c045680398d6afb6834e8897bd58c3c86f7543299347c8165e412f9d13941987618da8a3d93a5a1c2dd5a47099cb1b951a07b686d10427dbbf2cd54e0ff2adb1e9b1b5d8396ddc63ed9cc919efe0031b96025fd61ed2ac51e8187f96de6167860f0f562956f561fb9b2fb85bba39594aea62de2b561893a2e480b9b0404cee0ad9df024bfd5501c50b524a608b6b3a1e14b6da30e57a7817f0bf6035ff7df26bfe55c017e71fe5717e2991dfc0e9915ade7c77651d8e1ec64c68493c77746e70e36cea3b43417eb529fde47e4848ff9fbd4923143f74ccd7bd8e8812d5391463e94a3cd42b0a74130beea754a5ec8943196543a163f63b5b600e345a315a9d311863872db5b4070fe44d589f2c62690c6d0aa7380b5e34d6290239e16e0efe02bc9d5c9d6026e2568a395e11754fca37440a4f8c8b0606aa85af80b920da53f6bfd6f01f8be79c715587c2fb8e56532d6befcf5386e36e2f76ab7a2354e9695dba042f4df4eb6ab6376248ae76956dbf7dcaf79675acc7be2e752fcd2923b8fce09e42d438d253a98d245bf4cd3d0f8a8b1359abb95f72183f1f3d828f9beb1ab2f5a0ee0085d842c22229fe677d52ca8d272a9082e35cf6cb25f6ee91acb2ca4a8833695e26f7c2d9e4dd399ce76d2e89bf1f657b676637960445f576af927e04e917923171938d58409d5ce7ae57e35506eaa12a4c81d7ecc380ae4e2446583233310c3d19c651f81bdba51dc48e0eede6a4a3b49c5bea4a65d0df38c9fce6bad5e1b86199a9649f23596efc54430a49e502c320ba0e641fdbfc535fe1eefc89c590768426fa5552ca8a4bb60ebca6079aa2d2b9c9d08896856793c3ad891473d3f2672a359af27dff43387c18b2d8d3fe2ec394bc02c8f766005b428f1dcf4d256dd0d1d0c9f493d2e6c99844b9d303962414d960ad13d563736ae67beff83b40ec921996c25fb508392c6293b6821c12ccbfc0add6c05a41b80760ce0362dae3518185e4dff7258381b027eaf69c2d28b48a82f2c9dc4392941d858af2460d8b0b1cbb7d2c718ae065d061b0cda635df1afc0daa88844cb9769ddada195539161dd1c010beff017da34198e07e24d5a9984f9a5bdf12ba4257531a8c34717ad721e7e5325284e82ee418273868b92fdee9202c2e7167f328362ea810b72c5485b92dcd95ce1953c730a240e8250761cc67f46dc0825a648725bca55340d4098ec75787c0d9b5d5ee2493f62dbaf71f1a0cfdc55e0cc4f4b7e1b2467a1a6f762f9c8eea77138d02567876aa0cc661d99db2f9d6d77a4ea4138c07a3ec3b79a9f4b6b0fb75d1039a975f01c13aa85ae70a93727688c5390b2f2c8e16cbf071864b5fc1ab2a630e23a2f02e9dce8e812cd17ac72d4da20d6d5550aad4e0e6d63a6ffded5cd69b57009e86625b94147d596637c47c2d966b91c762f46b4dca809cd6cd1b81e5ed4aa676b8dd1a2da5a67d63a6a0b51d068a25f86c34ed4aabc8ad0813f776921eb8f6977bf33a87babe319a3d9c4e4b6ae9892d245ac7b9b76da346701b92c0bbc9a791841eddfff40d333e27e47a4f6dbadcd4767ec68640573a93d9a40d33117a753f2d438033612dbaad317bf4e2ab231aa6cd5d5cf21374cd00d26e976fc3abe74e25dd068a84645478f3bc49f8dc3269feaad75899094f276a14371fd02dcd192f5f42155f9342134bc67079cbfe6788022a22af4b4e1b2ed971bda8107a43384e68a8a6c8a4c470b50ff47daef35b7524fe33bdba9ddca799a14c97f64235e0541ee9ef8db3ea6d5f83d64d0ae971bb74096ddd4a8d4fbd45f9515b3e8d4b74caf4c58822cfe69269958dc858a6478c5e7d18ac1e8f7f8acee52c8494152c0da6a9931ee4e7d8f1619295ea406e614a8bb4017d2dcdc84a3cb7f81a7bbdf4c9eefd860a9560ec4cbd427ec51a4408831d2f5ff8f6552d235010e7f4394e6f3880150e5f44ab1500d3e37400ed46ccbccc9347cfb4a4dc04dc9517ae47679352ffbef495c5ac4253b721ff9c08d7b6d31d7dcdeebeb6d9ea0ea6c15217112ffa99a0eabf7da06b1c8e5e82f7a22a91543eeb049656339cd0daa34e305380d455ad96214f6a436d363bd6371bb4d46efa1a00af23c0381bf30c44f96c913bf5b1ed9aa940841c7679599277241245e6496d5bc2d52b065dde240f7e4c1e0d84081a75cba885a5745a51b86fd92077987ba1580a9178945632f22a40b72b66caea7d8d1be63a9fbb500595127927a283815e517d7405ba2247ef4eef6b85976f00d1ed109692aa272e81013326b0e74fbc2ce369d3d415fcc219d8c464b265ea7e3bfb498c9d9dd291caf1c605fbc37467a4b403590a0d581e13ca59061fa63d6338c0cece8a73d6764178e4621830f1c1765986ae4d334f88c4d2b3c058d27e48583b5acde2ccea1811f22110bfd1ee037018667100d5dbfef5336bb6091ca0d181816b38f784ee4a02569830dc779b7a230af31362df106e08a96da7de60bbbd20f70639a8258c93e6c98df148c3a4f35cc5f34249d343e08e90b24851e05e16a8b07121696e19a9a494894a4b859686333d2516f6a1d34dcc0e607f5463b0e7e349ffd3363c040b41e6a8eeaa87dbeee9b04bd683174654f1512d09bb5d83d7a048400a27ef2881cbc69bf955f753e3093fca5a23e2686d28d35c72b3fb5c1ab0f26b8ba2bba86558a6a01c0bfaf249fc54a7681b1d27a177f6765a1a27d11a1038d3e740e2feb9b0a9b4997580f0c818393efb9c52bd122e3a9360200df9dfbefd631c0e397f0ccb4297ce0461559c77b834502310f03b29f9e75a5f2e096f197e77aa1c15d6aee26a3358fcd5d96d64c95120ddd389cae01904df9870c99a3918a0b9bfa532c7900846767e9534d93aeee5c5f0820f9b3aa81ba40378bd3d94468571e3b4f0d13e10875472e3359c01ad46c855063ef44cf2c5dccb1fdb431c548c8f5a64d70e24032a1554c35ecae7926dc00b5130104f3a53392a9f38c98992f0cff2fa919fe76975404ea2a7f032621e6c1184cd4c914a12ba07d9ff6d59d5e750ff973cb92698ac7dea4c76fd73bb83e41ff8ed9a90985ecc83d5e56fd6183ae207d76d2c378a6f9dfd9da9306c8dacd8a2632aed08a0153a31e480c2b528d0d0a5c4813f14626043476fc926c328d038310bfc99e58fa64a34efe09197c144d2edf5a2ba2ceffee21dd396ae231cd882b77534ea793b7152fe3939112d3297db93b34aca43c47c1d0f893140f4bfc6edec0e2ef69944c89e48fddd8d1594bbc891da9a208d5bb8db76f27b2e56fab88546beb3e505aac7917113b4b71e6de53d4c4451414be423a153669aff4d1068ef6f6ad3e0b892ab09750f807ec2eecb15e598e517d9dc2c9bfdce93958e7cd539a336da1f3099b1c720acb850a0a48487da2b2e72e01b945e3f9d5f33ab7fecdef1d3e509c7861801e09b335947728fb92124032f81388709535fc4ce1f22eebef94e2b5f7e65932bfa80744978ad98d4c8cbe5f6b3a39a6a3184c88a018083f3b30d32a91270d4143ea4897a192fb373f4d970544086acb1452638dce53f2960ef159719b0a24a1809efeea6e7f7041964b62ee5932ed5e6d3ef02514b6b2d342d51c67904d6259d2a0969f03d58dbd5276b1bf9383112cd009e99544549e4ded88215c41a75b5170a806195accda5d59b1c6d95503802c3674a8018806f8dc311d50e315b50c4bc111d01d317edc92894a13163e9fe08299ea9e9ba6da7b3bb97f5331fbff5813013bb0c27dc13edb8ee93081930b8ee24aa5649bafde66cda8d19207a65a5f85f7e1be07c87380f4642c9e1090cf29b6cc43f661bebb4329b0a5134536ad471b2a88c294d610ff1e1b88aee13c9f3a5e2cea170a7ac9619a95995177640c65ea14331f2215fe9d0838bf0c65841bfedbe60b5a1fc369c14d36be27400ed9e5230872a950ef41f2131375d41cea3204047b6b21f5a3493cfa77c8fa43785a86906cb53b2b87a1b3cd2f8ae90dadb65196c0cf4302d180d900de023050088df7c46bce02f31158a1cd2d47b3c41b41857d3eba02f85b1854f5d4acf07e7d1c18b01fda05cae4b184a21765ca051f6d86dd345425df592dedbb537c297cba7b19d51277c37fe4e296f45953215c17a77d1f7228fe9622294993477a2790dc3f7495f385f0d6727e324b81ede5b6b5f89474bc6181a2e8cf0277eb015a99a9bb8fb117c45be2809b7ca1834ef690e2f96706e803c21b7ca3649951793aa1eac7bbbc68f86f1114b311df3d48708f892d5259e3ea3649da04cc7c25670f98ede5ac1ce59940ee96fc55635f76f11f53974a7a68f4bf9b531e3de1b7f63bdc033374c3ac72bfc9707cc689872618557db1f139b8b93deb438fd0ff0e02b58a34aaf795811966e495ccc8185e7517745863590c16df4bd14713fea0ce86c94ede4ff3161c2d947167cb69eb41379b49b16a6a75ef1fff1a71a784c78733dd6a5281b7598dcaf339a4d6eb3022152bcd0fdba7f9defc0d07c48330848c7abf72f36308fdb7884249530c7693451e538c946c6bbb1aab8788dd6b5a7368e2d0fb7bb23455869c8eb321c5618bc1fe2799298a3e29abb65ff2bcfbd72610d670e2804b1c683298d64fecbb7ef382820acdad69b9f661cd840eff8b80bab0df4026e9d8a35a3b91f1fecd5b0920a8b387906817ac6850dbfaffa9da16161872cc37cc9aa265033b9995bc522c597a56e7686b4d9191adc38d2a82d2176c12e8ad8c51e39c056cc7db53e9d09809be1a6839a62386eda0db293a4e6709fed675b5264e3d96517ec0303b2349270226a2a3a380e2446e713e1347ba94c5e1b44b7b03a437fad72b2a4b76bc3574b45270317b10a4288828d0cdd4ba8de7c9425265344af79013c7e1ff2e6076506dcc304ecab488e037a7ca709d61a7f25b30458cd098ad2c8b8510767c3a521") ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000240)=@setlink={0x20, 0x13, 0x21, 0x0, 0x0, {0x2907, 0x0, 0x0, r1}}, 0x20}, 0x1}, 0x0) 2018/05/19 16:47:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x100000000, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:17 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffdffff7ffff00", 0x6002}) pread64(r1, &(0x7f00000002c0)=""/204, 0x37, 0x0) syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x240) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) dup3(r0, r1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1004000000016) write$binfmt_elf64(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x2, 0x0, 0x800000000000000, 0x3c, 0x3, 0x6, 0x68a, 0x3c3, 0x40, 0x43, 0x10001, 0x9, 0x38, 0x1, 0x7ff, 0xacc0, 0x14253b0b}, [{0x6474e551, 0x800, 0x7, 0xfff, 0x5, 0x7ff, 0xfffffffffffffffa, 0xffffffff}], "c177292de52bcc5d1e696a10918f6461fa7cb8ba626c84325b115fcb41c2ce2e3cbd5a896072453e7fa40a2f6c7f7475bafa0aeb8ec48e196419cba8c45cf077aa18dac4a18064f5630212cb93", [[], [], [], [], [], [], []]}, 0x7c5) 2018/05/19 16:47:17 executing program 3: r0 = socket$kcm(0x29, 0x1000000000000005, 0x0) r1 = gettid() io_submit(0x0, 0x1, &(0x7f0000001dc0)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000001440)='}', 0x1}]) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x2, &(0x7f0000000080)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x424081, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x18, &(0x7f0000000040)={r4, 0xff}, 0x8) io_submit(r3, 0x12f, &(0x7f00000000c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000001000)}]) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x31, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/05/19 16:47:17 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000040), &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:17 executing program 1: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mlock2(&(0x7f0000b21000/0x8000)=nil, 0x8000, 0x1) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000b1e000/0x3000)=nil, 0x3000, 0x3, &(0x7f0000000000), 0x7f, 0x3) 2018/05/19 16:47:17 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x3f00, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:17 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x0, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:17 executing program 4: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x5, 0xe7b3}, 0x8) fcntl$getownex(r1, 0x10, &(0x7f0000000280)={0x0, 0x0}) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace(0x4207, r2) ptrace(0x4209, r2) 2018/05/19 16:47:17 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getneightbl={0x14, 0x42, 0x9c48a423044e0b31, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044000}, 0x40000) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) write$cgroup_type(r1, &(0x7f0000000100)='threaded\x00', 0x5d6b) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f00000001c0)={0x7, 0x10000, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'rose0\x00'}) fallocate(r1, 0x0, 0x0, 0xffff) fallocate(r1, 0x1, 0x5e00, 0x2cbd) [ 248.835882] binder: 17165:17177 transaction failed 29189/-22, size 0-16 line 2856 [ 248.857985] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:17 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x1, &(0x7f0000000040)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x400, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) signalfd(r1, &(0x7f0000000080)={0x4}, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x4e0042, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x80000, 0x0, [0x0, 0x40, 0x1ff, 0x3, 0x2, 0x3, 0x80, 0x401]}) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r3, 0x0) 2018/05/19 16:47:17 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-cast6-avx)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2321202e2f66696c65302063740800000000000000737436f44262043d802d6176"], 0x21) read(r1, &(0x7f0000000bc0)=""/93, 0x3d) [ 248.939751] binder: 17184:17185 transaction failed 29189/-22, size 32-16 line 2856 [ 248.990750] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:18 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x7fffdff60, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:18 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x1, @time={0x0, 0x1c9c380}, 0x0, {}, 0x0, 0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_cpus\x00', 0x0, 0x0) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000140)=@buf={0x8, &(0x7f0000000100)="c918ef508cf849b4"}) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000180)={0xb1a, 0x8, 0x1d, 0x1c28, 0x3, 0x17}) 2018/05/19 16:47:18 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r1 = syz_open_dev$dmmidi(&(0x7f0000000300)='/dev/dmmidi#\x00', 0x4, 0x4000) ioctl$TIOCMBIS(r1, 0x5416, &(0x7f0000000340)=0x7) r2 = semget$private(0x0, 0x2, 0x40) semctl$SEM_STAT(r2, 0x4, 0x12, &(0x7f0000000280)=""/86) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup3(r3, r0, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f00000001c0)={0x0, 0x1000, 0x9, 0x9, 0x6, 0xffffffffffffff03, 0x69, 0x0, 0x3f, 0x1}) epoll_wait(r4, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x6) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000000c0)=0x87, 0x4) r5 = pkey_alloc(0x0, 0x1) pkey_mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, r5) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000100)=0x401, 0x4) 2018/05/19 16:47:18 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x0, 0x2, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:18 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x23, &(0x7f0000000180)="bdc75f678a41f19cc713886036edb798e0afdbae4f87c234134b029cf43d9d00ec0d48b63061764a4f5f05f3a45faa4870c77ab8bf03ea12f73ed9137783c5feec8148647695132ced3a3ee4ef69170ebf1dd843c63240b6f454f7d92a8e538a0acb06ac3d51b6350b5e4bcf92af616c625259c0a3b9970cb510ee8732c68bde7a683b97cf73b55f3df12aa22fbf191a3e64e40a7d0e014881c4d67275c6d465aad786d048616ad06e527895bed593bd1845dcefa3a088ecc5817ae208e676a52aca1bc10f74f93e371562c2255a2fb002f4b329bf94e7f69e68417d4fbabb344eafe58c289530059d2d0b0e283e87231600", 0xf2) setsockopt$inet6_buf(r0, 0x29, 0x8, &(0x7f0000000080)="9e7334e8", 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f00000000c0)=""/177, &(0x7f0000000000)=0xb1) 2018/05/19 16:47:18 executing program 3: unshare(0x400) r0 = socket(0xa, 0x10000000000004, 0x1) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x1, 0x1, 0x0) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x9, 0x2) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x80000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000080)={r1, r2}) 2018/05/19 16:47:18 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000100)=""/128, 0x80) lseek(r1, 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/54, 0x36) socket$inet_dccp(0x2, 0x6, 0x0) 2018/05/19 16:47:18 executing program 7: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800) ioctl$int_out(r0, 0x5460, &(0x7f00000000c0)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x0, 0x0) 2018/05/19 16:47:18 executing program 7: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) readlink(&(0x7f0000000080)="2e2f66696c65302f663c6c6530f000", &(0x7f00000000c0)=""/84, 0x54) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000640)="2e2f66696c65302f663c6c6530f0", 0x40004000, 0x0) [ 249.802895] binder: 17231:17238 transaction failed 29189/-22, size 32-16 line 2856 2018/05/19 16:47:18 executing program 1: r0 = getpid() getpgrp(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0xffffffff, 0x1, &(0x7f0000000080)=[{&(0x7f0000010000)="5846534200001000000000000000100000000000000000000000000000000000984f0b5042b64b06bc86cba3e6cc3f80000000000000004000000000000000800000000000000081000000000000008200000001000010000000000100000000000006c0b4a40200010000100000000000000000000000000c0908040c", 0x7d}], 0x10000, &(0x7f00000001c0)=ANY=[]) 2018/05/19 16:47:18 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000000c0)='./file0/file0\x00', 0x3fffa, 0x0) fallocate(r0, 0x0, 0x0, 0x8004) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fcntl$setstatus(r0, 0x4, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000080)={'ifb0\x00', 0x400}) write$rdma_cm(r0, &(0x7f0000000600)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000005c0)}}, 0x20) 2018/05/19 16:47:18 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x6, 0x2, &(0x7f0000000000)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast2=0xe0000002}}, {{@in6=@loopback={0x0, 0x1}}, 0x0, @in6}}, 0xe8) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000240), 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000002c0)={0x8, &(0x7f0000000280)=[{0x10001, 0x0, 0xffffffffffff53fe, 0x2}, {0x0, 0x2, 0x2, 0x7}, {0x7, 0x3, 0x1, 0x7}, {0x7fff, 0x1, 0x40, 0xffffffffffffffff}, {0x1, 0x2, 0x61c, 0x8}, {0xffffffffffffbe53, 0x9, 0x4c6f, 0x7}, {0x7fff, 0x8001, 0x4, 0x5}, {0x1, 0x70d, 0x9, 0x4}]}, 0x10) sendmsg(r0, &(0x7f00000003c0)={&(0x7f00000001c0)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'gcm(xeta-generic)\x00'}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x1f4}], 0x1}, 0x0) [ 249.846668] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:19 executing program 3: syz_mount_image$vfat(&(0x7f0000000140)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000e000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb64c86d6b66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) write$binfmt_script(r0, &(0x7f0000000200)={'#! ', './file0/file0', [{0x20, '#! '}, {0x20}, {0x20}, {0x20, 'vfat\x00'}, {0x20}, {0x20, '#! '}], 0xa, "35f1d427a57e9d63f696eaaf141bbb49e21624ade08b0aa300e000290000"}, 0x40) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000180)={'broute\x00'}, &(0x7f0000000000)=0x78) fsync(r0) ioctl$KDSKBLED(r0, 0x4b65, 0x7fff) 2018/05/19 16:47:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000280)={{{@in=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000380)={{{@in=@rand_addr, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000480)={0x0, @multicast1, @broadcast}, &(0x7f00000004c0)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x0, &(0x7f0000000500)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000540)=0x14) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000580)={{{@in=@rand_addr, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000680)=0xe8) accept4(r3, &(0x7f00000006c0)=@hci={0x0, 0x0}, &(0x7f0000000740)=0x80, 0x80800) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syz_tun\x00', 0x0}) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f00000007c0)={0x0, @empty, @multicast1}, &(0x7f0000000800)=0xc) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000840)={@loopback, 0x0}, &(0x7f0000000880)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000008c0)={0x0, @loopback, @remote}, &(0x7f0000000900)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000940)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000a40)=0xe8) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000a80)={@remote, 0x0}, &(0x7f0000000ac0)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000b00)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@rand_addr}}, &(0x7f0000000c00)=0xe8) getsockname$packet(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000cc0)=0x14) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002f40)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000003040)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003080)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003180)={'team0\x00', 0x0}) accept$packet(r0, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000003200)=0x14) accept4$packet(r2, &(0x7f0000003240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000003280)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003380)={'\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003480)={'bcsh0\x00', 0x0}) recvmmsg(r0, &(0x7f0000003c80)=[{{&(0x7f00000034c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000003740)=[{&(0x7f0000003540)=""/250, 0xfa}, {&(0x7f0000003640)=""/245, 0xf5}], 0x2, &(0x7f0000003780)=""/58, 0x3a, 0x1}, 0x3}, {{0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000037c0)=""/229, 0xe5}, {&(0x7f00000038c0)=""/86, 0x56}, {&(0x7f0000003940)=""/123, 0x7b}, {&(0x7f00000039c0)=""/12, 0xc}, {&(0x7f0000003a00)=""/75, 0x4b}, {&(0x7f0000003a80)=""/152, 0x98}, {&(0x7f0000003b40)=""/32, 0x20}], 0x7, &(0x7f0000003c00)=""/79, 0x4f, 0x9}}], 0x2, 0x40012140, &(0x7f0000003d00)) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000003d40)={@local, 0x0}, &(0x7f0000003d80)=0x14) getsockopt$inet6_mreq(r0, 0x29, 0x0, &(0x7f0000003dc0)={@dev, 0x0}, &(0x7f0000003e00)=0x14) getpeername$packet(r0, &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000003e80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000003f80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004c40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000004c00)={&(0x7f0000003fc0)={0xc04, r4, 0x4, 0x70bd2c, 0x25dfdbfc, {0x2}, [{{0x8, 0x1, r5}, {0x174, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x4}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x9}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r6}, {0x1b0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x4}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4c, 0x4, [{0x10001, 0x4, 0x200, 0x334}, {0x7fff, 0x7, 0x7, 0x6}, {0x0, 0x6, 0x5, 0x6}, {0xfffffffffffffff7, 0x7, 0x7, 0x7ff800000000000}, {0x6, 0x7, 0x4, 0xff}, {0x80000000, 0x8, 0x6, 0x5}, {0x4, 0x9, 0x7f, 0x10001}, {0xe99f, 0x2, 0x6, 0x2}, {0xfffffffffffffff7, 0x5, 0x6, 0x4}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0xb8, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r9}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r10}, {0xf0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r12}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r13}, {0xc0, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r16}}}]}}, {{0x8, 0x1, r17}, {0x1a4, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6f}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r19}}}]}}, {{0x8, 0x1, r20}, {0x180, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r21}}, {0x8, 0x7}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r23}}, {0x8, 0x7}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r24}, {0x1bc, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r25}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r27}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r28}, {0x78, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r29}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r30}}}]}}, {{0x8, 0x1, r31}, {0xbc, 0x2, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0xffffffff, 0xf0, 0x0, 0x7}, {0x7fffffff, 0xfffffffffffffff9, 0x3, 0x6}, {0x6, 0x4, 0x2, 0x100000000}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x4, 0x4}}}]}}]}, 0xc04}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) [ 250.039285] XFS (loop1): Mounting V4 Filesystem 2018/05/19 16:47:19 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f000001bc78)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xffffffffffffff22, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x258, 0xffffffff, 0xffffffff, 0x258, 0xffffffff, 0x3, &(0x7f000002cfd0), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x4, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PIO_FONTRESET(r1, 0x4b6d, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x22, &(0x7f0000039d18)=@raw={"0500000002000200000000000000000018000000030300", 0x9, 0x3, 0xfffffffa, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1b8, 0xffffffff, 0xffffffff, 0x1b8, 0xffffffff, 0x3, &(0x7f0000025000), {[{{@uncond, 0x0, 0xa8, 0x52}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2}}, {{@uncond, 0x0, 0xa8, 0x110}, @common=@inet=@LOG={0x0, 'LOG\x00', 0x0, {0x0, 0x0, "50345fc21378bc8f6da6263e3715f555f23e413a61787ecaea02755a391d"}}}], {{[], 0x0, 0x252, 0xd0}, {0x29f, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x2c) [ 250.068497] XFS (loop1): totally zeroed log [ 250.087829] XFS (loop1): Metadata corruption detected at xfs_agi_verify+0x187/0x4f0, xfs_agi block 0x2 [ 250.097962] XFS (loop1): Unmount and run xfs_repair [ 250.103078] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 250.109801] 000000004f15a545: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.118709] 000000008bbedd62: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.127616] 000000009a2b67f1: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.136552] 000000003be90a74: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.145456] 000000008570b97e: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.154399] 000000009e4205bd: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 2018/05/19 16:47:19 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@rand_addr, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast1}}, &(0x7f00000005c0)=0xe8) quotactl(0x7b74, &(0x7f0000000480)='./file0\x00', r2, &(0x7f0000000600)="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") sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, r1, 0x220, 0x70bd2b, 0x25dfdbff, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8000}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x402}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000029fcc)={{0x20000000004, 0x2, 0x3f, 0x0, 0x3}}) write$binfmt_elf32(r3, &(0x7f0000000280)={{0x7f, 0x45, 0x4c, 0x46, 0x80000000, 0x8, 0xf4, 0x3, 0xf8f6, 0x2, 0x3e, 0x10001, 0x27f, 0x38, 0x2f9, 0x1, 0x80000000, 0x20, 0x2, 0xfffffffffffffffc, 0xf7, 0x401}, [{0x6474e551, 0x12, 0x7ff, 0x5, 0x369f1f81, 0x5, 0xb, 0xffffffff80000000}], "b3fe099a6b8d08628386f42dc28687b9840dade839e433705f1979e8391bdbcea402831cf6b6a19adcbaaeadd6ab95b2d40fff2455c2ebac59335328b272c035e8df26465984e9a16fa1ddd2152b1e2e38018056e23d896fd686166fe70be7bece02d1a4f3e860fc45d47bdb2da1a49d8bf9ee3f048d3c6ed17625e5ba", [[]]}, 0x1d5) [ 250.163292] 000000002085717b: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.172205] 00000000843d630a: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 250.182136] XFS (loop1): metadata I/O error in "xfs_trans_read_buf_map" at daddr 0x2 len 1 error 117 [ 250.191738] XFS (loop1): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -117, agno 0 [ 250.200795] XFS (loop1): failed to read root inode [ 250.325580] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1041) [ 250.333702] FAT-fs (loop3): Filesystem has been set read-only 2018/05/19 16:47:19 executing program 3: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) writev(r0, &(0x7f00000012c0)=[{&(0x7f0000000080)="c17f79f3006251c9a5fd470fc5670a63f3796ed67861e7393ca9bd25e4e3ac9320a0bcac6100c62fd79315806f", 0x2d}, {&(0x7f00000000c0)="1486327ee220bfe9b44dc732a7124b29d8bbdc2504f9636728a295dc06dc430e07aab18c77b57a453a9fd51ce8d87506559733ef12b8092dbe56493a8f491500a50e41836e8bb499e503d3aacc981b7087358f1bc8e50cdbe8e8ef79b648dd6f0b62c0e86f4bca1b5ca27338dab2338983d9cd509ef3e8a8636a9d65df8dc3a91b", 0x81}, {&(0x7f0000000180)="41b29560dcf6ca94d2e05bc57927ef7b2684dada09292adb2ae16e5d667188e01b92978ba71be9a3290209e1d87c0492be6f9b9e91d305227fd90400c50fd5f354b51521e98810c1d0107237ab81c63f0aa52cec311cb8f921a6f535a785d891b6fce1ad91f4ac4829ec11de8dc4de4d5dcff9dd1de5b44101a97c07d4908332ef38d29bc3aee8966cbe09140f030b0fea24dace08e2", 0x96}, {&(0x7f0000000240)="fb41533b1dca8ea351bd7f3d7c9d1509d4a0e1a82329d7e56c65525b323482b9c510bca3c0a417f02d7dc2eb2127c0b4e9d0c8e41aef8a5f5ec42018e4e21b2fdac5a457c0aa1ecc86d7e16365170abc79575e94c65bd101281d4160cabfb80343a52aa7aa", 0x65}, {&(0x7f00000002c0)="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", 0x1000}], 0x5) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x6, 0x4, 0x0, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @broadcast=0xffffffff}, @udp={0x0, 0x0, 0x8}}}}}, 0x0) 2018/05/19 16:47:19 executing program 5: socket$kcm(0xa, 0x0, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x400080) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000180)=[{0x6, 0x20, 0xff, 0x1, @time={0x77359400}, {0x5, 0x5}, {0x8, 0x1}, @raw8={"c3d3e4c9e76fad825d88cbb3"}}, {0x0, 0x3f, 0x9, 0x2, @time={r1, r2+30000000}, {0x1b5d, 0x1}, {0x7ff, 0x8000}, @addr={0x5, 0x1}}, {0x1, 0x9, 0x8, 0x6, @tick=0x1, {0x64515ca4, 0x100000000}, {0x4}, @quote={{0x8, 0x100000000}, 0x6, &(0x7f0000000140)={0x5, 0x2, 0x1000, 0xffffffff, @time={0x77359400}, {0x2, 0x812}, {0x80, 0x7fffffff}, @quote={{0xb857, 0x3}, 0x5, &(0x7f0000000100)={0x2, 0x5a, 0x1, 0x25eb6b2e, @tick=0x800, {0x45, 0x1}, {0x5, 0x3ff}, @note={0x7fffffff, 0xfff, 0x2, 0x3, 0x10001}}}}}}, {0x4, 0x0, 0xbb7, 0xb6e, @time={0x77359400}, {0x7f, 0x100}, {0x5, 0x6}, @addr={0x1, 0xffffffffffffffff}}, {0x7fffffff, 0x10000, 0x1, 0x5, @tick=0x1, {0x7, 0x21}, {0x100000000, 0x8001}, @time=@time={0x0, 0x1c9c380}}, {0x7fffffff, 0x8, 0x8, 0x6, @tick=0x1, {0x587, 0x9}, {0x3f, 0xffff}, @time=@tick=0x5}, {0x2, 0x9, 0x3, 0x8, @time, {0xe22d, 0x1000}, {0x1, 0x6}, @raw8={"2a69837ba485990302f2005b"}}, {0xb1, 0x3, 0xe33, 0x0, @tick, {0x100, 0x3f}, {0x4, 0x2}, @control={0x2, 0x0, 0xffffffffffffffbb}}], 0x180) r3 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000000)={0xffffffffffffff00, 0x3, 0xa1e, 0xf42, 0x0, 0x8}) unshare(0x50000500) timerfd_create(0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) 2018/05/19 16:47:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185, 0x0, 0x0, 0xe}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:19 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xb, 0x40, 0xa9, 0x5, 0x1, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r0, &(0x7f0000000100), &(0x7f0000000140)="1dbfb9596c94f49780388b97450b3e2675dc81870047943b2ed2bf99a9b768c42bc055be87d12d9f30f4d7f33e1b136d6450c664a46e0ac5eaf8dd7b1d138d0d11"}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f0000000180), &(0x7f00000003c0)=""/128}, 0x18) 2018/05/19 16:47:19 executing program 4: clock_nanosleep(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = shmget(0x1, 0x2000, 0x10, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = semget(0x2, 0x6, 0x8) semctl$IPC_INFO(r4, 0x2, 0x3, &(0x7f0000000580)=""/4096) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008e04000000000000ff00000000000000"]) 2018/05/19 16:47:19 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = getpgrp(0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000040)) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:19 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) syslog(0x9, &(0x7f0000000080)=""/241, 0x72) 2018/05/19 16:47:19 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x60fffdff07000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) [ 250.722147] binder: 17310:17313 transaction failed 29189/-22, size 32-16 line 2856 2018/05/19 16:47:19 executing program 6: r0 = socket(0x9, 0x4, 0x100000000000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x0, 0xc0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)={'filter\x00', 0xf6, "7d346dbb659b5e45df3ece00a26ada44ba60f0cc1b794f17e5805c51d5d3676362bf89cdbac2c11d7e8757fe359994c6f16992676783f1920f17e529c315f8c2ec60a39f35099b635e30b9c983cfa087e777d757945d3b91477bbd4d9e7a0db68db15ab8f56c859876a9eb82f5b93ee373027648ef0a2cc71fdb004a7a8a600aeb088bfe55d8d68c02d07192ea027d83710b88b7ce503c6ebbe662e5fd5d0f95c743de060e9ee5b1e848d28f24b93becf096ea1c63301ec655603be06896420aae01cdb7bdb317e875b0ffe10b1f4504ca9e1a37f0d35f59ffbc596f1a809f3c22700d4dff41d371e86a93f172a91bb6266f7e29b310"}, &(0x7f00000003c0)=0x11a) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)=0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x3d, @loopback=0x7f000001, 0x4e1e, 0x2, 'nq\x00', 0x4, 0x101, 0x3e}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r0, r1, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) unlinkat(r1, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000400)=0x80000000, 0x4) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000001c0)={@loopback={0x0, 0x1}, 0xd, r2}) 2018/05/19 16:47:19 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x4000) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x80) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000080)) ioctl$TIOCGSOFTCAR(r1, 0x5437, &(0x7f0000981ffe)) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$TCSETSF(r0, 0x5441, &(0x7f0000000000)) dup3(r0, r1, 0x0) [ 250.773479] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:19 executing program 3: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x400) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x2, 0x0) read$eventfd(r2, &(0x7f0000000200), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100f}) r3 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x3, 0x20042) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0xc) ioctl$TUNSETLINK(r1, 0x400454cd, 0x18) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000180)={0x3, r3}) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x90000, 0x0) 2018/05/19 16:47:19 executing program 1: mkdir(&(0x7f000022d000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='logfs\x00', 0x0, &(0x7f0000ebcffe)) r0 = creat(&(0x7f00004c1ff4)='./file0/bus\x00', 0x0) syz_mount_image$xfs(&(0x7f0000000040)='xfs\x00', &(0x7f0000000080)='./file0/bus\x00', 0x4, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="08f7ccb7fadbb596e81aa9a51d3f59ea20eb7f995deaaed2962bf3c502c690dd26e02f71fb30a3b6c1e112c24ccf81a082705342c36182efc38a22a17ce7c4fbd7", 0x41, 0xb7}, {&(0x7f0000000140)="d01ae640731f5a92c15777c95f86051ed1db1ffbcd4a10785234210acc46ae020fd736d820d54a1afb703331de7483b63fa6ab6097ab8b1d3df130da9f2429a0b825aaf3a9456cf7c1787e99585b2a6f079f4ebeeac20123aa0ae11a703f49c240e9b83310418a72ba437b8c206529fe95e8427f8bdfd7f3a3c7f6471a2a120ec2834f6d29", 0x85, 0x7}, {&(0x7f0000000200)="403c25fbb4dcef0f04e978edaafdb908ee4df9f4a1515cb2fb93e948f532ea145c54d17620a90ab5b0c564be9164e02599aa87e35000ece99a38fbaf2bbf66c1a9b7a314fd725c9a42e552e14a56d837313d9a8a80e5b3b6fa161292791a1dcd72e73deb6cf242880d9c2e879426cffe8a3328fca7828d0cb474259d0e4f7342b026679b0afc662d132ead5d3e822a6f85897c5e49e4031bd6f02242eaa2e187ab15974c5a40608e6ce47f2119adaad1a09430cd4459f83db816a799134f047d0e540760c06f2cda0a309a700f26819199d8bd3f34ed15a19640ae98739970de46c547c61a0aa15388a262", 0xeb, 0x8a9}, {&(0x7f0000000300)="18a136702e450c59bafc8a3e9b71e445d31d367d8ea43e725ecba5c89c4330d8257370d605a352ba6af9b7753c3cfcde81cae78cb798c0f5561d7072387354a850", 0x41, 0x3f}], 0x200000, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f657569642c67716e6f656e666f7263652c696e6f646536342c75717ef116cfafbb930e652c6d7470742c6e6f7265636f766572792c6e6f7265636f000072792c6e6f616c69676e2c00"]) poll(&(0x7f0000000000)=[{r0}], 0x1, 0x6) 2018/05/19 16:47:19 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x78, 0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:19 executing program 4: r0 = socket(0x400000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000000)={0x200, 0x0, 0x3, 0x8, 0xcc2908ea43773b50, 0x3}) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) signalfd(r1, &(0x7f0000000080)={0xa1b00000000000}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0xfffffffffffffffa, 0x0, 0x0, 0x0, "8bb56abc3fe1eb89eaf1fab4524ef39704aede1324f1347eb451011c6f7625746faaafd64145c49dbea8216c"}) 2018/05/19 16:47:19 executing program 7: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x3, &(0x7f0000000100)=0x80, 0x4) bind$llc(r0, &(0x7f0000000480)={0x1a, 0x302, 0x6, 0x6, 0x7fff, 0x80000001}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000c80), &(0x7f0000000cc0)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x8, 0x63c, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}, 0x7, 0x5, 0x8, 0x6, 0x1}, &(0x7f0000000080)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f00000000c0)={r1, 0x5}, 0x8) sendto$unix(r0, &(0x7f0000000cc0), 0xe0, 0x0, &(0x7f0000000d00)=@abs, 0x6e) syz_mount_image$gfs2(&(0x7f0000000000)='gfs2\x00', &(0x7f0000000040)='./file0\x00', 0x8, 0x4, &(0x7f0000000280)=[{&(0x7f0000000080)}, {&(0x7f00000000c0), 0x0, 0x800}, {&(0x7f0000000140)="454228afd1cb4085611c737f4320b59f2a556cfe69ae9d05e6dd04d4dc038b9329a90af8915fe0739402c7688c149aa8bb499c69eb1fb7e3a0d1cf49f40c6cca805f20f58e8fb0acb67452aac05c684ec29de7ea380706cd7ca20743a288", 0x5e, 0x1f}, {&(0x7f00000001c0)="3a06d799a29df16689e8347018f776b880a207923b1aa926682e52b3b35483108fe8642a5859c5dad71386f50f1e177ffdd31c301b7daa99e65b641b22939cb51f8a1e9b0f29444511d641f2e028ad7b156762abb74066e227eee1812b9b5b495898cdf8664b7543a525977b5885a64fb70c07cacb3e1f325f42925f0707fdc3f50b47208b97814f3edf8737be756d4b11b66d658a0ae48dc5ecdc89b2af", 0x9e, 0x2aec2687}], 0x1000, &(0x7f0000000300)={[{@meta='meta', 0x2c}, {@quota='quota', 0x2c}]}) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={r1, 0x9, 0x8, 0x84f, 0x1, 0x1}, &(0x7f0000000440)=0x14) 2018/05/19 16:47:19 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0xd75, 0x280000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000080)) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) 2018/05/19 16:47:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x10001, {{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x0, 0x1, [{{0x2, 0x4e24}}]}, 0x110) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[@ANYBLOB='J'], 0x1) r2 = socket(0xa, 0x1, 0x0) write$binfmt_elf64(r0, &(0x7f00000009c0)=ANY=[@ANYBLOB="7f"], 0x1) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000040)=0x1, 0x4) recvfrom(r1, &(0x7f00000001c0)=""/196, 0x484, 0x2, &(0x7f0000000080)=@un=@abs, 0x707000) [ 251.000882] XFS (loop1): unknown mount option [noeuid]. [ 251.038596] binder: 17361:17363 transaction failed 29189/-22, size 32-16 line 2856 [ 251.057503] XFS (loop1): unknown mount option [noeuid]. 2018/05/19 16:47:20 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) writev(r0, &(0x7f0000003440)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3}) socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffb, 0x55100000004, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7f}) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f00000000c0)={0x200, 0x7fff, 0x4168b256, 0x7ff}) syz_open_pts(r0, 0x40) ioctl$TCSETSF(r1, 0x5412, &(0x7f0000000040)={0x7f}) 2018/05/19 16:47:20 executing program 5: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000200)={[{@dos1xfloppy='dos1xfloppy', 0x2c}, {@uid={'uid', 0x3d}, 0x2c}, {@debug='debug', 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}, {@debug='debug', 0x2c}, {@showexec='showexec', 0x2c}, {@discard='discard', 0x2c}, {@check_strict='check=strict', 0x2c}]}) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e20, @rand_addr=0x4}, @in={0x2, 0x4e24, @multicast2=0xe0000002}, @in={0x2, 0x4e23}, @in6={0xa, 0x4e22, 0x9, @empty, 0xef88}, @in6={0xa, 0x4e22, 0x9c2, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, @in={0x2, 0x4e24}, @in6={0xa, 0x4e22, 0x1ff, @empty, 0x9}, @in6={0xa, 0x4e20, 0x61ef, @local={0xfe, 0x80, [], 0xaa}, 0x4}], 0xb0) mknod$loop(&(0x7f0000000180)='./file0/file0\x00', 0x1000, 0xffffffffffffffff) creat(&(0x7f0000000140)='./file0/file0\x00', 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) [ 251.107929] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:20 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='maps\x00') unshare(0x2000400) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000000)=0x7, 0xffffffffffffff29) mq_notify(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000), &(0x7f00000002c0)}}) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) 2018/05/19 16:47:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockname(r0, &(0x7f0000000280)=@sco, &(0x7f0000000100)=0x80) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xda, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x7fffffff}, @in6={0xa, 0x4e21, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1ff}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}], 0x74) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) sendfile(r1, r1, &(0x7f0000000000), 0x7) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:20 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xbbf5, 0x0, 0x0, 0x1}, 0xffffff45) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) open_by_handle_at(r1, &(0x7f0000000000)={0xf, 0x2}, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) r3 = fcntl$getown(r1, 0x9) sendmsg$nl_netfilter(r1, &(0x7f0000001380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001340)={&(0x7f0000000100)={0x1204, 0x10, 0xf, 0x1, 0x70bd29, 0x25dfdbfe, {0xa, 0x0, 0x7}, [@nested={0xdc, 0x24, [@generic="a47abc6cf40b6d44da40cca42c37b6c8e816a96c731ef354b27ae60945119ac9b8a98a348e7ccf5da618068194f2a578debb83088f36ca41a3a18bfb7bdd2085a164e303add3703f214af827c9161d72135ae9ac9716deb6fa8064212856256d938fcc3131b0faec9fae79e71d399e3c55c6b8ece379ce22c485831959aabcab0ccc835eb84f9ed04c4433962431ea682125884db974ea1338eec0394f7fd37187289a54395159fa6d613a19023846e31a147a33a5ddac2b32ef", @typed={0x8, 0x14, @uid=r2}, @typed={0x8, 0x79, @pid=r3}, @generic="5910cf54bf", @typed={0x8, 0x60, @fd=r1}]}, @generic="cdcaa92eaf6942629e08cf845f326e0aafaef5b8026c6bedc29d0df791e66d9d94a18682ab3cec84e59319deb7ca97d408ce674bec7f724c55bb553fee5024e2ba34cc8769ade2d1c0b32404bb701a8b108cfac04cebc11693fc2c5e65299ba2791b1e82f68eaf8232ada3e25ff0e39c5c677e3ef1b2cb0701657edbdc5a24420d24c8a3b91ac1d7ee107d7a55a208b85b4464719eb2715b3ad9aaf7c0508962110fcd9e6b8e98b09f36b42db659d1631e8c89b8bb9664", @typed={0x4, 0x51}, @generic="e2ff309789efe3469af98a522a9c4bd147754596c7b34d5ae74dbbc3e5f52cbe61e00df1a2dfdc998beddd621b0bee3780b389072ddb3c6690491cda19156a2b9cb3ea50e861b6555ccc275cf12f1c0485cdda84fd47ee", @generic="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"]}, 0x1204}, 0x1, 0x0, 0x0, 0x4}, 0x51) [ 251.230068] FAT-fs (loop5): Unrecognized mount option "uid=" or missing value 2018/05/19 16:47:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x800, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f0000000040), 0x0, r3, 0x4}) 2018/05/19 16:47:20 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:20 executing program 7: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'bcsf0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_ifreq(r1, 0x894a, &(0x7f0000000080)={'eql\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x005\x00', @ifru_settings}) 2018/05/19 16:47:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x80000) flock(r0, 0xe) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r4 = getegid() setgroups(0x5, &(0x7f0000000200)=[r1, r2, r3, 0x0, r4]) flock(r0, 0xfffffffffffffffd) flock(r0, 0xfffffffffffffffc) 2018/05/19 16:47:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:20 executing program 4: unshare(0x2000400) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x100, 0x0) syncfs(r0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000340)={r1, 0xfffffffffffffe9c}, 0x10) 2018/05/19 16:47:20 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha1\x00'}, 0x58) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000740)='/dev/uinput\x00', 0x250000, 0x0) sendmsg$netrom(r1, &(0x7f0000000780)={&(0x7f0000000840)=@full={{0x3, {"1cf3846f514d6d"}, 0xfffffffffffffffa}, [{"f1b52e110e3cdc"}, {"94698fd78e5186"}, {"83dd5f76eca4a6"}, {"9db7d6a264a8a8"}, {"de222a99a70a8c"}, {"6e7a2fd225c5c9"}, {"2726f54729173b"}, {"0be4aa48ace346"}]}, 0x48, &(0x7f0000001c80)=[{&(0x7f00000008c0)="0a5dddc84d4c048bd89a563fa65402e05b5f3ddbd4eb7dca213fe6badfef2b751aecb650a3e3fa742ee9ea684bcd5267113b127a07ebc7537c862838dae1c9b27f1802dd547952bf895ef9dd425a0bf185aed300e8c3acccd35fbf28f0999aa466c498e275d0cfc94fd87af1ed9f0dfccb193b988d285319fb53ca7f32", 0x7d}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="841e3b2143e7647fc146afd92679b1d6e784ceacb5e471d594331838319cf19c6425a936b7133ec0099c12831e80c02d854d52487870c65260a9d3727029fec7d61591144cfa26217861f2f26642601001d8fa404ed649f4721e56f149e619bd9cca9d62796124781dff1b7f243a26e6d0ffa9dbad45fb654537250186181789d5dfbae05de8507958b91fa3789cafd7de3013db2aea457a4df45eac47082b2ca4579db02290b3e6a6c8fc2d24cc1ec7dbe07e2660ccc3a85ceae72f911dcaca070f19b33d4b6e3422a6e519", 0xcc}, {&(0x7f0000001a40)="9c48cb0378c9deceeafde5a38ba8c6cce2c830f245655f5edef9f0af88b5403de264796b2671159203824a4a13b3dbe6e540332890b5a4b2648cc14da7422a3eb96163ebb0ba91e9f165d768219d12607f2cc3aa6574c6bca6749f6abefebe06d132613585b96908452abe158adf43e26bc22b248f293aec56587269823c1abda3aa7d0c", 0x84}, {&(0x7f0000001b00)="40ad3e239d8cebf7fcdaf5bdb24d80c2c269b41d5f596a77e35dec2a062232880cc6136000d6f2cfc6c9e5b303c193562d68772f1f533c8ba1b0c324f337e4e98ff95d0c0181d2b5f38ac6b8ea6d6fcedef609be669fd16be2860fa13e0b2b98459f54c77c0e07404d3999b9a5b6ebf2357c938d87b57a19420f413076859dce5c9789ef56edb66e6cd665c220023fd134cbc3dd636f321de67193a35c1a6a0bb1", 0xa1}, {&(0x7f0000001bc0)="08156debc719ae7b07a5ab2db054359b0cb8ccb3091b5ddfabb6ffcad95086869bb2d25840ffdead1f805c56142390bc8f93d2d7833c96933bd09b8dde946187caf6437ad9a2bf96dcf8c51546dcf527758868d3fd7db831c8128fb906f63ac85724b6a12da0688a28c8b92d0289a42d006a4d661170adb1dd4181f935a6343e485078929c13d5fa5150af59e99b4a871dfc125a114f87f76a00560a0cc6f4bad7d9f3c5acb4a0779a39854c30e3b61bd56ef4", 0xb3}], 0x6, &(0x7f0000001d00)=[{0x90, 0x101, 0x679, "dcbd911b51fb44ac6bdc6ea5fa691871c6978d2b7a741f69b84f91993731e1d8c4adb701315a9917103165fbb7ad10e2a876912f0a1cae44f334de69bc794611d2c11c7926119d37fafacb8c9b64015ad1119b0f94387557e823d18e7d17ddf8f69ffb4526e528e6bbd0b30725bebaa94298ecf9c59b267922f82535"}], 0x90, 0x8000}, 0x0) r2 = msgget$private(0x0, 0x124) socketpair(0x10, 0x80000, 0x1, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$nfc_llcp(r4, 0x118, 0x1, &(0x7f0000001dc0)=""/67, 0x43) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000700)=0x40, 0x4) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000680)=""/32) syz_mount_image$ceph(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)='./file0\x00', 0x80000001, 0x7, &(0x7f0000000580)=[{&(0x7f0000000080)="ccc822464cca18a6d12e2d673c664c6744ac5802b448869c5afe6f4bbf2d904deb71fde8491a8d77bf1083dace86bb657ba016887b5f8f0635c267d377df2c8631eed086514c9dba49c05f2bce5a156c15cf52c486948e6568de68", 0x5b, 0x7}, {&(0x7f0000000180)="70797e337990dcf7c3a36fcfc69630e31ecb24e3cb15801fd8726192f338a716c1e43992d7da4c52e6e37acf790d01dbfa105ea396733eba5801aea41d0f13718138d735e38759e160ee02ea79e8b05a241fca19c70f8337f05204a5e3e701d042fd833bf6745ff2cbd498ca808b74445a32238a691fe9128b0580c7fb92a78632af4cd659a9b29a84f29bc44c9590c2a4c3b137049d10a64381498420f0a2172234d016fb9ccfb362ae21bce79cd96060ba95506813f767fca0c981e37f1c789e081d", 0xc3, 0x4765}, {&(0x7f0000000280)="f378fdf6e94e37bc5f9e3b9becb7af8993e5ceff1cba0e146392f8351dbdd3ecf34d4bb9678743a28d9d23964edec17acfcccb2d1572782ed6833ae43fedb0dda26470f5a3c94b723651acf23a02b90054cd4fd6864f9b666fd7f201ed4fe590e4bfa4b13db7e5702e63491f0f5a32cde0697b1849e39f97e574bc7c0d09fda9c676a2855d93131c5913d9", 0x8b, 0x1}, {&(0x7f0000000340)="906af6cd9e10f9b04c08dbd81773d6ece545962437c76f2b63fd6f552af8d45a284bad66e46af283c9a544674a8b5845fd7e4f2257ce5c81feffeec53d4a698c6db812912dd69552d44d5d2594db61794cff937708c14ba76a1e91b393c66fe064ad3bdaa32a99ce02f71df7f9f6bba3b6dd9015d23a932e304d243003c50476cf9a50cdffcd48509aca3578a39e32", 0x8f, 0x1}, {&(0x7f0000000400)="b2f2a9153332c0ee4e1b47c0156e00b3525c495fcc50fe8a440de21479232fcabbfeca3082a92fff1b402b8dd66ddeece3d9e9f6612fcc09897565cf6e665f01af2b", 0x42, 0x8}, {&(0x7f0000000480)="2f111715ad75388e04822a7823a94adeb44839f539cddcd0782dfc4d5224e849602dc78ae61c03910da4f851d77ce4ff292b8e72ae351bb16a257ad0257a3c6a0aac7d03a629cfb70fa2bb7e49e0ea25a405d635235c0c097bde303e22a6f30b689b6cb7", 0x64, 0xb41}, {&(0x7f0000000500)="eef1b0b73319e691d7dcaaf5e6188ac49f62cb78c3634a8efc16b3fe36aa9a36f22a7e1351e324bfe05f640d4a82e18efd9dbef589622ae88cdceb2be446c9b540c0f4505b9439735d0205036b59f7dd4c7ffdc38fd55805c260f43e4fc1", 0x5e, 0x4}], 0x0, &(0x7f0000000640)='\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000680), 0x27b) 2018/05/19 16:47:20 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x4000000000000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:20 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0x40000000000a, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) setsockopt$inet_dccp_buf(r1, 0x21, 0xe, &(0x7f0000000040)="e360984fd0bc82e16169fd926e63bef80d0ddb9c00ac811420e9857f86b003f2c7c7e4c0087aa1da0bb507d706b7b60d01b9712d833907aa177136ca2ca1d4df98bc3fb05e904f74ac7f0eac8fd38d36605dfd804466ddff353906d214a47b2310bee9c48c99e5d864bab1b4dfcfbb361f149b40e4e78535e3850efa6016834ff231c477bf40f61cb8bb784ec8818694be8cc8f2ac3e7cbf9ea977022dd602c80fee899c6f8b4b0b93e2b6b8ce85e7dcd5a8a09ee72a0790ad47d6c87c3ff02af90bba973a370d37340393e4f4cd82c90c1f23059d", 0xd5) read(r2, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCSETSF(r2, 0x80047456, &(0x7f0000000000)) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) syz_open_pts(r0, 0x20400) tkill(r3, 0x1000000000016) [ 251.717537] ceph: device name is missing path (no : separator in /dev/loop5) [ 251.730703] binder: 17429:17438 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:20 executing program 7: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @mcast2={0xff, 0x2, [], 0x1}, 0x6}, 0x1c) r2 = socket$inet6(0xa, 0x2000000802, 0x0) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x21, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x1d9e0b4c, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@security={'security\x00', 0xe, 0x4, 0x480, 0xffffffff, 0x158, 0x158, 0x158, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0x118, 0x158, 0x0, {}, [@common=@ipv6header={0x28, 'ipv6header\x00', 0x0, {0x80, 0x92}}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x80, 0x2, 0x7, 0x8548, 0x8, 0xfffffffffffffffe, 0x401, 0x4077]}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x1, 0x4a9fd18}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x10000, 0x4}}}, {{@ipv6={@empty, @remote={0xfe, 0x80, [], 0xbb}, [0x0, 0xff, 0xffffffff, 0xff000000], [0xff, 0xff, 0x0, 0xffffffff], 'veth1_to_team\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x2f, 0x100000001, 0x2, 0x4}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@srh={0x30, 'srh\x00', 0x0, {0x5c, 0x1, 0x73, 0x0, 0x4a62e3f, 0x10, 0x200}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x4b2, 0xff, 0x2}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4e0) getpeername(r2, &(0x7f0000000300)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000380)=0x80) 2018/05/19 16:47:20 executing program 4: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f0000000080)=""/5, 0x5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$void(r0, 0xc0045878) sendto$ipx(r0, &(0x7f0000000180)="cd6f6fc8cc2a7ce9287857ac2fd727cdc7c3ee24835737342b19e8b35e197c22fa819b75cde4289ef97df06f897401a34afc6e5ed51b981784704961c9a876ca1f557fc1c6533050c9192a85e21a61a8cb9b3057033d3db55baaab6a8f8b03304c5d020d14244ee41ac34278fb770e9998386a061c138842b17310db59de5b251ceff8c263d62a27302d6039e8500ef849487ea961c049b001e5326a4d872f7fe6ba0173b86f24332bbe605f4df7e116307900e14f22730cd75e189a7fcbbfec7e1b69d24798960f5b2d8178bc7aaa9e3a690f10c81f8fbb6227d5b1a96f254bbcaa4bee5e1cd40d2f28abb23ce0d6f6", 0xf0, 0x1, &(0x7f0000000280)={0x4, 0x1, 0x401, "b1a248599be3", 0x62a8}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004280), 0x0, 0x0, &(0x7f0000004340)={0x77359400}) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x9, &(0x7f0000000140)=0x4) 2018/05/19 16:47:20 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="0f21d866f243d223b9c10200000f32c7442400bc000000c7442402b76a0000c7442406000000000f011c24260f017a84c74424002d77018fc744240200300000c7442406000000000f011c24660f388046c766b80f000f00d0c4c1fd5b1ab9800000c00f3235008000000f30", 0x6c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2018/05/19 16:47:20 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e24, 0x80000000, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x3}, {0xa, 0x6, 0x53a9, @empty, 0x7ff}, 0xd99d, [0x1ff, 0x9, 0xfff, 0xffffffff, 0x1000, 0x7fffffff, 0x6, 0x800]}, 0x5c) r1 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$EVIOCGBITSW(r1, 0x80404525, &(0x7f0000000100)=""/252) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getsockname$ipx(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r3, 0x0) [ 251.762510] binder: undelivered TRANSACTION_ERROR: 29189 [ 251.787323] ceph: device name is missing path (no : separator in /dev/loop5) 2018/05/19 16:47:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pipe2(&(0x7f0000f61000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)=ANY=[@ANYBLOB="ffff7972efd97587a7f5bff24da8ff7f100000000101000000020000d645540de80b0000"]) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000604ffc)) 2018/05/19 16:47:21 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x1) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x341, 0xffffffffffffff81, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc}, 0xb) r2 = socket(0x3, 0x1, 0x0) ioctl$sock_bt(r1, 0x8906, &(0x7f0000000000)) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000004900)=[{{&(0x7f0000000600)=@rc, 0x80, &(0x7f0000004840), 0x0, &(0x7f00000048c0)=""/30, 0x1e}}], 0x1, 0x0, &(0x7f0000004980)) 2018/05/19 16:47:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:21 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom$llc(r0, &(0x7f0000000000)=""/241, 0xf1, 0x0, 0x0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0xb, &(0x7f000079bffc), &(0x7f0000350ffc)=0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000700)={0x0, 0x1ff}, &(0x7f0000000740)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000780)={0x0, 0xfffffffffffffff7}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000800)={0x0, 0x7d, "c27b0eb183425774b67ce6d1c19aa19b7340efe2a09e1c1a07a319a62c1f32b4abcb05d3335f233a9f21598e96d43580228e790f76fe81d02fab43e6704b575dc045025b31c4f092ff181051cb9d0e0d1035d84138b87916ea052cd36a0f4c732ce43f6c920d4bc8d576640b0d525b145afbf2284aa78a4b4b685445dc"}, &(0x7f00000008c0)=0x85) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000900)={0x0, 0xe7, 0x0, 0x5}, &(0x7f0000000940)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001100)={0x0, 0x7}, &(0x7f0000001140)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000001180)={0x0, 0x7, 0x30, 0x29, 0x3f}, &(0x7f00000011c0)=0x18) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000001640)={0x0, 0x48, 0x30}, &(0x7f0000001680)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000016c0)={0x0, 0x2, 0x2}, &(0x7f0000001700)=0x8) sendmmsg$inet_sctp(r0, &(0x7f0000001b00)=[{&(0x7f0000000200)=@in6={0xa, 0x4e23, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000280)="4a48e54727e16bd691a7ed4416e5949b11e99cd4fd01fe93fe25f1153f046f4bf2bf1d41ce61d16e63b5bbaddc20a006016a2e6b9ae3697de5146d5bac757208d1e419efb13bf3afa91c333aff0829b5709c4a4950362597d6e7d543e869db581a7a6e03360c84ebdf82b1ce44bde7f52a9c647dfa2bcae2f4ba202524e3f76dc9e3f2776d03304e0c1ba151553a9a26514c28ab07594220fe942ad1793109ce75c42e9509909b18e1ea7cd858a5f8ddc4e60e74252ad32d6aa993d95442bf07d37c", 0xc2}, {&(0x7f0000000380)="72e7c819720e8a9194ddd44470baa2f9df06f603bc3c1a9f9038335f1ba89777da374c104233ee1edf8f9aac83a8df7132ca310606c5d7687c1dd000bb66e42679143ddfda6995941d2f8ba5f22270b20eead09059e9de216f30cd48fa2a65bfce7f9d7361e24e8f0ebcf5ded467c0c18bcbd030437e4dd3324d6a02cfaae1f88aef622b433844bd24c6a0f7ebec45c2ba4d6b4ab3e65ae896aab39444fba07a96ad3832acfa36ba5eabab53549289089c6f778b07f30bf47fb8cdc24f08f88999ea248d45cbe44756514431551af2eac1b581daafcc6452523b6c0473d87ca791c15ab6d96eb85d", 0xe8}], 0x2, 0x0, 0x0, 0x4080}, {&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xc}, 0x6}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000500)="c438c34d26d323dcf6d9e1929e46f3bcb285ede0dfedb58951e461d91027ceb9e4e69cfb7f8d5b404938ae42c391c9c4ffa1551942880de46d7a5fa2a9e96d5680e29f80a1b79ee00d54c30da468a3f3206d9405f101e88d16072c05be987aafe98f8f1803f32e61fc02aee831b335f2bcbcb76470f5bb9e43006c4cd76b00b036f8", 0x82}, {&(0x7f00000005c0)="5586c7a1fd", 0x5}, {&(0x7f0000000600)="ee2dfcf11d89eb40d0336ca42623fdf2a02a71cd2b45c47de1cf9d7c944136589d1075bfcdf69e1372d357696eddda40c3a1e81520becf2d7e74926d03670aa1b22691bdc8", 0x45}, {&(0x7f0000000680)="156f09a326b4652af6e207645a7cf0dca0be22ccddb7", 0x16}], 0x4, &(0x7f0000000980)=[@init={0x18, 0x84, 0x0, {0x1663, 0x4, 0x3f, 0x7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}, @dstaddrv4={0x18, 0x84, 0x7, @multicast2=0xe0000002}, @sndinfo={0x20, 0x84, 0x2, {0x2, 0x8004, 0x1, 0x2, r2}}, @sndrcv={0x30, 0x84, 0x1, {0x1, 0x8, 0x4, 0x5, 0x3, 0x9, 0xfffffffffffff000, 0x9, r3}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x1, 0x4, 0x7ff, 0x552, 0xf0, 0x0, 0x3ff, r4}}, @sndrcv={0x30, 0x84, 0x1, {0x70da, 0x5, 0x208, 0x9, 0x4, 0x9, 0x8000, 0x101, r5}}], 0xf8, 0x8000}, {&(0x7f0000000a80)=@in={0x2, 0x4e20, @rand_addr=0x8}, 0x10, &(0x7f0000001040)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)="6e7407b594ab00b8b4ec1e74b32082fa2ed0d64271f559a71ee3862e6604eb6f2d22a90ab3507200b9caaea95944e6b043263e4ceb5781ffb26cd06e7be282a46a3c4a8b2b0259f2d6cfff191db68b4b5a6111ef", 0x54}, {&(0x7f0000000bc0)="2f75c9effd663a0b6d30f996846c784093ce953ea07f72749970e26169e149011636c8d6ea148ff1b93bc299c854d28e17a8deb54dbb4c43a23c4929dc4311405613c4fc7c28a3153905f323721ae3887966bab7aaf155ec1a7ad79a460fe172b4b2", 0x62}, {&(0x7f0000000c40)="3baf8225bcd7bc2fb320cb3314ff1b9bd401d34b3470d3b0805299252e372d60a0792173da0225fa637ede86c061cd843dccd1e81c02c81cdc6e7f81d867197ee01a98345ef8f51521d7fbd03bfcee6bab05aa3d7e57dec84d8f0f3f759140d3e3779fd74c9d1665927806f959e60fd2c497068af7676d5950075e1224db145831a82abc9286e9899e76dd128d7fd0ba4b6142bf2928f33bea59916429ead0004a71595353915c9d32b12fd6f805188adca2b0014f22848367355ed641be9d304422577e501cba", 0xc7}, {&(0x7f0000000d40)="2b5c57b299791f4aa19175c37bd564343c94c171b746fbcf555e66e9cf5c7bde880e17138a72e7361b4afda3cfda29a395a85d97f0653c87da9c98d38ac62ef80755e4cde677a2593ac892768775ca3dc355a3744db795b1bf07ff1e9e7f2023ad36d891c045782975ef857ee754800ebe7ad0ae0a0857cf8834252df9817de739b3278f79ee63d60ff4688d342f2403b32dd71ef819970d598a696f68fea0b48f32d69084e84b835738cf590069e85ae8775a26b766b81a4b1ee1ed8d16ec4ab6290098cc6804ee71833dbd2619de809c9c4e1ab1322b140f54ee14979cfb", 0xdf}, {&(0x7f0000000e40)="04911cded6ee75fe92db4d816132dfa4a6897d17e89eb843a69b717c442e8d1b85d0d7fb894cda9d663e2f9342f85aca82de576405498dc683131a2db71fef603fedb347874615ec0be9b143316e6b4fea3e8ddd7a704d7126b72d9d665e951bd53b2c2c2f06bbfa4e3608b6ec300f41086b1a96bc61b6e92c81cd39203d1f", 0x7f}, {&(0x7f0000000ec0)="6d4b53020550fe02aa3c68c85c6335ed8deb56bdc1a1cc8b288b710ac79af246f33769c2b34825754fa00593c78dc9ac67da414129125934b03f4964e245cee742d63a93ee98e0a5bed943197ff24db4610d", 0x52}, {&(0x7f0000000f40)="88c5a4ca12d17efbcd66396f37bbf43ca484ec333ae4b5aaf25bc9370168b14a491f86a6e236b33b3bb67c6cd74a081dde31be4dd346f260e98b01bf7a235cb2ba6614d5de7963e6f4abe69dff708ceaac36bfcd9e02ded69436eb2ea9aceb53baf4045af8c4191ce06f38dd105d281e50abcf85ad3b0e68a27880c469d78448d1b86f3f5e7b0ee1631f9b25e343a5675612fd7275d9b220ce94f3f217fac95d732813789f52c3c4cc5c6c99ba0493b50602475feffda39d557ab3d1c324924fd15aae64ec7998e4a6e4724c01185d3df3dcebc92ef8659bae5c424fdde49ca54a8de5bd49", 0xe5}], 0x9, &(0x7f0000001200)=[@sndrcv={0x30, 0x84, 0x1, {0x7, 0x40, 0x8000, 0x80000000, 0x400, 0x81, 0x7, 0x923, r6}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x0, 0x9, 0x6, 0x3f080, 0x5, 0x461, r7}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0x6}, @dstaddrv4={0x18, 0x84, 0x7}, @dstaddrv6={0x20, 0x84, 0x8, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, @authinfo={0x18, 0x84, 0x6, {0x2}}, @authinfo={0x18, 0x84, 0x6, {0x3}}], 0xe0, 0x10}, {&(0x7f0000001300)=@in={0x2, 0x4e21, @loopback=0x7f000001}, 0x10, &(0x7f0000001580)=[{&(0x7f0000001340)="07c624a2fb2c44209ab999e3f21de1adea19c4c912831537118e51a83295bc1f97df4bf11e0add43cc865b791db5c28db5b9a1850aabd964bd6698162faa064ff5ceb0d9df92cd8b6403a2f7cc5ec430c9317e7b0a13a26044dc1cc6ffc79743cdd74ec7100ab39a84915dbae459f233b1f808bdaf91941f43af4a1c2c24b5c7721bb6119cdf14d7db89ddb6ba04ed99fbd2d4418605789431a209b166c72dc15bd876cc09bc80277b8dc42f7d7b471d0dd6262ac56452380bdd79010055c486", 0xc0}, {&(0x7f0000001400)="1fe50ce4946ddadcb0b5addab0b37a4c5afcb8f37bcaf12c8f8571d60c25eb82605478c05e10c8d25a78cb5b19", 0x2d}, {&(0x7f0000001440)="e9e3d201e06e85f1aed3048ca5c1945be1f6363df968d9d1a6", 0x19}, {&(0x7f0000001480)="f1c6d1eca7a5c5942fe5d97ae067589cc1c8b2179918c371b5653d0a3c6b8716c24f752b5775efa81a3d5a88135234978786573b0e79227909537d91d4fdc41325100e25ea1ab2f47f47e8e089d7797caaec2c5824bb4878446886ca74bc7b6e8ac494f3b06691535bc511b6e1e3815a5d81ae6de783bb2d50fe62eecea89bc3b410cb993abe1cce6fdad2f0c2a5b8d51c56b249dc4bb0b8de2c4f067aeeebe4189a52fca40852c41eed57e5026738fde3921dedb87f32b5b994a9ffd9eba2d65a6492f2", 0xc4}], 0x4, &(0x7f0000001740)=[@sndinfo={0x20, 0x84, 0x2, {0x8, 0xc, 0x401, 0x4, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0xffff, 0x9, 0x1, 0x5, 0x100, 0x200, 0x2, r9}}, @init={0x18, 0x84, 0x0, {0x6, 0xa14, 0x3, 0xe888}}], 0x68, 0x40014}, {&(0x7f00000017c0)=@in6={0xa, 0x4e23, 0x1000, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x8001}, 0x1c, &(0x7f0000001a80)=[{&(0x7f0000001800)="2bd2fb58b05d3909dd3d3c5d9e0f1f0f63268908c6d82963205466becb6ebb5fc068ea98fc613d6537f3659d8433e0867c7b5ac6bbcc808c93e396b5ebabafde1fd4f3d062cfd187dc775f211c56d6c6cfe6c03de2474db4edaf2308cefa102b040d669a10204c1ace1cffbbdfafc845df0f68c5f0a23998304b8db3f58a1966c211aba953972bb45d44e9e783ec25c1a8deb9973a1988da1685ba1b6b650ea61d6771193ddad6530a56286a82e258f081fb69e32271e63fdbfe5f07945ac3b2d57fd7d958f9e5b6703bddf64f020d6906dc1bb16e92a7f362695cd6771f31263c5aae", 0xe3}, {&(0x7f0000001900)="649056e2f305e37c6ac25279bbb1a2ed93f93d48eaf2bf7c344ca2332f355b3ac03965dd03e1dc27fd79723ba0c1a472eeb8c11c3071d4e524675a1ddd4902111956bb371d197ae3dc7ce14adb1bdf18434a1eee0e6de147716039ab37c4d20b24524b01505f053faf3fa28f8666462c28e08868c0f8ba7e9e0443ad52a1ed8ee1aa3c82954be7bddfc5aa65c32a3509eaf33ddd73d5d4", 0x97}, {&(0x7f00000019c0)="6212212bbf21a31cf240121f3771cc90dc160bcb6370c740ef11b7c47ce6cb150a137928116f51cfc388b302279076d0f70156a6db", 0x35}, {&(0x7f0000001a00)="80cd68760f7bd3462ec69484056506a526708ec3de8c22f339c2fce7b2cab284e5dc9ddb28414ed4f29c15fc7351d0e7109d4f347cd56c2097d96c78708ba4987c940bce98c80d8bba71716160252f0d63", 0x51}], 0x4, &(0x7f0000001ac0)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x1}}, @init={0x18, 0x84, 0x0, {0x8, 0xfffffffffffffa80, 0xfffffffffffffffe, 0xffffffffffffffbf}}], 0x30, 0x40000}], 0x5, 0x1) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x44) syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x101000) 2018/05/19 16:47:21 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x4000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:21 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup3(r3, r2, 0x0) fcntl$setpipe(r4, 0x407, 0x1) 2018/05/19 16:47:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa}, 0x1c) getsockopt$inet6_int(r0, 0x29, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000000), &(0x7f00000000c0)=0x4) 2018/05/19 16:47:21 executing program 3: r0 = socket(0xa, 0x7, 0xc9) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") clone(0x0, &(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000280)) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 2018/05/19 16:47:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) sendmmsg$unix(r0, &(0x7f0000005240)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000540), 0x0, &(0x7f0000000280)=[@rights={0x18, 0x1, 0x1, [r2]}], 0xfffffffffffffe2e}], 0x4924924924926c2, 0x0) recvmmsg(r1, &(0x7f0000004e40)=[{{&(0x7f0000000000)=@llc, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000000080)=""/9, 0xfffffffffffffda1}}], 0x37a, 0x0, &(0x7f0000000480)={0x77359400}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000200)={r3, 0x80, 0x52, "fc9609bbb2e0c01e01d8e22875f86a0cd136ae91646c21a7236ed900a31b6fdee0edc29b9841b6335d49f51852e52de1eefb9caf25c27abac2124fe368c04d632421f54dc6f4bedbf73df3a51df4f9476340"}, 0x5a) [ 252.739338] binder: 17488:17490 transaction failed 29189/-22, size 32-0 line 2856 [ 252.775935] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:21 executing program 5: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000000000)="6e657422d9050000d4") ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000040)={0xa108, 0xf4, "1af5f414b912637a2b84b9d1d599b16303bd60c537acb0a42cfe0035b2dc422692102cf02b7e68d852e9482ef11b0dd416070a11a465ae71b93d5568169f6b589f0f9eafae1196f80659d02b5e477c61ca5900a6ebf112653c620fe2c2bcdf9821b207f07b70e564461269928dc9bb75cf8b5f73eb303e73a5360cc30fb064bb7c95e440f67a5cfd0cf8a91a794a4a6a8d964fa70b9dd7400f270f062baa101485892179179e212ee81a1039c1ff219c1c46b71a57fdad06846f5524835bb24897757ec17470e3e289d048f58013add3fbb0310c224306c86b5c1dc4ca53ce0e474ea466a296c368e3484a738f76fa278700c5f3"}) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) preadv(r1, &(0x7f0000000340), 0x17d, 0x0) 2018/05/19 16:47:21 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x100) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x131c, 0x8, 0x8, 0x6, 0x8, 0x81, 0x4}, 0x1c) 2018/05/19 16:47:21 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:21 executing program 4: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x100}) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000100)={0x966, r1, 0x1, 0x6}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = memfd_create(&(0x7f0000000000)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000240)='\'', 0x1}], 0x1, 0x81806) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) socket$inet6_udp(0xa, 0x2, 0x0) lseek(r3, 0x0, 0x4) ioctl$LOOP_SET_BLOCK_SIZE(r3, 0x4c09, 0x9b) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/19 16:47:21 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000040)={@ipv4, 0x0}, &(0x7f0000000140)=0x14) sendmmsg(r0, &(0x7f0000006840)=[{{&(0x7f0000000180)=@can={0x1d, r1}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)="fd3a8e0e86c01bd7dfb3e0d8e320ace19b8b70bce6df92121fe554e036258c1913a6effaa554f5680907f78222aca42acaf28f1937485ba99a2b11c50c98ed12f26c5d0ebebca6109ddd9b43f167eefaa0ae3dee7569ffc744a94c0600559acd165e93db0b00599beb", 0x69}], 0x1, &(0x7f00000002c0)=[{0x30, 0x119, 0x1, "70c7b7903fcfe3a981fcd1feb1129921749b516fd77414d001a66e"}, {0x48, 0x117, 0x7, "f0b218fca37d84c6ea6bdd39153f095bd7bd8008db0ed619e8f9c33c8c2452ce900d19feb35fb5abffdaa5620508b7544c"}, {0xa0, 0x10b, 0x0, "0d34ce96b6a552d021bc9855edfaae15cb368d2240f13e45d56c58d3c054e97b1ff9496c34e10f6184cfef4b825f16ec4530ac0ddd772910bead3eecf9865c58836733c7a480a01904c941c45699f774292bbaf008684482b7f2471f403e6db54bf534568e38fda8090ac46a4480e98d5293c8be34fb3608285e44e8c7821faf30be3eaf601715a2e171a8c4"}, {0x1010, 0x10b, 0xff, "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"}], 0x1128, 0x1}, 0x8001}, {{&(0x7f0000001400)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'authenc(rmd320,ctr(cast5))\x00'}, 0x80, &(0x7f0000001740)=[{&(0x7f0000001480)="795ed7f095869813cab937ad8ae7de15f8789d4e", 0x14}, {&(0x7f00000014c0)="2771709d18d2848dbf99a6299022aa90cac069ab66ac371ade90998355afb5", 0x1f}, {&(0x7f0000001500)="cb41267d06ac121d295cef3d1912d8ce5d6b736039f3", 0x16}, {&(0x7f0000001540)="fd3627d92c5e", 0x6}, {&(0x7f0000002080)="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", 0x1000}, {&(0x7f0000001580)="b89c88ca2158454a090a2cc98540e358b500fa744e7788a2a42f46118ba5a68b0c7a4249db5d0a2da88fe043dc5baf8c7d4ced8e4219686d60fe5636b85224590f5acf8cda95a089a955c0a4cce6f95e00e507b9e34ca9a7d726c829165585d8b2fbaadf63669c9e89ab4073e08b5664a4bc8ac5fff35f23920ca85d8daa3d9d281c8c5a44547a10c5bceff5d7960fd831cb7caa4241fb500561505cae1ae1f55242d42a4a536658", 0xa8}, {&(0x7f0000001640)="5ba345f1205c371c873a5a39f9aa96d0488140f4ef17587a42a62e2c70ab41c687173c1cb0c30134805bd1e9b65d7f46021aca0bf5ce4d1f731802b7858db9d8fd4cf945a13804c8fb9cb5e0fa5a792399203e4139b1b2b60ded5ea6f1f7c6a5e2facec3320c8b6cda78f72ab58c5f1173fa61ea10c555c40b6a9f5eee7df530d2e9cff1d4fb0a68facc189fa60c7368cd83ed0f843a46856506bbecc91b400f9cc37e367237095896be65553f4da8968ea29b0961f39bd6", 0xb8}, {&(0x7f0000001700)="c5d9bb363fc1de3e6a8dec0d032d", 0xe}, {&(0x7f0000003080)="784b6ad0946b68ab62ef68b6cd3153a4325fe26f02e0e4b8d2535c3b4a8b4d08c113a7bdaf8fe473b4a04e13d8a9ba4a1f25da0545ee069ce826ea70963311f6448c3e4c356e46df746f471f0e97549676673fcf629744023a593b591adaae6ebdcef0f97dc34192e8946167e9a54e5b0321f3c37497047466dfb6f84009aa938d236cde019e2ebf7d3aa3554a3f5c99ce8e808f6980feebe57c4254c650fa9ca2eadc1dc0ee275ca48fca4f0803cbd71d746ef84afc979fc12b1ebb18cb0ee21aa18a067e5c48cab34eba227379e760c64e0115439160aae60f93aed0d49802f43785875ffc3644a963df2bd39223b717aba04958d56014e37e6116f4964baa854d7c5f6686d369e41119f98745761ed08279135f75ae4506117be503bbbf95be9bcc426d58169d0bf6ac6c951917279d629c51127033b159aefe4ef8df629d96c9ccb22c0e181df26dfe9d6b4112745ce02bc7f776e2266acbd3ecdb985c5389d58bd1dc0bf4d1ac78f66476a634f3c237dfb5b56db81928f76d9232654f919cfe72f824c5f4b28f48d4093b1534f4e7f37bd6965c4173b19e96da72d27ab6d2c7381760b1023fdfd4949acf09f628c813951ee4480664795553cc84895f9cc1d3d2ee3e4d1762aab7f96cda8ce31199a02e44df7ba8420f5587bfea6e169c41c0a97a38dcb19eec20c14565ddc2f6a9e52f4b2c41f70508dc706b98ae0a1be1cd37ff5acccfc1fef343b6db0001eb0973ca718f3870a25bb80c236182118fbe778fec7c2df99c548b4bc26b68c17b8287b60d510a1c95d37e2eb6c52cd87d7ddcaf45e7a013cebabaa29a2554ed287752ff0c730a4d83aade7b02cbaeb48bc0c7b1bf3260214416d382a11d2f3d8fb26b448eb2c1c4c62409b341efc3aff6066af48e4499e06db9760a463bedb06fb67704b8e62b62dcd979b96b3d4c0c7881253fb145dd3bb6e3f8bea471c668f01e11979bafa4b43c981b2daf747d77b4f7b90c13e125daeef9dabc3c71d3e463beb496468643c17e4161af3a76851f7034057e2fe20e3b267cb2abd2ff4607e42bc25012fb37c7961b2e7587955f7a64e18502ef3a549e9c94d22b796f6385278f50c682fcf16b91ed1dae5c82eae21b8c947a48cdd80324f116db809c48e2d8ddbf8cd27edcd8dfabe83a1c96036bb6b2080e160a884ec5f8b3a90149e8e3ef291d25071b48b5f64d1cd1963171ff7375f3b1659246743194c3d7024741cd840e3adb1134e1a5285592b9855dddc4fb2a7faeb1e7c95ecfbdd176495b07eb4c58a3bc07ff784a391bb8c503259d8b4638832930c7ff48544ad71725ac50c16959aced36272703a681b6e59a3cce19f2c5a9e374a7a47661b58f7fa456a9713aebd66fc180993f02e6666cefa1c164806131acbb0c7af650c6156aea50aa790763b0dc158b2481ecc4128c1da479fddaab63dab1c4fd76a76ab0c844918c88437777a3e73740b817f1e79fb002ceff46fa623e04d013541648e68989e865fb7bbbbad85ac4761a127978d5c5efb2e52498873ac4af2f7bc4006d2ea0f958fa159ce1543b58018d56a1691f41b05304c4bd611d80d4eb09b3ea91d3ac96325c08e74065419e03e9cfeaa0e7398459d08bfb9e27583e2d7dfab4a15424ee1f594782e18cffbb035e324deb883b753385692907e9a4a8134705f4be53ea5813c6029838909d3b1482f333c5d9e2d360db82300a6c2096486c1a79035802c9795dcc5e093896356b6b9b6b68d06f68059f77a5e065b45b6007f878f1ada8dc52301bf866e993e76e57cfca8080a7375d22fb2ca36121f2c7da64e582b6fee30d6a1beb43ff8956783a0ec2985f3dc209417ffc848a840d112fb1f2ae231183e631bdfa91a8c54791919577f721ff0e08d630813aeabb68ff9c96c5244ad50bf79710e6e89935fb77c596f275f5c40074bddb9a9fd18e8ff79d2229cde28ea4367b941583e319723f7cf7d199ed5597784de89d62893219a127dae6c52184816731ae4b8770a534160d29e2efbdeb285ad50b4f91f796870ac857e5f7edd2245923ae864e0f04ec5d099421c654845c57863bf64a9d23e4b04616b70ac82124a1e5eabc0c1ca0013c71c1ac3289b6e08e75884b0cbb1f5f933a286de1b22b775351f71a61e8642ca69a23b13df4d2456798699f2297b19230c3a2a6e2a52df8f8c67ca71ad98848f66d5c1bca1cf3ccfdff2fc5cfb8a62dccdaef9d423db5e633432d556b450b1e4c1415185e9dc5d2e76793eea74db5403de258aae2e272aa880f39e05d4f76dfeaec61a85241ee4f08d14374c09a5d33711e3047bbba865188b735533e8609cf480e8f0ac87ee55ca47d75f65488b32dc656c4dd5b23d6ba92f409a375bc4da834b4a052bc8b1036678bc936854c20d4b0db0e96108fb744236f72eda3cc509814606ac104399e25291ee00fa4cfe3f0f611f425f573ebb6b8606e7c5b8b3c26ce8031b79e444d7af52ce088e4645ace7f372663015677d539d5f869d80b7722bec58814f61d285efcbc7aff0306907773ac8ee104284ce60c6a31a12fc0d2c61423f66780c5788ed47bf787133a70d1b410e66074cde66d2ac95d39fd65ed11986845586eb1a5ba86aae90dba20a16c25448c06c5067a17030360f9d83a3424980cadd92b8a19cfcd833cdd427f423dba4ed2e35f5025fcb924bd86744af0d66d80e1c9a6f87c8f9207b4b9dec3931afef9013d2ed901cb8e6178079f19d045bf5bcdbcff5a32de90c275438d30254d45ca7ac59d919707ce7772b2cfbb47979a47cd848bd48f2b01ff0a11be325c4735378a38a392ded4a0bd3364f3bd41236cede28d134a0a6304a1fdd0068ea5dd4da866f7d822c5b5aba47868f9899971dca81a1520ec7fd1ab452589616e9381eb16ab7f02c8428182ab43c90e08f2ed8108ce54358884a46d47607c3f52a4830c2bdb0130a1e91a73be3803a3b43bad4376bd18e92aae74e2b2156af51cc5814cc1d6270a9929f90c7ec54bf51f4c480649f5cafb984ce2b06da2829189cc64e73ab38f7e59821295492b56b6cac839aa176a9c00521d22fbe9e98c3e1a78bdb15d1e24065cdfafd3bf5d1fffe9e2e02f13125fdbf4ace93322501f5454590d281806b09f7105baeecaa3d39304100f39a673cc078ce09fd911ec334c2deeb9b5cb8e893e122518e337524997c701a456c54152b688ef825116b387eca7eb087931cb3db0e9049c580d44728d5437d992eefb2282e9592d4175dafdb4195e494ceb3e2ba5d830a2411d33c856b106a8e256d8b0b9a1ee6b9f62bbe799f2f8e8fe762ec3c8203e3d04dbc4bb087b7972033ee37a457d1cdf4753471c68fe83bbe469dabe6f61ffe849da1ced766c3f8447d5d6cd4432f825b6877dc9518597c0f4952af9f3477e584ce20ed1426450e188dea23454f7e7568d8dd03f91279c7d4a9178de6ae6bf47ec5923e6f22c2c1025f7b58cd6ab17655abdcc173fa0560824bc1ad866560cafec931c28598878f21ad5f1323ab841d23e2aa7e552d541cb5e0b8ad21d2c8899c49697607d3c045c3a97943581bba1b82097f0300c2be2ff9e57026f2cb8547ee4c91e52a1bcedab6347eecb98e3c7955fce51d2a3b3a17ca40cb399b319f127a4b327a9b9fcb1f9901a6fca00340432a14b2ef1fbb2f93cdf6c8f7c4397758f28d2c7aea5da1665d6e103410dd28442de01acca4aad59c71b6935bc9c0b32c783bfbb40a6016f6063ff7ffbaaee32aa2e6f647d5c09ed2a9bf354d89587b47ad0fa508cd1437318c8c2ea608278ececa0ac5f4d24e7e75c0d63e0d2d63e115a15c59074f3cdd5dff407aa6108185ba2fa01c41803b8ae79d2fc1ec025ffa523e42008c2378ce95d511a871570b338bc1c8f16adb225ed602cce646f8bbdcbd71c69815eb01a0eece3c8a88a253a4f8383ad23d67bf5f9b5ba58bb9b91606b75777db7ef1aee0b1213b0b7de63d8a288a034e872a7faca15c36af88d3d9e9db66003a1e5d6b4c2db2317d8ba2594b9ca3991e774d7a8b667c51fa3aedc264de769f394c6b9fc564f0121be4604331ac7a5dc5ab35691e28f96a11fb42b126fdc5022733a1e8187ecb5178cb8a6f638733c5ebd6f5a054bbc4ca22a24d3db9173c76137ba2f63b1cf8173a40e7a84f253dd8ce2e97fca2c728ef785b281c0b5f0c7656867c99d5aea9bf0dd2550f21d58ae5ce2f8727788ba49cec519c20801a47d16ef3a84423cf64ea8c963f31d245bab61e95948ce4dddf27b147a5def0c849f2b6158110207753fcf03b96772145964eda812864d97597d5ba61371e4823bdda6941503a8061fac6fe49147a8c6c6324495f79070f630ce2d881e3470888f1bbc5d42fb20ede5eab59c33467e70dce107e9f4bb188021e7adeaf5e7ad2e7d61d0f265b1db04f0fe5954256a7ede6d7e5a24a1f29cfbf4a70490eafe59b1fe91c32ffb70433c46d7846cb797f2a8ceaaa2f517edc0fe2bf869b040d2971edd276408766c0cfedbd7bb6c2a59d70e32bff652336c299f903b10efe7a5ef131b26a43a87c4952f035392389385050393f17430b21423657654d1ad7a3183baa118699d88fae1d7ebb9c9c97008f5b22f13e1934b43716dd7e9a3815feaa798f555fceebb9dbbe7169fdddb96f249dcad30fe798540f85f14d81fa2daf778cc291ef5619cdf5b2d8b6028bcaf2ccd877c3da1be98cdb121d81bca300a90ecccaae63b06cc8379cd484b5543f9d26c2ca51e31691068e8811ab44e2427f011558c4662669a0fca0463e990380f303631b12b84a76d5bab90be48baf5e586d5f355ea36493e8ffdae0fa45ee3f4c3a0e152337a36d6f63a58ffb1cf11a95535a908d24c88cbccb09b2143d124d5d48c62576e0ed9df1e2273c3fb7a6a4950a6bf782653bd0c2fc278a1b2fa56f41bc0b7b9f781589019a724c6a4724763a5f4e254b665ae4e349c0f1a8de08a53716af7f7ffd5d9f88d459e238de3ed9c4c9a697a904b9bc3aef541ee4b8db1fbe3ddfb768137e66d85ca2e750d25905d57a839a313986542239ae3fb05b645f2cc15d17a8501eed4136715775a26427fb72d7104922cdb43da09a77081e52e2328b547770ccf944f9bd156c0c460d0a0e9dff1ccd07f8a7b126f5ec0e9b7078c9a046aba7aef75ece7a72382be90a3aaf4b2720e58c099ab1561ca3d2e2d4b3c8e4d9b269a802ddaaf862e7c3c2d7d17644b2ffd0e90bc31f7e32042b44d025828c6118a0fbb4043e34cd183ce2dc70b83020ac42861738aba2312711d4fa0d4c72e133ed24af4afa82bb720a643e5554dccbe497d277cc9d455eefc4a112ade564dc38df7ab7c9b0f32c707843e205cea90471e5b084b45048c2175dffa0d47745bcc2871e37f08ec4e857cfe3a7557ebf7f8221abcbfaa02b5cd810845b815635b3b2a18434a7a66891037ccb230777587b6e9e4238ae8b6eb53ce4023974a746a5c85e626781fb547e19113024418cac0ab9d73fa8b320b82e7f69da0f6c2eac58c21cb4905ca73728437e08b92ff05672e89afdb8b5547153383aa7b3fcf777b2eafb01758675c373ae6075e37dc285bf78161a14cb1547ccf79d27f274f8491f04e2f78a0251a78fdd491d975f3697e5358ec7656500de8afba13073df742b4b43548d0cece354be15b2c123526aaba84fe741c8984ad573a5c7f8937a8f62f1ff2c4b3fd73032c559fcb5cbb7f14ff5595da7f77484bab540bd8a813f5e84de8b62d35e76a6777501cf04a435ded33d3f37c2ef0aecb65ef3877552e9017a3b0f0a3734d", 0x1000}], 0x9, &(0x7f0000001800)=[{0x58, 0x88, 0x4, "aff18fc6927f1675a39d185605a2e16d7eb6bebe1b172e540fe1b22ec0e3e4dee5edd182e92614f6352c1ec5fd28f5c6362dd4596810fc39f8f41c2dfd4e6b2469a0ba318c"}, {0xf8, 0x1, 0x5ff, "b48a9eb09fbd5d8c8daaecfaf7fce980c1dc8b5a327104a7bbcc3582609270d20451f6f0e782ab3c93d9a220112e755ec1cdbaf4b3947839e78c99660ff7d438cd4762623df7306a6d4bb6b131a9b4c20cf5e27be43000881088774fc37346e11e7ea1f6380bdcd47689fca19cf3262d2e8281e5f556246f0aedceb4e446268a65511bc25a941d2e23389fb496f7f2111017a1bfa28d7ae96e6c901f0b8c0171a53e70de98d98285957b5caa7c5dd6ec2d171f3c212e4023c6831e2effacccd3a69d0c62a1b2de7d28db39b3f032288bdabe0a0420a44fc9efdbbf75353eb10657"}, {0x30, 0x109, 0x7ff, "e91fede851ea94046ac6c9bb0039d44260a9a64f81e305acf2b2758e39"}], 0x180, 0x800}, 0x4}, {{&(0x7f0000001980)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001a00)="62596f66e754ab0f7a5396bbbe114e4d213d0e46ffdc28fc6a69a1da33d0650bd7bb972a0bd384672519af19721f986b76265de8a9d3b7aa522ab415e88b8528add86472234e4ad81b6ae7906fc054781e6bc842bfcb534ab5da55a6f6b14b262ee4745da623a6ff6d54f900e462c1", 0x6f}, {&(0x7f0000001a80)="997e77dba76bcf4343d8412a7597f74bab285ae1e670f5ee6fd51580a1b7c9c610ffe6c2c7f58bf014de041fb304a0ac7cc8b0e11593404e83e0ef233f9d42ff0261ae261455ae4c06e955d1ef2e9b3e1adfb90fa6756c98f46cb9391f1d626912a4", 0x62}, {&(0x7f0000004080)="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", 0x1000}, {&(0x7f0000001b00)="71fd6d1b52373ca29df61548f512153dfd5f791adccfba171bd0ce41154df765a5b1cfa1e0929f8473d5b37bffa3a8001fa324b63476b7d48c28415ba45af84c8b167db548c132867f64be6300ba954bd9cb5506e68b4f66bac2e411c7a2aa24640c9081afa34d3c7095080ebb17403f6665ac0651fdb1acdcca8623a89c517e4f073516d238d83bccd0c6f4a8ff2d", 0x8f}], 0x4, &(0x7f0000001c80)=[{0x90, 0x11f, 0x0, "3dfd5b05dc75b0f62ee3cd7e966176c8c30e660655d7ce26a750cea6e1976c314df4260625e31e5c673632bd6c1583d6dd254e185ec047b5541e3e13c82f47c73422eb9ec8cc06204731513f822bc2e04dcdb38544d925808c9ed57ab2260c096bdc59ccdd5d404fd53c92617e827f17a538917b1be1968051f38665d44c"}, {0xc8, 0x101, 0x7f, "ee05f1ceae3d6b62aa62de564f405834fc60d552ac35c701a55d756ffa4104dcb509062f53917b7960361600625b782d0bb00179e3e90259799a6d351609b309ceeb52c44d43a2eea7efc2d4b365a7c078be7a0c2aae6ef48c5d03437b12bc3a0bcab0a15a19f9f298b276d09b5e2328b9b9df12a544e39192b84730550216b6cb1959d9df4c4ca8a8416b3fc1fd0cd21971f189b4848fae7caf9128a8d19911efcf859e0f29e0001f28517ecc7add1b7671a528"}, {0x60, 0xff, 0x76b, "005922c39c02a0634169a8c27e60b1e52928e9a1f7c0b32e45c19dc772dabdeaef651fd6b4e71b64495eac87a6c60142b5a295bd3d7399fab4961ee61c453a6afeada50e0f2b5f47c0548e638a46"}, {0x20, 0x6, 0x7, "089e229699e6e6bbb4c79437b6"}, {0x30, 0x13f, 0x8, "4f2465a6b976bfb031dc31169048db7f438e30e168ff2b6a0f16a8a8387d"}], 0x208, 0x44884}, 0x7}, {{0x0, 0x0, &(0x7f0000006480)=[{&(0x7f0000001ec0)="b184a6ba7fa2dab98b3c4443ba708914a214af45cc63077cb726ad8ae27c9df0da48ef08f59e48c9e0f950532660216894f68c8c0e0eee7190bfafb8afe4f8153250d60dfd83e4a8fae0a9d4debf9579470e56a16688f1363bccc768e9237fec91de34cadb6c1c95a90250ea982cf2a100995da640b71a9ef0612e2f7b8b9fb1640627ba841d8fc36ec2a863cb86d25124a80d218a2c7d09eeddf8bfafcb266b9a62c2b25975ded43b3b834d322ef46c423117fd108d5bafabbc97c93144f01fb05c26924d7848162585bc3667eea040212c690033", 0xd5}, {&(0x7f0000005080)="1b66ffc4df25fc2c36f45df722d458563082d0b87b649591d07fa653e3ec5b25e30d035d973d6e724d0b2f539706eca263b8615e18dc22f3ac0b78864c18f512d4fa8f19fa4dc09fdca51d8d0f7be2646ad72f54b83ae4f581dadca169a363d45fd394031e3f78256fac37e4347bd1e2a1d63880277729f022c3a044626a01c65fbab71bb49f8e60ef934101ee53dc598d945ff48022c8362431756fc682239c7297bfb81b03f206d1ed4d4106e8abf7dc9cfc3348a16d145335f3b4a3691545389508d497335024e17a04a92c4adcab4984cbf96e3054f34199f7359685ae8c20c9508a", 0xe4}, {&(0x7f0000005180)="55f1906fe3955966b84fd9105ca1c0f11ae5e8e0638a6b53ea3fbaf0e36fab9b87c455273d91b25ee0588ae167417a81bbba69aa8e57acb8f33f7276bc3ab72809a3a0fcdeee13387bbeaf2996b276c57cd101c01837f1b99c86884a741626ac13d843bc3fcff9efe486d506783693a66b10c4414bd704cf2c13409cedbf9d94ba2884b2bb45a0940d73ea087ccc80c2de46e96098dbf37f9049ebccf2b4cdc876ffa1a76a5bc4", 0xa7}, {&(0x7f0000005240)="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", 0x1000}, {&(0x7f0000006240)="a352d8efd39c1d5ef19cc2e55d3dc2e6d603d65c53376cf8adfcbae91dec636a85f251ad7d1805c4a1b126aba825ad0ef7f1dd41982df3dd03e9ddeb721463bbcf9f5e77e5e2b748605e3b50eabaedb8fbe1fbed40cb52ed8da390cbe2866ebf83098efe7478000904f7254540d195c4d6b428729bc9df158e310df11018425e07369601d46804107d9149926effb7834d0b431b36a6573d38cdbba2d077bc", 0x9f}, {&(0x7f0000006300)="fa1ea4e99dbeeef8c4a80016283a577be6c55d8fd165beb5a43cd9b37d3e7057d2d408eb5bf0a8aef9e28704bb76bd9b9ac2a00508aef1eb90f1bc5eda3ca12d6d9631b47fca4448ba05fe0098384336da629bb33623bcecef9a1e9514305a9c821b6743f98975c7043814e9dfd2cbb2e4291b5c0ea32436835ff7b54337728e7743d4b13fdc58a469ec7bc85421247e0252cef3f2b648518875647d9140a14123b35211dd967fa745b3dcf91e43c44d1dc39f9461c5ccf7090a4d09038fbb42b0fe57d92a9bc23b1de5b6613d0060939b65abc52760c5749656a25bc2", 0xdd}, {&(0x7f0000001fc0)="32223c0b41827dc4d2", 0x9}, {&(0x7f0000006400)="737d0ceeb8", 0x5}, {&(0x7f0000006440)="fce3d1f9bd672e098258405dce7bc1e3a7a66c80baf61ba2fc4e57f65d", 0x1d}], 0x9, &(0x7f0000006540)=[{0x70, 0x11e, 0x1, "c03692f26974946c50aacca6fa1911ae30e526d6f826c15118c2d3b56dcac07cad6cf6b1c4f3503406d061af18c59eae8a8b0149acfee11dbaf54f99c6e7033c4b9f4380e2c35f34ee6cf25ad5d58bdb75cb136017a78edaea7a2944ab4a83"}, {0xc0, 0x10d, 0x1ff, "f9decb0ddc438156b95b6a4a5ac82df833124091e84c06f48a06f9d1f9b3e436e3fe2b4383296bca140a71d713511f3594b4e215bde616250d963cb1c0b668b9ef688bccea66be190d528f452349bff50702a2c5a78653e448e2c4cbeb02769a41ffc808d0f7fb0f64d439355f81adb0d47788e1c8be58fb94e2c688421ec5695a6d132d16ca5cbdd1e771bf6d489aab6edfd4c6b6e118289505feef72033c32da510b9c97b314e9a92dbb488a"}, {0x110, 0x110, 0x0, "3efd363ee2615541b4244e0d87f0882c571c318802c1723227d5007ba8a930ebe76beddae263f665c2013e7f2310fdd251478114d82a45a6d71346e3ae4ad4febb074f3cd4cc022eff22081ec61e795c147f3f82c51f6958b807ae0ab017886eda358fa38333f733ab79d51e2769903d3c1d8de5a37e5579125b9e20ab86325704fb4cdb5658497e94b4e16fcb404069a5e0d5f739c7b1a4abc23e78dd02edbf916b9ec7b2ab71cf57c3e92588a5b33cd57a133d8aecfebf9008a9111aaf6275b2cfb507c6608dce96cba515dc1b9b29448b543a27cfb76371a2e8597b5b15aa120d82a8657f62d01cd527497d7ed45b2d5fb4e69993d535140ba6"}, {0x70, 0x117, 0x1, "0ca3d21ae9adf61536e2aab7f5fc64644865ba959f83a010f12e97f4ad12134d2bfe0fca2984e49a12392f1f54e6affa6ef39dfc389f61ffb6b5036647e5b4d1bfa5d140c0e8c276c8d521cd257d5868ffa88170f9bf9eb58abccf3d50"}, {0x50, 0x109, 0x4, "96b160356cbc524a98d2cdbe1aaeb520bd6ae972009b517c5296d82a4f9e3613ebbfe64aff92d537557f9cf5c817e13c48214c12b73c1403a4"}], 0x300, 0x20000000}, 0x200}], 0x4, 0x8010) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0/file0\x00', 0x40000, 0x20) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000006980)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000006b40)={&(0x7f0000006940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000006b00)={&(0x7f00000069c0)={0x10c, r3, 0x40a, 0x70bd29, 0x25dfdbfd, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffc}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa6}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x61e}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x5}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8040) sendmmsg(r0, &(0x7f0000002000)=[{{&(0x7f0000000080)=@in={0x2, 0xc67a}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000001c00)=@in={0x2, 0x4e23, @broadcast=0xffffffff}, 0x80, &(0x7f0000001e40), 0x0, &(0x7f0000001e80)}}], 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000006b80), &(0x7f0000006bc0)=0x4) [ 252.939273] binder: 17522:17524 transaction failed 29189/-22, size 32-0 line 2856 [ 252.996192] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:22 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000100)=r3) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'ifb0\x00', 0xa201}) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0xfdef) 2018/05/19 16:47:22 executing program 6: r0 = socket(0x9, 0x1b43e204b3f631df, 0x101) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:22 executing program 4: r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffffffffffeed, &(0x7f00009ad000)=0x2) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x9}, @in6={0xa, 0x4e20, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x7}, @in6={0xa, 0x4e20, 0xfffffffffffffffe, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x3, @remote={0xfe, 0x80, [], 0xbb}, 0x80000001}, @in6={0xa, 0x4e23, 0xbc76, @mcast2={0xff, 0x2, [], 0x1}}, @in6={0xa, 0x4e20, 0x80000001, @dev={0xfe, 0x80, [], 0xd}, 0x400}], 0xa8) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') lremovexattr(&(0x7f00000001c0)='./control/file0\x00', &(0x7f0000000240)=@random={'os2.', '\x00'}) close(r2) 2018/05/19 16:47:22 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x2a8, &(0x7f0000000080)=@raw=[@generic={0x4, 0x200, 0x8fe1, 0x5}, @ldst={0x3, 0x3, 0x0, 0xf, 0x0, 0x121, 0x10}, @exit={0x95}], &(0x7f0000000040)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) ioctl$KDMKTONE(r0, 0x4b30, 0x8e) 2018/05/19 16:47:22 executing program 7: recvmsg(0xffffffffffffff9c, &(0x7f0000000240)={&(0x7f0000000140)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/54, 0x36}], 0x1, &(0x7f00000002c0)=""/89, 0x59, 0xfffffffffffffff7}, 0x0) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000340)=r1) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendto$inet6(r2, &(0x7f0000000000)="e2", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4001, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) listen(r2, 0xffffffffffffff7f) setsockopt$inet6_opts(r2, 0x29, 0x3b, &(0x7f0000000280), 0x8) accept(r2, &(0x7f00000000c0)=@can, &(0x7f0000000080)=0xffffffff0000001c) 2018/05/19 16:47:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:22 executing program 1: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000002640)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000005440)='hugetlbfs\x00', 0x0, &(0x7f0000001d80)) chdir(&(0x7f0000000000)='./file0\x00') creat(&(0x7f0000000080)='./file0\x00', 0x0) acct(&(0x7f0000000100)='./file0\x00') 2018/05/19 16:47:22 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x3f000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000280)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x101200) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f00000000c0)={0x2, 0x8001, 0x1000, 0x0, 0x0, 0x101}) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = socket(0x10, 0x802, 0x0) write(r4, &(0x7f000052a000)="240000001a0025f0006bb404feff141c020b5aff6e10b500000780cc0800090001000000", 0x24) dup3(r3, r1, 0x0) ioctl$int_out(r0, 0x5460, &(0x7f0000000040)) 2018/05/19 16:47:22 executing program 3: getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000040)) 2018/05/19 16:47:22 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 253.892995] binder: 17564:17566 transaction failed 29189/-22, size 32-0 line 2856 [ 253.916217] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:22 executing program 1: r0 = dup(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000140)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) sendmsg$can_raw(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000340)={&(0x7f00000002c0)=@canfd={{0x0, 0x6, 0x8, 0xffffffffffffffaf}, 0x26, 0x1, 0x0, 0x0, "dfb5f574a94990fd690e4e815001b9017c47eac6ab0b3e6b7f3d96e2cfc024bacd15040229c4ed64a2a44cb30c45f8afbf41e9e8659ac136eec02941a9e704b8"}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x40004) r2 = socket(0x10, 0x4000000000000002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f00000000c0)=0xc) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000100)={r3, 0x7, 0x8, 0x7, 0x2, 0xff}, 0x14) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'veth1_to_bond\x00', &(0x7f0000000040)=@ethtool_sset_info={0x37}}) 2018/05/19 16:47:23 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x4c) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f0000000200)) recvfrom$inet6(r0, &(0x7f00000003c0)=""/144, 0x90, 0x0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x1b}, 0xfffffffffffffff8}, 0xfffffffffffffdc8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) times(&(0x7f0000000080)) recvfrom$inet6(r0, &(0x7f0000000100)=""/105, 0x69, 0x100, &(0x7f0000000000)={0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) sendto$inet6(r1, &(0x7f0000000280)="3bb84d70ce8e6b3fe77358569ec9cc83d685357cb19780d6", 0x18, 0x40004, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) sendto(r0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x0) 2018/05/19 16:47:23 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x9, 0x1b, 0x1f, 0x1, "f27bcb508a0b82d1fd33a1ebb9eb1b7c8f177b403a46bffdba0869f4b56329f8b2da8718ac359bc333ff9fa3010bd7e053e3803ef6f7776eff57622e170ad8fd", "280830cd5692fd62567bf986cf0bbeb09f5dcdc1487756c24b012f752c6726cf", [0x6, 0x6]}) lookup_dcookie(0x1, &(0x7f0000000080)=""/146, 0x92) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000040)=[{0x18, 0x29, 0x5, "27020201"}], 0x18}, 0x0) [ 254.055220] binder: 17583:17584 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:23 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x6, 0x0, 0xfff, 0x9, 0xfff, 0x4, 0x6, {0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x4, 0x6, 0x40, 0x2, 0xf1}}, &(0x7f0000000100)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000001c0)={r3, 0x10000, 0x1ff}, &(0x7f0000000340)=0x8) r4 = dup3(r2, r1, 0x0) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f00000000c0)) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) ioctl$KDGKBMODE(r4, 0x4b44, &(0x7f0000000080)) [ 254.101185] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:24 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl(r0, 0x3, &(0x7f0000000180)="51364b9721fce6ef7586fb015803f4ba47b39b05d63ac0964ac1c951feae0a7819920b3c336aa87c69d3ca022880c8156075420ab123612701ba7be52dc254877b41b3f0d2df4fa1b314e121f0b8935aaedbc631ea8b91da06182685f1c27e6edeac6b020294e46a9e5bc33d3b84a10c52aa") socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) readlink(&(0x7f0000000040)='\x00', &(0x7f0000000340)=""/71, 0x47) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x6c, 0x19, &(0x7f0000000080)="a30177de69073bbf2f11bf2a64f187dd1843a33b0c251e02c6349346e0974f82314a6f9f5c9c4eacc0960882b62a4f254c83b77b38f5ff5d2da079aefbd46af117201bb4ba2b1a76d5b3c9cf88cbe42f58307f08636a1a0e4bcdd94654dea8e8b45c9c073b8ee4de9be4f611", &(0x7f0000000100)=""/25, 0x8}, 0x28) 2018/05/19 16:47:24 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x100000000000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:24 executing program 6: r0 = socket(0xa, 0x1, 0x47) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') r3 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r3) dup3(r2, r1, 0x0) 2018/05/19 16:47:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:24 executing program 3: r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000002c0), 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040), 0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r1, &(0x7f0000000080)='net/wireless\x00') 2018/05/19 16:47:24 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000000), 0xffffffcb) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0xc) shmget$private(0x0, 0x3000, 0x40, &(0x7f0000011000/0x3000)=nil) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) close(r0) sysfs$1(0x1, &(0x7f0000000040)='nodev:wlan0GPLvboxnet0\x00') 2018/05/19 16:47:24 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x0, &(0x7f0000000040), &(0x7f0000000300)=ANY=[@ANYBLOB="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"]}, 0x1b0) 2018/05/19 16:47:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f}, 0xc, &(0x7f0000000440)={&(0x7f00000004c0)={0x1c, 0x22, 0x1, 0x0, 0xfffffffffffffffd, {0x8}, [@nested={0x8, 0x9, [@generic='\n']}]}, 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2, 0x0) bind$vsock_dgram(r1, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @reserved=0x1}, 0x10) [ 255.191499] kernel msg: ebtables bug: please report to author: entries_size too small [ 255.208667] binder: 17634:17635 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:24 executing program 3: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @link_local={0x1, 0x80, 0xc2}}, 0x10) ioctl(r0, 0x0, &(0x7f0000000380)="80b213933a5033819ad56c4baca8465b8d89da408dcca6e6e8a5b341985a2af74a748be4eff4129643301541d35e86ab54a5b63777c9d6948656ae3373300b65fba0e82108070d8c0e6777b2d3a94194736c17cc9523edfc3be90400ee15a87fac135e9955534c34e14897316bc9cbfd339ee8d017a12480016d25e95dde0c4430eec516deb5d1a980f31dc7e79dbdc3484b115d99e43834") sendto$llc(r0, &(0x7f0000000300), 0x0, 0x4003e, 0x0, 0x0) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000280)=0xe8) sendto$packet(r1, &(0x7f0000000080)="12f37794c49fc6f302797b833f2e97b722e44bf964649392cc7e5778bc9ddd07cec28ca489bb73ed201111f33399e388cb29517f30592ac5826a25c154eebf3576dcf78a5c550713306c5f7c69693afd49c4d5a6be16f0ada5182cb78d652f251f0d1614d0633bebe4d6eea4121d0e127e71473f0be30b79108adc52fd2e0f79f33f9531ed495392e08b2ec4e32f880613fcd66c1bf77e99b75cc14cd382ed3a8f4dead7d35320430e7a4ab08fb2a60d8e9631abefcdcbe1e0be482c356b47e45db508037255a9a822974d4776e55b222952a8b1ce1895ae3b682200154b71ba98d861", 0xe3, 0x20000855, &(0x7f00000002c0)={0x11, 0x5, r3, 0x1, 0x1582, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) openat$cgroup(r2, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) 2018/05/19 16:47:24 executing program 5: r0 = socket(0x9, 0x4000000000080002, 0x0) bind(r0, &(0x7f0000000040)=@generic={0x11, "8a87c823d5a62d85372deb5a0b555fa76d884b1b6f8db73292f888cd8226e3078d2ccb44bb9361b62e5462ad592bbc035bce6ecfd25ebe88c7493f52c5c7cb7c9ac41b95d6356c710e35c4b974c26610fdaa75bdb0e9ec65dd43a1d5adbd17897e0bc187e59e84280233d9f5604d07ed0b591663d8a56ada3655ac7ae009"}, 0x80) 2018/05/19 16:47:24 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x12000, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x325) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)="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") 2018/05/19 16:47:24 executing program 1: unshare(0x800) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) 2018/05/19 16:47:24 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fe9ff6)='/dev/ptmx\x00', 0x0, 0x0) r1 = epoll_create(0x10007fff) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0xe) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)) r2 = syz_open_pts(r0, 0x0) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0xc080, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r3, 0x4010641a, &(0x7f00000000c0)={0x5, &(0x7f0000000080)=[0x9, 0x8, 0x2, 0x7, 0x508a]}) r4 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) close(r2) close(r4) [ 255.250235] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:24 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x0]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:24 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf032cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r1, &(0x7f0000000280)='ns/user\x00') r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000000040)) dup3(r3, r2, 0x0) [ 255.436011] binder: 17668:17671 transaction failed 29189/-22, size 32-8 line 2856 [ 255.482553] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:25 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000232ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x4, 0x0, &(0x7f0000004fbc)=ANY=[@ANYBLOB='\x00c@@'], 0x0, 0x0, &(0x7f0000009000)}) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) fcntl$dupfd(r0, 0x406, r0) 2018/05/19 16:47:25 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x3, 0x80002, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000001000), 0x0) setsockopt$packet_int(r0, 0x107, 0x0, &(0x7f0000000000)=0x2000000000000000, 0x284) 2018/05/19 16:47:25 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)=ANY=[@ANYBLOB="94000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r2, @ANYBLOB="5400020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000a4c100000000000008000300050000000c0004006861736800000000"], 0x94}, 0x1}, 0x0) 2018/05/19 16:47:25 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x4, &(0x7f0000000080), 0x4) tee(r0, r0, 0x4, 0x2) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x73c6df42, 0x20403) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) 2018/05/19 16:47:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:25 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x10, 0x3, 0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00', 0x3, [{}, {}, {}]}, 0x58) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000100f07031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) 2018/05/19 16:47:25 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x2000, 0x0) ioctl$GIO_SCRNMAP(r1, 0x4b40, &(0x7f0000000280)=""/72) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) 2018/05/19 16:47:25 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x3f00000000000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) [ 256.271988] netlink: 36 bytes leftover after parsing attributes in process `syz-executor7'. [ 256.290267] binder: 17692:17704 transaction failed 29189/-22, size 0-0 line 2856 [ 256.305605] binder: 17696:17699 transaction failed 29189/-22, size 32-8 line 2856 [ 256.312224] binder: 17692:17704 transaction failed 29189/-22, size 0-0 line 2856 2018/05/19 16:47:25 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") pselect6(0x2e7, &(0x7f0000f33fc0), &(0x7f0000768000)={0x0, 0x0, 0x0, 0x1000000000000000}, &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000040)={@any=0xffffffff}) 2018/05/19 16:47:25 executing program 1: msync(&(0x7f0000952000/0x2000)=nil, 0x2000, 0x2) r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0xba76, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000000000101, 0x84) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000000c0)=0x0) wait4(r2, &(0x7f0000000140), 0xb, &(0x7f0000000180)) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000040)={&(0x7f0000953000/0x3000)=nil, 0x1, 0x0, 0x20, &(0x7f0000954000/0x1000)=nil, 0x747}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/autofs\x00', 0x80100, 0x0) [ 256.321685] netlink: 'syz-executor7': attribute type 3 has an invalid length. [ 256.334908] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:25 executing program 6: r0 = socket(0xa, 0x4, 0x0) ioctl(r0, 0x800000008912, &(0x7f0000000040)="c6262659cc16f22b70c12c8523bf012c5577") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0xfffffffffffffffe) 2018/05/19 16:47:25 executing program 4: r0 = open(&(0x7f0000000000)='./file0\x00', 0x4000100, 0x0) clock_gettime(0x0, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000080)) write$evdev(r0, &(0x7f0000000180), 0x0) sendfile(r0, r0, &(0x7f00009bcffe), 0x2000000800004c39) creat(&(0x7f00000000c0)='./file0\x00', 0x0) 2018/05/19 16:47:25 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:25 executing program 7: r0 = socket(0xa, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setfsgid(r1) sendmmsg$inet_sctp(r0, &(0x7f0000006200)=[{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000000c0)="85", 0x1}], 0x1, &(0x7f0000000400)=[@dstaddrv4={0x18, 0x84, 0x7, @empty=0x8000000}], 0x18}], 0x1, 0x0) [ 256.396773] binder: undelivered TRANSACTION_ERROR: 29189 [ 256.413207] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:25 executing program 3: r0 = socket(0xb, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$alg(0xffffffffffffffff, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) socket$inet(0x2, 0x80800, 0x6) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000005940)=[{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000003940)="48107936edbbc8470fd3bd7d3faf24211f88c05f85353b1bcef5de3280f2687c2620032770501ef8a908213c16f3b17383193cefab9cd87a0e4958fa53ac2576bdf6e4aa2b73a8ae9ddad19092065a07a0df23aa43a96ad5163f8c10c3516fff9e65261d4d15fc36fc66a9b264b3bed5d84d796328051ffcf2c7b3ebd851b3da7056d7d478fd06d41cf43be76f1c4d8d063f9aa159b9a785d4acd315f4da35cc6ba1474f40ac24eb4d0d96710f22da64ecfd62e99652af5d934e310437ee6b58d579baed1cd9b72f5b9210f986f57a03a25ed92f7b0f6e387b6b01e5a9689987", 0xe0}], 0x1, &(0x7f0000000640)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000000)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f0000005a80)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/6, 0x6}, 0x0) 2018/05/19 16:47:25 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="014828cfdecd95de35645701c653e5c8c183dfa3e61db4e10f83b90e663be962e57e79daf871fe948c2ea9970b5bec3db14a0cb06fcdb3a4e97d1b4b8d79890fcae9f16aa625762c6c03c47281e1401af436eac2c96048c33f7663179f13206aca1af69bf5f20428912b7044e502c93e94f54d7bde785b31eec752189c6459d66c958af6d4d6be96b64c8ef185c6dd60c57291b449c103dff2a7c24047b9a24e7ae549d9d0633a445f744f752703b58be5e552386bb68b780644897fe475ee") getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(rmd128-generic,pcbc(aes-aesni))\x00'}, 0x5f) close(r1) 2018/05/19 16:47:25 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") prctl$intptr(0x1f, 0xcab9) setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/05/19 16:47:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x10000000006, 0x0, 0x20000000, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) accept(r0, 0x0, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f00009f8000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x1, 0x1ff, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3}, 0x20) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000100)={0x1, 'vlan0\x00', 0x1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @broadcast, @broadcast}, &(0x7f00000009c0)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000a00)={@ipv4={[], [0xff, 0xff]}, 0x5b, r3}) [ 256.509995] binder: 17731:17732 transaction failed 29189/-22, size 32-8 line 2856 [ 256.570672] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:26 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e21, @rand_addr=0x2}, 0x54) sendto$inet(r0, &(0x7f0000000000)="010c9e498e", 0x5, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000040)=0x1, 0x4) sendto$inet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4000000000004e23}, 0x10) 2018/05/19 16:47:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x401, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000140), &(0x7f0000000180)=0x14) r2 = openat$cgroup_procs(r0, &(0x7f0000001280)='cgroup.procs\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000000)=""/242, 0xf2, 0x20000) 2018/05/19 16:47:26 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0xc2000) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f0000000380)="68580ea358a52e5a44deb27c16dd1206e2bc2ff21eaff86e5ee6dd63c4cf927765959895af85d4d9751c442ae44af23cdfdfcfe5c9bd083c1175407f5a6fcd8efa73e16f8f540f0ee8b98b0196f1299c0dc3684fcecd972e15b5a70f7e1552bf41aba0ffcf1c8615c350fbb95ed9ee1212a921d468ebf9") getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', '\x00'}, &(0x7f0000000280)=""/197, 0xc5) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r1, 0x0) 2018/05/19 16:47:26 executing program 4: process_vm_writev(0x0, &(0x7f0000000000), 0x0, &(0x7f0000003000)=[{&(0x7f0000000040)=""/2, 0xffffffffffffffef}], 0x1, 0x0) sigaltstack(&(0x7f0000003000/0x2000)=nil, &(0x7f0000006ffc)) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x4, 0x200000) ioctl$SG_SET_TIMEOUT(r0, 0x2201, &(0x7f0000000080)=0x724af6ec) 2018/05/19 16:47:26 executing program 3: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r2 = socket(0x40000000002, 0x3, 0x2) ioctl(r2, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={"6966623000faffffffffffffff00", 0x20100e}) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000080)={0x0, 0xdd, 0x101, 0x1, 0x2, 0x4, 0x9, 0x1f, {0x0, @in6={{0xa, 0x4e20, 0x7fffffff, @ipv4={[], [0xff, 0xff]}, 0x9}}, 0x400, 0x1, 0x6, 0x80000000, 0xa0d0}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000180)={r3, @in6={{0xa, 0x4e20, 0xfff, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xae4}}, [0x5, 0xffffffff, 0x400, 0x2, 0x2, 0xfffffffffffffff8, 0xfffffffffffffff7, 0x2, 0x100000000, 0xde0, 0x4, 0xffff, 0x6, 0x195, 0x2]}, &(0x7f0000000280)=0x100) ioctl$TUNSETLINK(r1, 0x400454cd, 0x100000000308) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/19 16:47:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000008000), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:26 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x40000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000040)) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000180)="c83e3682318499f6f96ad4c82d8935e983a9185a62ef356bb32d6bf627981fb243dc9de1687eb1fb99e1f616a64ac4cc43d105092ae984991fcb4b763596fffac2560ec9b286318dbb1961b627e6dd845e3d4578cf8b5125d6f5be7523585cc7b7907b1df434874d2de361fbcd79556e0eb9a659eb499cb775f16d4f356316f3f6c38c1fa50e3097d965c465bb2333a26d364e71a6f8b10ee88bb21a0b506c6607eaf85407acfa0785fc8aace9a8df9c2822b8a5903a5b012d10a96be2a9bd886d560be5a9fc4cf37155f3eed63a52167f3686ebaefcd244b68361af8f13bccfd6f4aef10fe9", 0xe6}, {&(0x7f00000000c0)="8ca32cb6d3d4c7084532625b637d3c6dfe5307ba3e3d3c894b1da50064558c8f034ab6c8f00d821d267e7052", 0x2c}, {&(0x7f0000000280)="236b5219409949490490c902af80ba5d4f4d5ce30fad7f019c70c5fc77c5cb16247b31693b0511dad69f3e8b8967a1708b227cd66a5e59e513a50f48a2a2ec21849a0a805231a55dce80c67ede9f637a752d921f12de7b4391fc322e4f7d651c03661bc3c2965f257a1cc2f38268dccbed83d429d37cd3ee727c2fe025719e1fe82808d7f9509364bb3ffd5a7400bbb3a821dc9c2f9c98269bfae090fac33df917a02dfc29f7afad1b607e683dacdc7afd246176d3e9e246c15c9b8ec0d6ffa09741e5757d8419467e381848741be1fc78b1bc12b55076e22b58332fcb1b879adf", 0xe1}, {&(0x7f0000000100)="4a39e3", 0x3}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="d7e09d40478023688695ad23df48b8ebd5a0eb6507c9aae700e5e23d92b7fc897fef78251dcd07ce19c1e7b796c65d3be4ab3a5c920fa7723173cf01d82743ccbb56c7d71866c33d", 0x48}], 0x6) r2 = socket(0xab6268210b6c170b, 0xa, 0x8) setsockopt$packet_buf(r2, 0x107, 0x6, &(0x7f0000001480)="bd9734e82fb0e961cca7d8b122df2e27b959c8c05f687ad444ab614de5112f97659d669a6472c0f55dbe8fbbc089727f36e085461bdefae7e7460a58b56bcfe6d0632d3549d9474f42bd0d80c7ecd40dacdeb5516f71b35fafc3024a5d6d5d06d3c3333fdd3ebaf317ef3f799fd71e92b5648a1e2ba3799f209815db7103a411d84a9af7a897d3a9acbf95eee34fa2f413b0114152a629f5298a9338a441c29fd9764f470dd717c0bda2478baf8ead1acb2cdfbc0d8d1194b5809311017a9f36768567f7b75446c806932e806092e93b8044642e339c1d", 0xd7) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x0, 0x0) 2018/05/19 16:47:26 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000008000), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 257.235984] binder: 17782:17786 transaction failed 29189/-22, size 32-8 line 2856 [ 257.247709] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:26 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x100, 0x406800) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f00000001c0)=0x200, &(0x7f0000000200)=0x4) r3 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x84e, 0x101000) ioctl$TUNSETNOCSUM(r3, 0x400454c8, 0x1) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x280000, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='9:0\r'], 0x4) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f00000000c0), 0x4) 2018/05/19 16:47:26 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) syz_mount_image$jfs(&(0x7f0000000040)='jfs\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x4, &(0x7f0000000340)=[{&(0x7f00000000c0)="19fed7261b077675", 0x8, 0x1}, {&(0x7f0000000100)="68866e1b1b115181f3d4fd4b7f3765a83a1482ee659ca8f2bc47db83fadd725f0b01db2a1ac7813c43313a5747d2615f2368b60d5981ee564453935dc8e36e6f139315d5f9675d30927e2615e970dcf1124d91905823f6bbd525f3e7f69b26e36f4e86f1062fdced8ce81d52f89c67c8ea74f8", 0x73, 0x20}, {&(0x7f0000000200)="6a61fc4ca1b33fa173915562570618881b28b38b24fd293060f8e907b93825e7c4319dd918f0888fdbf6eb686635198a733a1aa380c4f22ba260549c2d7f956a1b9fc3e409f13cdd15c482c8c1e22487bddcb5570ac9fad7df309fcd7e23cac9e4acc84f6f82356df37459955e23f019f02d173fc9d405784dab1059a07453b673ff38bbfc1668891b6bfd1078e683bad523c2f6d8283930ef0e38d8391fb19846979194fe8c7249d44ff89990a724597468e4650bdca0af217f07070e46383941de080d6606cb963406c8aa1c8493f4512de9a3430f16", 0xd7, 0x3}, {&(0x7f0000000300)="17928da3e2b9499c7583a06f458eef99fccb9878d8e3e977d75d2e37ee684c5cb359d10c2aa99d710cbd0eef0a8b61dc7c", 0x31, 0x7fffffff}], 0x20, &(0x7f00000003c0)={[{@integrity='integrity', 0x2c}, {@iocharset={'iocharset', 0x3d, 'maccyrillic'}, 0x2c}, {@discard='discard', 0x2c}, {@gid={'gid', 0x3d, [0x39, 0x34, 0x34]}, 0x2c}, {@discard_size={'discard', 0x3d, [0x34]}, 0x2c}, {@discard_size={'discard', 0x3d, [0x0, 0x3f, 0x37, 0x78, 0x31, 0x34]}, 0x2c}]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000440)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000480)={0x9, 0x4}) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}}]}, 0x50}, 0x1}, 0x0) 2018/05/19 16:47:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/wireless\x00') fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) readv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f00000004c0)=""/113, 0x71}], 0x2) 2018/05/19 16:47:26 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000a7dfff)}, 0x1000a00000400, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x3, 0x70, 0x80, 0x1, 0x10001, 0x5, 0x0, 0xff, 0x41, 0x4, 0x401, 0x1ff, 0x7, 0x102, 0x6, 0x7f, 0x6, 0x9, 0xc5d6, 0x7ff, 0x585, 0x654, 0x0, 0x7, 0x100000001, 0x101, 0x0, 0x8f0, 0xab, 0x0, 0x200, 0x8, 0x8, 0xd4, 0x2, 0x6, 0x8, 0x3c4d, 0x0, 0x80000001, 0x2, @perf_config_ext={0x973a, 0xd9d5}, 0x10000, 0x1, 0x9, 0x0, 0x4, 0x2, 0x4c}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = accept(0xffffffffffffffff, &(0x7f00000000c0)=@nfc, &(0x7f0000000140)=0x80) getsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000200), &(0x7f0000000240)=0x4) chmod(&(0x7f0000000340)='./file0\x00', 0x4) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x1158c0, 0x0) r3 = request_key(&(0x7f0000000500)='pkcs7_test\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)='peth0-,\x00', 0xfffffffffffffff9) add_key$user(&(0x7f0000000380)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000400)="b05b68dd65247e6e328fd6f5af7c20923ddb44328b56e72b48bdf865a04625a31637779f9631d9685b926e3e44568eeda15b184dc04bf8b71186cdea6f653f63a5cc3ee240e26927283e88f63625cfe48625ea3e2ecf2c92b20dcb973877c3c179f5887b9eebf28d511b3d5a198268358f9f555799355ad4f3a40d8f050a38ab69032e8580d8d219df0699eb71dd461965123408a400efadf21dcabb198294a7380c59976d1da0071e3dc0116029e90d0fbce43ac65a72e9244892cb67928fd81584dde05a3eabce2091934e", 0xcc, r3) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="030000000000000001000000faffffff070000d4312f5f513c86fede87070c0000000000d5000000000000000d0000400700000004000000080000000008000000000000000000c0ac950000f2000000"]) 2018/05/19 16:47:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x2, 0x80) ioctl$BLKROGET(r2, 0x125e, &(0x7f00000002c0)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = creat(&(0x7f00000001c0)='./file0\x00', 0x50) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000200)={0x4, 0x891}) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000000c0)={0x4000, 0x0, 0x10003, 0x401}) ioctl$DRM_IOCTL_SG_ALLOC(r5, 0xc0106438, &(0x7f0000000100)={0x3, r6}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @loopback=0x7f000001}}, 0x80) epoll_create(0x9) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000003c0)=""/154, &(0x7f0000000300)=0x9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/19 16:47:26 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000040)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@multicast1=0xe0000001, @in=@loopback=0x7f000001, 0x4e21, 0xffff, 0x4e21, 0x6, 0xa, 0xa0, 0xa0, 0xff, r1, r2}, {0x200, 0x80000000, 0x2, 0x7, 0x73d, 0x7fff, 0x81, 0xddf0}, {0x1000, 0x4a74, 0x4, 0x8}, 0x7, 0x6e6bb1, 0x1, 0x1, 0x1, 0x1}, {{@in=@broadcast=0xffffffff, 0x4d2}, 0x2, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x2, 0x1, 0x20, 0x6, 0x7fff, 0x2008}}, 0xe8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r4, r3, 0x0) [ 257.344802] binder: 17802:17803 transaction failed 29189/-22, size 32-8 line 2856 [ 257.400381] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup2(r0, r2) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000040)) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x481}]}) 2018/05/19 16:47:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000008000), 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:27 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) select(0x40, &(0x7f00000000c0)={0x9, 0x9, 0x1, 0x3ff, 0x9, 0x203, 0xace}, &(0x7f0000000100)={0x5, 0x8001, 0x2e, 0x20, 0x4, 0x2, 0xd58d, 0x18}, &(0x7f0000000140)={0xbd1e, 0x1f, 0x0, 0x7fffffff, 0xffffffff, 0x50d0, 0x10001, 0x9}, &(0x7f0000000180)) timer_delete(0x0) getrusage(0x0, &(0x7f0000000240)) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000080)={@empty, @loopback=0x7f000001}, 0x4) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={0x7, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e21}, {0x2, 0x4e20, @rand_addr=0x9}, 0x4, 0x7, 0x1, 0x100000001, 0x7, &(0x7f0000000000)='veth1_to_bridge\x00', 0x80, 0x40, 0x100}) 2018/05/19 16:47:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)) 2018/05/19 16:47:27 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0xc0000, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f00000000c0)=""/96) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r4 = dup3(r3, r2, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000040)) 2018/05/19 16:47:27 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x101, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x8, 0x1a, [{0x4, 0x1c}]}]}, 0x28}, 0x1}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x87ac, 0x2) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) 2018/05/19 16:47:27 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x1000000, 0x0) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:27 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f00000003c0)={0xffffffff, 0x6c, 0x1, 0x6d, &(0x7f0000000280)=""/109, 0x7d, &(0x7f0000000300)=""/125, 0x31, &(0x7f00000001c0)=""/49}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r2) fcntl$setsig(r1, 0xa, 0x9) write$cgroup_type(r0, &(0x7f0000000000)='threaded\x00', 0x9) getdents64(r0, &(0x7f0000000140)=""/75, 0x4b) fcntl$getflags(r0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f00000000c0)=0x57, 0x4) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40004000, 0x0) setsockopt$llc_int(r0, 0x10c, 0xc, &(0x7f0000000080)=0x5, 0x4) [ 258.214195] binder: 17844:17857 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:27 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000240)={&(0x7f0000a65ff8), 0x8}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0x5, 0x6}, 0x0, 0x8, 0x80, {0x8001, 0x9}, 0x100000001, 0x1fe}) 2018/05/19 16:47:27 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000300)='./control\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rmdir(&(0x7f0000000040)='./control\x00') r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x4000, 0x0) epoll_pwait(r2, &(0x7f0000000080)=[{}, {}, {}, {}], 0x4, 0x5, &(0x7f00000000c0)={0x2}, 0x8) 2018/05/19 16:47:27 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00', &(0x7f00000002c0)='\'\x00', 0x2, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000300)='/dev/sg#\x00', 0x0, 0x163882) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x3) getsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast1, @remote}, &(0x7f00000000c0)=0x8) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) dup3(r3, r2, 0x0) [ 258.263771] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:27 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/05/19 16:47:27 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)={0x3, [0x8, 0x7, 0x4]}, &(0x7f0000000080)=0xa) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x40, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={r2, 0x1f, 0x3, 0xc608}, &(0x7f00000001c0)=0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xa0000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x70, r4, 0x210, 0x70bd25, 0x25dfdbfd, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xffff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040801}, 0x40005) sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x80, r4, 0x200, 0x70bd26, 0x25dfdbfc, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc9e6}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffff00000001}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}]}, 0x80}, 0x1}, 0x10) r5 = memfd_create(&(0x7f00000004c0)='\x00', 0x3) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000500)={r3, 0x10000}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000600)=0x3) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000640)={'filter\x00', 0xa3, "b23389c65ac570837843297037535af6b7061eca327b822f7e2c349a17e7ff736f7b27eac5f42969b5392410268a367da7e1edbf952baad8ec25ca842d1c150fa375e405af46fe78649e15d8317562fa0575f2255321ba85df9bb6285f81f469e522564488b4aec56f21a26bfc00e124a98b7513c144534bd5fd682555660e65602de7c810142eb41434cf972de4935fba55d5962a9e1e512454e76d2bed90c82bec64"}, &(0x7f0000000740)=0xc7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000780)=0x7fff, 0x4) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f00000007c0)=""/53) r6 = fcntl$getown(r5, 0x9) ioctl$sock_SIOCSPGRP(r5, 0x8902, &(0x7f0000000800)=r6) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000840)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000880)={'veth1\x00', 0xa90d207f41f2844d}) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000008c0)=0x4) ioctl$KVM_SET_DEVICE_ATTR(r5, 0x4018aee1, &(0x7f0000000940)={0x0, 0xf4, 0x0, &(0x7f0000000900)=0x4}) mknodat(r0, &(0x7f0000000980)='./file0\x00', 0x2, 0x6) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000009c0)=r0) mq_unlink(&(0x7f0000000a00)='$\x00') setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000a40)={@empty, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x3, [@local={0xac, 0x14, 0x14, 0xaa}, @empty, @dev={0xac, 0x14, 0x14, 0xb}]}, 0x1c) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000a80)={0x80000001, {{0xa, 0x4e23, 0xffffffffffff8001, @mcast2={0xff, 0x2, [], 0x1}, 0x9}}}, 0x88) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000b40)={r2, 0x3, 0x6, [0x80000000, 0x200, 0x3, 0x6, 0x5, 0xe248]}, 0x14) stat(&(0x7f0000000b80)='./file1\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000c40)='./file0/file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r7, r8) 2018/05/19 16:47:27 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="5e000000fafb0ad0ccacc7b9a2e0aace68740dec296fb9b1c9bcca07a86f693fced432d92261e671c67d1f3c1110de18763de829258b5fd7273a2260833bffb526a8c97ce7162cbfb4c2c23a609c48811fcc758ab569018ca3696cbe82611df3ba4889d6d9d238ebf1079ea89ec1c0e7c49414938eafce67a8bad04e714d67e42b99ab84cf9fa9afb9d62c3a503ed04aec82ad9df6c75e1f1ba5851da59ab245f4036b2c"], &(0x7f0000000080)=0x66) syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0xc1, 0x20200) 2018/05/19 16:47:27 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty, 0x2000000000}, 0x1c) listen(r0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000005c0)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x2b}, 0x0, @in6=@dev={0xfe, 0x80}}}, 0xe8) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) 2018/05/19 16:47:27 executing program 5: capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0xb74}) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) dup(0xffffffffffffffff) socketpair(0x0, 0x800, 0x31a8082d, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) tkill(r1, 0x3c) write(0xffffffffffffffff, &(0x7f0000000000)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000040)={0x6, {0x2, 0x4e23, @broadcast=0xffffffff}, {0x2, 0x4e23, @loopback=0x7f000001}, {0x2, 0x4e23, @rand_addr=0x100000000}, 0x40, 0x441b, 0x7, 0x1f, 0xffffffffffff8000, 0x0, 0xffff, 0x0, 0x5}) 2018/05/19 16:47:27 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x101200, 0x1) getdents(r1, &(0x7f0000000080)=""/10, 0xa) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) dup3(r3, r2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000280)={0x5, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1, 0x1, [{{0x2, 0x4e21, @broadcast=0xffffffff}}]}, 0x110) [ 258.448755] binder: 17880:17883 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:27 executing program 1: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) pipe(&(0x7f0000000040)) write(r0, &(0x7f0000000000)="1f0000000104fffffd3b54c007110000f30501000b000200000000000200cf", 0x1f) 2018/05/19 16:47:27 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r1) [ 258.565252] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 258.647389] netlink: 3 bytes leftover after parsing attributes in process `syz-executor1'. [ 258.661992] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:28 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00030000001b030000000000706d1f810000a974877c33a5ba491f0f000100"], 0x1c}, 0x1}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x2, 0x100) ioctl$BLKROGET(r1, 0x125e, &(0x7f0000000100)) 2018/05/19 16:47:28 executing program 5: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) mknod$loop(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0xffffffffffffffff) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file1\x00') truncate(&(0x7f0000000140)='./file0/file1\x00', 0x20) unlink(&(0x7f0000000180)='./file0/file1\x00') 2018/05/19 16:47:28 executing program 3: prctl$intptr(0x1e, 0x60) r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x401, 0x10000) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@broadcast, @in=@multicast2}}, {{}, 0x0, @in6}}, &(0x7f00000001c0)=0xe8) faccessat(0xffffffffffffffff, &(0x7f0000000040)='/\x00', 0x0, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000200)=""/85) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x200000000, r1) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000280)=[0xffffffff, 0xfffffffffffffffb]) 2018/05/19 16:47:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/05/19 16:47:28 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = dup3(r2, r1, 0x2) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) r5 = getegid() fstat(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x4, &(0x7f0000000300)=[r4, r5, r6, r7]) 2018/05/19 16:47:28 executing program 7: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x400001800, 0x4000) ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f00000000c0)) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000100)) syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x5, 0x4a0080) pipe(&(0x7f0000000140)) accept4$alg(r1, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000003200000000000000400000000000000b000000000000000000000000000038000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bc3c65c000000000000000000000000000000000000"], 0x78) 2018/05/19 16:47:28 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x4000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:28 executing program 1: r0 = memfd_create(&(0x7f0000000000)='broute\x00', 0x1) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x7ff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e22, 0x9d, @remote={0xfe, 0x80, [], 0xbb}, 0x5}}, 0x40, 0x4, 0x7, 0x3, 0xffffffff}, &(0x7f0000000100)=0x98) r2 = socket$inet(0x2, 0x1, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r0, 0x40206417, &(0x7f0000000480)={0x0, 0x5, 0x7, 0x800, 0x4, 0xfffffffffffffffc}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0xec, r3, 0xc01, 0x70bd26, 0x25dfdbfb, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x80, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ipddp0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10d8a641}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x50, 0x1, [@IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7e}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x21}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xff}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast=0xffffffff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5e}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffffffffffffd}]}, 0xec}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x1, 0x2d0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000c00], 0x0, &(0x7f0000000040), &(0x7f0000000c00)=ANY=[@ANYBLOB="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"]}, 0x348) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000800)={0x2, &(0x7f00000007c0)=[{0xb8f, 0x20, 0xd49, 0x8029}, {0x44909491, 0x1f, 0xc6, 0x5}]}, 0x10) timer_create(0x0, &(0x7f00000006c0)={0x0, 0x38, 0x0, @thr={&(0x7f00000004c0)="72d829c0937c3d8d84a18c218f26b388a5b855d7bb34e313a1b2f880636604c77bd81cb927ac90ae1ed532a08c73f0b5fc9d533e664e9fa75d9c7d4487a281182ecd7b676a5147c0c8a6368e509d03c2b6a6787bc3d8ace5933670c4470a509a085d7a8584e0f3b1e2eeae79406a10e816e884f7ac5de92a279fe0841b75a0624a8e7c936dc83e7978fe80922dc002dd1c80503ee6af2e629da8893ab9aff619f1951c75f46ab18750449872012a866deab2ca93b1b20ace06c74608a666c01a18f40482d49fa1ab988129541c8c32ef84c444710bb7fa6c9a6b3f25cdc61a0528078564a45c101f30db4e4de892473f68a2d4", &(0x7f00000005c0)="bb060cbcfa1adfb8c6e41b31077846a9d4222edd56e00255a45e9024df5e935eda26c0d30e7678bd1ca111dc0a5c77eda23aab852230030ed3467211f9ce4dd606edbd041cf4777a3af45338bad5e7419bd781cf73b3cb11f586892ac08b0181620e15acaa1740ea58a04a3654b962897ce9204c250115ed7c6cbca5cf486087fd9ac0791ad045174af30f9ffab01c5fd8640348820841f236c1c19aeaa739026c3808df4f88ddee564ee4b2986130372152e2b9e74ade39161e486b812e5530929751af2df61abba8e20f503188672bc3116fcd7e5b58c252559808"}}, &(0x7f0000000700)=0x0) timer_settime(r4, 0x1, &(0x7f0000000740)={{0x0, 0x989680}}, &(0x7f0000000780)) 2018/05/19 16:47:28 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000180), 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) [ 259.193530] binder: 17923:17936 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:28 executing program 3: r0 = socket$inet(0x2, 0x7fe, 0x10003) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000740)=@broute={'broute\x00', 0x20, 0x2, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x0, &(0x7f0000000300), &(0x7f0000000340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x5, 0x800, 'bond0\x00', 'vlan0\x00', 'gre0\x00', 'gretap0\x00', @link_local={0x1, 0x80, 0xc2}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xb8, 0x1e8, 0x230, [@ip={'ip\x00', 0x20, {{@rand_addr}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:systemd_logind_exec_t:s0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}, {{{0x11, 0x0, 0x0, 'bond0\x00', 'ipddp0\x00', 'yam0\x00', 'eql\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xa0, 0xd8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0xffffffffffffffff}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x440) 2018/05/19 16:47:28 executing program 1: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) sendto(r0, &(0x7f0000000280)="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", 0x1000, 0x40, &(0x7f00000000c0)=@ipx={0x4, 0x2, 0x1, "70ada1034292", 0x2}, 0x80) r1 = socket(0x10, 0x802, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) write(r1, &(0x7f0000000040)="220000005a008d6b3ab769000005100f80ff00000000b8a6ac0000f8b16f040000fb", 0x22) 2018/05/19 16:47:28 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_bridge\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="26000000fbffffff000000000000000000000000000000000020e309001d3d1cbd000f000400000000000000"]}) socket$bt_rfcomm(0x1f, 0x3, 0x3) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x200000, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r1, 0xc0106401, &(0x7f0000000080)={0x9a, &(0x7f0000000100)=""/154}) 2018/05/19 16:47:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) 2018/05/19 16:47:28 executing program 6: r0 = socket(0xa, 0x1, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) r3 = fcntl$getown(r0, 0x9) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4200, 0x0) ptrace$setopts(0x4205, r3, 0x2, 0x1) dup3(r2, r1, 0x0) 2018/05/19 16:47:28 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xb69, 0x2081) write$eventfd(r0, &(0x7f00000000c0)=0xffffffffffffffff, 0xffffff90) syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x200000) [ 259.317219] binder: undelivered TRANSACTION_ERROR: 29189 [ 259.482501] binder: 17968:17970 transaction failed 29189/-22, size 32-8 line 2856 [ 259.575654] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:29 executing program 3: r0 = socket(0xa, 0x2, 0x0) seccomp(0x1, 0x0, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x10001, 0x49, 0x9, 0x781e}, {0x4, 0xd76, 0x842}, {0xfffffffffffffffe, 0x7, 0x10000, 0xfffffffffffffff8}, {0x6, 0x185800000, 0x6, 0x6}, {0x2, 0x5, 0x800, 0xffffffffffffff81}, {0x0, 0x1ff, 0x9a, 0x4}, {0x7, 0x40, 0x0, 0x3}, {0x1, 0xf879, 0x6, 0x401}]}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$sock_attach_bpf(r0, 0x1, 0xc, &(0x7f0000000140), 0x4) 2018/05/19 16:47:29 executing program 4: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x3) writev(r1, &(0x7f0000000040)=[{&(0x7f00000001c0)="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", 0x133}], 0x1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x10000, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) 2018/05/19 16:47:29 executing program 1: r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x8, @empty, 0x4e20, 0x4, 'lblc\x00', 0x34, 0x1, 0xe}, {@broadcast=0xffffffff, 0x4e20, 0x0, 0x6, 0x622, 0x8}}, 0x44) setsockopt$inet_int(r0, 0x0, 0xd0, &(0x7f0000000000), 0x4) readlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/18, 0x12) 2018/05/19 16:47:29 executing program 7: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000180), 0x10) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$LOOP_CTL_ADD(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0) 2018/05/19 16:47:29 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) signalfd4(r1, &(0x7f0000000040)={0x8}, 0x8, 0x800) getsockopt$inet_sctp_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x7ff, 0x4, 0x4, 0xa7, 0x7b4}, &(0x7f00000000c0)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100)=@assoc_id=r4, &(0x7f00000001c0)=0x4) 2018/05/19 16:47:29 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x7fffdff60) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:29 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x6000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x3000}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x52, 0x401, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x8) 2018/05/19 16:47:29 executing program 2 (fault-call:6 fault-nth:0): perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) [ 260.155320] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 260.175213] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 lblc [ 260.190658] binder: 17992:17997 transaction failed 29189/-22, size 32-8 line 2856 [ 260.195874] IPVS: set_ctl: invalid protocol: 8 0.0.0.0:20000 lblc 2018/05/19 16:47:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 2018/05/19 16:47:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) userfaultfd(0x80000) r1 = syz_open_dev$mouse(&(0x7f0000000a00)='/dev/input/mouse#\x00', 0x9, 0x101000) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000a40)={{0x6, 0x9, 0x1, 0x8e8b, 0x2, 0x2}, 0xfffffffeffffffff, 0x5b, 0x5, 0x0, 0x9, "e953a30960b33554379da77ad8c5aa6b88ca18294b5612b76717a2f3e9570a26e6b9c946edaa12bcf8cfefff7b8cc403c1ceb03e8304741fbfe9a716246ba1f90c222ac3460688bf5599c89ed2d6000284c9ba73e66ec578b929fa6cd72eabd6a07433f1f4a23759ae112440d5b619a7034f4c5816b0b8a09087dacedd51c77c"}) sendmsg$rds(r0, &(0x7f00000009c0)={&(0x7f0000000080)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)=""/218, 0xda}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000240)=""/148, 0x94}, {&(0x7f0000000300)=""/34, 0x22}, {&(0x7f0000000340)=""/81, 0x51}, {&(0x7f00000003c0)=""/196, 0xc4}, {&(0x7f00000004c0)=""/145, 0x91}, {&(0x7f0000000580)=""/243, 0xf3}], 0x8, &(0x7f0000000880)=[@cswp={0x58, 0x114, 0x7, {{0x9, 0x101}, &(0x7f0000000700)=0x8000, &(0x7f0000000740), 0xffff, 0xffffffff, 0x6, 0x3, 0x8, 0x7ff}}, @rdma_dest={0x18, 0x114, 0x2, {0x1ff, 0x1}}, @fadd={0x58, 0x114, 0x6, {{0x8, 0xfffffffffffffabf}, &(0x7f0000000780)=0x6, &(0x7f00000007c0)=0x4f1, 0xfffffffffffffffd, 0xffffffff, 0x6, 0x1, 0x60, 0xb762}}, @mask_cswp={0x58, 0x114, 0x9, {{0x401, 0x4}, &(0x7f0000000800)=0x2, &(0x7f0000000840)=0x400, 0xf736, 0x9, 0x1, 0x8001, 0x2, 0x1}}], 0x120, 0x4}, 0x20000080) [ 260.212568] binder: undelivered TRANSACTION_ERROR: 29189 [ 260.222532] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. 2018/05/19 16:47:29 executing program 3: r0 = socket$inet6(0xa, 0x2100000000000001, 0x0) dup3(r0, r0, 0xaabcd52ed82aea77) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/05/19 16:47:29 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000040)=0x5, 0x4) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r2 = fanotify_init(0x9, 0x8000) fanotify_mark(r2, 0x48, 0x1, r1, &(0x7f0000000100)='./file0\x00') 2018/05/19 16:47:29 executing program 7: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bfe52be36f") r1 = socket$inet6(0xa, 0x3, 0x8010000000000084) bind$inet6(r1, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r1, &(0x7f0000b31000)="f9", 0x1, 0xfffffffffffffffd, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/19 16:47:29 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") accept$ipx(r0, &(0x7f00000000c0), &(0x7f0000000080)=0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:29 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x301001, 0x0) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000000)=0x80000000) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e22}, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) semget$private(0x0, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr=0x80000001}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000040), 0x4) [ 260.352267] binder: 18013:18016 transaction failed 29189/-22, size 32-8 line 2856 [ 260.402628] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) getsockname$inet(r1, &(0x7f0000000080)={0x0, 0x0, @loopback}, &(0x7f00000001c0)=0x10) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="6c78b7faf9dfa827b1ac2bac17b5"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000140)={0x6, 0x0, [0x40000021, 0x900d]}) 2018/05/19 16:47:30 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = accept$netrom(r0, &(0x7f0000000000), &(0x7f00000000c0)=0x10) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)) get_mempolicy(&(0x7f0000000040), &(0x7f0000000080), 0x40, &(0x7f0000ffb000/0x4000)=nil, 0x4) 2018/05/19 16:47:30 executing program 5: mlock2(&(0x7f00005ee000/0x800000)=nil, 0x800000, 0x0) r0 = accept4(0xffffffffffffff9c, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000100)={0x0, 0xa, "295f913ca6d3feaa2c47"}, &(0x7f0000000140)=0x12) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r1, 0x6}, &(0x7f00000001c0)=0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() 2018/05/19 16:47:30 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f75702e6e65742f73797a30006d7fb4bf03823c3b9fc3c1c01d2050f108ea520784a6e7494686a7eb8131780cccdaed433ee283bb10f080989ff769df8dbc1a6bade819b321fd50e35b78cc7950d9aed1eef33866d9d775db5dab4b7b5df9030c", 0x200002, 0x0) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000000)={0x0, 0x2, [0x0, 0x646]}) r1 = openat$cgroup_int(r0, &(0x7f0000000440)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=ANY=[], 0x0) 2018/05/19 16:47:30 executing program 7: r0 = socket$inet(0x2, 0x80003, 0x3) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x130, 0x4) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x3ff}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000001c0)={r1, 0x0, 0xffffffffffffffc0, 0x4}, &(0x7f0000000200)=0x10) recvfrom$inet(r0, &(0x7f0000000000)=""/248, 0x3, 0x0, 0x0, 0x267) 2018/05/19 16:47:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="b226262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) 2018/05/19 16:47:30 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x100000000000000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x4004623c, 0x0) 2018/05/19 16:47:30 executing program 4: r0 = socket(0xa, 0x3, 0x1) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x30110, 0xffffffffffffffff, 0x1b) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000140)) [ 261.071473] binder: 18061:18066 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:30 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp6\x00') r1 = socket$kcm(0x29, 0x5, 0x0) sendfile(r1, r0, &(0x7f0000301ff8), 0xffffffff) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000000000000000000000000000018497c183689abfce7c3517900000000"], 0x20) 2018/05/19 16:47:30 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000014c0)={'team0\x00', 0x0}) r3 = socket(0xa, 0x1, 0x0) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f0000000040)=0x40, 0x2) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004fc0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000004f80)={&(0x7f0000000280)={0x58, r1, 0x1, 0x0, 0x0, {0x4001}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0xa}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 2018/05/19 16:47:30 executing program 7: r0 = memfd_create(&(0x7f00000001c0)='@&prockeyring\x00', 0xffc) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x8000000000104) r2 = dup2(r1, r0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000700)=ANY=[]}, 0x1, 0x0, 0x0, 0x48010}, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, [0xffffffffffff0298, 0xff, 0xffffffffffffffe1, 0xe7, 0x8, 0x1, 0x6, 0x8001, 0x10001, 0x3, 0x200, 0xff, 0x7, 0x1bb13a98, 0x8]}, &(0x7f0000000540)=0x100) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000a80)={r3, 0x1000, "9830dba20276ca80e2601c0dffb769884d45e60ac396221df2797ba411704bd7dd728d92e5a07740d8f10c40c5d3a112a5c3e4d3723060b34eb0e49df09ccfc4e8a2b9429e8b504bdfa3d30bc14abd811e00d5c742b4592266cefb1e44e9bb6b1612fde9b6b64e5c7ce0328f4698153dcf59a34bbda8573e40ecdae4cecb56a421cb1f0f318960a5e31decd4898adc93b0a12bc4e25dff1596b639459d073b766a858ee0f7506a34714e8553f7456cc66f106b50b46180fac4e3c027eeb50ff553bd722d2d15126c50bd0bea9c1573a9a9e8ed5d70b401625b5a380bfb73c6197718858e50695c1ff073efa45973e550d39f3291b065482bdfd65158f6bc57e3a095ff4d5e9fb59662c92019dd24147b4bab845efdc284ce650ae7474ad7910899b17b49af172e7ae09201b09d6059955015fc3cea8d9ae918d43ec0e7c25e812dd6290ad1417c0778c9ac56f8b5a0eb4b9a2858465b0f6c6c1fb88c75961332e014ae57486c5c96d7742a9f937896be3f5be302a0c6a045eddf8de606161e09c886e04f19b22b0e134b7bb940c3813eba80b84dcaa2f536d56b6d39fa26fd0c252d4ac744fab6b816a773529ecfa0a9acd17862f25ae311d51ac02b4a66c72ecbffe8116f12c6567c46a3cfbd275cff4584813f8673ba7387d5e996db5369b16c9cb46e8e535b6420dc407d76a690b78b6c228a446da486da386b3ae1adb884928d4a6a389de6f6f7da028e619e83807a638981e6696fad5a273f634398cd06ee604f3b18a7bc066e2c51df7fb0124e4818f825360adb010b98746839ee791fa2605ea52f5635e08e5c319b63d48f7adf90d7027198a492796e0199cd3042381b273d2bce11dcf1cc882db843df1f6177c71e72ee6a894f1052183c0fde4f7431cceec8a317077936f91f53b9a828c4ccac5a537f796679bff7e96c560f8769e074c257d91aedd4daa9772f83b7a71c0cfaf58d7c9d1c1c8612c5b73b5a3bb6bcaaba2e1940b65ff107aa07c460a496876f4ba5bac6500642572a729a13cb7eca6493b2c9e7189e9173aa7321b8e61953976097cb8e68f11b5921de85b21dfb3d194d19dbafa116d4608c637f4d742795feddfecbb998abd9b701f0437093d63eed91b797f9d6c06b6612dc78b64277efdbbdbfef190a1760a7384c5246c98a67cea7498e9229cb74fb3dcedb1f3e4dbfd4f10e0b778214b6dfb52858bbb8300fdfdd36a2262e075c9987debee1ab8de4a0853bed53df41fcb3d0778fd4e8b912f210ce891ce569e11103b69d6974a0892d09d8563d001f4e74ba07161829569bf6b62c95fb81de436b4ee121f6fbd30309cc09b2e88659f49236edc697ea8730ba523df9d934f491b1b1582fd2197a129fad5bf5ba85a33f7fedb11de2696c1d68be6458e5d46352be106b351c5286fe82b15e54be1eee0afeada4991ec40c479d5fa49182467f988eabc0ae255bcacdb67c3f74bfc17731948bd6ca467b3f277d104d10920f15f17d86be17a06fd85bbf2c182a516c5e9655fdee30e168af13a3494c124b7e2af3a125aef2e3fd54f68959ebb633180404e0361e7b93a3d1da0a3f2aabf16d79eeb86e16c6db3c32939961c49f11d4892f9bfdcb778be799ee33db9ee2a9594d6d4d935028a22331d10b1846d8651ef10155793ca516891601e8d3382f8b1d8f7c7f0f1ddca59209e672f828c4398efa4d44051b11632f16fb41349a1b8eda53e2214b79cde5f8614f4f2c40a782284446a9eec1377f464a4700685072fc33bc9d5fd3a75a45a7361977bb3eddbe5f935b3c2a667abc8532fac1d98b794193f998812e305c403ad1073c2adc41ae9fcd915e46e71ae9dc177487e4967f2b1fb37edb9b4f366edd03af7222ca146199526c1cef20d2e31e393def72f50042effed140c81ea717fbbb47733b15da7b3c99831580aa6010df3b6e43a3349b584aec649043b56befba38cfb8090be4439d4731efa9b28759b27a202550f8bd76d13fef41777582ba02d675acf3cab8ecc1b9f5a599e596f12c8aff7954a7d9023192ed3e23545be46448ebf3f6deb0b2a0d36f32a767d994d5a1e8c4a89a4ef341ea94d522c3fdbcf113b6807c22edfad0d607b399da4eb59f0a545f1db65d8deb09564a608b2aac20d07850d9bf8d731c81305766e9bf839b422cd0a450395f9da2ffaa1e4b5d7690893cc6cb8c73009b878bce6ff4c746c86b8c597923b576a2307e42b675b93464efb721e2da5005cf5e336c8db832a0dbfa6b6ed67bb0e9c5ec117c87243c24691dbcef4dc6b41f30f9fc7fe4613d6c234259a617cd9821fad5282fd52ed0bcdaacf1ea8217f35ccf7b81f0670efce72fe2b6df051a9df3588fc4b7aec152f7320d3a4c3e7a4a2ad46794ed30a757ea69167abff806153617b45a1a548cc99446221358640adaf2073573235d9fe7ffb53f532a1da1d01e2b8e8cdd496e4315c7693b498848ac227c708591a19a4fe456df47911f5fcc46483d239a03c17c71e670166ca6f61b7b7eed5fcf8605a2b3c221b84b89084aab0299014075428f518d82b425f8688ac759ebe604c52faf8c8c8bca7161e61a4d537da9d7483ddac0a817bab99a21a5debbe9da6d03eef5007eacf0207255d683c16cbd0613e7fed9d6f47226acb439107d20283be302e1c25764df957ac6084818c87b2baf41a2783d2a7e8382597b37ee8b336e16f017add44f34d6810242120f4d571c3f9d7cd9eadf54d9aa197b3746c5abb3d881a4713170fcac423ebd3a28a6a85d0bd7bf53a6b089b6d4d28152d09ac9dac4b59da8d0b466b78c006224df6bc6b7d8c98fa23884f75c3502e56d655d7e358fd0c7f590e78f8b4245bf7e626cb2fd07235552bbcb8b3b5cd74b8dff3de3bd809ab3a9fce6e96a1380f84d0e6b2c8324e2ea06fcad14ae293abaea7f71cba9a74ed765f375465dbf475ccbb2eec109c8c3eca0a0430c47944ee0ea245a3143b196f279cafc77d76ff7ae91e711333af82e9a16d0f7fdc9dfffc8f205f1c324efd26b9a1b03c41676e613d7b37ccb46874079724c942aaa22edc6a4cfa497eb2077876ae3c984f8a738d01e676dcdeae4d0247c9c8c7117b0d107127142b9e5d5723e58d4564e2a545a024023574133d815a50e8eed5f4a73f75dee3425258dbf4943e2950057a1836cf37c27f8ca9f0995717755c19fe8ce805d32a0605b2dc5d5b0bf84ee64fc76d3f53efc2a142cf6e2c7fa03ca34cd068c6f94e6f75ae2a55f0ebe68368a8442720d63415a57384a492ef9cc103e4e74ee72ff82818e8a230be29f4550d83250fa58e6790b4e1417ea649fcf2ebfcea66b6ad93b377f62a418a74280e7d52ba66095292848f534052e08d9eae0691dcd8b732d7f46e0ba409ae25d37894286d22aabcb8c063139677f23f81cd028bd7f00ae6dc29981917637cd05fd16058c903c3b1a21797bdf28fa3730829d821f194d168b0741dad1d8dad0a3288cace36c8755c87e2f49cdccd34b154c467cfadf8d6b7f614b932536bad8fd726e83da107c3f76b6b050d5ce61c1810d1483dafbffa3e2075b66e190204246c7899820ea11936d80f87d9bcb41ae9b9ed8c80e16f10a3c03a8ddedad9b53f86aff77770cc3c7983b8e5466ba64b2b56ff2ed5f56c4c4ddfd0b351cede7f2feae32c7cb4fd713516b49386753b2ae1a243dac0e343667be43f740dee5dee0f4875eba021366e9cc45ed358685f96a630e0c233202f2ed95660c0575ceb8d704bfd44b7d9ec6d88198acca049c2aa1df0b4c386cc18d152a3c57afd9873ee4166e622ee804dbcc605c83a3495463d76d490a5e99db71275f7552bc2c761b74022cf975f216c7dffe9c3b7cd3ff73f0a19a25568ce335795aba4253399f376d6618115df3e1f3641efc2c911b66af2c24929d18a5c8d7200f1a4e9b704d56cca44a920c2b12cb1d0b4fd5454ab1b59cdfd238a148f1f22304af39dd520d099a82f1ec031c6919322d9445dbb60253a9e2e6c94aeb6e6ab1fbbd601b14affd4748b5c79370cc4a40ecd5c8aa3eb25f5f48c04d1b964bac09b4b1c776fd3d04713209883a23e22a7563e8582437c0add9e3bfbb2cc18e83facfc4a0d0dbe693b8d39a989065a410552fefbe4450bffdb2a315fe23c06c10c65b022736ed107fcae72fe37e89661a748e358b6cc6c4ebdeb3452d31d5546eb40798dbe54762fca558551f3504fa709a50a76a87c15b7ef45ee39617427e8af55f457df5bd6ee2d0272addac29b68e000561ec7bbab8c22f8a3741cedcf48f6127b87dbd085233b52a3b9829a9e203f24288952dc46b84864e42cdb125782956254c2aa71e248258c56c7f1c0dcf47baa233f906aa26591ee6c96ee7e3aad4999379286b1271db511b5069a45b67ade068ab0e36e975707f545c39a18f6f702c48473ca93b5ff5a526d2586e06a8de1989ad2e63423feb9f100bd1975014ec67790cc645d2d214a643e336323885561c365e19068a3f984828c587f7e72969ee533b24db3137b2fc60d6dcc972977f6132a43b8f8a9fbe99ee24dcf2b3bfcdd9b886766952a5a4e06512ff2f453b3e3bfaf5cd626a41cd5fb464785138f7e806005cade0567a3283b4322e14b509560b8d0b0f8192e80fc1dc73634a6db6cbb83d5d11c503f99cd99eec652ad2b8c0f0bdaa5bc7116b2aa1ff349931041a0a63679545c2a3dfdf87b348b7c0c8ed5827f361c9fda7911523f3eac30bff4349a274e48632a6e193c037f72661c9d60ff395c00b43d1c19dffe3b8690f6c3287bcfab6477f833f4215cae76964b45a8d7b7c1d8d875af0fcd4775f73a15ff8cce3c9c38b81714bd96e91fd0fee016a471afbbfe87c48267bf68c0d2d22a1a23751d996792db58887e0fdef59f8c4316955c41be6638d9096fabcadf173151fa13413f91b38cc8e11f1a3775effd4de3531c110abae2a007e889f213ec1bec8360eff9ac6a848fef9a0fa4cf4def5494d18f5bfa1fda0532cd699b256ee80c6cfb20eb542fc9211b2f6f1bff2ecb0872a5aeec8cad88aefd7501ecc1d3a7e406dc8889990a3290e1182f61e6a9e2c75b45a0ad21c071d22d43e6a4960fa3e52e2b76c7057866b89623c4ed196ecc28e434f04606041ea68111df778c60356583836ab137e13960577c83a7be212f17025ca458fe40bea08c6905797998fdddeb1b3c8a7c4acacdc49c141f77b8071a7b36e16c2ca35a7ca69c038ffe5f398d603db93232afaee23789747f6b188894e839ffde7cd63a22607dc3d3791e867345eb19d00c421c28236bdcd151bf81cf4382be1425d5d78b82e22fd750fae14c045ae3e88567e803ea6c26bd654774615e46c6c18a151e8e14721668144db075f37a0531a9ad23552508cac767cc886002701574945cd9c51aba11acdb2a5ab7e60e2e064321c7e2ecf3c621efc6275bd7b68be56fbfbe4f66dc5e66f6fa395147bb5b7b8b372814fa68971985e1503955d70c37cf1e96e7b4b3eb0b11b04a28e4781ad1526643a8742af0a5ca398bc1748f5e106da907ec0a676fdd3ade62cfbd38d5f8a5288eaca8f79d90f57617c3506a41491a46b3ec1003cab04027ac4ba4927539df571173b8aa1b85f61aec9a8c9999b9e66fcbc8b235b4fb0051dbb110b7d56446750a2e43bd1c3a69b4643f5afdacf2b871f11be57ad1c40b67bf0e8d702ef6dc3cea95226bf1f0d6310195bdb406d26059fa5fc3533cf99f8f51a7d66be03e64556d96fc24411c07a080d71b4fbbc397e2863cc4d0d3a9ee991e828343bfb7282125bae434f1979cc"}, &(0x7f0000000040)=0xfffffffffffffc5d) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r4, 0x2, 0xff}, 0xc) clock_gettime(0x0, &(0x7f0000000180)) write$sndseq(r0, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {0x0, 0x4}, @queue}], 0x30) memfd_create(&(0x7f0000000400)='keyring*\x00', 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000340)={{0x15, 0xdc}, 'port0\x00', 0x8, 0x8, 0x2, 0x8, 0x8a67, 0x8, 0x6, 0x0, 0x4, 0xe287683}) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], 0x1cb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x40400, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f00000000c0)={0x1b, 0xa5, 0x6, 0x82d, 0x7, 0x3a}) 2018/05/19 16:47:30 executing program 3: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000300000fa", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="00000000440540f9d3876bd75d96218b33772ddf0000d2be66d600000700000000000000", @ANYBLOB="8c2b1079046c598040b26b0ab46330421a29210a063b8e56ecee1993345f63d30a11390c227f485477f81dc1e542cde824e78e4cb533f49834800486a9130e4c6693dcdaa66998501dbc03964772624f5c549f3d622f55df51f3003ca8900315926d29d9815ddc66d1988dd349578dbe5070d1f57d5bb45d65762804ff29c3fba0a9279a6ff88f6c0797fdf5774b478dface8660fa1142c247db62a09acd82b00a159fe994e9112b24511d74db211df7181aad44632a5651990207bb1fa78dddcdf89b0ef26a5b96aa90e37ee3a9464fe5b2ae4b78166d660f10ea8dfc8d807471ef04e86d52f6be6a7d8c"], 0x118) [ 261.114054] binder: 18061:18066 ioctl 4004623c 0 returned -22 2018/05/19 16:47:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r3, r2, 0x0) getpeername(r1, &(0x7f0000000080)=@in6={0x0, 0x0, 0x0, @remote}, &(0x7f0000000100)=0x80) [ 261.197698] binder: 18061:18085 transaction failed 29189/-22, size 32-8 line 2856 [ 261.212072] netlink: 'syz-executor1': attribute type 3 has an invalid length. 2018/05/19 16:47:30 executing program 3: syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@noload='noload', 0x2c}, {@usrjquota_path={'usrjquota', 0x3d, './file0'}, 0x2c}, {@nouid32='nouid32', 0x2c}, {@i_version='i_version', 0x2c}, {@usrjquota_path={'usrjquota', 0x3d, './file1'}, 0x2c}, {@noquota='noquota', 0x2c}, {@usrquota='usrquota', 0x2c}, {@sysvgroups='sysvgroups', 0x2c}, {@abort='abort', 0x2c}]}) 2018/05/19 16:47:30 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)={[0x35, 0x34, 0x30, 0x33, 0x36]}, 0x5) [ 261.240875] binder: 18061:18085 ioctl 4004623c 0 returned -22 [ 261.254134] netlink: 'syz-executor1': attribute type 3 has an invalid length. 2018/05/19 16:47:30 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000012c0)='/dev/dsp\x00', 0x801, 0x0) ioctl$SG_SET_RESERVED_SIZE(r1, 0x2275, &(0x7f0000000240)=0x6a0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000200)={0x3, 0x6, 0x5, 0x1, 0x8, 0x5, 0xae8e, 0xd69c, 0x3f, 0xffffffff}) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x3, 0x4000) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f00000001c0)={0x13, 0x51, &(0x7f0000000140)="04b9c371fee98379b9d3e3d2a0cd4c6a425f717d1b0680524fd56070ee2ff6fc3a095f900e090344bc1415af08ba7fef528a3b202308d16f0dceb1d0d0c9e547ceff71a4e35d1ce795990b24bb3ae3370c"}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a93", 0x5) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0], 0x2}, 0x20) getsockname$llc(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff4b) ioctl$VT_ACTIVATE(r1, 0x5606, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x34, &(0x7f0000001400)=""/123, 0x7b}, 0x0) [ 261.310999] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 261.380150] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 261.390085] binder: undelivered TRANSACTION_ERROR: 29189 [ 261.405449] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)="7379736673002a864f4bc00bce1bdb20637213b1e894d120715f9dc1125b042c7226eb0136d9624ea1d23374a660fe5ac173722fd367ad22e8553025a2e8be0bc5514379af7213d32b8d5d06dc8fbf2c849ed9cdefc74b03dfa9cb5a90b28b4b24d7862c3d66fca53167d5424235435a3dbb76bc7d3c42fc2e9c696114a6f888f0da85277683cfc1c4d2bf71c2134d64cc3fed8e97798deb8631cbf7682c9fa2ed031465aa191df922f764297cba22a8499d177f49fba940f55bbc8b723fd374f1fed78c8aeec6811d9b5879487387d56594a14c2588274de84fa27610302b3fb54172a8c910a07e7c76ea465aa684020000", 0x0, &(0x7f0000000200)) umount2(&(0x7f0000000040)='./file0\x00', 0x0) r1 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/05/19 16:47:30 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000700)=@broute={'broute\x00', 0x20, 0x3, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000180), &(0x7f0000000380)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000100000000000000000000006eda70bd9490290cad4decab5bbe45ce39151659ee222b17cdbcade9a54c70cf760068bfe7f98c197969acbe3a9fb136fc242d214503a516c6b983bc38f91850e6052bcf5c3364731296672bb5017e431fedad258f68f4bcc7cf4dd0c60ccc56849f286295da60eaf70f0f83168b38bec5e1e1e9b1f1ed"]}, 0x169) r0 = socket(0xa, 0x1, 0x0) syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000200)='./file1/file0\x00', 0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000380)=ANY=[]) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = fcntl$dupfd(r0, 0x406, 0xffffffffffffffff) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000780)=""/4096) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='./file1/file0\x00') 2018/05/19 16:47:30 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f0000000040)="c626262c85239ffb3242f633b3e0ed984a112b619a21e4f0747e52160ec51e637f8389f3ea1205340b1ac04f835a7e510fc84a353259da143ca97d168b") r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_flowlabel\x00') preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000080)=""/21, 0x15}, {&(0x7f0000000600)=""/246, 0xf6}], 0x2, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x100000000, 0x4) 2018/05/19 16:47:30 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x5451, 0x0) 2018/05/19 16:47:30 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x40000) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000040)) dup3(r2, r1, 0x0) 2018/05/19 16:47:30 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x3f00000000000000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:30 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) membarrier(0x2, 0x0) sendmsg$alg(r1, &(0x7f0000b3d000)={0x0, 0x0, &(0x7f000093b000)=[{&(0x7f000077ff7d)="1d", 0x1}], 0x1, &(0x7f00006b0000)}, 0x0) 2018/05/19 16:47:31 executing program 4: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0xa00, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000240)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000340)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001940)={&(0x7f0000002ac0)=ANY=[@ANYBLOB="90150000290000012abd7000fddbdf250900000018010500501202ef5ecc4d9ef9653d78cb7451411a9c21897946d597d63450eed1c79674574ea2b788978e6672d6aa0321ea93ad203e3e1765cdfaa538c73121612d6c48e71aaa491d60974a9c73e1f69507230974435877c65ca645bba582e6a6db81860e9fdfa9a1a5be9ebf1e2b2cb11fc7c04b77063efb0e5142fb60e6da41a88dfcc697940a98a026cc5df1f86b7a1299388565c612aa67dec6427dcc5ecfe909b5242e3b182468b060253e49e958cd1cab9d3138b08758b59792e7029f1a703dbcac65feed7a13d86befef41ec4bf60812e184daba825991f0984f603a98835ade4589190b69a35403924e166c636a11227d35a47d6161c5ccf86b286a07d9ff92cee2856d9c7492dac65a8783251d72d6f2130b87593a636f4a28324a6435c517694ae34a75aa6a2932a4a82fe85bbeba604a19096c6f58e8b38832357b925f7ce197482d5e395e405a8cfd247dfb4dd623084886f75ab068ebf5a94290c3ba26ce2361c225d5357b3bf2753d96dce4aa054fadc8216fe8c53577c906f7f690864a7266043155e80f595ecd907ddcd89811caafba0ee001141ebef4bf49fd1ee98f14a9d5dc8b1043063c1b68cc8288f1b992518825d3d54970a63ff656002c450f41e2ef12976f9bc68a02e88468ee465de6987af6efb9dadaade629c56beac9d6bbb955e0f6302f89ed472473800a5915f0214e987b213237b1f1de4beb129454e35bef0e94f4aee02ce4cd8638f93b8d0fa527a5d56c5ecf01014d6311031d50eeef1c33973d72472c46ca1004aa3ebbfb005ae4ab82f5a387a505dc99430c468f959c30f5ba09c2ed9b78ac528273fb5602127e850628e3ab9f0013dbc89a751d6e86fec2cf02a90692cacb0a0a8fbda457b1b0f69dccf0924017f51e737311772658cc435a7c7355b5071e5cc48a2b823a982593835557417977d99a3c6fe2ad3e91b1a3e8251d93014d37105ac42e4bb92cbc826692c914dcfb126e28468f78b17db5d6f39d0abb1e4634510e7d880aa1c9c9533ffd988c2297f21d081413bbd891e6710253135f13ad3b6fd2c890193886b4b0e03ae4ad1b8117e6bb227d7ea18273d6c50a8b05cd9d7c7d23c21bac98f382f69794c85169a179ec36e7b5a1e81117951659aac509132fe8ecbd9fa980e0b582f8780bcb86250f991db6a85f4f04ed32c2ee590d99c883113dc06da75562959c1e25109bec2e478fd7ef0f70e8dcd9d80c8a4e001e75f326e74fcb437dc7c06232192adc50f6ff902173d9a1eecd5c1b20cf7198c22972b3d9d3bd2a8092c8242b0d04a58b319a7ed9a62274b098d284d3dde25565f673277160782b3435eb610cd31bc6d59110f13628e8900ddf01f2fea2843e5173d7f6182d963d41d2ed9d9b2914d3c2153cc5d859f0ef0fd21fb162995b651d9f73cbb519dec275e671e7852011071f5dab5a5862dd39ee1411c5f3e6770016e8049fd774b4cf06c656482035b1cbfb249da8c33204fe9baa8af1915d1eca39ee09683294ce4e1cdf01d070f10691eece7e1ab1c27858ff60d6e6b2816552f0f9a51af232a6caade87f0e65f9a04aece5b395a692a4c99763f6894aff51f569726641cb65ffb5988eb14637db8c4f4d8287f643383ebb60b05ffed57a4571a761fbaacfdd6fdafbd378df11c457169e9ec3b6bf1f6353c7b188822deefaa01e38831df1d4fc24872e1ed9acb689815678d23bc2e67de6b133f8bb63b5daad91a09c1a81f3cd4042bed69ebeee35c55646914a6a2aa4bc950d16471a0e7ecadbe072014f03dc2a883466a207badad4ddf73ab03b98c71d54278a590ca2b31354566d051f87ad9766aa977858bdfb54fb28562ce667ed664cbc9d49e52af1cf113075ac264c3da6c765fdcaef2aea41622c0b117d454fa6df0250032483501a3e2a3e50e242dcb1deb411b720962f80d407e0613c70b0484c21bf4518f1fe6ee76962d758c13e3cbd19598d1d1350bb96e35f9d288006e8c6af24c89fe1a195627d6a74b4e3e2be9b16325776e045cc96b6fa1860773dbedee8053ace6ad2f0de21b000772dc7b8b55c4da6a73e8ae7cf65c85b0c0145e50061062b63fbb6a8f74a9fba8b8e2afaae72952ad58e912aa49131bd8e5b95bb0d9edaf76e2f87f7eec9fa6b1e2755254e5d3242541fb40afb755e4ba771788cc35ab83980e9103fcb501eab11b3c4fb524088962d286989a56548a32e0717ba76689c961bdcfc4cc7d31f6f597ca42f3839593873fafeb3e44ef54e05163b4c79e61760634a9007e0d6f7c12a5c08c58d50ead623358a6f77e98496b2c07ccac6f07a059e98964669d8a7b7d6f13fb70ea269df7acabcfa928411260a5dc0dae6480bebeb3cde8aa9a04c9132f6ce22c7c88094b9a6729064e0971c372c3be21f72fce5d9dc3336c53cd1ed4b0741eaa75ef76b346eb4bfd592b756931bf75e1bace698a6f933f35a36a693c00cb6dd73b2a73d07ef4b042a7e41e3f2c9498baa0d706aa41aff388b9f3b019bfd35908f867debbcc5452595b17fba8b817a1dd6d7e060304fc0d2427f925020a49500bbe13365ef096a67b89d8be0928e99762e4afbec4c07d5fa29417fc997fc4859794d065b8550a25393591d8999fe383a3d4f807447f1c4d994564f4552e241c381df891e1a3e1f6dfe1a863359f2795cec17aaf779d749dfc6e4efa31e6057e2755d69d2c299ec926ebf058d1ec4578c73abec4f0a6b99cd2b083037724803873fe312fa16d57d40b6b4b1c9d7819cad2518cba4180ac1b1baa2317a5e13de1a9630291c7b085d073ea59d0d5efc4f8e0b66a3105c32dc9c2838690f17d257b478753a04abf6b4cad7b9d3cf13c7f47d8c977b471fa885ad8194f3f5c6d588e4a1dd64e64beae696ef86b89c79d8bc147994c14b568eb6244645b2f6e75339307a237e879ebb378f380bda9f5165899661c20c9761a6b162b25857176fbd8947e8c374d07bde32798b5bff0d242cb855f85344758b0c47911c8ec43bb0ee2387976f92d593fcfcc04ff3a2f7b6ca6e041e3a1809072a7eeabe1dc697e61eedcb9c74aed81fe260ee440e881eab361bce4a12f484aebee6b3658d2e5f09c3f390c6cde45f4a091f7e1c2156364ead957c6e56437645a6dd5e16ae75dc26e0462afe0feeefdaa27a389b3f39e43adadea40b1035c8b5124fc6e0e55d73fe9eb45e3175461eda182d6f203a5e746dd8ac3dfc836126418a805d6a234b06c5e2e9bc450c2c35ee9239ea8e18b02a2202b7a7579dc23ec37e21acd2c07404a3bbc363737000f5ba0a4e8bb7fe9b4611dfb255dd60bb2481d2ae92c5df9e9bac0842fc4909ff1487acaadce1f33c4ae0b8483354582e19eb7a17be18c75c9a0b5abd47dc753e003ad131dd439b4850bd2b0cf95e77d0c32554cf3e3fe243c29b4cca29e651a00813729236874afe59267f941c169861fbe0f4dd8a30c4d7201af38f941b516e79d451127a0c8317c75d42fd30df46422c510fe2b3d56c66a8188f71175bf8745eb46414db799de1cfcf9f3d3341a90767c72382401d8be3574491bc530274e2f861a1a4bd85e6737c37552a28091dc5518973e658775171d0bc705fec200f7d77fbbfcb36121ced238762900fd511b0443faf43f48cbf930f3d001d4ed880ba3d4720865f526fcdd201f249cfca17805c2897a676c3210db31868932aca1865671a359d864b99aeb262a186ce94c5501fbc0d5a2c70d4e9031f699de911b93f7903d2110645d063d573c76f36dc9dc1948ff0f57822f69230a3f65c861cdcff6f7e5de3084a1a82952824e32cebf3e902afc5d4448fdf616d16afc77cdf8a68dcd9136d69e52fd2fc4dd24987e760c6f9861ce22e08d1bfc8b680c994a0721cd5284dcf31a677631d7387948f5174017c89324fd2f94035c7edbc6bdaa8f082264a2712c74ea6a98e8d5f600666f6f991b747550a4bb3457d3f2be5f0f6ee7d105aa8f2027ace87bf7d52ecce426486c31ed81de1e588f91303ce8c8f1fc4008be7b9e8de33c6a3cde91ca4295f0e486f5096e66745b0e3cb70b5517a4511365a745506c7b021957b8bc5a590ae2c3ea7f29a9308a9979f74944c5eccdbc0fa3fb1f5f7e84521fe0c05d611f487d3f802f8247fe3c7b9d50690372ae3a7dc927c9fdd7cac76be3ca30f554b3ae7d80080422defa9e7e8b52e9e6a212d35eb0770ae5aa1b538cb2942255ee21cd50ea35457f0d1863042cadd560a1a25fd266001cab7f925ca51217cf4c279280c7135422af88c0f13ea3aff6a3eb17be0f27d15ef1b69d71cf7995b4781d8817209eb621b27b2428b25c6c4821df47b58d470cee2c9c2628d627ba2bf3c5cc437381ace1f3c5cc76ee076a04fef6948c7b7c23a2732b4977fc757c8b34101ce38262cc7ae69f90569171ee85fa56fa79e4207aa10f4536c4db82c1b219bde5b980b62bfce5aae7e1922f252ebebb1c6a02ba33a66bdd1a52497ba27d7255b33dd8c0539eef4ea84a8d8303c0d2325e97541113f227e84d153958cd6f9da07f4fa2738ba13465340cd8471550ca38016534c401bb6dfb33a43969a18cf2439b6f3860bc47d0886128a21cf49abc348f3d61487a72668f7175794173da4c541f6c2bfbbeff2bf301c1b5c82c472514996050ce0b39f0d00d62a967f62234e6a9d6fcaf42cdac45ff9b67e64af0b0ffeb80cdbe6c575889197715e221497cba5dcdb1ecdf6eac5f7ca334c2b322289d1fc36540e431cef6e033fd1feea27e37ebbbcc8344c6d7705add7b58f45851f1baabfba4c76efc03147ab13a6ab48bfacd69d97d3bef265ff9f1f92356b46068bd449151bbd68c05d294ca0e270a4d8baf42b26efc112849fb72d1eaabef664b47af7de17ecf3d7d31d4a4ca61a59b24c84f8beb061d509e5c9823661fd8c4a544c053082ad101a0e046163fffd1ab2342e4291f332b549e75dd2e20b2f642df01577edc5bcba75f1cc34892ed420bcb7d0c7ce1780cca64bbed12c9ba875cfa8e9d2553b5bcd6e6ca7da5800921abe8b306f058d22e08eb7e7bedfc41dcd457b9f88773aa3867c7997c5e0c08a0eee2cd4c7b0303db5470fc1da3c3c781eb1f1a3033c2097aee4eac21c55c81ff59cb2de6e6c96383ba8fe82ed7ad16828d85f5fad39de2367d74e21a47010d7c75ea08eb3aa1d689ea103bd6d72d828c93d3a05aa0d66b687b4c78c029b34f4a8a2cbc20d64e43afac587cb09c340325f0d2081acee6017f3c71b1e7e85e65efff832eda024a5c656ecdc3d35683505c0c859eac6ff68c15629753381ae5182986aa5ed5768f05008bf98272754b5ebe8cc79d45ae6cc5aef87ef0cf48c0ae254bf61cda17c27b4b1a4f99aa565c63bf845a62d11d80d3afe50779e545d0294827cc3a3100a104fa121af3a2b4cad0d359ad5de7cb021430293c9fa7e59f7944207fb6e25943bb8ac0d8e04b994296b4d57e202e94f5757a6ac5e6655f27ae03e60a8b462be2b1257de00061f9e1a3b703e33b7ea4e1f36463c7f28186dddf4b69275ce29a266b9e7c7d105a009201ce6c516ad69997092f12f39751b8f8670f46e1916237704507b7f7ffbd92dcd577e7a9f02171ca8002968c8c79d07ad6815ddc8dd4ae13ace8ef874f2d30dca6b7d1aa2f2a8ed9a958787348850db147dc46d9ff6829abd5b2755c895c5b71a9788243fef027325591065e8e5c709c45ac3a3c1a5fa49a7dede8f3e1d2a9f4a0047093a59abb9691a8b84c243e74b7f1fed45ca9eebc23ae343e419f9d5b55b8edfd7c8c9d493b72069af25119e2b49c8bf6ac8177070e2d68de9f09bdd89885cc2321c735ceb50f62d9ed9c38de7694a270527a9d000cf23fdf26b2f92f19aefb0e7497a099e19f981c386da5e1f3034fafc6ea3bd787100c4fd243e08dd8bab3a3231fe456445ec35615f96e660932e0a129ade5d9ad725da00f113b15708a521e6121c52440fb23566419b50a24dc3f430580d6ead54e4a928ebb5416e70d540753c76172805a2a6dd1a1962e4e491c91ea8569cc55539368a44a2fa2804debaff724904e851450fefe2cb30faacc23a54e74c53e7ad1f1e9830f2a8083c2367e4246d935b609ba6faaebca310fd49f879f6db7d517fbf0768c1f7ac1c513fe84630919e5483910cb9179ba82638f3f885c42031c5e3bfe002d64d6553163294393e22fe3cd401070008005400", @ANYRES32=r2, @ANYBLOB="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", @ANYPTR, @ANYBLOB="ddf1be28adc73232475a843800540007293b5d45c1465a95e8c4acbde091ff739ca23c6a2cb1c73da6d9975370d0cbaf334f66aeff459a0df109631e511d918cdeec00040022000000001c004300fe85c8af41763d8c56bc90a7934c15bef9c37294cc00000020000d0008006700", @ANYRES32=r3, @ANYBLOB="14007c00ff010000000000000000000000000001080011000800000098014d00e587280813c6536a53bc99fe7957ff8c9981e3e51271c851b04723f5eac018e618c4bfca4c6300fdf58ebebd865cb9aac9bd01b0910929c936d8aecf6ea7945b1e837740213790e6ff5a527b7cd4faf14709e74f63dbb4e138d9e69737f7f274ebdd9e45046baea18adcf0822c8479d4cbe731374da4a06863a63b03c36e42d944528f5800ba5077bfc1a09194670aa3be567940d948af6a56d2677956256520e116bc65bb8e91ec106dd4d1ec292cb4924bd54a674d8584997d08001600", @ANYRES32=r4, @ANYBLOB="d6dc919122abaefe217b997cfb12e3fd5fe0865a29d9d50101e294891666212a34a487a87cd94b6ef3546081e8c645c522e440e0e4d01ece77bf0447268aa3d26aaf6174efc6a34ce5d0d4ab03f21f0f6b70dce71b57ba339c442c36e1d5863e7cd9d16772ddb123b2bb9a199806f7581bd14bc5a6a6ad9ba0068edfb85438c19ea662651320b7867b4b7ef8352a8032df3663a8e2cc34d97de58dd8f9e7b58cb542d3a7d92af7d8b07cc91de8c05e0a6265b46be9cd4513bc3310003c002f6465762f6175746f66730008002200ac141412b4006a00151242a44b948fb04c19948e6407437d6e77c0e2df3f708458bc30a9aba5281771c18f602113caac89ec59ff66b08e86850fe0f8d1abf3982f6da2e01a64018fecbe729501782a46b2b3d6259408e0c5fd44067f7a5f4583f2d929302a3d835278a0d188771cb48c708376dbf3cc64767a07b4a67183847ac302cea8fa0ac4a4b3c5f423363e158a742e36a8602355764703e9f41fb9cd0f6c10093f6903fcb05d5ef2b69a4816c1aec17367e0000000"], 0x9}, 0x1}, 0x880) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) r5 = inotify_init() fcntl$setstatus(r5, 0x4, 0x800) r6 = creat(&(0x7f0000002a80)='./file0\x00', 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x1c, &(0x7f00000019c0)=""/4096, &(0x7f00000029c0)=0x1000) inotify_add_watch(r5, &(0x7f0000000200)='./file0\x00', 0x80000002) r7 = creat(&(0x7f0000000040)='./file0\x00', 0x0) read(r5, &(0x7f0000000000)=""/177, 0xb1) ioctl$BLKPBSZGET(r7, 0x127b, &(0x7f0000002a00)) [ 262.044891] binder: 18124:18127 transaction failed 29189/-22, size 32-8 line 2856 [ 262.063202] hfs: can't find a HFS filesystem on dev loop1 2018/05/19 16:47:31 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0x4) clock_getres(0x3, &(0x7f0000000100)) getsockname$ipx(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000000080)="4c0000001400ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x2f4}], 0x1}, 0x0) 2018/05/19 16:47:31 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x7ff, 0x4]) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x7, &(0x7f0000000040), 0x4) 2018/05/19 16:47:31 executing program 6: r0 = socket(0xa, 0x3, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x0) dup3(r2, r1, 0x0) [ 262.111944] binder: 18124:18146 transaction failed 29189/-22, size 32-8 line 2856 [ 262.139425] hfs: can't find a HFS filesystem on dev loop1 2018/05/19 16:47:31 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f00008f9000)=""/12, &(0x7f0000000000)=0xc) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 2018/05/19 16:47:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x5421, 0x0) [ 262.259197] binder: undelivered TRANSACTION_ERROR: 29189 [ 262.273584] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/nfsfs\x00') setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6e617400000000000000000813f363f1c8dbbe2ec97dd8cc000000000000000000000000f6099f750000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000097cc97bd0e16e9be"], 0x58) r1 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x1, 0x1) ioctl$int_in(r1, 0x80000040045010, &(0x7f0000000000)=0x7f) 2018/05/19 16:47:31 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="0000010000000000000000") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xfffffffffffffffc, 0x0) close(r1) 2018/05/19 16:47:31 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0x2, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}}, &(0x7f0000000040)=0x90) close(r2) close(r2) 2018/05/19 16:47:31 executing program 1: socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fdatasync(r0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x40001, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000180)={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0x15}, 0x80000001}, {0xa, 0x4e20, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x3f, [0x5, 0x3ff, 0x6, 0x0, 0x20, 0x1, 0x1b978e49, 0x80000001]}, 0x5c) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r2, 0x10e, 0x0, &(0x7f0000000040)=""/206, &(0x7f0000000000)=0xce) [ 262.363113] binder: 18175:18176 transaction failed 29189/-22, size 32-8 line 2856 [ 262.433767] binder: 18175:18189 transaction failed 29189/-22, size 32-8 line 2856 [ 262.481632] binder: undelivered TRANSACTION_ERROR: 29189 [ 262.487591] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() r2 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x10000, 0x1000500) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x800, 0xffffffffffffffff, 0x7fffffff, 0x3, 0x0, 0x9, 0x1000, 0x9, 0x0, 0x6, 0x9, 0x200, 0x7f, 0x8, 0x8, 0xfff, 0x0, 0x6, 0x0, 0x6253, 0x1ff, 0xac9, 0x5, 0x100000001, 0x68eb, 0xfffffffffffffffb, 0xffffffff, 0x20, 0x7, 0x61ba, 0x200000000000, 0x4, 0xa034, 0x0, 0x6d, 0x66, 0x0, 0x9, 0x2, @perf_config_ext={0x1, 0x7ff}, 0x3800, 0x1, 0x72f, 0x0, 0x3, 0x4}, r1, 0x1, r2, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)) r4 = creat(&(0x7f0000000000)='./file1\x00', 0x0) dup3(r4, r3, 0x0) 2018/05/19 16:47:32 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = mq_open(&(0x7f00000deffd)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2}) r2 = socket$kcm(0x29, 0x7, 0x0) poll(&(0x7f0000000600)=[{r2, 0x8000}, {r2, 0x2020}, {r2, 0x41}], 0x3af, 0x1000) pselect6(0x40, &(0x7f00000004c0)={0x6, 0x0, 0x2, 0x1000, 0x1, 0x9, 0xb4, 0x5}, &(0x7f0000000800)={0x2, 0xfff, 0x1, 0x80, 0x8001, 0x1331, 0x1, 0xfffffffffffffffd}, &(0x7f0000000840)={0xffffc00000000000, 0x1f, 0x3, 0x1, 0x10, 0x79, 0x7, 0x1}, &(0x7f00000008c0)={0x0, 0x1c9c380}, &(0x7f0000000940)={&(0x7f0000000900)={0x3}, 0x8}) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r3, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/qat_adf_ctl\x00', 0x4100, 0x0) getsockname(r4, &(0x7f0000000640)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x100, 0x9}, &(0x7f0000000240)=0x8) truncate(&(0x7f00000001c0)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="560000008913488669c767b81958047ddcc712afeea04fcf179bb22d50450519d01f9f75fcfc9071c08cfe30996480ed675a187f0552df166cbfa78a924576b55e00b9ebc73ec39b0575d856a727000000000000000000000000"], &(0x7f0000000380)=0x2) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000b40)={r6, 0x1f, 0x8, 0x4, 0x8, 0x1, 0x5d48, 0x9, {r7, @in6={{0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x80000000}}, 0xffffffffffffffff, 0x5, 0xbdf, 0x80, 0x6}}, &(0x7f0000000480)=0xb0) r9 = mq_open(&(0x7f0000000040)='-$\x00', 0x800, 0xc9, &(0x7f0000000080)={0x1, 0x8001, 0x1, 0x0, 0xae, 0x5, 0xffffffff, 0x3}) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f00000003c0)={r8, 0xffffffffffffe99d}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x100000001, @empty, 0x965}, @in6={0xa, 0x4e24, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x5}], 0x38) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/rtc\x00', 0x40000, 0x0) ioctl$KVM_SET_CPUID2(r10, 0x4008ae90, &(0x7f0000000a80)=ANY=[@ANYBLOB="020000000000000001000080000000000100000000010000080000000100000007000000000000000000000000000000000000802000000001000000ffffff7f0000000007000000000000000000000000000000000000005cd797b34a3c9b5f8f581b8e68e1f700bb23c945b3286fa5057f882d4464c8e1595a65371b805bd7dc1a966823250eb12447912fcfab7d99ff3bc2b6a0a4ccb07325465c319e1377f5045843b06f"]) ioctl$PIO_UNIMAPCLR(r10, 0x40247007, &(0x7f0000000000)={0x0, 0x0, 0xbb4}) mq_timedsend(r1, &(0x7f0000000840), 0x0, 0x100000001, &(0x7f0000000980)={0x77359400}) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000c00)={0x1b38d1de, 0xfff, 0x7, 0x80000000, 0x9, [{0x7e30, 0x1, 0xc1e0, 0x0, 0x0, 0x400}, {0x7, 0x101, 0x8, 0x0, 0x0, 0x200}, {0x1, 0x20, 0x7, 0x0, 0x0, 0x1000}, {0xfffffffffffffe00, 0x1ff, 0x2, 0x0, 0x0, 0x40e}, {0x1, 0x8, 0x37, 0x0, 0x0, 0x2403}, {0x0, 0x9, 0x6, 0x0, 0x0, 0x17d43014ecaf4c6}, {0x4, 0x1, 0x3, 0x0, 0x0, 0x1}, {0x100000001, 0x100000001, 0x8001, 0x0, 0x0, 0x4}, {0x7, 0x7, 0x80000001, 0x0, 0x0, 0x108}]}) ioctl$ASHMEM_GET_NAME(r10, 0x81007702, &(0x7f0000000700)=""/226) open$dir(&(0x7f0000000200)='./file0\x00', 0x80000, 0x10) accept4$packet(r10, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14, 0x80003) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a40)={'team0\x00', r11}) sendto$inet(r4, &(0x7f0000000500)="80968edea45613ff2fe4d22b69ff608dc4fcc4942a64d38497841986519ca984eaec35afb7e04b951a56cdc66601c548172282df58fcf869a3441f59d2e056f697e331dad62f2fd0f38c094530fd2ec2bc49961bc8f79f8dade4d22b56244f3bd50b7ff7b71b7b7ebc90ac48827f057f1bdf77ae958915901e5c24250409036446574795db678cb11919bdbcd70f8571cfbb137aadce1089f68d10f7abdfe190785c0fd83fb6e847a3198c9b53a66261a341959b586c69438af8c4f6cf3b907a4edd74b7eb06bd84da2aa1ffcb309aab58d70f1eefce4ddeabbf99893ac5da2eda707b4f", 0xe4, 0x0, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000880)=r4) mq_timedreceive(r9, &(0x7f0000000100)=""/131, 0x259, 0x20200000, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) 2018/05/19 16:47:32 executing program 7: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)={0xfffffffc, 0x1b, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) getcwd(&(0x7f0000000040)=""/224, 0xe0) r2 = semget(0x3, 0x2, 0x40) semctl$IPC_RMID(r2, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x200, 0x80) getsockname$unix(r3, &(0x7f0000000240), &(0x7f00000002c0)=0x6e) 2018/05/19 16:47:32 executing program 4: writev(0xffffffffffffffff, &(0x7f0000e11ff0)=[{&(0x7f0000001680)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd000000050001000a0a0c00410400000000fcff", 0x58}], 0x1000006e) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101800, 0x0) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x101001, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000400)=@ioapic) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140)=0x81) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000180)=0x101) sendmmsg$inet_sctp(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=@in={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)="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", 0xfd}], 0x1, 0x0, 0x0, 0x50}], 0x1, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001600)=@assoc_value, &(0x7f0000001640)=0x8) r1 = msgget(0x1, 0x28) msgctl$MSG_INFO(r1, 0xc, &(0x7f00000002c0)=""/128) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) sendmsg$nl_xfrm(r0, &(0x7f00000015c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8100000}, 0xc, &(0x7f0000001580)={&(0x7f00000028c0)=ANY=[@ANYBLOB="48110000190002002bbd7000fffbdf2500000002000000000000000000000000000000000000000000000000000000004e2400004e210000020020a03300000048e431b6bd3649b213f17e3485f54f9ba632c524ec12920f911c22124898a489bdff3fd33476aee72c8f47347c992fe1035a6abca30549ede5095b04d14e3f3840e87e6a9dcc68ba2a91c8abe10bcc13059387382d32cf", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x4008010) 2018/05/19 16:47:32 executing program 3: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) accept4$alg(r0, 0x0, 0x0, 0x80000) write$tun(r1, &(0x7f00000004c0)={@void, @val={0x5, 0x0, 0x0, 0x0, 0x6a}, @ipv6={0x0, 0x6, "af04ca", 0x44, 0x11, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @mcast2={0xff, 0x2, [], 0x1}, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}, 0x76) 2018/05/19 16:47:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x4020940d, 0x0) 2018/05/19 16:47:32 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x100, 0x0) bind$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x1, 0x2, 0x0, 0x9, 0x0, "27997f320de838bfa1ceb41a98e7c6efc059107a308a086c1f74615a28825b8ecae19ebe6fc4ea1077bae4938b586c68bf279c9dad5bb0a0f91320dfbe1c29", 0xb}, 0x60) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x80605414, &(0x7f0000000080)) 2018/05/19 16:47:32 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x60fffdff07000000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) 2018/05/19 16:47:32 executing program 7: r0 = accept(0xffffffffffffff9c, &(0x7f0000000000)=@vsock, &(0x7f0000000080)=0x80) connect$pptp(r0, &(0x7f00000000c0)={0x18, 0x2, {0x1, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000100)={{{@in=@local, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@local}}, &(0x7f0000000200)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6gre0\x00', r1}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x420000, 0x0) ioctl$BLKRRPART(r2, 0x125f, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0xb2, "bb397db04f2a95e0fd65d126b839e27c14c52fe0a5415a14a0cdd2994cd764bdf7e2ed5348b863acfd87a3e89baa30c40fe4a41a0c7734c95ce42bb566b50a48d05fabb27692e6fe5a1d6b92344e86e8f3fb520d244390ea70bc30be06e641e19961ace3927d1640d1ac250e48c381f900b06632668041eac3d1974805b6f0e4a341e954f6421c457cbc78399876878fcf03349a32ae0956cee21caa114483fe95b7429023530c2e6d4e33794f7fb7ca8631"}, &(0x7f0000000380)=0xba) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000003c0)={r3, 0x8001}, &(0x7f0000000400)=0x8) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000440)=0x4) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000480)) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000004c0)={r3, 0xe31d, 0x0, 0xdf, 0x6}, &(0x7f0000000500)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000540)={r4, 0x3, 0x20}, 0xc) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000580), &(0x7f00000005c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000600)=""/144) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000006c0)={@remote={0xfe, 0x80, [], 0xbb}, 0x49, r1}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000700)={0x7, 0xe55, 0x8, 0x6, [], [], [], 0x7, 0x4, 0x7, 0x7, "60237bcde71ee6ca421cff9cee628105"}) ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000840)=[0x6, 0x100000001]) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f00000018c0)={0x7, 0xa1f, &(0x7f0000000880)="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", &(0x7f0000001880)="4c11a702208ea99e8003828b4ec7a1f6a3616fc8f3c5027534b284958ee0cf58cd813c7fc8d46ebbb77028b6", 0x1000, 0x2c}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000001900)={0x1000, 0x1, 0x6, {}, 0x1ba3200, 0x5}) pread64(r2, &(0x7f0000001980)=""/16, 0x10, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000019c0)={{{@in6=@ipv4={[], [], @rand_addr}, @in6=@ipv4={[], [], @local}}}, {{@in=@multicast2}}}, &(0x7f0000001ac0)=0xe8) ioctl$BLKROSET(r2, 0x125d, &(0x7f0000001b00)=0x6) write$eventfd(r2, &(0x7f0000001b40)=0x200, 0x8) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000001b80)=""/34) getresgid(&(0x7f0000001bc0), &(0x7f0000001c00), &(0x7f0000001c40)) readv(r2, &(0x7f0000002000)=[{&(0x7f0000001c80)=""/174, 0xae}, {&(0x7f0000001d40)=""/34, 0x22}, {&(0x7f0000001d80)=""/182, 0xb6}, {&(0x7f0000001e40)=""/61, 0x3d}, {&(0x7f0000001e80)=""/163, 0xa3}, {&(0x7f0000001f40)=""/128, 0x80}, {&(0x7f0000001fc0)=""/16, 0x10}], 0x7) fremovexattr(r0, &(0x7f0000002080)=@known='system.posix_acl_access\x00') fcntl$getownex(r0, 0x10, &(0x7f00000020c0)={0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) kcmp$KCMP_EPOLL_TFD(r5, r6, 0x7, r2, &(0x7f0000002100)={r2, r0, 0xbeb}) 2018/05/19 16:47:32 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) 2018/05/19 16:47:32 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00001fefe4)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000006) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r2) [ 263.540216] binder: 18218:18222 transaction failed 29189/-22, size 32-8 line 2856 [ 263.556651] binder: 18218:18228 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:32 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x0) socket(0x5, 0xa, 0x8) munmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000) r4 = dup3(r3, r2, 0x0) r5 = mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000006, 0x2010, r4, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000380)={0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000500)={0xbc, 0x0, &(0x7f00000003c0)=[@register_looper={0x630b}, @register_looper={0x630b}, @transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x30, 0x10, &(0x7f00000001c0)=[@fd={0x66642a85, 0x0, r1, 0x0, 0x4}, @flat={0x0, 0xa, r5, 0x4}], &(0x7f0000000280)=[0x38, 0x78]}}, @transaction_sg={0x40486311, {{0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x18, 0x10, &(0x7f0000000300)=[@flat={0x73682a85, 0x1, r6, 0x4}], &(0x7f0000000340)=[0x68, 0x0]}, 0x100000001}}, @free_buffer={0x40086303, r7}, @increfs={0x40046304, 0x2}, @request_death={0x400c630e, 0x4, 0x6}], 0x54, 0x0, &(0x7f0000000480)="f1f64f4272c149c40a61d6fd6866ada597a19381dc5c3452c3531acfb6b666ec1886928bbae5c72c34a3efba478687d7b859ba6f918cc25e41a2a9455e50815fb0abaa3953587c0408ffa6c3a73f231c5aa5c5a9"}) accept4$packet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14, 0x800) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={@remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x8, 0x80, 0x401, 0x400, 0x8e3e, 0x80000000, r8}) 2018/05/19 16:47:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0xc0306201, 0x0) 2018/05/19 16:47:32 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x4801, 0x0) fstat(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000200)=0x60) sendmsg$nl_netfilter(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001228107ed00a000008000e0000000000000000000000000000e386dc0d4f35a7b0c9e8e953c0a45e5b218ed82a4e2423c542", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB="0c003f00ff030000000000008724324f1c7085b0"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmmsg(0xffffffffffffffff, &(0x7f00000080c0)=[{{&(0x7f0000000180)=@sco={0x1f}, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000000240)=[{0x10, 0x84, 0x5}], 0x10}, 0xfffffffffffffffe}], 0x1, 0x0) [ 263.671724] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 263.671973] binder: undelivered TRANSACTION_ERROR: 29189 [ 263.724216] binder: undelivered TRANSACTION_ERROR: 29189 [ 263.733522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor5'. [ 263.763362] binder: 18251:18252 transaction failed 29189/-22, size 32-8 line 2856 [ 263.802182] binder: 18251:18252 ioctl c0306201 0 returned -14 [ 263.818557] binder: 18251:18257 transaction failed 29189/-22, size 32-8 line 2856 [ 263.836480] binder: 18251:18257 ioctl c0306201 0 returned -14 [ 263.869885] binder: undelivered TRANSACTION_ERROR: 29189 [ 263.875970] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/19 16:47:33 executing program 4: mkdir(&(0x7f0000000300)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x8480, 0x0) getsockname$netrom(r0, &(0x7f0000000140), &(0x7f0000000180)=0x10) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = eventfd(0x0) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000080)={0x4, r5}) ioctl$KVM_HYPERV_EVENTFD(r4, 0x4018aebd, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x1}) unlink(&(0x7f00000000c0)='./control/file0\x00') ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000400)=0x0) r7 = getpgid(0xffffffffffffffff) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r0, &(0x7f0000000440)={r2, r5, 0x2}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f00000001c0)="edf95fc08d1d839ae88a257dde508e8cc7244fb09573be2309359e", &(0x7f0000000340)=""/174}, 0x18) rename(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='./control\x00') mkdir(&(0x7f0000000080)='./control/file1\x00', 0x0) close(r1) 2018/05/19 16:47:33 executing program 7: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0xfe000000000000, @mcast1={0xff, 0x1, [], 0x1}, 0x48d2}, 0x1c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) syz_read_part_table(0x6, 0x2, &(0x7f0000000340)=[{&(0x7f0000000100)="ccd4fb4ee59fbdb0ab2245ac8062b3dfc6a7235137bbe5a709a80f75e57ddc76be55c41599fdd854aad805fa48e21a47309754c76c8902d027aa665f6b7626ddd236d61432f24d7c2d4d1cbf696a0989cd2113f22f39f65bef73ef6db4bce475f72187d9f5ec7e95c8e077d7fe5f5cdc07bfe1db71245e50775b296f3a4cf928f76c4d4881e61b3c5a3f408cd5ff2d74f9c35aa68236b4ecc1dbf6b2adf754fd2d9abad5422774ecda2714388c53b7ff106bfc80f9641027a93fbc95", 0xbc, 0x2}, {&(0x7f00000001c0)="bcdcb1ae2a69fc97e9d17e96b46b437ebdd526ce61a55bf6a61e0d5b6166786a5b59212126916ebaa8a73675903464218e92135e047fc5c5ead800d4c8497800bc8137bee9a64f9040c436b746fc6b66c4c1fd221257d1c7aeb8cc936ea5d6f5c002316fd68feed29f2fa4386fd537baace941e60e7f57cb66af98c9e59cd27f5ef5bd10ea72991b6f68d5a028ab726017a5", 0x92, 0x1}]) 2018/05/19 16:47:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4c0080, 0x0) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4) dup3(r3, r2, 0x0) chdir(&(0x7f0000000080)='./file0\x00') 2018/05/19 16:47:33 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x104e21}, 0x10) syz_emit_ethernet(0xfed1, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x0, 0x4e21, 0x8}}}}}, 0x0) sched_yield() 2018/05/19 16:47:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000beb0a21394000000000000000000d9ad00000000000000000000000000000000000000000000"], 0x68) close(r2) close(r1) 2018/05/19 16:47:33 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x80000000, &(0x7f00000000c0)="c6f6fe0595342b49aa16757a7a7837e2d9a5837a1a26062c8523a4000000000ffd16806caa14ed6bb669b19d50cc5a89e5270e11bf0861392a5a41decd34d1fba00aeb53eb908a83b1c16516d584fbcb6482848da8c890a6bcd4ec2fdf9dd881f85c6ec03eabb1450138fbf9e9560826a371c9cef366d38e66220c28977950d838d556845c1243c6cdc6477bc5dd14d1424ac6d2a7e8a6b84566afe7bee30e3118dc45d907448cb2ab88e31d9043e3e1103ae9ca15b3eb6bff5e469f8f948ce98b545efc9c47643316b01073a964eb1e23c81c9f1e4083") r1 = socket(0x2000000011, 0x2, 0x0) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x20004305, 0x8}, 0x1c) 2018/05/19 16:47:33 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000001c0)=0x3, 0x4) r0 = syz_open_dev$binder(&(0x7f0000872936)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pkey_alloc(0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x44, 0x0, &(0x7f00000000c0)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, &(0x7f0000000040)=[@fda={0x66646185}], &(0x7f0000000080)=[0x20]}}], 0x0, 0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000008000)=[@release={0x400c630f}], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_THREAD_EXIT(r0, 0x5452, 0x0) 2018/05/19 16:47:33 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x7fffdff60000, 0x0, 0x0, 0x1000000) syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x0, 0x0) [ 264.589493] binder: 18274:18276 transaction failed 29189/-22, size 32-8 line 2856 2018/05/19 16:47:33 executing program 3: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffffd}) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000140)={0x5, &(0x7f0000000100)=[{0x88b6, 0x80}, {0x3ff, 0x3}, {0x1}, {0x5aa, 0x3}, {0xfffffffffffffff9, 0x3}]}) setgid(0x0) r1 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)) 2018/05/19 16:47:33 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f00000003c0)="c626262c8523bf012cf66f") mmap(&(0x7f0000c55000/0x2000)=nil, 0x2000, 0x0, 0x8000000000031, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x100, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000480)={{0x8000000005, 0x8000008}, "706f72743100000000000000000000000000000000000000000020010000000000000900", 0x2, 0x4a, 0xc000000, 0x9, 0xfffffffffffffffd, 0x6, 0x80000001, 0x0, 0x0, 0x9}) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)=""/240, 0xf0}, {&(0x7f0000000180)=""/215, 0xd7}, {&(0x7f0000000280)=""/163, 0xa3}], 0x3, &(0x7f0000000380)=""/51, 0x33, 0x8}, 0x100) msync(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x6) 2018/05/19 16:47:33 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x8847, 0x8, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@empty, @empty, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x80, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x8, 0x401, 0x80000000000, 0x6, 0x40, 0x5, 0xa77, 0x6, 0x6, 0x2}, 0xb) [ 264.651616] binder: 18274:18289 transaction failed 29189/-22, size 32-8 line 2856 [ 264.720782] protocol 8847 is buggy, dev sit0 [ 264.725975] ================================================================== [ 264.734092] BUG: KASAN: use-after-free in iptunnel_handle_offloads+0x62b/0x710 [ 264.741474] Read of size 2 at addr ffff8801c60f0e04 by task syz-executor7/18297 [ 264.748925] [ 264.750575] CPU: 0 PID: 18297 Comm: syz-executor7 Not tainted 4.17.0-rc5+ #58 [ 264.757857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 264.763233] binder: undelivered TRANSACTION_ERROR: 29189 [ 264.767216] Call Trace: [ 264.767251] dump_stack+0x1b9/0x294 [ 264.767276] ? dump_stack_print_info.cold.2+0x52/0x52 [ 264.767292] ? printk+0x9e/0xba [ 264.767310] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 264.767330] ? kasan_check_write+0x14/0x20 [ 264.796447] print_address_description+0x6c/0x20b [ 264.801289] ? iptunnel_handle_offloads+0x62b/0x710 [ 264.806299] kasan_report.cold.7+0x242/0x2fe [ 264.810711] __asan_report_load2_noabort+0x14/0x20 [ 264.815636] iptunnel_handle_offloads+0x62b/0x710 [ 264.820475] ? iptunnel_metadata_reply+0x380/0x380 [ 264.825408] ? graph_lock+0x170/0x170 [ 264.829201] ? packet_cached_dev_get+0x330/0x330 [ 264.833953] sit_tunnel_xmit__+0x2a/0x160 [ 264.838096] sit_tunnel_xmit+0x1275/0x30b0 [ 264.842344] ? find_held_lock+0x36/0x1c0 [ 264.846408] ? ipip6_rcv+0x1d30/0x1d30 [ 264.850289] ? lock_downgrade+0x8e0/0x8e0 [ 264.854426] ? vprintk_default+0x28/0x30 [ 264.858479] ? vprintk_func+0x81/0xe7 [ 264.862273] ? rcu_is_watching+0x85/0x140 [ 264.866409] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 264.871159] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 264.876346] ? graph_lock+0x170/0x170 [ 264.880138] ? dev_queue_xmit_nit+0x8ec/0xb90 [ 264.884632] ? __lock_is_held+0xb5/0x140 [ 264.888706] dev_hard_start_xmit+0x264/0xc10 [ 264.893112] ? validate_xmit_skb_list+0x120/0x120 [ 264.897949] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 264.903478] ? netif_skb_features+0x696/0xb40 [ 264.907966] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 264.913162] ? validate_xmit_xfrm+0x1ef/0xdc0 [ 264.917648] ? lock_acquire+0x1dc/0x520 [ 264.921620] ? validate_xmit_skb+0x704/0xd90 [ 264.926032] ? netif_skb_features+0xb40/0xb40 [ 264.930529] __dev_queue_xmit+0x2724/0x34c0 [ 264.934855] ? netdev_pick_tx+0x2d0/0x2d0 [ 264.938997] ? debug_check_no_locks_freed+0x310/0x310 [ 264.944191] ? print_usage_bug+0xc0/0xc0 [ 264.948259] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.953798] ? refcount_add_not_zero+0x216/0x320 [ 264.958559] ? refcount_dec_if_one+0x170/0x170 [ 264.963134] ? alloc_skb_with_frags+0x4fe/0x760 [ 264.967807] ? zap_class+0x720/0x720 [ 264.971550] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 264.977078] ? refcount_add+0x2f/0x70 [ 264.980877] ? skb_set_owner_w+0x24e/0x360 [ 264.985106] ? sock_alloc_send_pskb+0x7d1/0xae0 [ 264.989788] ? lock_downgrade+0x8e0/0x8e0 [ 264.993942] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.999469] ? cap_capable+0x1f9/0x260 [ 265.003354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.009651] ? security_capable+0x99/0xc0 [ 265.013804] dev_queue_xmit+0x17/0x20 [ 265.017598] ? dev_queue_xmit+0x17/0x20 [ 265.021564] packet_sendmsg+0x40f8/0x6070 [ 265.025714] ? debug_check_no_locks_freed+0x310/0x310 [ 265.030894] ? futex_wait_setup+0x400/0x400 [ 265.035208] ? find_held_lock+0x36/0x1c0 [ 265.039284] ? packet_getname+0x5f0/0x5f0 [ 265.043519] ? rcu_is_watching+0x85/0x140 [ 265.047673] ? zap_class+0x720/0x720 [ 265.051385] ? graph_lock+0x170/0x170 [ 265.055184] ? expand_files.part.8+0x9a0/0x9a0 [ 265.059764] ? zap_class+0x720/0x720 [ 265.063476] ? find_held_lock+0x36/0x1c0 [ 265.067537] ? lock_downgrade+0x8e0/0x8e0 [ 265.071699] ? lock_release+0xa10/0xa10 [ 265.075683] ? check_same_owner+0x320/0x320 [ 265.080006] ? __check_object_size+0x95/0x5d9 [ 265.084512] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.090126] ? security_socket_sendmsg+0x94/0xc0 [ 265.094874] ? packet_getname+0x5f0/0x5f0 [ 265.099018] sock_sendmsg+0xd5/0x120 [ 265.102730] __sys_sendto+0x3d7/0x670 [ 265.106528] ? __ia32_sys_getpeername+0xb0/0xb0 [ 265.111193] ? __fd_install+0x2de/0x880 [ 265.115163] ? get_unused_fd_flags+0x190/0x190 [ 265.119750] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.125276] ? alloc_file+0x44/0x3e0 [ 265.128985] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.134518] ? sock_alloc_file+0x2a4/0x4e0 [ 265.138751] ? __alloc_fd+0x700/0x700 [ 265.142560] ? __x64_sys_futex+0x477/0x680 [ 265.146793] ? fd_install+0x4d/0x60 [ 265.150414] ? do_futex+0x27d0/0x27d0 [ 265.154206] ? move_addr_to_kernel+0x70/0x70 [ 265.158614] __x64_sys_sendto+0xe1/0x1a0 [ 265.162665] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 265.167701] do_syscall_64+0x1b1/0x800 [ 265.171577] ? finish_task_switch+0x1ca/0x840 [ 265.176064] ? syscall_return_slowpath+0x5c0/0x5c0 [ 265.180983] ? syscall_return_slowpath+0x30f/0x5c0 [ 265.185911] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 265.191279] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.196117] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.201307] RIP: 0033:0x455a09 [ 265.204496] RSP: 002b:00007fce53c05c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.212196] RAX: ffffffffffffffda RBX: 00007fce53c066d4 RCX: 0000000000455a09 [ 265.219465] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000015 [ 265.226723] RBP: 000000000072bea0 R08: 0000000020000100 R09: 000000000000001c [ 265.233990] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 265.241251] R13: 00000000000005ac R14: 00000000006fc8c0 R15: 0000000000000000 [ 265.248519] [ 265.250136] Allocated by task 18297: [ 265.253843] save_stack+0x43/0xd0 [ 265.257283] kasan_kmalloc+0xc4/0xe0 [ 265.260984] __kmalloc_node_track_caller+0x47/0x70 [ 265.265903] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 265.270645] __alloc_skb+0x14d/0x780 [ 265.274351] alloc_skb_with_frags+0x137/0x760 [ 265.278840] sock_alloc_send_pskb+0x87a/0xae0 [ 265.283327] packet_sendmsg+0x1b98/0x6070 [ 265.287465] sock_sendmsg+0xd5/0x120 [ 265.291178] __sys_sendto+0x3d7/0x670 [ 265.294976] __x64_sys_sendto+0xe1/0x1a0 [ 265.299031] do_syscall_64+0x1b1/0x800 [ 265.302911] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.308094] [ 265.309716] Freed by task 18297: [ 265.313082] save_stack+0x43/0xd0 [ 265.316523] __kasan_slab_free+0x11a/0x170 [ 265.320746] kasan_slab_free+0xe/0x10 [ 265.324534] kfree+0xd9/0x260 [ 265.327631] skb_free_head+0x99/0xc0 [ 265.331341] skb_release_data+0x690/0x860 [ 265.335476] skb_release_all+0x4a/0x60 [ 265.339358] consume_skb+0x18b/0x550 [ 265.343076] packet_rcv+0x16a/0x1810 [ 265.346783] dev_queue_xmit_nit+0x891/0xb90 [ 265.351109] dev_hard_start_xmit+0x16b/0xc10 [ 265.355504] __dev_queue_xmit+0x2724/0x34c0 [ 265.359821] dev_queue_xmit+0x17/0x20 [ 265.363612] packet_sendmsg+0x40f8/0x6070 [ 265.367746] sock_sendmsg+0xd5/0x120 [ 265.371536] __sys_sendto+0x3d7/0x670 [ 265.375325] __x64_sys_sendto+0xe1/0x1a0 [ 265.379376] do_syscall_64+0x1b1/0x800 [ 265.383253] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.388453] [ 265.390069] The buggy address belongs to the object at ffff8801c60f0d40 [ 265.390069] which belongs to the cache kmalloc-512 of size 512 [ 265.402717] The buggy address is located 196 bytes inside of [ 265.402717] 512-byte region [ffff8801c60f0d40, ffff8801c60f0f40) [ 265.414579] The buggy address belongs to the page: [ 265.419499] page:ffffea0007183c00 count:1 mapcount:0 mapping:ffff8801c60f00c0 index:0xffff8801c60f05c0 [ 265.428946] flags: 0x2fffc0000000100(slab) [ 265.433186] raw: 02fffc0000000100 ffff8801c60f00c0 ffff8801c60f05c0 0000000100000005 [ 265.441070] raw: ffffea0006c3bba0 ffffea0006f18a60 ffff8801da800940 0000000000000000 [ 265.448933] page dumped because: kasan: bad access detected [ 265.454629] [ 265.456240] Memory state around the buggy address: [ 265.461162] ffff8801c60f0d00: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 265.468510] ffff8801c60f0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.475854] >ffff8801c60f0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.483205] ^ [ 265.486557] ffff8801c60f0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 265.493913] ffff8801c60f0f00: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 265.501269] ================================================================== [ 265.508616] Disabling lock debugging due to kernel taint [ 265.514119] Kernel panic - not syncing: panic_on_warn set ... [ 265.514119] [ 265.521490] CPU: 0 PID: 18297 Comm: syz-executor7 Tainted: G B 4.17.0-rc5+ #58 [ 265.530160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.539524] Call Trace: [ 265.542109] dump_stack+0x1b9/0x294 [ 265.545728] ? dump_stack_print_info.cold.2+0x52/0x52 [ 265.550907] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 265.555665] ? iptunnel_handle_offloads+0x540/0x710 [ 265.560670] panic+0x22f/0x4de [ 265.563855] ? add_taint.cold.5+0x16/0x16 [ 265.567990] ? do_raw_spin_unlock+0x9e/0x2e0 [ 265.572397] ? do_raw_spin_unlock+0x9e/0x2e0 [ 265.576793] ? iptunnel_handle_offloads+0x62b/0x710 [ 265.581807] kasan_end_report+0x47/0x4f [ 265.585766] kasan_report.cold.7+0x76/0x2fe [ 265.590072] __asan_report_load2_noabort+0x14/0x20 [ 265.594984] iptunnel_handle_offloads+0x62b/0x710 [ 265.599813] ? iptunnel_metadata_reply+0x380/0x380 [ 265.604724] ? graph_lock+0x170/0x170 [ 265.608510] ? packet_cached_dev_get+0x330/0x330 [ 265.613250] sit_tunnel_xmit__+0x2a/0x160 [ 265.617390] sit_tunnel_xmit+0x1275/0x30b0 [ 265.621632] ? find_held_lock+0x36/0x1c0 [ 265.625707] ? ipip6_rcv+0x1d30/0x1d30 [ 265.629580] ? lock_downgrade+0x8e0/0x8e0 [ 265.633711] ? vprintk_default+0x28/0x30 [ 265.637769] ? vprintk_func+0x81/0xe7 [ 265.641558] ? rcu_is_watching+0x85/0x140 [ 265.645694] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 265.650435] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 265.655610] ? graph_lock+0x170/0x170 [ 265.659423] ? dev_queue_xmit_nit+0x8ec/0xb90 [ 265.663914] ? __lock_is_held+0xb5/0x140 [ 265.667964] dev_hard_start_xmit+0x264/0xc10 [ 265.672361] ? validate_xmit_skb_list+0x120/0x120 [ 265.677190] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 265.682717] ? netif_skb_features+0x696/0xb40 [ 265.687198] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 265.692376] ? validate_xmit_xfrm+0x1ef/0xdc0 [ 265.696855] ? lock_acquire+0x1dc/0x520 [ 265.700815] ? validate_xmit_skb+0x704/0xd90 [ 265.705218] ? netif_skb_features+0xb40/0xb40 [ 265.709714] __dev_queue_xmit+0x2724/0x34c0 [ 265.714027] ? netdev_pick_tx+0x2d0/0x2d0 [ 265.718177] ? debug_check_no_locks_freed+0x310/0x310 [ 265.723364] ? print_usage_bug+0xc0/0xc0 [ 265.727412] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.732938] ? refcount_add_not_zero+0x216/0x320 [ 265.737682] ? refcount_dec_if_one+0x170/0x170 [ 265.742251] ? alloc_skb_with_frags+0x4fe/0x760 [ 265.746914] ? zap_class+0x720/0x720 [ 265.750615] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 265.756140] ? refcount_add+0x2f/0x70 [ 265.759928] ? skb_set_owner_w+0x24e/0x360 [ 265.764160] ? sock_alloc_send_pskb+0x7d1/0xae0 [ 265.768831] ? lock_downgrade+0x8e0/0x8e0 [ 265.772969] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.778488] ? cap_capable+0x1f9/0x260 [ 265.782366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.787897] ? security_capable+0x99/0xc0 [ 265.792056] dev_queue_xmit+0x17/0x20 [ 265.795844] ? dev_queue_xmit+0x17/0x20 [ 265.799804] packet_sendmsg+0x40f8/0x6070 [ 265.803939] ? debug_check_no_locks_freed+0x310/0x310 [ 265.809125] ? futex_wait_setup+0x400/0x400 [ 265.813435] ? find_held_lock+0x36/0x1c0 [ 265.817495] ? packet_getname+0x5f0/0x5f0 [ 265.822163] ? rcu_is_watching+0x85/0x140 [ 265.826303] ? zap_class+0x720/0x720 [ 265.830005] ? graph_lock+0x170/0x170 [ 265.833801] ? expand_files.part.8+0x9a0/0x9a0 [ 265.838369] ? zap_class+0x720/0x720 [ 265.842075] ? find_held_lock+0x36/0x1c0 [ 265.846145] ? lock_downgrade+0x8e0/0x8e0 [ 265.850283] ? lock_release+0xa10/0xa10 [ 265.854245] ? check_same_owner+0x320/0x320 [ 265.858556] ? __check_object_size+0x95/0x5d9 [ 265.863046] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.868578] ? security_socket_sendmsg+0x94/0xc0 [ 265.873318] ? packet_getname+0x5f0/0x5f0 [ 265.877478] sock_sendmsg+0xd5/0x120 [ 265.881194] __sys_sendto+0x3d7/0x670 [ 265.884981] ? __ia32_sys_getpeername+0xb0/0xb0 [ 265.889637] ? __fd_install+0x2de/0x880 [ 265.893601] ? get_unused_fd_flags+0x190/0x190 [ 265.898182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.903703] ? alloc_file+0x44/0x3e0 [ 265.907404] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 265.912937] ? sock_alloc_file+0x2a4/0x4e0 [ 265.917162] ? __alloc_fd+0x700/0x700 [ 265.920951] ? __x64_sys_futex+0x477/0x680 [ 265.925173] ? fd_install+0x4d/0x60 [ 265.928785] ? do_futex+0x27d0/0x27d0 [ 265.932588] ? move_addr_to_kernel+0x70/0x70 [ 265.936985] __x64_sys_sendto+0xe1/0x1a0 [ 265.941035] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 265.946045] do_syscall_64+0x1b1/0x800 [ 265.949929] ? finish_task_switch+0x1ca/0x840 [ 265.954421] ? syscall_return_slowpath+0x5c0/0x5c0 [ 265.959357] ? syscall_return_slowpath+0x30f/0x5c0 [ 265.964276] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 265.969635] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.974469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.979662] RIP: 0033:0x455a09 [ 265.982835] RSP: 002b:00007fce53c05c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 265.990542] RAX: ffffffffffffffda RBX: 00007fce53c066d4 RCX: 0000000000455a09 [ 265.997807] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000015 [ 266.005062] RBP: 000000000072bea0 R08: 0000000020000100 R09: 000000000000001c [ 266.012319] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 266.019572] R13: 00000000000005ac R14: 00000000006fc8c0 R15: 0000000000000000 [ 266.027266] Dumping ftrace buffer: [ 266.030803] (ftrace buffer empty) [ 266.034490] Kernel Offset: disabled [ 266.038099] Rebooting in 86400 seconds..