0x400000, 0x0) 2018/04/06 12:21:18 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:18 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0xc, "e20721d71371b584752ae48f"}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0xffffffffffffffe0, 0xb0, 0x7fffffff, 0x9, 0x10000}, 0x14) r2 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x9, 0x40000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000040)={0xc4, 0x5, 0x6c, 'queue1\x00', 0x8000}) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000ee1fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000240)=""/227) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f000048f000)="a2", 0x1) r5 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r5, 0x0, 0x0, 0x9) sendfile(r4, r5, &(0x7f0000e64ff8), 0x6) socket$can_raw(0x1d, 0x3, 0x1) [ 318.422448] binder: 23534:23549 ioctl 40046207 0 returned -16 2018/04/06 12:21:18 executing program 7: perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:18 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x9effffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 318.498719] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:18 executing program 0: r0 = socket(0x0, 0x80800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x2, 0x80000001}, &(0x7f0000000580)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000005c0)={r1, @in6={{0xa, 0x4e21, 0x4, @empty, 0x8}}, 0x9, 0x401, 0xba, 0x10001, 0x4}, &(0x7f0000000680)=0x98) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)) clone(0x0, &(0x7f0000a43000), &(0x7f00004c4000), &(0x7f000052c15e), &(0x7f0000a07000)) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f0000000440)="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") ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x6) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x2}) r5 = syz_open_procfs(r3, &(0x7f00000002c0)='children\x00') setsockopt$ax25_buf(r5, 0x101, 0x19, &(0x7f0000000100)="91ce22d6e94d852b70fa21dc56007dc79059cb1f52809c70b475333a226e7d927408626b301938", 0x3360046025deb968) clone(0x100000, &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc\x00', 0x40000, 0x0) pread64(r5, &(0x7f00000001c0)=""/26, 0x3c0, 0x7) readv(r2, &(0x7f0000004400)=[{&(0x7f0000002400)=""/4096, 0x1000}], 0x1) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f00000003c0)=0x5, 0x4) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000200)=0x2000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000006c0)=ANY=[@ANYBLOB="8aa503a95bd6d657b157c86420000000349425af856fa72087fe5833102bc78cd8ea54f52d02a17e3cd312f3e2d01c24fa48da594af3159f384d1c0bbbe1be8e85ad0b1da32080dcde8874a2f8dd1011126847d59f6c66a7ddf715e5291bf7a04d945edf58692c18c402cc9a7af7"], &(0x7f0000000080)=0x1) signalfd4(r5, &(0x7f00000000c0)={0x771d}, 0x8, 0x800) close(r2) r6 = syz_open_pts(r2, 0x2) ioctl$TCSETA(r6, 0x5406, &(0x7f0000000380)={0xcf, 0x100, 0x70000000000, 0x1890, 0x3, 0xfffffffffffffffa, 0x74b, 0x3, 0x101, 0xfff}) dup3(r6, r2, 0x0) write(r2, &(0x7f0000000740)="c387d0d1044267bb50d65aa84d2b104685c3034b950222a406b17b3cf756495841474166db84c1ab0b92ad97ed6bfdae44e6133c87a051d56bd34bc75111e0", 0x337) ioctl$TCGETS(r6, 0x5401, &(0x7f0000000280)) 2018/04/06 12:21:20 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x0) 2018/04/06 12:21:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:20 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000b89fe4)=@req={0x0, 0x5, 0x8, 0xfff}, 0x10) listen(r0, 0x0) sendmsg(r0, &(0x7f0000030000)={&(0x7f00004f5000)=ANY=[@ANYBLOB="1e000100000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f800e3158b650ddbd5c0bdcc65c2fbea5f0004003f010039d8f986ff01000300000004af50d50700000000000017e3c5316a198300000002000000000000001e27800000100076c3979ac40000bd1502"], 0x1, &(0x7f0000000240), 0x0, &(0x7f00006e9c68)}, 0x0) accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000100)=0x60, 0x0) fcntl$setsig(r0, 0xa, 0x24) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c) 2018/04/06 12:21:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x670}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:20 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, 0x0, 0x2, 0x21, 0x0, 0x0, {}, [@typed={0x10, 0xb, @u64}]}, 0x24}, 0x1}, 0x0) fadvise64(r0, 0x0, 0x7fff, 0x0) 2018/04/06 12:21:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:20 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:20 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574651100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x7006000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 319.780495] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 319.796441] binder: BINDER_SET_CONTEXT_MGR already set [ 319.809710] binder: 23605:23617 ioctl 40046207 0 returned -16 2018/04/06 12:21:20 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:20 executing program 0: mmap(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x3, 0x8972, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000001ff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mremap(&(0x7f0000a93000/0x1000)=nil, 0x1000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000b1d000)={&(0x7f0000a93000/0x3000)=nil, 0x20000002, 0x0, 0x0, &(0x7f0000b1c000/0x4000)=nil}) mprotect(&(0x7f0000b1d000/0x2000)=nil, 0x2000, 0x5) vmsplice(r0, &(0x7f0000b1d000)=[{&(0x7f0000005fe3)}], 0x1, 0x0) mlock2(&(0x7f0000a95000/0x4000)=nil, 0x4000, 0x1) 2018/04/06 12:21:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv6_deladdr={0x2c, 0x15, 0xf03, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2}]}, 0x2c}, 0x1}, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r3, 0xc0a85322, &(0x7f00000001c0)) 2018/04/06 12:21:20 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x0) 2018/04/06 12:21:20 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:20 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:20 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x408000, 0x0) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000040)={0xffffffff7fffffff, 0x9, 0x1, 0x20, 0x7fff, 0x8}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0], 0x5, 0x6, 0xa, 0x1}) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$pokeuser(0x6, r1, 0x5, 0x100000000) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000200)) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000240)={@dev, 0x0}, &(0x7f0000000280)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@empty, @empty, @empty, 0x101, 0x10001, 0x80000000, 0x100, 0xfff, 0x4000000, r3}) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000340)=r0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000003c0)={&(0x7f0000000380)=[0x4, 0x6, 0x4, 0x5, 0x603, 0x6, 0x9, 0x7e, 0x5], 0x9, 0x2, 0x800, 0x6, 0x2, 0xff, {0xb6f, 0x101, 0x401, 0x5, 0x8, 0x7ff, 0x5, 0xa33, 0xffff, 0x401, 0x3ff, 0x4, 0x2, 0x2, "286df8da455bbfa9b6e3fe08c692ee63f64c1fcf209361ab033d2cc5ba7505c9"}}) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000440)) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f0000000480)=""/146) semget(0x0, 0x2, 0x402) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000540)=0x3) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x100000001, 0x0) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000000580)=0x4) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000005c0)={0x6, r2, 0x1}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000600)={0x0, 0x3ff}, &(0x7f0000000640)=0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000680)={r5, 0x20}, 0x8) sysinfo(&(0x7f00000006c0)=""/84) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000840)={0x2, 0x4, 0x10000, 0x6, &(0x7f0000000740)=[{}, {}, {}, {}]}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f00000008c0)={0x0, 0x0, 0x20}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000900)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, &(0x7f0000000940)={r6, r7, 0x2800}) sendto$ax25(r0, &(0x7f0000000980)="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", 0x1000, 0x80, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r4, 0xc0145401, &(0x7f0000001980)={0x1, 0x2, 0x1, 0x3, 0x2}) [ 319.976237] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:20 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 320.038085] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:20 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x0) r1 = dup2(r0, r0) mkdirat$cgroup(r1, &(0x7f0000000040)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0505405, &(0x7f0000003000)={{}, 0x0, 0x0, 'id0\x00', 'timer0\x00'}) [ 320.080743] binder: 23646:23648 ioctl 40046207 0 returned -16 2018/04/06 12:21:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000007fffffe00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:21 executing program 4 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:21:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:21 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x40) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x3) r1 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r1, 0x107, 0xd, &(0x7f0000001000), 0x47e) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={"7663616e3000000000cf00", 0x0}) sendto$packet(r1, &(0x7f0000000140), 0x0, 0xffffffffffffffff, &(0x7f00008cafec)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 2018/04/06 12:21:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:21 executing program 5: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) clone(0x0, &(0x7f0000000000), &(0x7f000004d000), &(0x7f000057d000), &(0x7f0000146000)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) fcntl$setpipe(r0, 0x407, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) write(r1, &(0x7f0000fe5000)="1d", 0x1) fcntl$getown(r0, 0x9) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup2(r1, r0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r4, 0x84, 0x20, &(0x7f0000000040)=0x4, 0x4) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000180)={'icmp6\x00'}, &(0x7f00000001c0)=0x1e) writev(r3, &(0x7f000000b000)=[{&(0x7f0000000140)=',', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000200)={0x0, 0xfffffffffffffffd, 0x1000, 0x1ff, 0x40, 0x5}, &(0x7f0000000240)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000280)={0xac47, 0x3ff, 0x0, 0x3ff, 0xff, 0x8, 0x81, 0xd9, r5}, 0x20) tee(r2, r1, 0x5, 0x0) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000080)) 2018/04/06 12:21:21 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x0, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 320.754510] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 320.763605] binder: BINDER_SET_CONTEXT_MGR already set [ 320.776535] FAULT_INJECTION: forcing a failure. [ 320.776535] name failslab, interval 1, probability 0, space 0, times 0 [ 320.787894] CPU: 1 PID: 23677 Comm: syz-executor4 Not tainted 4.16.0+ #3 [ 320.794742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 2018/04/06 12:21:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 320.804101] Call Trace: [ 320.806710] dump_stack+0x1b9/0x294 [ 320.810354] ? dump_stack_print_info.cold.2+0x52/0x52 [ 320.815559] ? debug_check_no_locks_freed+0x310/0x310 [ 320.820770] should_fail.cold.4+0xa/0x1a [ 320.824846] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 320.829963] ? perf_trace_lock+0xd6/0x900 [ 320.834131] ? graph_lock+0x170/0x170 [ 320.837945] ? perf_trace_lock_acquire+0xe3/0x980 [ 320.842797] ? debug_check_no_locks_freed+0x310/0x310 [ 320.847999] ? perf_trace_lock_acquire+0xe3/0x980 2018/04/06 12:21:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 320.852858] ? find_held_lock+0x36/0x1c0 [ 320.856955] ? __lock_is_held+0xb5/0x140 [ 320.861049] ? check_same_owner+0x320/0x320 [ 320.865380] ? debug_check_no_locks_freed+0x310/0x310 [ 320.870581] ? rcu_note_context_switch+0x710/0x710 [ 320.875531] should_failslab+0x124/0x180 [ 320.879610] kmem_cache_alloc_trace+0x2cb/0x780 [ 320.884303] alloc_pipe_info+0x16d/0x580 [ 320.888382] ? pipe_read+0x940/0x940 [ 320.892110] ? __fget+0x40c/0x650 [ 320.895578] ? expand_files.part.8+0x9a0/0x9a0 [ 320.900172] ? perf_trace_lock_acquire+0xe3/0x980 2018/04/06 12:21:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 320.905031] ? find_held_lock+0x36/0x1c0 [ 320.909118] splice_direct_to_actor+0x6e7/0x8d0 [ 320.913801] ? graph_lock+0x170/0x170 [ 320.917606] ? pipe_to_sendpage+0x3f0/0x3f0 [ 320.921940] ? do_splice_to+0x190/0x190 [ 320.925925] ? rw_verify_area+0x118/0x360 [ 320.930083] do_splice_direct+0x2cc/0x400 [ 320.934097] binder: 23676:23683 ioctl 40046207 0 returned -16 [ 320.934233] ? splice_direct_to_actor+0x8d0/0x8d0 [ 320.944945] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 320.950491] ? __sb_start_write+0x17f/0x300 2018/04/06 12:21:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 320.954829] do_sendfile+0x60f/0xe00 [ 320.958562] ? do_compat_pwritev64+0x1b0/0x1b0 [ 320.963173] ? __might_sleep+0x95/0x190 [ 320.967167] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 320.972715] ? _copy_from_user+0xdf/0x150 [ 320.976877] SyS_sendfile64+0xdf/0x190 [ 320.980775] ? SyS_sendfile+0x1d0/0x1d0 [ 320.984759] ? do_syscall_64+0xb7/0x9d0 [ 320.988744] ? SyS_sendfile+0x1d0/0x1d0 [ 320.992733] do_syscall_64+0x29e/0x9d0 [ 320.996632] ? vmalloc_sync_all+0x30/0x30 [ 321.000791] ? _raw_spin_unlock_irq+0x27/0x70 [ 321.005297] ? finish_task_switch+0x1ca/0x820 [ 321.009799] ? syscall_return_slowpath+0x5c0/0x5c0 [ 321.015612] ? syscall_return_slowpath+0x30f/0x5c0 [ 321.020537] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 321.025895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.030733] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.035908] RIP: 0033:0x4552d9 [ 321.039082] RSP: 002b:00007f5001a5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.046780] RAX: ffffffffffffffda RBX: 00007f5001a606d4 RCX: 00000000004552d9 2018/04/06 12:21:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x7006}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 321.054041] RDX: 00000000209c7000 RSI: 0000000000000014 RDI: 0000000000000014 [ 321.061297] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 321.068555] R10: 00000000400000ff R11: 0000000000000246 R12: 0000000000000015 [ 321.075809] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000000 2018/04/06 12:21:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:21 executing program 0: r0 = memfd_create(&(0x7f0000000fff)='\x00', 0x0) fallocate(r0, 0x1, 0x0, 0x87dc) socketpair$ax25(0x3, 0x5, 0xcf, &(0x7f0000000000)) fallocate(r0, 0x1, 0x0, 0x5) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r0, 0x0) 2018/04/06 12:21:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 321.127392] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:21 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x0, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 321.186926] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:21 executing program 4 (fault-call:2 fault-nth:1): perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:21:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1000000010, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_delroute={0x1c, 0x19, 0x201, 0x0, 0x0, {0xa, 0x94}}, 0x1c}, 0x1}, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={0x0, 0xffffffffffff0000, 0x0, 0x5, 0x4}, &(0x7f0000000200)=0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x2}, &(0x7f0000000280)=0x8) sendmsg(r1, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000020f88)="24000000100007031dff02000000000000000a0009000300001d85685e0000000400ff7e28000000140a43ba16a0aa1c810bb356da5d8060000000060000000029ec2400020cd37ed81cc073", 0x4c}], 0x1}, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x200001) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x5}, &(0x7f0000000080)=0xc) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x7ff, 0x7fffffff, 0x40, 0x100000000, 0x3}, &(0x7f0000000180)=0x98) 2018/04/06 12:21:21 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000100)=0x7, 0xffffffffffffff8a) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000000140)=""/125) fremovexattr(r0, &(0x7f00000001c0)=@known='trusted.syz\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{}]}) 2018/04/06 12:21:21 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:21 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 321.378713] binder: BINDER_SET_CONTEXT_MGR already set [ 321.385207] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. [ 321.398265] FAULT_INJECTION: forcing a failure. [ 321.398265] name failslab, interval 1, probability 0, space 0, times 0 [ 321.409603] CPU: 0 PID: 23738 Comm: syz-executor4 Not tainted 4.16.0+ #3 [ 321.416461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.425934] Call Trace: [ 321.428547] dump_stack+0x1b9/0x294 [ 321.432205] ? dump_stack_print_info.cold.2+0x52/0x52 [ 321.437423] ? __save_stack_trace+0x7e/0xd0 [ 321.441785] should_fail.cold.4+0xa/0x1a [ 321.442353] binder: 23729:23737 ioctl 40046207 0 returned -16 [ 321.445866] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.445888] ? save_stack+0x43/0xd0 [ 321.445909] ? kasan_kmalloc+0xc4/0xe0 [ 321.445929] ? kmem_cache_alloc_trace+0x152/0x780 [ 321.445947] ? alloc_pipe_info+0x16d/0x580 [ 321.445963] ? splice_direct_to_actor+0x6e7/0x8d0 [ 321.445985] ? graph_lock+0x170/0x170 [ 321.446001] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.446035] ? find_held_lock+0x36/0x1c0 [ 321.446065] ? __lock_is_held+0xb5/0x140 [ 321.495711] ? check_same_owner+0x320/0x320 [ 321.500048] ? rcu_note_context_switch+0x710/0x710 [ 321.505016] should_failslab+0x124/0x180 [ 321.509099] __kmalloc+0x2c8/0x760 [ 321.512631] ? kmem_cache_alloc_trace+0x616/0x780 [ 321.517482] ? alloc_pipe_info+0x2a0/0x580 [ 321.521716] alloc_pipe_info+0x2a0/0x580 [ 321.525770] ? pipe_read+0x940/0x940 [ 321.529473] ? __fget+0x40c/0x650 [ 321.532943] ? expand_files.part.8+0x9a0/0x9a0 [ 321.537527] ? perf_trace_lock_acquire+0x4f1/0x980 [ 321.542459] ? find_held_lock+0x36/0x1c0 [ 321.546528] splice_direct_to_actor+0x6e7/0x8d0 [ 321.551192] ? graph_lock+0x170/0x170 [ 321.554986] ? pipe_to_sendpage+0x3f0/0x3f0 [ 321.559306] ? do_splice_to+0x190/0x190 [ 321.563284] ? rw_verify_area+0x118/0x360 [ 321.567440] do_splice_direct+0x2cc/0x400 [ 321.571592] ? splice_direct_to_actor+0x8d0/0x8d0 [ 321.576439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 321.581983] ? __sb_start_write+0x17f/0x300 [ 321.586304] do_sendfile+0x60f/0xe00 [ 321.590036] ? do_compat_pwritev64+0x1b0/0x1b0 [ 321.594632] ? __might_sleep+0x95/0x190 [ 321.598624] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 321.604182] ? _copy_from_user+0xdf/0x150 [ 321.608356] SyS_sendfile64+0xdf/0x190 [ 321.612251] ? SyS_sendfile+0x1d0/0x1d0 [ 321.616228] ? do_syscall_64+0xb7/0x9d0 [ 321.620198] ? SyS_sendfile+0x1d0/0x1d0 [ 321.624164] do_syscall_64+0x29e/0x9d0 [ 321.628052] ? vmalloc_sync_all+0x30/0x30 [ 321.632202] ? _raw_spin_unlock_irq+0x27/0x70 [ 321.636698] ? finish_task_switch+0x1ca/0x820 [ 321.641199] ? syscall_return_slowpath+0x5c0/0x5c0 [ 321.646133] ? syscall_return_slowpath+0x30f/0x5c0 [ 321.651072] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 321.656451] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 321.661298] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 321.666473] RIP: 0033:0x4552d9 [ 321.669649] RSP: 002b:00007f5001a5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 321.677356] RAX: ffffffffffffffda RBX: 00007f5001a606d4 RCX: 00000000004552d9 [ 321.684626] RDX: 00000000209c7000 RSI: 0000000000000014 RDI: 0000000000000014 [ 321.691882] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 321.699145] R10: 00000000400000ff R11: 0000000000000246 R12: 0000000000000015 [ 321.706402] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000001 [ 321.726728] netlink: 20 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/06 12:21:22 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x0, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:22 executing program 5: socketpair$unix(0x1, 0x4000000000005, 0x0, &(0x7f0000000ff8)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000300)=[{0x45, 0x0, 0x0, 0xfffffffffffffffd}, {0x6}]}, 0x10) sendto$unix(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000140)=@abs, 0x6e) 2018/04/06 12:21:22 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000014000)='/dev/dmmidi#\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000000)) read(r0, &(0x7f0000000040)=""/85, 0x207) 2018/04/06 12:21:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:22 executing program 4 (fault-call:2 fault-nth:2): perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) [ 321.815564] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 321.826282] binder: BINDER_SET_CONTEXT_MGR already set [ 321.836496] FAULT_INJECTION: forcing a failure. [ 321.836496] name failslab, interval 1, probability 0, space 0, times 0 [ 321.847845] CPU: 1 PID: 23757 Comm: syz-executor4 Not tainted 4.16.0+ #3 [ 321.854693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 321.864050] Call Trace: [ 321.866654] dump_stack+0x1b9/0x294 [ 321.870304] ? dump_stack_print_info.cold.2+0x52/0x52 [ 321.875527] should_fail.cold.4+0xa/0x1a [ 321.879610] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 321.884729] ? debug_check_no_locks_freed+0x310/0x310 [ 321.887228] binder: 23752:23760 ioctl 40046207 0 returned -16 [ 321.889932] ? graph_lock+0x170/0x170 [ 321.889953] ? print_usage_bug+0xc0/0xc0 [ 321.889967] ? __lock_acquire+0x7f5/0x5130 [ 321.889982] ? __lock_acquire+0x7f5/0x5130 [ 321.890001] ? find_held_lock+0x36/0x1c0 [ 321.890022] ? __lock_is_held+0xb5/0x140 [ 321.920289] ? check_same_owner+0x320/0x320 [ 321.924610] ? rcu_note_context_switch+0x710/0x710 [ 321.929533] ? graph_lock+0x170/0x170 [ 321.933333] should_failslab+0x124/0x180 [ 321.937394] kmem_cache_alloc_node_trace+0x26f/0x770 [ 321.942491] ? find_held_lock+0x36/0x1c0 [ 321.946541] __kmalloc_node+0x33/0x70 [ 321.950331] kvmalloc_node+0x6b/0x100 [ 321.954122] iov_iter_get_pages_alloc+0x7be/0x14e0 [ 321.959040] ? rcu_is_watching+0x85/0x140 [ 321.963177] ? copy_page_to_iter+0xf30/0xf30 [ 321.967577] ? is_bpf_text_address+0xd7/0x170 [ 321.972058] ? kernel_text_address+0x79/0xf0 [ 321.976451] ? __unwind_start+0x166/0x330 [ 321.980585] ? __kernel_text_address+0xd/0x40 [ 321.985068] ? unwind_get_return_address+0x61/0xa0 [ 321.989984] ? __save_stack_trace+0x7e/0xd0 [ 321.994299] ? print_usage_bug+0xc0/0xc0 [ 321.998347] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.003346] ? iov_iter_pipe+0xc2/0x2f0 [ 322.007308] default_file_splice_read+0x1c7/0xad0 [ 322.012139] ? do_syscall_64+0x29e/0x9d0 [ 322.016183] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.021540] ? do_splice_direct+0x400/0x400 [ 322.025862] ? debug_mutex_init+0x1c/0x60 [ 322.030001] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 322.035017] ? __lockdep_init_map+0x105/0x590 [ 322.039503] ? lockdep_init_map+0x9/0x10 [ 322.043550] ? debug_mutex_init+0x2d/0x60 [ 322.047685] ? __mutex_init+0x1ef/0x280 [ 322.051648] ? SyS_membarrier+0x7f0/0x7f0 [ 322.055784] ? __lockdep_init_map+0x105/0x590 [ 322.060269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.065792] ? fsnotify+0x415/0x1100 [ 322.069491] ? init_wait_entry+0x1b0/0x1b0 [ 322.073718] ? fsnotify_first_mark+0x330/0x330 [ 322.078297] ? security_file_permission+0x9f/0x250 [ 322.083215] ? rw_verify_area+0x118/0x360 [ 322.087350] ? do_splice_direct+0x400/0x400 [ 322.091658] do_splice_to+0x12e/0x190 [ 322.095447] splice_direct_to_actor+0x268/0x8d0 [ 322.100104] ? pipe_to_sendpage+0x3f0/0x3f0 [ 322.104416] ? do_splice_to+0x190/0x190 [ 322.108384] ? rw_verify_area+0x118/0x360 [ 322.112521] do_splice_direct+0x2cc/0x400 [ 322.116657] ? splice_direct_to_actor+0x8d0/0x8d0 [ 322.121490] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 322.127021] ? __sb_start_write+0x17f/0x300 [ 322.131334] do_sendfile+0x60f/0xe00 [ 322.135044] ? do_compat_pwritev64+0x1b0/0x1b0 [ 322.139614] ? __might_sleep+0x95/0x190 [ 322.143579] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 322.149103] ? _copy_from_user+0xdf/0x150 [ 322.153241] SyS_sendfile64+0xdf/0x190 [ 322.157119] ? SyS_sendfile+0x1d0/0x1d0 [ 322.161083] ? do_syscall_64+0xb7/0x9d0 [ 322.165050] ? SyS_sendfile+0x1d0/0x1d0 [ 322.169017] do_syscall_64+0x29e/0x9d0 [ 322.172896] ? vmalloc_sync_all+0x30/0x30 [ 322.177035] ? _raw_spin_unlock_irq+0x27/0x70 [ 322.181518] ? finish_task_switch+0x1ca/0x820 [ 322.186004] ? syscall_return_slowpath+0x5c0/0x5c0 [ 322.190926] ? syscall_return_slowpath+0x30f/0x5c0 [ 322.195843] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 322.201195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 322.206032] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 322.211207] RIP: 0033:0x4552d9 2018/04/06 12:21:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 322.214386] RSP: 002b:00007f5001a5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 322.222081] RAX: ffffffffffffffda RBX: 00007f5001a606d4 RCX: 00000000004552d9 [ 322.229334] RDX: 00000000209c7000 RSI: 0000000000000014 RDI: 0000000000000014 [ 322.236712] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 322.244077] R10: 00000000400000ff R11: 0000000000000246 R12: 0000000000000015 [ 322.251329] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000002 2018/04/06 12:21:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:22 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x0, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:22 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306263, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 322.345305] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:22 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:22 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000000000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 322.418550] binder: 23782:23783 ioctl c0306263 200001c0 returned -22 [ 322.463742] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 322.468673] binder: BINDER_SET_CONTEXT_MGR already set [ 322.505148] binder: 23782:23791 ioctl 40046207 0 returned -16 2018/04/06 12:21:23 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x0, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:23 executing program 7 (fault-call:2 fault-nth:0): perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00 \x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:23 executing program 4 (fault-call:2 fault-nth:3): perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:21:23 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306225, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:23 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000150000), 0x4) connect$inet(r0, &(0x7f0000001ffa)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000642000)="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", 0x240, 0x91, &(0x7f0000940000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000002040)=""/4096, 0x1000}], 0x1, &(0x7f0000000400)=""/63, 0x3f}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 2018/04/06 12:21:23 executing program 0: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x309001, 0x0) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x2, 0x6, 0x10001, 0x7, 0xc, 0x0, 0x70bd2a, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x3, 0x0, 0x6e6bb8, 0x40, {0x6, 0x32, 0x6, 0xffff, 0x0, 0x8, 0x0, @in6, @in=@loopback=0x7f000001}}, @sadb_ident={0x2, 0xb, 0xe617, 0x0, 0x8}]}, 0x60}, 0x1}, 0x0) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r2 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f00000000c0)=0x8, 0x4) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00X', 0x8, r4) getrandom(&(0x7f0000000600)=""/184, 0xb8, 0x0) r6 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000002c80)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x3e4, r3) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, &(0x7f0000a53ffb)=""/5, 0x68, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) [ 322.797424] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 322.810602] FAULT_INJECTION: forcing a failure. [ 322.810602] name failslab, interval 1, probability 0, space 0, times 0 [ 322.821904] CPU: 1 PID: 23813 Comm: syz-executor4 Not tainted 4.16.0+ #3 [ 322.828763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 322.828786] binder: 23806:23814 ioctl c0306225 200001c0 returned -22 [ 322.838123] Call Trace: 2018/04/06 12:21:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 322.838150] dump_stack+0x1b9/0x294 [ 322.838173] ? dump_stack_print_info.cold.2+0x52/0x52 [ 322.838201] should_fail.cold.4+0xa/0x1a [ 322.838221] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 322.838247] ? graph_lock+0x170/0x170 [ 322.838262] ? __lock_is_held+0xb5/0x140 [ 322.838283] ? find_held_lock+0x36/0x1c0 [ 322.877199] ? __lock_is_held+0xb5/0x140 [ 322.881297] ? check_same_owner+0x320/0x320 [ 322.885642] ? rcu_note_context_switch+0x710/0x710 [ 322.890596] should_failslab+0x124/0x180 [ 322.894678] __kmalloc+0x2c8/0x760 [ 322.898239] ? rcu_read_lock_sched_held+0x108/0x120 [ 322.903271] ? rw_copy_check_uvector+0x31e/0x3a0 [ 322.908040] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 322.913597] rw_copy_check_uvector+0x31e/0x3a0 [ 322.914307] binder: BINDER_SET_CONTEXT_MGR already set [ 322.918194] import_iovec+0xc3/0x420 [ 322.918216] ? dup_iter+0x270/0x270 [ 322.918246] vfs_readv+0xe2/0x1a0 [ 322.918268] ? compat_rw_copy_check_uvector+0x420/0x420 [ 322.918287] ? is_bpf_text_address+0xd7/0x170 2018/04/06 12:21:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x4, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 322.944166] ? kernel_text_address+0x79/0xf0 [ 322.948578] ? __unwind_start+0x166/0x330 [ 322.951461] binder: 23806:23821 ioctl 40046207 0 returned -16 [ 322.952730] ? __kernel_text_address+0xd/0x40 [ 322.952750] ? unwind_get_return_address+0x61/0xa0 [ 322.952784] ? print_usage_bug+0xc0/0xc0 [ 322.952803] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 322.952821] ? iov_iter_pipe+0xc2/0x2f0 [ 322.981120] default_file_splice_read+0x514/0xad0 [ 322.985972] ? do_syscall_64+0x29e/0x9d0 [ 322.990049] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/06 12:21:23 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x7003) dup3(r0, r1, 0x0) 2018/04/06 12:21:23 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000048d000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-simd\x00'}, 0x58) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ppp\x00', 0x10000, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x4, [0xa1, 0xde6, 0x938, 0x5]}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x3}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000100)={r4, 0x67, "53c3211a99a12304af23a5aae3fe684a34f3627f023f72966eeb7a27ff03287453e1223f3dd44b8e38277507849c57765f100c69daca1c369fd7ea492754fdfd05c1e6838ee63f2d270668c76f84c0615ea58686e066f9c5511410d858f9a5912b23b26cc4d8e8"}, &(0x7f0000000180)=0x6f) r5 = accept$alg(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x7}, 0x8) r6 = open(&(0x7f0000000000)='./file0\x00', 0x28042, 0x0) fallocate(r6, 0x0, 0x0, 0x40007) sendfile(r5, r6, &(0x7f0000ccb000), 0x8001) [ 322.995441] ? do_splice_direct+0x400/0x400 [ 322.999780] ? debug_mutex_init+0x1c/0x60 [ 323.003939] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 323.008967] ? __lockdep_init_map+0x105/0x590 [ 323.013477] ? lockdep_init_map+0x9/0x10 [ 323.018205] ? debug_mutex_init+0x2d/0x60 [ 323.022392] ? __mutex_init+0x1ef/0x280 [ 323.026390] ? SyS_membarrier+0x7f0/0x7f0 [ 323.030643] ? __lockdep_init_map+0x105/0x590 [ 323.035159] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.040709] ? fsnotify+0x415/0x1100 [ 323.044433] ? init_wait_entry+0x1b0/0x1b0 [ 323.048709] ? rw_verify_area+0x118/0x360 [ 323.052870] ? do_splice_direct+0x400/0x400 [ 323.057204] do_splice_to+0x12e/0x190 [ 323.061027] splice_direct_to_actor+0x268/0x8d0 [ 323.065713] ? pipe_to_sendpage+0x3f0/0x3f0 [ 323.070052] ? do_splice_to+0x190/0x190 [ 323.074044] ? rw_verify_area+0x118/0x360 [ 323.078209] do_splice_direct+0x2cc/0x400 [ 323.082377] ? splice_direct_to_actor+0x8d0/0x8d0 [ 323.087235] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 323.092775] ? __sb_start_write+0x17f/0x300 [ 323.097094] do_sendfile+0x60f/0xe00 [ 323.100807] ? do_compat_pwritev64+0x1b0/0x1b0 [ 323.105381] ? __might_sleep+0x95/0x190 [ 323.109352] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 323.114880] ? _copy_from_user+0xdf/0x150 [ 323.119029] SyS_sendfile64+0xdf/0x190 [ 323.122913] ? SyS_sendfile+0x1d0/0x1d0 [ 323.126877] ? do_syscall_64+0xb7/0x9d0 [ 323.130848] ? SyS_sendfile+0x1d0/0x1d0 [ 323.134814] do_syscall_64+0x29e/0x9d0 [ 323.138689] ? vmalloc_sync_all+0x30/0x30 [ 323.142826] ? _raw_spin_unlock_irq+0x27/0x70 [ 323.147312] ? finish_task_switch+0x1ca/0x820 [ 323.151803] ? syscall_return_slowpath+0x5c0/0x5c0 [ 323.156723] ? syscall_return_slowpath+0x30f/0x5c0 [ 323.161646] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 323.167005] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 323.171852] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 323.177033] RIP: 0033:0x4552d9 [ 323.180208] RSP: 002b:00007f5001a5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 323.187915] RAX: ffffffffffffffda RBX: 00007f5001a606d4 RCX: 00000000004552d9 [ 323.195186] RDX: 00000000209c7000 RSI: 0000000000000014 RDI: 0000000000000014 [ 323.202442] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 323.209698] R10: 00000000400000ff R11: 0000000000000246 R12: 0000000000000015 [ 323.216957] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000003 2018/04/06 12:21:23 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:23 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:23 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 323.355544] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:24 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x0, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:24 executing program 5: unshare(0x20d) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x4, 0x400000005) 2018/04/06 12:21:24 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:24 executing program 0: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000080)={0x4, 0xffffffffffffff9c, 0x1}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000780)={0x97, 0x8203, 0x0, 0x0, 0x0}, &(0x7f00000007c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000800)=@assoc_value={r1, 0x7}, 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000058020000580200001801000098030000980300009803000004000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000007f000001ffffff00ffffffff000000000000000000000000000000000000000000000000ffff000000000000000000000000000030fc1d31baee000000000000000000000000000000000000ff0000ffffff0000000000000000000000060009000801000009b5a97663616e30000000000000000000000065716c0000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000040000000000000000000000f0001801000000000000000000000000000000000000000000000000000028004e4651554555450000000000000000000000000000000000000000000003ffff010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00040010000000000000000000000000000000000000000000000000050006d616e676c65000000000000000000000000000000000000000000000000ffffffffffff0000000000000000000000000000000000000000000000000000ac141419ffffffff00000000ffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0004001000000000000000000000000000000000000000000000000000050006d616e676c650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffac1414aa01000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff0000000000"], 0x4d0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000140)={0x7f80000, {{0xa, 0x4e24, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}, 0x1, 0x1, [{{0xa, 0x4e1d, 0x140000, @local={0xfe, 0x80, [], 0xaa}}}]}, 0x110) sendto$inet(r2, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r2, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f000052a000)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r2, 0x1) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0x66, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0xfffffffffffffd80) 2018/04/06 12:21:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffffffffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:24 executing program 4 (fault-call:2 fault-nth:4): perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:21:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xb, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 323.812973] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 323.860548] FAULT_INJECTION: forcing a failure. [ 323.860548] name failslab, interval 1, probability 0, space 0, times 0 [ 323.871913] CPU: 1 PID: 23868 Comm: syz-executor4 Not tainted 4.16.0+ #3 [ 323.878764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 323.888126] Call Trace: [ 323.890729] dump_stack+0x1b9/0x294 [ 323.894380] ? dump_stack_print_info.cold.2+0x52/0x52 [ 323.899580] ? lock_release+0xa10/0xa10 [ 323.903561] should_fail.cold.4+0xa/0x1a [ 323.907623] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 323.912724] ? kasan_check_write+0x14/0x20 [ 323.916954] ? __mutex_lock+0x7d9/0x17f0 [ 323.921009] ? graph_lock+0x170/0x170 [ 323.924803] ? seq_read+0xd5/0x1520 [ 323.928426] ? find_held_lock+0x36/0x1c0 [ 323.932480] ? __lock_is_held+0xb5/0x140 [ 323.936542] ? check_same_owner+0x320/0x320 [ 323.940854] ? rcu_note_context_switch+0x710/0x710 [ 323.945782] should_failslab+0x124/0x180 [ 323.949841] kmem_cache_alloc_node_trace+0x26f/0x770 [ 323.954932] ? save_stack+0x43/0xd0 [ 323.958546] ? kasan_kmalloc+0xc4/0xe0 [ 323.962419] ? __kmalloc+0x14e/0x760 [ 323.966122] ? rw_copy_check_uvector+0x31e/0x3a0 [ 323.970866] ? import_iovec+0xc3/0x420 [ 323.974746] __kmalloc_node+0x33/0x70 [ 323.978536] kvmalloc_node+0x6b/0x100 [ 323.982332] traverse+0x4e3/0xa80 [ 323.985782] ? graph_lock+0x170/0x170 [ 323.989575] ? seq_hlist_next+0xc0/0xc0 [ 323.993541] ? seq_file_path+0x30/0x30 [ 323.997422] seq_read+0xf14/0x1520 [ 324.000968] ? seq_file_path+0x30/0x30 [ 324.004844] ? fsnotify_first_mark+0x330/0x330 [ 324.009417] ? _copy_from_user+0xdf/0x150 [ 324.013556] ? seq_file_path+0x30/0x30 [ 324.017433] proc_reg_read+0x10a/0x190 [ 324.021318] do_iter_read+0x4a3/0x660 [ 324.025119] vfs_readv+0x14f/0x1a0 [ 324.028650] ? compat_rw_copy_check_uvector+0x420/0x420 [ 324.034008] ? is_bpf_text_address+0xd7/0x170 [ 324.038499] ? kernel_text_address+0x79/0xf0 [ 324.042895] ? __unwind_start+0x166/0x330 [ 324.047039] ? unwind_get_return_address+0x61/0xa0 [ 324.051975] ? print_usage_bug+0xc0/0xc0 [ 324.056031] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 324.061039] ? iov_iter_pipe+0xc2/0x2f0 [ 324.065013] default_file_splice_read+0x514/0xad0 [ 324.069849] ? do_syscall_64+0x29e/0x9d0 [ 324.073899] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 324.079262] ? do_splice_direct+0x400/0x400 [ 324.083575] ? debug_mutex_init+0x1c/0x60 [ 324.087715] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 324.092723] ? __lockdep_init_map+0x105/0x590 [ 324.097209] ? lockdep_init_map+0x9/0x10 [ 324.101260] ? debug_mutex_init+0x2d/0x60 [ 324.105396] ? __mutex_init+0x1ef/0x280 [ 324.109361] ? SyS_membarrier+0x7f0/0x7f0 [ 324.113497] ? __lockdep_init_map+0x105/0x590 [ 324.117985] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.123512] ? fsnotify+0x415/0x1100 [ 324.127211] ? init_wait_entry+0x1b0/0x1b0 [ 324.131463] ? rw_verify_area+0x118/0x360 [ 324.135599] ? do_splice_direct+0x400/0x400 [ 324.139910] do_splice_to+0x12e/0x190 [ 324.143705] splice_direct_to_actor+0x268/0x8d0 [ 324.148361] ? pipe_to_sendpage+0x3f0/0x3f0 [ 324.152676] ? do_splice_to+0x190/0x190 [ 324.156654] ? rw_verify_area+0x118/0x360 [ 324.160794] do_splice_direct+0x2cc/0x400 [ 324.164938] ? splice_direct_to_actor+0x8d0/0x8d0 [ 324.169776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 324.175304] ? __sb_start_write+0x17f/0x300 [ 324.179620] do_sendfile+0x60f/0xe00 [ 324.183334] ? do_compat_pwritev64+0x1b0/0x1b0 [ 324.187908] ? __might_sleep+0x95/0x190 [ 324.191876] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 324.197401] ? _copy_from_user+0xdf/0x150 [ 324.201541] SyS_sendfile64+0xdf/0x190 [ 324.205422] ? SyS_sendfile+0x1d0/0x1d0 [ 324.209384] ? do_syscall_64+0xb7/0x9d0 [ 324.213350] ? SyS_sendfile+0x1d0/0x1d0 [ 324.217316] do_syscall_64+0x29e/0x9d0 [ 324.221189] ? vmalloc_sync_all+0x30/0x30 [ 324.225323] ? _raw_spin_unlock_irq+0x27/0x70 [ 324.229807] ? finish_task_switch+0x1ca/0x820 [ 324.234293] ? syscall_return_slowpath+0x5c0/0x5c0 [ 324.239216] ? syscall_return_slowpath+0x30f/0x5c0 [ 324.244147] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 324.249505] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 324.254343] entry_SYSCALL_64_after_hwframe+0x42/0xb7 2018/04/06 12:21:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000000000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff7f00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 324.259520] RIP: 0033:0x4552d9 [ 324.262694] RSP: 002b:00007f5001a5fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 324.270393] RAX: ffffffffffffffda RBX: 00007f5001a606d4 RCX: 00000000004552d9 [ 324.277649] RDX: 00000000209c7000 RSI: 0000000000000014 RDI: 0000000000000014 [ 324.284906] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 324.292161] R10: 00000000400000ff R11: 0000000000000246 R12: 0000000000000015 [ 324.299416] R13: 00000000000004c5 R14: 00000000006fa318 R15: 0000000000000004 2018/04/06 12:21:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x40d, 0x3e3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="180060cb89ca6ff00000000000000c00000004000000012423c7f5f46587745f1ec9a90bd54f74d62b4a77d47d3b5520342c6563b14b4a8a9597ff34c4751d7f308da878dad5ab1502a1087ff41b9d5efded64a695e23c6af2dd1ea000a24b48d75dcedb1d13b42725196e72660a06077558720436792b22a313b5f7adc3ce6dafedecefce60eaa78c105657e81607f21b103a46b92580428e006c6a84beb97f0000000000000443a62deecae75bf87364ed9cb31c41a684e477e74a06af889ac42faa29979c2cda0870b20235cf78596765edd01b34f9df28155fc908bca71b85918ccfe8fba5cc66af341c0c1c8ff160768da197076d"], 0x18}, 0x1}, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 324.333388] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 324.363185] binder: BINDER_SET_CONTEXT_MGR already set [ 324.371248] binder: 23860:23884 ioctl 40046207 0 returned -16 2018/04/06 12:21:24 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000000000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:24 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x3) 2018/04/06 12:21:24 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x70060000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 324.479646] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:25 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:25 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x3, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) dup(r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x4e21, 0x6b, @empty, 0x5}, {0xa, 0x4e20, 0x80, @empty, 0x9}, 0x7, [0x6, 0x80000001, 0x4, 0x1f, 0x2, 0xfffffffffffffffd, 0x8, 0xd39]}, 0x5c) 2018/04/06 12:21:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574658800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:25 executing program 4 (fault-call:2 fault-nth:5): perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:21:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:25 executing program 0: r0 = memfd_create(&(0x7f0000000000)='filter\x00', 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x6, 0x4) r1 = memfd_create(&(0x7f000001cffb)='.\x00', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000042ff3)='/dev/snd/seq\x00', 0x0, 0x20002) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000041f74)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @control}], 0x30) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f000003a000)={0x312, @time}) 2018/04/06 12:21:25 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) r1 = accept$ax25(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x10) preadv(r1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/162, 0xa2}, {&(0x7f00000001c0)=""/1, 0x1}], 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x84000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYPTR64=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f00000003c0)=ANY=[@ANYRES64=r1, @ANYPTR, @ANYBLOB="fd059a0b6938d21dcb0685ffd6a0f8654842f211a6c3888bcf77239f92874768d4281a83b83a2922e9f051d721dfee6f801775d918bbbdbb74c2229527f365042bceaacb16e5a900000000"]], @ANYRES32=r2, @ANYBLOB="01002abd7000fedbdf250f000000d0d10b64ec5df1c4dba45210f93cf5540800069398f3edafdc0efc000800f6f1d064ba7bf6f4000000"], 0x3}, 0x1, 0x0, 0x0, 0x4080}, 0x1) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7006}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:25 executing program 5: getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000ffc)=0x20) socket$inet6(0xa, 0x803, 0x40000000081) sigaltstack(&(0x7f0000000000/0x1000)=nil, &(0x7f0000000ff8)) [ 324.934580] binder: BINDER_SET_CONTEXT_MGR already set [ 324.940130] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 324.968537] binder: 23918:23921 ioctl 40046207 0 returned -16 2018/04/06 12:21:25 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:21:25 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) connect$inet(r0, &(0x7f000005eff0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10) listen(r0, 0x2) r1 = accept(r0, &(0x7f0000f06000)=ANY=[], &(0x7f00008f4000)) recvfrom$inet(r1, &(0x7f0000001280)=""/248, 0xf8, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xb) 2018/04/06 12:21:25 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:25 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000000000100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:25 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff9e}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 325.140492] binder: BINDER_SET_CONTEXT_MGR already set [ 325.157266] binder: 23954:23955 ioctl 40046207 200001c0 returned -16 [ 325.170878] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 325.191860] binder: BINDER_SET_CONTEXT_MGR already set [ 325.207288] binder: 23954:23962 ioctl 40046207 0 returned -16 2018/04/06 12:21:26 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:26 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10100003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000acafed)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x0, @dev={0xac, 0x14, 0x14}}}}, &(0x7f00000002c0)=0x90) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/129) 2018/04/06 12:21:26 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) r2 = dup(r0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f0000000040)={0x7f, 0x1, 0x9}) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9effffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:26 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x60e, 0x400000ff) 2018/04/06 12:21:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045877, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:26 executing program 0: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000006c0)={0x400, 0x9}, 0x8) r1 = fcntl$getown(0xffffffffffffffff, 0x9) r2 = accept4$inet(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x10, 0x80000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000780)=[@in6={0xa, 0x4e22, 0xfffffffffffff7e1, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @broadcast=0xffffffff}], 0x2c) ptrace$setregset(0x4205, r1, 0x200, &(0x7f00000005c0)={&(0x7f0000000080)="449ed0dd6831a7fb44eca4221b1fb01abfec082aa7d0ee6f0ba9db0ece7da2bd3fb0", 0x22}) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x20000, 0x0) r5 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) read(r5, &(0x7f0000ec6000)=""/50, 0x32) r6 = fcntl$dupfd(r5, 0x0, r4) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000880)={0x6, &(0x7f0000000840)=[{}, {}, {}, {}, {}, {}]}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000001000)={{0x100000001, 0x1}}) ioperm(0x20, 0x3, 0x0) setrlimit(0x0, &(0x7f00000008c0)={0x101, 0x4}) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x64) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f000001cfb0)={0x0, 0x6, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r5, 0x54a0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000640)=0x1, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000480)) r7 = dup2(r3, 0xffffffffffffffff) bind$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, {0xd, 0x8000, 0x8, 0x0, 0x5, 0x6}, 0x0, 0x5}, 0xe) preadv(r7, &(0x7f0000000400)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000000c0)=""/50, 0x32}, {&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000240)=""/66, 0x42}, {&(0x7f00000002c0)=""/115, 0x73}, {&(0x7f0000000340)=""/14, 0xe}, {&(0x7f0000000380)=""/71, 0x47}, {&(0x7f00000004c0)=""/220, 0xdc}], 0x8, 0x16) 2018/04/06 12:21:26 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x684, 0x400000ff) 2018/04/06 12:21:26 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x10000000000000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='rootfs\x00', 0x200000, &(0x7f0000000180)="2068b20744f0d8b75acd0573039cc3e61f70469ab7c7b96ed92cb07e6600b0eedde72b0351d7ce6303511b5cb4e33e5991ff71691505ad6e1144cafb9980fb35c690777427858b6a61e884925c54b626b3cb175bf2875fd1b6c00362cc1d295825c80080be8a55496dfab8b41b1f12ab5ba0cd656ed65861cd3f4e6f0b6a0fe1eb60302fec292857fa162f2d") getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r1 = gettid() sched_setscheduler(r1, 0x7, &(0x7f0000000040)=0x8) [ 326.271929] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 326.292729] binder: BINDER_SET_CONTEXT_MGR already set [ 326.304110] binder: 23981:23993 ioctl 40046207 0 returned -16 2018/04/06 12:21:26 executing program 5: syz_emit_ethernet(0x4e, &(0x7f0000005faa)={@random="ff3997ffcd00", @empty, [], {@ipv6={0x86dd, {0x0, 0x6, "c8fba2", 0x2, 0x0, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x2c, 0xd, 0x0, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}}}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$poke(0x5, r1, &(0x7f00000000c0), 0x7fffffff) 2018/04/06 12:21:26 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:26 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x5b, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:26 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x1032, 0x400000ff) 2018/04/06 12:21:26 executing program 7: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x1, 0x8000) r0 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x1, 0x4000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000180)={0x100, 0x7fffffff, 0x3, 'queue0\x00', 0x2}) socket$unix(0x1, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ashmem\x00', 0x100, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000040)=0xa30, 0x4) socket$inet6(0xa, 0x1, 0x4) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r3, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000240)=0x2) [ 326.475280] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 326.490100] binder: 24012:24016 BC_INCREFS_DONE node 123 has no pending increfs request [ 326.498390] binder: 24012:24016 unknown command 0 [ 326.566817] binder: 24012:24016 ioctl c0306201 200001c0 returned -22 [ 326.600697] binder: BINDER_SET_CONTEXT_MGR already set [ 326.606455] binder: 24012:24030 ioctl 40046207 0 returned -16 2018/04/06 12:21:27 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x7006000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:27 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x3, &(0x7f0000000140)=[{0x800, 0x8, 0x2}, {0x4, 0x8, 0x7, 0xffffffffffffff00}, {0x0, 0x4, 0x100, 0x9}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x1, 0xa, 0xc3) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000100)=0xfffffffffffffefe) r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x3, 0x40800) poll(&(0x7f0000000200)=[{r2, 0x2094}, {r1, 0x2008}, {r1, 0x2000}, {r4, 0x100}, {r3, 0x4006}], 0x20000000000000bd, 0x374) 2018/04/06 12:21:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:27 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400c00, 0x400000ff) 2018/04/06 12:21:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4c, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:27 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000000c0)={0x4, {{0x2, 0x4e23}}}, 0x88) r1 = socket(0x10, 0x1000000000803, 0x0) syz_mount_image$hfsplus(&(0x7f0000000200)='hfsplus\x00', &(0x7f0000000240)='./file0\x00', 0x13b, 0x4, &(0x7f0000000540)=[{&(0x7f0000000280)="6cc64c1b7b4cba7e2ecb261b795ea5110de3ed4fadb0c7a2642badbf41545d65fd3a7483a7d8ce86c0076dbedee7df79f3b43f5b39e5b537dc0b88dcca549564e8ec039a5e9a9dfd07c2263bd5ab63aaddf4098a7ba2893d0d2be210b7c2fc3098ed401257fb201a1b36f406867c", 0x6e, 0x1}, {&(0x7f0000000300)="dc48051eff077f25c05728c48f650a6c80dbd7c9e953bd4278ab17510a33fb53f173f7c3aebe68c777c737ef43a5aacb1996466e02f7e16c8b7c10f39380650c71807b7885331540edc862517c425cad5a7784b6a9be5aba11fa7527f4387872708418147d5325cb10509d746fbbfbe1a38a07b07a504c74e71d748c09cdac993379ae900428115953c84cff54e881164dcd56ecaec3786ae7f1167b1f5ba433477f9e914d91cf7737d61388506674edc117c6", 0xb3, 0xbaeb}, {&(0x7f00000003c0)="320004fa1bff53112b6856427044333019680b7394d83c96aec149e02d21b28e4012cb9bde582853512f21f389c782bc884faa58e1115f966ff9225e26cd663f79d9a14387e74a4372300a35b4b95df816155fd5343947535741a44e867b569470", 0x61, 0x1}, {&(0x7f0000000440)="62d92b630b161fd38877e397572faa82ad592de8d096b98fd2eb2fda64a9e2043e68ecd6b4f287f1c1c4a573e86d9692a6d4d28d7a42d7afe60eaa7cc768eb1551570e116b80dada787c1305c085ab8b844e87f56ffa49a0d4720dd1b1c9acecf37fc99bbee5dc93b33a9084e3cf2a8c67697594f12edd16a86d4a15dd250661883958d739f370c1ddab4f43e65da0ee6ef33aa46b9637313b8f7b25ae83c76d431811f93b10d32e6893b2726e9948700a9c79be9fa6024595d7209aab97892edad4e434f95b9b8d79da5c8e18555c86f3796ca980989ad465aad7fc5b1f83758a432e3b76bc8cca", 0xe8, 0x81}], 0x262000, &(0x7f00000005c0)={[{@nls={'nls', 0x3d, 'utf8'}, 0x2c}, {@type={'type', 0x3d, "52dc330c"}, 0x2c}, {@nodecompose='nodecompose', 0x2c}, {@umask={'umask', 0x3d, [0x32, 0x36, 0xb3, 0x34, 0x37]}, 0x2c}, {@barrier='barrier', 0x2c}, {@umask={'umask', 0x3d, [0x33, 0x35, 0x35, 0x32, 0x37, 0x35, 0x30, 0x36, 0x33]}, 0x2c}, {@decompose='decompose', 0x2c}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:27 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000f35000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x20004000027, &(0x7f0000000480), &(0x7f0000000640)=0xfffffffffffffd34) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000140)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000440), 0x4) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000005c0)={'security\x00'}, &(0x7f0000000580)=0x377) r4 = syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x40000, 0x80) ioctl$TIOCSPGRP(r4, 0x5410, &(0x7f0000000500)) syz_open_dev$sndseq(&(0x7f00000002c0)='/dev/snd/seq\x00', 0x0, 0x101000) accept$packet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) setsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000280)={@rand_addr=0x81, @remote={0xac, 0x14, 0x14, 0xbb}, r5}, 0xc) bind$llc(r3, &(0x7f00000003c0)={0x1a, 0x303, 0x80000000, 0xcb7, 0x8e, 0x5, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) socket$unix(0x1, 0x5, 0x0) [ 327.233733] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 327.246706] binder: BINDER_SET_CONTEXT_MGR already set [ 327.261952] device lo entered promiscuous mode [ 327.274208] binder: 24045:24058 ioctl 40046207 0 returned -16 2018/04/06 12:21:27 executing program 5: socket$netlink(0x10, 0x3, 0x15) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000040)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) 2018/04/06 12:21:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:27 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400e00, 0x400000ff) [ 327.315556] device lo left promiscuous mode 2018/04/06 12:21:27 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x3, 0x3c8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200001c0], 0x0, &(0x7f0000000180), &(0x7f00000001c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x9, 0x0, 0x0, 'gretap0\x00', 'ifb0\x00', 'bpq0\x00', 'gretap0\x00', @empty, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0xa0, 0xd0}, [@common=@AUDIT={'AUDIT\x00', 0x8}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8}}, {{{0x0, 0x0, 0x0, 'bcsh0\x00', 'eql\x00', 'vlan0\x00', 'gre0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @link_local={0x1, 0x80, 0xc2}, [0x0, 0x0, 0x0, 0x0, 0xff], 0x100, 0x130, 0x160, [@cgroup0={'cgroup\x00', 0x8}, @arp={'arp\x00', 0x38, {{0x0, 0x0, 0x1, @empty, 0x0, @multicast1=0xe0000001, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}}}]}, [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@STANDARD={'\x00', 0x8}}]}, {0x0, '\x00', 0x2, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'nr0\x00', 'ip6gre0\x00', 'ipddp0\x00', 'bpq0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xd8, 0xd8, 0x108, [@vlan={'vlan\x00', 0x8}, @realm={'realm\x00', 0x10}]}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x3}]}, 0x440) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x4, 0x8000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) socket$inet_tcp(0x2, 0x1, 0x0) nanosleep(&(0x7f0000000040), 0x0) 2018/04/06 12:21:27 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:27 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x68, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 327.367994] device lo entered promiscuous mode [ 327.447224] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 327.451556] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain 2018/04/06 12:21:27 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x670}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:27 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001380)='/dev/audio\x00', 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip_tables_targets\x00') openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10500, 0x0) sendfile(r0, r1, &(0x7f0000000080), 0x40400102) [ 327.492492] binder: BINDER_SET_CONTEXT_MGR already set [ 327.517006] kernel msg: ebtables bug: please report to author: nentries does not equal the nr of entries in the chain [ 327.548218] binder: 24090:24092 ioctl 40046207 0 returned -16 2018/04/06 12:21:28 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:28 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000100)="0acb6e4d0d", 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1, 0x4001) getsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000040)={@mcast2}, &(0x7f00000000c0)=0x14) 2018/04/06 12:21:28 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:28 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup(r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) r2 = socket(0x10, 0x6, 0xfffffffffffffffd) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x3000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:28 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000440)) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000100)={0x0, 0x3, 0xff}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084d401de8721b5a878f66dacd55c2431751ad2ffefb3e077a6af3fe40a796a8353f4f8965bba8b903224f4e96110546363699810301985f89993dfd7287e98fed8acc43e711b1477708736376d2ce267b4848a53de07cb2765cb470dcf3691397f4c49ef3b0dc9b636ca5a9fbbd4b4d0292dc32b1bb21c8192ae2ffcc6152d27c0bdb6cd6d20e6d7aa424e4bfdf474b33832ad24e63aad5b03f9eb34e6caa770a374021f3138030d945389918c7b53324f26758dcacf722778acc5e02cdd851d4ee5b08551515881ab25bb8ccd143bda"]], 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x70, 0x5b60, 0x6, 0x3, 0x93, 0x0, 0x9, 0x8, 0x4, 0xa, 0xfff, 0x200, 0x6, 0x2, 0x6881ef43, 0x6, 0x3, 0xaab, 0x80000000, 0x7, 0x8000, 0x6, 0x7, 0x3, 0x8, 0x4c, 0xc00000, 0x75, 0x80000001, 0x5, 0xfff, 0x1, 0x80, 0x5, 0x5, 0x5, 0x4, 0x0, 0x101, 0x5, @perf_config_ext={0x21b, 0x7fffffff}, 0x4, 0x6, 0x5, 0x0, 0x400, 0x7, 0xffffffffffffff81}, r1, 0x5, r3, 0x8) tkill(r1, 0x1000000000016) timer_settime(r2, 0x1, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000040)) 2018/04/06 12:21:28 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xc0c, 0x400000ff) [ 328.231165] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 328.235536] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:28 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x86, 0x400000) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r0, &(0x7f00000001c0)=[{{0x77359400}, 0x9, 0x2, 0x1}, {{}, 0xffff, 0xffffffffffffffff}, {{r1, r2/1000+10000}, 0x4, 0x5bb, 0xe4}], 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) getpeername$ax25(r3, &(0x7f00000000c0), &(0x7f0000000100)=0x10) r4 = socket(0xc, 0x80f, 0x100) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x101080, 0x0) getsockopt$inet6_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000000480)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000340)={0x0, 0x0, 0x4}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20000, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x8001) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000100)=0xffc00000000000) 2018/04/06 12:21:28 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000000000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 328.281255] binder: 24107:24116 ioctl 40046207 0 returned -16 2018/04/06 12:21:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:29 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x598, 0x400000ff) 2018/04/06 12:21:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x20000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:29 executing program 7: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2000, 0x80) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:29 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000f40)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000f00)={0xffffffff}, 0x13f}}, 0x20) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept4$packet(0xffffffffffffff9c, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000600)=0x14, 0x800) getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000700)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@loopback=0x7f000001, 0x4e20, 0xff, 0x4e21, 0x0, 0xa, 0x0, 0x80, 0x7f, r3, r4}, {0x2, 0x8f5, 0x400, 0x400, 0x4, 0x3f1, 0x1, 0x2}, {0x200, 0x63, 0x0, 0x3ff}, 0x1000000000, 0x0, 0x2}, {{@in=@multicast2=0xe0000002, 0x4d2}, 0xa, @in=@broadcast=0xffffffff, 0x3507, 0x4, 0x1, 0x1c00000000000, 0x8, 0x9b, 0x7fff}}, 0xe8) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) write$rdma_cm(r0, &(0x7f00000000c0)=@notify={0xf, 0x8, 0xfa00, {r1}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000240)={{{@in=@rand_addr, @in=@remote}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000040)=0xe8) getpeername$packet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCDELRT(r5, 0x890c, &(0x7f0000000340)={@mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, 0xee75, 0x8001, 0x5, 0x3fc, 0x2, 0x0, r6}) 2018/04/06 12:21:29 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffff000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:29 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x6}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000180)={r2, 0x2}, &(0x7f00000001c0)=0x8) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0xff, 0x20, 0x19bf5841, 0x100, 0x4, 0x8}) r3 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x1e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200003c0], 0x0, &(0x7f00000000c0), &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x2c9) [ 329.207949] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 329.221779] kernel msg: ebtables bug: please report to author: Wrong len argument [ 329.244585] QAT: Invalid ioctl 2018/04/06 12:21:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 329.261745] QAT: Invalid ioctl [ 329.270975] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:29 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:29 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x8d2, 0x400000ff) [ 329.302961] binder: 24153:24170 ioctl 40046207 0 returned -16 [ 329.311590] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 329.325706] QAT: Invalid ioctl 2018/04/06 12:21:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000180)={0x0, 0x43}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={r1, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x0, 0x101}, &(0x7f0000000140)=0x90) r3 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0xfffffffffffffffc, 0x400080) statx(r3, &(0x7f0000000380)='./file0\x00', 0x6400, 0x800, &(0x7f00000003c0)) getpid() setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={r2, 0x46}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000001c0)={r2, 0x2}, &(0x7f0000000200)=0x8) socketpair$ax25(0x3, 0x7, 0x0, &(0x7f00000004c0)) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000540)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x13}}}, 0xb4, 0xc02}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x9, &(0x7f0000000f68)={r1, @in={{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0xffffffffffff8000}, 0x90) rmdir(&(0x7f0000000280)='./file0\x00') write$eventfd(r3, &(0x7f0000000500)=0x5, 0x8) mkdir(&(0x7f0000000240)='./file0\x00', 0x90) r4 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x40000, 0x0) ioctl$TUNGETIFF(r4, 0x800454d2, &(0x7f0000000300)) 2018/04/06 12:21:29 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x4004743b, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='irlan0\x00') r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000c9bec8)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x7900}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$l2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x4, 0x4, 0x2, 0x1}}, 0x2e) 2018/04/06 12:21:29 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000ffffffff00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:29 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x1000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x9effffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:29 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) connect$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2}}, 0x1e) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, 0x3000}) r2 = syz_open_dev$sg(&(0x7f0000004ff7)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffffffff4f3}, &(0x7f0000000040)=0x10) ioctl(r2, 0x100000001, &(0x7f0000000000)) getsockopt$netlink(r1, 0x10e, 0x4, &(0x7f00000000c0)=""/4, &(0x7f0000000100)=0x4) [ 329.499364] binder: BINDER_SET_CONTEXT_MGR already set [ 329.514319] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:29 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x172, 0x400000ff) 2018/04/06 12:21:29 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000040)=""/53, &(0x7f00000000c0)=0x35) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:29 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 329.551867] binder: 24200:24203 ioctl 40046207 0 returned -16 2018/04/06 12:21:30 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7a000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:30 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000629000)) r1 = syz_open_pts(r0, 0x1) r2 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@nfc_llcp, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f0000000100)={'ipvs\x00'}, &(0x7f0000000140)=0x1e) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000b3a000)=0x19) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x2) ioctl$TCXONC(r1, 0x540a, 0x1) 2018/04/06 12:21:30 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400005, 0x400000ff) 2018/04/06 12:21:30 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) connect$unix(r0, &(0x7f0000941000)=@abs={0x1}, 0x8) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'bond0\x00', {0x4, 0x3, 0x1, "6f0d59a07b90", 0x3}}) 2018/04/06 12:21:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xfffffff0}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:30 executing program 7: r0 = getpgid(0x0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x9, 0x80000) fcntl$lock(r1, 0x7, &(0x7f00000001c0)={0x2, 0x7, 0x7, 0x8, r0}) perf_event_open(&(0x7f0000000100)={0x4, 0x70, 0x1, 0x3, 0x80, 0x7, 0x0, 0x7, 0x4000, 0x5, 0x3, 0x4, 0x1f, 0x7fffffff, 0x4, 0x0, 0x21820447, 0x7, 0x800, 0xa75, 0x0, 0x1, 0x4, 0x9, 0x80, 0x9, 0x4, 0x10000, 0x4, 0x1f, 0x6, 0x8, 0x9, 0xc158, 0x9, 0xffff, 0x4, 0x7, 0x0, 0x3, 0x4, @perf_bp={&(0x7f00000000c0), 0xa}, 0x0, 0xfffffffffffffffe, 0x2, 0x7, 0x9, 0x7, 0x5}, r0, 0xf, r1, 0x2) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ioctl$PPPIOCSFLAGS(r1, 0x40047459, &(0x7f0000000200)=0x80301) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000000000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x4}, r2, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x800}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={r3, 0x1, 0x30}, 0xc) r4 = socket(0x1f, 0x801000000000800, 0xffffffffffffffff) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 330.201396] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 330.216284] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:30 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffff00000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:30 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7f, 0x600080) fchmodat(r2, &(0x7f00000000c0)='./file0\x00', 0x1) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) fchmod(r0, 0x14) [ 330.248866] binder: 24240:24249 ioctl 40046207 0 returned -16 2018/04/06 12:21:30 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400007, 0x400000ff) 2018/04/06 12:21:30 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:30 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) bind$inet6(r0, &(0x7f0000807fe4)={0xa}, 0x1c) socket(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="79000000aaa65294e2632db610427578032655da62b2fc7f8d97bcd95be0b438be3b3bf732b793970d7f93dd48bc5d49533f422268cf3a9c552d46065cc8b11ba0c204000000a8422aecd44df8ead8c2a53adf5dcb42a636f1fff73e0221c35f61974b4804e42864362cd67e987ac32848ba5561b6185829a427d1c633274ba57121ab968e5ecdae71d8a6ed98814cf3ada52d8e7b699b643a2d3f5c201890ae695f0a4e4dd91a5dd741968375a7c2c352e1a13a87259daf969cc8370d9b364e036176e2a2df3b040e4df136ba06b49f9b680ec13f85a7de7ac189"], &(0x7f0000000480)=0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={r1, @in6={{0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0x1, 0x8, 0x0, 0x0, 0x8}, 0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) socket(0x40000000000005, 0x7fffe, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x17fd}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@dev}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) r3 = userfaultfd(0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='task\x00') getsockname$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) flock(0xffffffffffffffff, 0xc) r5 = dup(r3) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000001c0), 0x4) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000940)=""/213) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) mremap(&(0x7f0000d7e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001cd000/0x3000)=nil) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x14a) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000100)={0x200, 0x5, 0x3, 0x1}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x70, 0x3, 0xb25, 0x5, 0x2, 0x0, 0x0, 0x2, 0x2, 0x4, 0x4, 0x1000, 0x1, 0x101, 0x8001, 0x7, 0xfff, 0xfff, 0x100000001, 0x348fce9a, 0x2, 0x3f, 0x3ff, 0x4, 0x5, 0xb13e, 0x7, 0x5, 0x3, 0x2, 0x1f0, 0x9650, 0x0, 0x8, 0x3, 0xfffffffffffffffa, 0x40, 0x0, 0x5, 0x3, @perf_config_ext={0x9, 0x1}, 0x20301, 0xa9f4e86, 0x9, 0x4, 0x6bae55d7, 0x5, 0x8}, r5, 0x5, r5, 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet6_udp_int(r4, 0x11, 0x64, &(0x7f00000000c0)=0xfffffffffffffff7, 0x4) userfaultfd(0x80000) 2018/04/06 12:21:30 executing program 0: r0 = socket(0x15, 0x100080008, 0x0) pkey_mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x114, 0x2710, &(0x7f0000000000), &(0x7f0000000ff8)=0x4) 2018/04/06 12:21:30 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7400, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:30 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x1, r0, 0x1}) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f00000001c0)=0x2, &(0x7f0000000200)=0x2) r2 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) setsockopt$inet_buf(r2, 0x0, 0x9, &(0x7f00000000c0)="8655662f7bdfdfe966412350afbc41fc7ae500a5f785d1d06b76118615d6717b3b90f16c44055b01ba47c132575312ed5a75626afe3eb81b5be2b109295218555c1a16e4c1c238b4702aa2d2134bdb96424fa2f34316fc7955b6fd5aeae137f2bf0c335aae6655024ddb5ae0ead5b90c9ea73c19b786c0bdb763e81e87044b41ab9aa4322fe89498454c3fabf56eed02cb22084cc5de533b088faf406b7e86d9c66495a55b3b48788cea3bf8cc6b514fb974ba5f1467ff85cecc0a29dd1a25748db22fdee72ebd219da84f2f4be0575c49064ad39320f2607e3fd91d5609d6fd7c3e1db61001ca057cc1b74a1a6cbb23f03a374e5a1a33", 0xf7) [ 330.398160] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 330.420535] binder: BINDER_SET_CONTEXT_MGR already set [ 330.462212] binder: 24272:24276 ioctl 40046207 0 returned -16 [ 330.482589] device bond0 entered promiscuous mode 2018/04/06 12:21:31 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xf0ffffffffffff}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:31 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xcf9f, 0x200080) sync_file_range(r0, 0x6, 0x0, 0x4) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = dup(r2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet6_tcp_int(r3, 0x6, 0x1a, &(0x7f0000003ffc), &(0x7f0000012ffc)=0x4) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x4801, 0x0) ioctl$UFFDIO_WAKE(r4, 0x8010aa02, &(0x7f0000000140)={&(0x7f00006ac000/0x3000)=nil, 0x3000}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x1e, 0x2, 0x0) bind(r5, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) socket(0x1e, 0x1, 0x0) close(r5) r6 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r7 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a}, 0x0, 0x0, r6) add_key$user(&(0x7f0000c24ffb)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)="600001e3a255ec4a8d9d652d0527abdffd0587e50ec159997396abc344a7d9f542a3e3af2d90a5df424d68996f51a7b3f20108f152bfd57ac5a50be84a106249abbfc5b3f2e96bf3039474801001807fbf00000000000000000000000000000000", 0x61, r7) r8 = add_key$user(&(0x7f0000ef5000)='user\x00', &(0x7f00008fa000)={0x73, 0x79, 0x7a}, &(0x7f0000537ffd)="0003", 0x2, r7) r9 = add_key$user(&(0x7f0000688000)='user\x00', &(0x7f00008d9ffb)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000f19edc)="b33ab76079ebe0d14f729cd653e520d29ad7ef0000000000000044c249b544230b9387fb8bd6ed266ccf59ef70995bf2e8e0ecd3fff32853747eda22d2818d08ca27e0ec821620e365a0e6b9485f2d925493f62113e33e5f8c7eba67fc19a9497f5b07e5849d2e875b066cd6401d36616fe0f3c3002801b4627ee7597689525e8e81f750a86eb580fb4690ea", 0x8c, r7) r10 = request_key(&(0x7f0000a98ffb)='user\x00', &(0x7f0000626000)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000002c0)="2f6465612f7675746f66730719", r6) keyctl$dh_compute(0x17, &(0x7f00004c8ff4)={r8, r9, r10}, &(0x7f00005cd000), 0x0, &(0x7f000010c000)={&(0x7f0000bf4ff3)={'ghash-generic\x00'}, &(0x7f0000000000)}) setsockopt$netrom_NETROM_IDLE(r5, 0x103, 0x7, &(0x7f0000000180)=0x1, 0x4) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$midi(&(0x7f0000000380)='/dev/midi#\x00', 0x20000000cdfb, 0x20020) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000035c0)={'teql0\x00'}) memfd_create(&(0x7f0000000080)='dev ', 0x0) 2018/04/06 12:21:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x74, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:31 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x80000001, 0x5) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x731, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2018/04/06 12:21:31 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000000)={'HL\x00'}, &(0x7f0000000040)=0x1e) bind$inet6(r0, &(0x7f0000807fe4)={0xa}, 0x1c) socket(0xa, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYBLOB="79000000aaa65294e2632db610427578032655da62b2fc7f8d97bcd95be0b438be3b3bf732b793970d7f93dd48bc5d49533f422268cf3a9c552d46065cc8b11ba0c204000000a8422aecd44df8ead8c2a53adf5dcb42a636f1fff73e0221c35f61974b4804e42864362cd67e987ac32848ba5561b6185829a427d1c633274ba57121ab968e5ecdae71d8a6ed98814cf3ada52d8e7b699b643a2d3f5c201890ae695f0a4e4dd91a5dd741968375a7c2c352e1a13a87259daf969cc8370d9b364e036176e2a2df3b040e4df136ba06b49f9b680ec13f85a7de7ac189"], &(0x7f0000000480)=0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000005c0)={r1, @in6={{0xa, 0x4e23, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0x1, 0x8, 0x0, 0x0, 0x8}, 0x98) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000080)={0x0, 0x8}, &(0x7f0000000100)=0x8) socket(0x40000000000005, 0x7fffe, 0x0) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000004c0)={'bond0\x00', 0x17fd}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000840)={{{@in6=@dev, @in6=@dev}}, {{@in=@local}, 0x0, @in=@broadcast}}, &(0x7f0000000380)=0xe8) r3 = userfaultfd(0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='task\x00') getsockname$ax25(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080)=0x10) flock(0xffffffffffffffff, 0xc) r5 = dup(r3) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f00000001c0), 0x4) ioctl$EVIOCGKEYCODE(r5, 0x80084504, &(0x7f0000000940)=""/213) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) mremap(&(0x7f0000d7e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00001cd000/0x3000)=nil) poll(&(0x7f0000000140)=[{r3}], 0x1, 0x14a) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0x7, &(0x7f0000000100)={0x200, 0x5, 0x3, 0x1}, 0x10) perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x70, 0x3, 0xb25, 0x5, 0x2, 0x0, 0x0, 0x2, 0x2, 0x4, 0x4, 0x1000, 0x1, 0x101, 0x8001, 0x7, 0xfff, 0xfff, 0x100000001, 0x348fce9a, 0x2, 0x3f, 0x3ff, 0x4, 0x5, 0xb13e, 0x7, 0x5, 0x3, 0x2, 0x1f0, 0x9650, 0x0, 0x8, 0x3, 0xfffffffffffffffa, 0x40, 0x0, 0x5, 0x3, @perf_config_ext={0x9, 0x1}, 0x20301, 0xa9f4e86, 0x9, 0x4, 0x6bae55d7, 0x5, 0x8}, r5, 0x5, r5, 0x2) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000280)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000200)=0x4) ioctl$UFFDIO_REGISTER(r3, 0xc028aa03, &(0x7f0000000240)={{&(0x7f00005e3000/0x800000)=nil, 0x800000}, 0x200000}) setsockopt$inet6_udp_int(r4, 0x11, 0x64, &(0x7f00000000c0)=0xfffffffffffffff7, 0x4) userfaultfd(0x80000) 2018/04/06 12:21:31 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x404c00, 0x400000ff) [ 331.124261] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 331.145678] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:31 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0xf, 0x1000000000803, 0x7fff) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000140)=0x0) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x0, 0x8634, 0x10001, 0xff, 0x0, 0x9, 0x0, 0x6, 0xf9a, 0x9, 0x1, 0x100000000, 0x7, 0x5, 0x4, 0x2, 0x1, 0x7fff, 0x3, 0x20000000000000, 0xfff, 0xc2b, 0x0, 0x81, 0x617, 0x1, 0xfff, 0x3, 0x0, 0x1, 0xc78, 0x1919, 0x0, 0x7000000000, 0x7dbb, 0x0, 0x0, 0x6, 0x7, @perf_bp={&(0x7f0000000040), 0xe7f4febafe99e128}, 0x140a0, 0xfffffffffffffff7, 0x9, 0x7, 0xff, 0x71}, r2, 0xc, r0, 0x9) 2018/04/06 12:21:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0x2000010c, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:31 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xd6e, 0x400000ff) 2018/04/06 12:21:31 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 331.198753] binder: 24300:24314 ioctl 40046207 0 returned -16 2018/04/06 12:21:31 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7400000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:31 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x6, 0x200) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000140)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) fcntl$lock(r0, 0x5, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0x20, r3}) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 331.326762] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:31 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:31 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000ccb000)={0x2}, 0x10) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x20c0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000e5a000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007fd0)={0x26, 0x0, &(0x7f000000df48)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 '], 0x0, 0x0, &(0x7f000084b000)}) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f00000000c0)=""/224, 0xe0, &(0x7f0000000000)=""/105, 0x3, 0x7}}, 0x68) [ 331.367966] binder: BINDER_SET_CONTEXT_MGR already set [ 331.418856] binder: 24335:24340 ioctl 40046207 0 returned -16 [ 331.455670] binder: BINDER_SET_CONTEXT_MGR already set [ 331.488080] binder: 24347:24348 ioctl 40046207 0 returned -16 [ 331.503287] binder: 24347:24348 transaction failed 29189/-22, size 8192-0 line 2848 [ 331.512994] binder_alloc: binder_alloc_mmap_handler: 24347 20001000-20005000 already mapped failed -16 [ 331.524077] binder_alloc: 24347: binder_alloc_buf, no vma [ 331.529725] binder: 24347:24353 transaction failed 29189/-3, size 8192-0 line 2963 [ 331.552640] binder: undelivered TRANSACTION_ERROR: 29189 [ 331.558186] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/06 12:21:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10}, 0xf0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffffffffffc76, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x5}}, 0x14}, 0x1}, 0x0) 2018/04/06 12:21:32 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xaaa, 0x400000ff) 2018/04/06 12:21:32 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:32 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:32 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/4, &(0x7f0000000040)=0xfffffffffffffc6e) 2018/04/06 12:21:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x2000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:32 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) eventfd2(0xffffffffffffffff, 0x800000000) read$eventfd(0xffffffffffffffff, &(0x7f0000354000), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000951ff8), 0x8) write$eventfd(0xffffffffffffffff, &(0x7f0000f1aff8), 0x8) r0 = add_key(&(0x7f00000001c0)='cifs.spnego\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$negate(0xd, 0x0, 0x3, r0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1000, 0x0) mount(&(0x7f00002b9ff8)='./file0\x00', &(0x7f0000cbeff8)='./file0\x00', &(0x7f00005f7ffa)='ramfs\x00', 0x80000, &(0x7f000002f000)) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x40000000089fc, &(0x7f0000000400)="a472689dd431d93e89b5992cf8b4face9fac01673e9d6328a457eb44618a25152a4cc8fca3ff8497edc342195b81e5c28c37ee8ba5ea5be07db12633c77b6d90cb5489a47995d5d417c54c4f3a8bc77a8d194c5bcadbd6ce7b") mount(&(0x7f0000377ff8)='.', &(0x7f0000187ff8)='.', &(0x7f0000753000)='mslos\x00', 0x0, &(0x7f00000e7000)) mount(&(0x7f0000adcff8)='./file0\x00', &(0x7f0000e08fff)='.', &(0x7f00005e9000)='cifs\x00', 0x2000, &(0x7f0000ad5000)) umount2(&(0x7f000075e000)='.', 0x0) r3 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x10000000080008) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000240)=0x910e, 0x4) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f000067d000)=0x19, 0x4) bind$unix(r5, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r2, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/06 12:21:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 332.192588] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 332.193349] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:32 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000040)={'ip6_vti0\x00', 0x9}) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:32 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x76, 0x400000ff) [ 332.261141] binder: 24361:24374 ioctl 40046207 0 returned -16 2018/04/06 12:21:33 executing program 0: capset(&(0x7f0000fb2000)={0x20080522}, &(0x7f0000000580)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x1f, &(0x7f00000002c0)=0x7786, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000000)={'ip6_vti0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x422400, 0x0) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14) clone(0x6000, &(0x7f0000000100)="af07abb7dbd49aa4e05b93056aae045e91d409b7cf1621abc11dcf191a817eb49d4435886fdd9b52df05cf25fc2af86d7f9b7604b7b6d8f64818fefebec6669a2c0b10a316701c4df344962dff6c98cf8fddee6e7ca7efdf", &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000000200)="635efdc78491") 2018/04/06 12:21:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:33 executing program 5: r0 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x12, 0x81) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000080)=[{&(0x7f00000004c0)=""/200, 0xc8}], 0x1) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000240)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101082, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, [0x0, 0x9, 0x4, 0x2]}) ioctl$DRM_IOCTL_VERSION(r0, 0xc0406400, &(0x7f0000000480)={0x9, 0x2, 0x3, 0x4b, &(0x7f0000000180)=""/75, 0x5, &(0x7f0000000200)=""/5, 0xec, &(0x7f0000000380)=""/236}) close(r1) 2018/04/06 12:21:33 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:33 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40000a, 0x400000ff) 2018/04/06 12:21:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x100000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:33 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0x2c0c00) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xdc, r2, 0x5, 0x70bd28, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x10, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x14}}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2e}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xae}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x21, 0x14}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1800000000}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x400}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7b}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x30, 0x24}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x90}, 0x800) 2018/04/06 12:21:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 333.134351] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 333.148775] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:33 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xf, &(0x7f0000003f40)=""/4, &(0x7f0000003fc0)=0x4) pipe2(&(0x7f0000003980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) clock_gettime(0x0, &(0x7f00000039c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000003a00)={{0x1000, 0x2, 0xdb60, 0x3, "5660b43e9697bea6de8478cc8e8eb8e314aa2b178e4bff61f4f1d78ba4f145d02528e4a37f1c7ae4deb6a040", 0x80000001}, 0x3, [0x9, 0xfffffffffffffffe, 0x80, 0x4, 0x80000000, 0x36b0d5ba, 0x2, 0x7fffffff, 0x401, 0x401, 0x9, 0x8, 0x4, 0x3, 0x4, 0x5, 0x18000, 0xfffffffffffffff9, 0xb9d8, 0x100000001, 0x0, 0x6, 0x10000, 0x1dcf1e99, 0x0, 0x4221, 0x5, 0x0, 0x6, 0x9, 0x9, 0x17, 0xffffffff, 0x7, 0x6, 0x8000, 0x8, 0x9, 0x0, 0xffffffff, 0x3087cf99, 0x6, 0x40, 0x10001, 0x2, 0x400, 0x2, 0x94, 0x33b3, 0x100000001, 0x8, 0x80000000, 0x28, 0x4, 0xffffffffffff3849, 0x3ff, 0xfffffffffffffffc, 0x5ae, 0xc635, 0x5a6306b4, 0x2, 0x1, 0xff, 0x0, 0x668, 0xba1, 0xfffffffffffffffe, 0x9, 0x0, 0x200, 0x0, 0x200, 0x5, 0xf98, 0x9, 0x0, 0x1ff, 0x4, 0x7fff, 0x3a75, 0x1ff, 0xed82, 0x2, 0x4, 0x1b, 0x20, 0x1, 0x100000001, 0x3, 0x3, 0x0, 0x8, 0x9, 0x40, 0x2, 0x27bb, 0x8, 0x19, 0x8, 0x14816d4, 0x0, 0x9, 0x5, 0xfffffffffffffcb7, 0x9, 0xfffffffffffffffc, 0x7ff, 0x7, 0xefbf, 0x0, 0x3ff, 0x6, 0x100000001, 0x7fffffff, 0x800, 0x2, 0xa, 0x3ff, 0x4, 0x300000000000000, 0x3d65, 0x7, 0x8e2, 0x4, 0x8, 0x100, 0x2, 0x7], {r2, r3+10000000}}) recvmmsg(r0, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000000c0)=""/21, 0x15}, {&(0x7f0000000100)=""/71, 0x47}, {&(0x7f0000000180)=""/2, 0x2}], 0x4, &(0x7f0000000200)=""/196, 0xc4, 0xd41}, 0x100000001}, {{&(0x7f0000000300)=@pppol2tpv3, 0x80, &(0x7f0000001600)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/106, 0x6a}, {&(0x7f0000001400)=""/239, 0xef}, {&(0x7f0000001500)=""/71, 0x47}, {&(0x7f0000001580)=""/109, 0x6d}], 0x5, &(0x7f0000001680)=""/133, 0x85, 0x3}, 0x1000}, {{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000001740)=""/138, 0x8a}, {&(0x7f0000001800)=""/203, 0xcb}, {&(0x7f0000001900)=""/194, 0xc2}, {&(0x7f0000001a00)=""/212, 0xd4}, {&(0x7f0000001b00)=""/176, 0xb0}], 0x5, &(0x7f0000001c40)=""/221, 0xdd, 0x8}}, {{&(0x7f0000001d40)=@rc, 0x80, &(0x7f0000002000)=[{&(0x7f0000001dc0)=""/222, 0xde}, {&(0x7f0000001ec0)=""/151, 0x97}, {&(0x7f0000001f80)=""/88, 0x58}], 0x3, &(0x7f0000002040)=""/94, 0x5e, 0xc1}, 0x400}, {{&(0x7f00000020c0), 0x80, &(0x7f00000021c0)=[{&(0x7f0000002140)=""/98, 0x62}], 0x1, &(0x7f0000002200)=""/113, 0x71, 0x1ff}, 0x7fffffff}, {{&(0x7f0000002280)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f0000003680)=[{&(0x7f0000002300)=""/142, 0x8e}, {&(0x7f00000023c0)=""/106, 0x6a}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/69, 0x45}, {&(0x7f00000034c0)=""/77, 0x4d}, {&(0x7f0000003540)=""/234, 0xea}, {&(0x7f0000003640)=""/12, 0xc}], 0x7, &(0x7f0000003700)=""/116, 0x74, 0x2}, 0x7f}], 0x6, 0x40000002, &(0x7f0000003900)) [ 333.211559] binder: 24411:24420 ioctl 40046207 0 returned -16 2018/04/06 12:21:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:33 executing program 5: r0 = gettid() exit(0x0) rt_tgsigqueueinfo(r0, r0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x80000001}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) accept$ax25(r1, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_netrom_TIOCINQ(r2, 0x541b, &(0x7f0000000800)) 2018/04/06 12:21:33 executing program 0: r0 = creat(&(0x7f0000000b40)='./file0\x00', 0x40) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000bc0)={0x3}) r1 = socket$inet(0x2, 0x6, 0x0) syz_mount_image$ext4(&(0x7f0000000b00)='ext4\x00', &(0x7f0000000b80)='./file1\x00', 0x2, 0x1, &(0x7f0000001280)=[{&(0x7f00000010c0)="c34327a236e387b61267767a76e4571aedbeb5150f28d3644f88bd411030eebe87f0af76b136a4df74329f2a140d420ba7e5298b1fd40d773dc43cc452d20cbbd5f470e7c24708d9cb0cb269f54bb2ec75157285949da428046efe30c0c1aa91", 0x60, 0x20}], 0x48, &(0x7f0000001300)={[{@data_ordered='data=ordered', 0x2c}, {@nobh='nobh', 0x2c}, {@data_writeback='data=writeback', 0x2c}, {@block_validity='block_validity', 0x2c}, {@debug='debug', 0x2c}, {@abort='abort', 0x2c}]}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x460) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(0xffffffffffffffff, 0x40086432, &(0x7f0000000100)) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000180)={@dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x5, 0x1, 0x3, [@rand_addr=0x3, @empty, @multicast2=0xe0000002]}, 0x1c) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) syz_mount_image$hfsplus(&(0x7f0000000680)='hfsplus\x00', &(0x7f00000006c0)='./file0\x00', 0xe7b, 0x3, &(0x7f0000000fc0)=[{&(0x7f0000000700)="dc84d2cacc41f9c47509aedfca6314", 0xf, 0x80000000}, {&(0x7f00000019c0)="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", 0x1000, 0x8}, {&(0x7f0000000ec0)="9fec562a8d754f401151477ac852d4a630ba4ccea61e10ea082c8df5423a97b2915fb6435346b094a884aa65aff08645ec17fff16f88eaf45bc1bbd9fc75cfed4f2979b053795833e66c5aee845eb1b1957c93a13a859fb680261bf36e9288f22e54cbcd91b3858cff660d8ea45c208e0a83a5dfa9877d1f7bb61544ce40c297185ab67b953d0a46919b8394354c235d97132f02ea4ad123a0fc95276a8bed980dbe93dfe178f083b42a17ed921da8278c5e25b43215888a2a1a027c3acba985b87e", 0xc2, 0x100000001}], 0x20, &(0x7f0000000780)) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000007c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000140)={0x0, 'erspan0\x00', 0x1}, 0x18) syz_open_dev$sndmidi(&(0x7f0000000c00)='/dev/snd/midiC#D#\x00', 0x100000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001640)=@broute={'broute\x00', 0x20, 0x1, 0x1b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001700], 0x0, &(0x7f0000001980), &(0x7f0000001700)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x13, 0x0, 0x0, 'vcan0\x00', 'ifb0\x00', 'syzkaller0\x00', 'vcan0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0xf8, 0x128}, [@common=@dnat={'dnat\x00', 0x10, {{@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, 0xffffffffffffffff}}}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x4, 'syz0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xffffbffffffffffe}]}, 0x230) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000c40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000200)={0x24, r3, 0xb01, 0x70bd2b, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000840)=@nat={'nat\x00', 0x19, 0x1, 0x1b0, [0x20000940, 0x0, 0x0, 0x20000970, 0x200009a0], 0x0, &(0x7f0000000800), &(0x7f0000000940)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0xb, 0x0, 0x0, 'teql0\x00', 'ip6gretap0\x00', 'ip_vti0\x00', 'nr0\x00', @empty, [0x0, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], 0xb0, 0xe8, 0x120, [@time={'time\x00', 0x18, {{0x0, 0x3, 0x13782, 0x14fdf, 0x80, 0x4, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@random="07901c8f0140"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}}]}]}, 0x228) 2018/04/06 12:21:33 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40004c, 0x400000ff) 2018/04/06 12:21:33 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x60000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:33 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0xee0, 0x6}) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r2 = socket$kcm(0x29, 0x5, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000180)=0x4, 0x4) sendmsg$nl_generic(r1, &(0x7f0000001640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80800}, 0xc, &(0x7f0000001600)={&(0x7f0000000200)=ANY=[@ANYBLOB="dc1300003800020029bd7000fbdbdf251b00000014004800fe8000000000000000000000000000aa08005d00", @ANYRES32=r0, @ANYBLOB="ac00360004007a008ffb8d2901c121427b96b22b9f42baa54687784be77f693879e20c4d8f6f1f87b3d6a8db23096844071f9c270ce805ff518b4edb2927b2549d9d11f2c2c888e81fe26281d25e02003400f6b7558aeacb19a16b78b880175e3447df1a7971c6ee1fe0c73efe7f19e71e9f0136972653deac5a9709922d8deb4c332485ec65c38123e063b8a4ca2859b2d2956511470d3927781977a90599ecfa7608002e00", @ANYRES32=r0, @ANYBLOB="0000680020007eaf2d09656fc70a40cdda86bf2b0926837334650e3973d4d08c2201a4edb885e1df66feb7a37bf364c6588c689d10513d02ac05560d269272f6911a1a1f24cde258aecd2ed59c10927d880734f2a24eef073df808969af013a44f8ff2a2519ead9f0000cc116d00b925c2ba15ad393a0171f189d0636f8e8d90184f9e9aabce271b59376cb004467550ad92f6c09d49de61c9dd2865adbbe64de5bd5abba2b5de9be26095c1b594194144dcdb3685444c2d73098e91100df5918ab9df0eadd927a40896b4c66cbe481f020a2a22eb7de682439689159973adcdc0c4e1584dcffe0bd841af6cbdb0b0afb1dc6009f615564b870cdb946ccbe85500658f98ab54fde597a10b01e21530cfd22bf99dd5c2e72cafb98daee063fd313903dc0f4794be22495c8c1fbfc366d19363453506158f58cb28add0bc71cbc82e5b2a0df406741c0a4de8f213727b51245539e50e26f8f1c61fcf8603a66e2147b394e44b9909aacf1e86fb9f0195afaed640b1e19c7b440f0e66b4eb5fd4037e7a41f3ca0693d89005f14ad917ce7178fb114b9b5c643df4300f483fd860567d1926857aa659d9b68fae1ebb60367c00105d9c7547fb66132e48142bee0dfc4d916b4b560df823d64f2d97f95515142db1c5c814ad2bb2f2e4c0db78c05ce531f4cdf3abd39dc9e5c45cac6c6bd251ecf4c5d810a35ae9d6f2e21be57631c80ee52440236f861c39a6eca3d36a4b013d1f0590cf427a51c343fba20a7443bdbb1e5f1e22c227abaed299f066842e268aecd6717458dbcc5b70d4a69768c800be8ddab2408ffaa5276e1c545ba70b6dd153023c792c2ed79bba7bf15883398692f12fbfa53a2f1e753a5335943d1a43f1d3d5958939528f8cae8584b2437d8913752fcd1a7faccc8111ba6b0bf8866776740b5c0eea2b61bbe8b3bf79afb3df04f58319808effb32dfb6d0851d672506a2169b6771cf8f7865595c343987a91714a94c07cfcaf6f2e43e76ed7e603ba358893dc3ddfdd5b9364dcbdaf49f4afbffcd9e0214b19dbb7395a11890ab61c837ad32fbd89fc0276415e7a6752b9b70f47b0678dee3f3c496cb498affeb776a4ea1baa84709cfa25c738fdb0c8fbd5ba1c2eb269f6e683e877096860539345c8e5414a9b09456a4237e833641352eeea6c4524417363b40d0bdc9257471879dc1f96d0c896da81b20303892043fd0bd361ebad907611c678a6bc5d0788530cb28c8e05818c67ded803e83499916e5347cde31d29485b9beb19ce4447191411ed58ab35e3aad778f52fe176dcd6c0b4c2a181ff62820636aea3dbc732f400d7353edb923f787fc5d3fc8271aec0f8ba03fe06b44f81c6c7160c5035c5d9472867b2fc765cf740be7e94f7d2cdace98135767c5ee3d0b86d6085afb6d47ebb6caad048743c86890e0cc6829ae9e9613336aa004dd61662b291256019db9ecfbac76ce426af8955526b9181df86bdfa05080f3571b77c947249525f3252c6dc29877fe4425f94a9d967a8538129bd38c53a95d9ed1e38d22a2f9fe4559e36653fe3b04456c89b5c3aa6f026c109880f265e015fba3f4eb214289ea6d6f36b453a2bd8f1bbf00bc8d5097449c7d14a450e2a11aab1c8a93815b171f34eb8c7b8f9401d3f57760514b70bc0bf65ad0f19d39ec70bebc4de4ffee612833d1ee8449207c4ddfb2c9159a2f02995334a6c7b93c964fd80cd6e97f5ff273217aec803e98dd99390eea11052769b90037842625a9e977f17f509c4c1d038ff02cb531460f641d38a480e32735614442865885ebf622ee9c8023c3ab60a79cfd3705c3acb559f607869ce0ee80727e8a3b2552f41045c2c60225ff98395520059c68a78308e9bec725195d827d726100f7b47759c266060068e79706013c1badd8ce0d9bc3f0dc496771a3a496c8e1a4ca758ed75869318d24407d8a6a75a88d6c0c1feb4117aabe32bdc49d8dc609c579fef410057598a5ab2d78eb04c13dcaa1a658f0df36c5b45bb0e147b4d9aa458620ab6a266864181cbdaba22c2e75316adc589f6f23597d3819f5f0101ea9ba4801bf417f3f3726e723d57d149ad879cbb9d782d1f586a7f0d354d6ff8e85bcca91d1c4ab771f7bdd84a3cfc6c44e0d81c8d534fb349cc63c1cc81baf0b2afdcd88c07d7017841350d4f44e11731db771d666093fe3dc1294182020db38ceb7e9468163ec95c54b0f9309524f5585cae7cf97e97f300d28957621d77178c25cd06af0cada60af9cf43090238ac87dce58e36b4206c6ed59d8d17887c27955ba3c7ed1410663f5a9aadd9cdcc6ecca7f5ea7712b5e16ab9c75c9a594338293a0f93bac706c346ec6260bf4e922a3b92ef1d7c19c8803c9ceaee5bb0f658a0940667532acaa3cd5a7a7e8d38431a31ef438ec7499952abdc091d27156013e9a95c9fbdece8f751f0d62234b388a0a8c08f0fc6561fefe4ae627a3a126145927459e701aba33fc9093229454affe1ec36139361175d68f7c86dc3ec0148bc2baa8de83660f216bf34914111cb68cc74efcec41c1e0f9bdf736dc766f1350bac6525e399f92af8fbbe8e98d8780134e6a49a479852a4185dec42510a830cc0865cd4f0de541d2e7217c7931b24eeb0178ff0201a1002ee799541de757c594cf1b0426decf6164f5636d8d9c7ce92f6f668ccff01b86ab0c7b8c468bbc2d5f35670594b1ab817120ecbdb26551dee95388201990ceb55a2afb83df839e726b93a4b0e3693183f29e0432a645ebbc4b8137e20e6410f6ad76863d194b8d6a5d1347d979c7c3cd02c6a7e2010f5cdbcbb9cc0691d9d71fd62a3351cb36b0c90e83dff607f50c6ae797a3f613909ea5f74223c8ebe770f9f0f9b0fc5403dc198998544981e4a047ee3a97894477d0fc42f0f425752712c5228ae93b630a013cc52671870e9b83412020e4ee6ab1f383be2924920c35cc71882637bcbc3e64870e98fb24db864e20a150f1bc48c8e06ef51a05e7862442e0866fbd5d89415d514a05ff4677d28f1127a2fafa2902357948a2869cda9ce80f4541080775adbd5821fe174fc35154082c60477b1f5fee0b72d5005ec53cab1ab17e498223e44cc347bbb0589b0a5ba91609c7ffc46fa7294ad951fd944eab485adfe7ed042ecdbe25913b6450efb5176aa320210aa618544727929680eaf321e3be632dabb6a3905e6f6ab5423e4a434444f0696dc02fe36cb7b2c1ddc981947ea15652ebceaff43000928a4e1e941b26c69158d527980dbc988c9d36068e3572abfb395bb5cdd22aed86be1143f5a24a41885b5eae429b47413f6283640d823f7b170c820be807dcd56eb30226eff06e28c95a5110ee5295d20a346aed0c14b01de7cdeb18ed7c21bfb2d46aec23745c79b8c16e95f7da289902db8849c378df1ee9d770882586240f04d4d66a2f879f0129f1850d3dd0968c37bbc9587b958dfb347c9bc780ba03d8925f6cba7e7e01e2eac2b3e62327d4c0bac26a3c1a8a80bf5dd5e72c354bf865ed88dc63b0104dce4d65898117fd1d9c2e0b546c665013d62f76bcb6d36799be2d37582c7c6442d06c15930d859ce3e69f745600f3a47e4fc8cfecfc328b771178963b1f5d842282e40ca8d78aeb7567e2a0fe5f053181ad03ba946291e520f471f65509d3910c2a8e0c48a891999be6e41897f863cbdc7d9353821f77411f174737579fdee519e3612a9d10b1df5a00ae5aaa7310e0fa1f151d6e2d2a67faea2b8c290b34ea5f57972c45bc05306d25d5380b8db155ff35a51bdb7fd2bd009a2001771b8ae3a9b3fd4489640bd3bf48a1011a92ebb7adc6cde63fe9844c7991a1134207891ce67fa77d458c2675c409c02873afab04edbf40740401477d3dc4073294f95d322d8bb976e81c957dee7ef2b815c472f55155c5c31336d939eb24ebf15cb86482b06b514ec6aac2564c9a1cf263f3472dd28c529ff9dfd0dd58a43f2a8ea1aa09ae364f9d3f94158d64d91f1ce4e657a8641a6fe83b7685b07cb0dc3380a3667fd4b1de0e60bcb6e91cb39b02e1482bb74f6f4839b2ec48f00906ac2656d24ba800ccd70113a1f2e408d1e92500e9244d9660364ce94d04f1efec9aec693e9e47b79b77fa35062ae70077875192b740a7964a80f2d2139e302df3e3e67bf12ffb97878103ca1e1b1a0e300ca375849dca6eb0c08f50617be8b92dfbb3280a8349e067211ef72e4c1a1e73d60c004e1c393ace3d929632f8583576ee2b14a723f77e9680bf19fbdb600640af9f7c58622c5107533a0f1da2b98ce353c922454c02068b475ad051176fb612e0a549d85df28df4e7ed064754c62eeef979ace2614910cd5f06862d07a59e0366a966993c3ac90c1c26b974d01de34261fb7094f69566a18fe9794363934caabc30aff6f38a4604289ac5342440a739eae32f5dbc7e97bb84eb3738792cd6987af2374a86b9f7d99cb3fd462d79f5717814345e6d56c08a7cef1474288a69d28d894b7e702ff4bb461c5cd6fb4bdb827ddc6b66584cc21446c9ab73ad3a17021c7beedfccfc693adb0313316f2a21557764334479a7bdcfdb6d901240c5f95778963648eb7d6905849f3c219637043a000f1735387b80c1fa834e9b73657e0aaee9b8c5fd133d23b25c3eecb8ec0a264216ab074c1be04e5bec9e1ae151f23df46e6c0dfcf9c8c4718734549d8101573622acc2f5446235622d793ccd28dfef076d2957e74f0851315317cd9a4569a5360b92b3db59c68282f4334ef2ce8ce60a77bfe39a57eb3c74a320427d4ec8289c18e91489b3f59742ef35878a60eab42c5ee6768b8f0aea5b8ecb1815c1d115b309a3d15434e03776cc4812d39243148e5cfa9c06c1712072a855aa24a53b46161e3ca1ee54d1c2b9a6c913c0080f76955f24872da7bc1a5e09b5e473b630c338735e2a87ddc9303beeb51615680c0a7a884d67820017f41cc4aaa51420b28443e1d4c480a318d0ffc9956708a6ae8b9b92b657dcceb601c4dc96eccb916961f12aeae8b194aabe378c7a49f6b71c06c9c7ab38d1aaccb0ddac4e1a039a7ffde12c68ff57dd60f9d368a5806eac04d7633670c8fc2012afc7f8607184f2afbe1a2c144d4f65e589104b4ef32d90861934b25404e02c6129bc9211e6088fb1d0bf3cbd0be590d3328744f447b22361b8cdd5e1470717a8dd8459269a4db95fe43dd93157bf9c5c59f0d1abd2bdb3d537bf1992d01c2d30fc6e20411820b6e4a5000ef1e1317d730119ebebb93d614ff776c605203c34590a5d8edafd646731ea69b4acd0f5b55340f595423f115a4ebbb56fcdd4d48fa755e43934e2801ad9741eaee6bace529a84d33138d33f7e03300d9f6044e4755e5eed5c9080b2e4292c67f6f90ea49ee30cdb60404416e2a385ddd00aa7e51acf85c15acdd974181c936b0d0c14e08f7aa81e7dbe8edffcf1f8941775546cc0d2e5891f9a4bb772e614e67a6ba9348cf20d231693d3d7030d4e97d2e201607c8997e54f27f7df37c6d83fdfb9a010d06abd065aacf337fabda63f1b4ab9f5be6544c9cba991d8b38a97db6a98d68b794d1b0b0d85f3b31da85751572128a6b7fd8dad189f361827590b4341cd6e39d2bfb3f0917f33d6bd9cef2cbfe29c491ca9f7a44a2e5907f599ec006fda9ee421dbabe99306656e5f2b6e49403b386ff0afaecfb0ad5800e26ff1b569412209b4b71e223c5c0874d32f67c1194aed7c4f730d2d28db6d886ab4195e3a315ea9c64817f5b6605098b25abe7b9c8e26a660b931069144c3fa57a5dbf93c0a9275ae5b0b747660d3417022871bb8749e24f873876cc912c2bf827145ea78ec05f78591d2af1e76a2e265fe71b79cd23867fa8eb6d9ca036f654064fe7972bba3a61b3ac1146f892ebefb3e909fdb189b4add8148694474b09db7f8aed2a80a929766a848bd7f4c083ddd9aedce5c3394f69e2915136b7f0ae652dbc27365a4608e8c410dd8fc0bccd6ae308dbda746bd8a9afc7c56027777c3888e4c1be9bbd0c0020000001000000000000f6ff5102d541ebe3359377aa7eac4bc5aa0707b935b0bd62a1f1b58395d5f4ab1254e63447ccf59883f66c30a7c6aff409ce918d218ced8623adf536a7d92f2c09596d0a3c4c7daacc473286d83dc09a1aed658c0661e39036b3bc710df122cf44f34b958f0fe1ae44136026332e0bf7d46c8a5ac5240b2c28ed54acdc07b55d48f2f4faf39871b826678b0ab76d74af76a172a0e2a4208c642de842aa0be7590fc1bd2390d46cb8ea99dabe0091ac575afb627c354ad9fb09cb647fc77536a4c315857baf38b23f2716839f56811f8974f561df3a16395657704ed1824365d00f3daf49d86606d6747578df557f2d6f2f5bf72813ecd676693b186926128fce63a5aa4070189c25ac8326ae3a81a6d7b03e071c70584b058a34ea2c249f7b91fa1ab7264d16d60e8c673200f0ea1b6bda72b2a6c48a4ef595f439904e6f4d71761da1e68b4629ab9e25eaf6e9eaa38ad360213f338e614ae50dd747bb8716f73a0c1487e3ab8d48ce91a93d94b167b80c1ddd42d82b55a70efef8263bcaa7fa40334cd04cc20b916a96000000cc00030008000400", @ANYRES32=r2, @ANYBLOB="df871f7e4cf7ed916904f197105728cb57a7d6952aa62023a04f19e5ce278d8ea82e72ee59b05a24df3fcf54cfb5fdefaad6989a5aa1e3a625d52a0af75064f16a4a682e22ae651091d1017d94895d62fb2c6332e164b860292350f4db1374ba393776b20117561f92b183edb2e9848fe78383ef4dfd5f5efced08408cb85ec75fa434d8988ea54c921caf3c012e3b4ec7859b2e28f04a796510e1c8b54b43e356aa3b8b8648eab218c6fe84623ad68f7fe43ccb0766441ab98ebaede83c0000"], 0x13dc}, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f00000000c0)=0x8) 2018/04/06 12:21:33 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 333.391570] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 333.445681] binder: BINDER_SET_CONTEXT_MGR already set [ 333.462112] binder: 24454:24460 ioctl 40046207 0 returned -16 2018/04/06 12:21:33 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:33 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400b00, 0x400000ff) 2018/04/06 12:21:33 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x10000000007ff, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000040)=0x1, 0x4) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 333.574735] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:34 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7a, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:34 executing program 0: r0 = socket$inet6(0xa, 0x200000002, 0x0) bind$inet6(r0, &(0x7f00005d6fe4)={0xa, 0x4e20}, 0x1c) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000000140)=@can={0x0, 0x0}, 0x80, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/20, 0x14}, {&(0x7f0000000200)=""/213, 0xd5}], 0x2, &(0x7f0000000340)=""/4096, 0x1000, 0xffffffffffff8000}, 0x1) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xd}, r1}, 0xffffffffffffffe0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x1, 0x4) 2018/04/06 12:21:34 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f00000000c0)=0x4) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) clock_nanosleep(0x7, 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:34 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x3c0, 0x400000ff) 2018/04/06 12:21:34 executing program 5: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) r1 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x1c, 0x80800) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @local={0xfe, 0x80, [], 0xaa}, @empty, 0x0, 0x153, 0x0, 0x0, 0xa8, 0x0, r0}) unshare(0x60000000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00)={0x0}, &(0x7f0000000e40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000840), &(0x7f0000000800)=0x205) bind$alg(0xffffffffffffffff, &(0x7f0000f35000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r3, 0x1, 0x0, &(0x7f0000000180), &(0x7f00000001c0)=0x1c930366) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000200)={'syzkaller1\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'lo\x00', 0x101}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000440)=0xc) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000580)=0x2, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000006c0)="e2163dd4c37017b2a50a11c8d1b8bc14b34f87b206435fdd78d6f10f42cb291037b9e24ee9e50ad8521786b8f3b2d081cf56da9a6780d9f4d525916b848bda09427dd8a12d2d29b66c9cc9774ab054fa3f980001123e6beb62b5997eb3cedb0411a431c4bd45b96dbb5fa38254942994337e8c0893b423a0f38ce87f19ab13e19485524397cc89ab719c3652383dd6d627f46077d2bda2324096814bf2cbe422ed0bd14fd7e3891108892cc6d8bbb3288f65ab22a01cdb94d13ef52573da9351f27156c16245fc7f4847fc55b86be8b2b12cfb3386bbbbc08c61500fcadf05ee7d55cee88656b27906723120d4db479f2802e31ee19c72d758ec03cfe124d499e6dbfa2e77e40ccd8e08fdb2cf3bcc1df44a6830727dc0ecbc75f69719e9b9c5c26b7c451a3468e1b29c4503f5f0f4aea427e880588222a6fff0cd97d8202024b961cc3cf99f759c911e46bb2deaa0c436c2ed3de160288d38ed1c2ed0731e154102a30c4480e0a16811b1822daee07334702e492322da540bb5f742ab77ffa1205fc46156abfdc377e88a13778c5f14b73a5ace0981535890cd41eacfe99a981e12be0bdab84dd1a781094edb4dd370774a39baca4080009b3f5561513d9ec11f34174ff70fed45c7baefb2a5a2ba5437704537879c6663d730a16b85186b56ea2ab27b5859c0598f91689ed52b1462645af44067f611373d172280cfba2d2be560d2411d6b16f1bd6fabceb65939c353929ebb4cd77bdeb7c53c3ddbdb0996f2973bed77bf79077c14bc50e8e61b7be17ecbbf9968fca77e0111a7d433cd0a8ee50ba86ddd2c98b23783468f48fbb3b950a656f44c964c56e1d97e630c4282da7397b1adf813ce984ab6ede78d88d264c8b5a94fa35e59785921f34e56be182c16bf172f2dfb2d6c926eeaf47bf9cff7fafa2be1309fd3e908530f9f5195a29290db88fb3237c0f55a448c9a24e3da301e13d04946a4b08641ffbc1db752e415a80ff6ff84ae3b5f3fc2a9f57ad1d240ac3cab031bb0e0d2af39095eb9834fda89b3dd031047d7ff0d83daa85bee934a4ba28438fb8c00f011dc5b6aba4d026e36a9cc24f10719c16addfb3b83e2bc919083725df8ffe72fb2941fa949ab2b34aa5400004856c326b41bf5a8c38dbac3eecac1a932800668cd23872fedd598d1af6751164ce20319af21e5831cd2f60d7204ec44e0b58485b606646a63e1e18eb47e1d3a011925555393a8ba302937cc43a40a2f6de5d0438fe2d0d7a0524a3de10dcfddb88410f6be5d16e34204633f1596189a51d4fa1e3929460b14a0b230c436f4ca56cc30f12fc381fa4016cc647fcdbce923c070ae11891500b93925ddd32b57502ae80cc237c32d6bfd2a875543f13219dad8b9f156816d21f51cf232040d935601de27c95cc3b195bdcd3b893557bd5e5769d8a441f752c443f40da508567d3d86cc3482f960b8a93d2ac54da7f0740da4f1a25916cb2f39da4402f0a8e07b824a3ec6a21e6539c1639ee29b79e1dc9d66ab2df4c81fa00d131978e5766a231b698c0f97d16bf9b243503af3c6f0cf4727831f1a3c2ff0a0b047b756dfb322575ad172f33184bdbea32635742d6fcaf4b5dfd1ea92916e83c3c71cce08311bcaa97561e400dfcab6f21c34c908a0a738d960031107653149b14d93484abd04f6c6ea8631a180b98e06c75a03d61a2b4061a22312caad278d3cc2f13ffc317bb5fcf259bb64ff70a2888b9eed927d7bfbaf846165e32b11832a15579d155b205f1508444b5f4175e91bc413ec2c30eec3f5d4c7301d6c62032b5f60cb64bd53f096175e33e9ce9276a71d242cb9d9a0c3e237527582b67d6ffc223f6e5c9ef0f9bbe050e21bc0c1a90bac85af2d53e396322b1176dc27c3f345b3796c4f56e4ece43eab3b77a2c8fcfca764c488fba21ea76a7c20742cd5b30046be709d9314c04f40458af7376b73836cd948da52111a5742002488502d0769ce5bdfc92e6f124b78068606873932117e8a0b98cada4e4aafdd2f08870eb88c8aeee33159b6f31adc7ab333ece84e1ca75a064d3702e4ab4a6f3c3806ea1d70e8560e81f4542c5a87f877a6736757b7738f34e40660e99acc35e99e34d611f5d3c87ffb625a3380bf7a20c3fa0f54888d546d342df572330f267e75a54c8a8acdf4d72320fb459026c6f7f39f66a319f7c4df9821a677b107c570bcfece4bb0cdfbf857112acbaceef98a38af227a9a837883608eb8cbd175d1a76389e2b6c6fdde8abdc0a9e5755af56e398dbd80c1803caec40cb53b55bde3ed33ca660cf00a4c6d1b053929ebdbed76802cd513ddc693656111a0b9b1f1995c55267145b8855c812855d45c591ee41f89c11291a64c6ad5c1a5cbd6be796dcea6a6944d4b8a640175bbe543da5947af9a023a5208c67eb5d300a1dd7739f7b6e2248d9996d4fe3aba6f8f5cb61e3ea0c1f6c58d43a65d847d4ce8090c2c728a0815f62b1ed441986500d0095efcb135c868ebc92e299dd020a29a349383d18185f443c0a11cd69f2b3923bb5cba41c8fe2e345352e4d0caf14f615de7b33890a51b2ca3660a36c01114d6a3690ac329702da157d64fba8d76d20dd94f0d54ddb64a334d90f1208dde81eecdd316c131e8d972fd7ad9e90bbaab839fb93c8a12da9c90e8e0214ba16b17fc4c53b4f0ccbbc6410e2a15360646bbc81b603d516f2cfd9bd2351d34f004510a5b9902d3b51c17d07cf23e3589d50cec07886a94c0464cb557441fb8b92ba592b0156ab5e5716fa391f4b04eecfc18d98dae567abcdb70b53a99c7361b48e7c1f01ebcc4eeee4e9810056f1cd88ccb8ae69eb642c6f1effd2f5c9f8626b2ed5e348212b27811414708a9a9dfda62404e1bb93c2bbabdd72177541c0cce2ad796b4110d37046e6e436068fc2224d72d1ecf06cbf67acee84ba53ba8f252be467cbce4e02ade030d72e417f53f1bc771fd71709ef4615e463f962a9fcfb6efd0068d98ca2d17d7c59ebcdae55f55bad3f321ddf99536d63563fccb6eb10d2bb6f113c57f347eb2403faadfa500e4c2128ead531925accb8911f1db250e8e177087750a5ac8891f4f783655ada0947fbc1cdcd06baa373effcd9679d0c8f24a7ff161617dd9ce4e04cd76d881cd7cc6e1e1e86df857e8afd87b949c411e6af13641c4699bccfbe8b18393002c2d972de8a173e2b81819155f94509661f1452e6127e40583d5cc880381a37bc77447cc7ec41daeefe1591fa68e93930daa55954784297401ebc6bcf72a293dd2d1e0cfcbb50dee08c41a28fb07d9346636dc936689d4ed446cb87094768f4b982d709ea74f88e8576a32f3fa3891b9598da51b977b5b6d22d4bdca49106dbfc86fef5989059a11694cb30c1b863fd8b1858a8ede8e50db1ec194650b88b5e19c39a35c8d13d8c7fe10d999dfe4a5b5166512f899b6f7b8174395da6de1e84096b28461254ad7825f377fd4539c0928763a7e156d89f0f3919c9310b1fc477062db839ecd1fab9eec90b36adfecae9723233993c32d359d5dc512aef0e6a5aad2476425ba52a202ba0bf9f98483b9b0351d31e938443a75b66d3530e6db868fcbebc7511a69af4e99441c193d5ac6c23481a0ed5e2ed98763d552c8c2388343e2faa76d6fd4327fefbdc6367132c3f173ed1ac890bcd3c9b2f7b268c00c0d49513fc3a81e4d288a300b5da76dc3d32fd1bfdf5efddcd19b9bcf7b733a03e23b9833efe56ab2359799dc9294ebc06489cc9699c6ef3e17a7486eba22507bee3bfbd65cb7adad941cd298907db1b0c45ed4eef8e9d94af8b9f1dd14e60bc3fb9bf5312c83f60b2695ad79a1dc19030b870f4da25567b2e2a1b0770e45720f77ee87cbf552098e66e988c873c873aec8b6227007398fe1e52bd26a42f4aa8acb539808e64c2271814ec20a919cc0e2c2cbb8605fd5ad2f5cfdcb442b4971bad96751c99ced051415a620edac34fe7d545657be3546427cca2c28689320e7b3334790b14781cf479cd2df4c842a4357d4c4614cebdeaf343ece4ceaa678ba0532f01e0a1b0269039f8ce2cc0d12fc11a26e3b966d25cf0252ab60fc946128113f9aa3198b5e221b8ac17cf4ee2102ce97f0e6eec8376a93273783609989be15fd375bad65657cfd2c1f6b6396b62a29b05472d869c240819bd9888b0824f341fc5d8b448da03961324f2323d00f1e9d7c54299a4dc4ff5279496a6a43eaec87c3d4f7ffa62c5b01c44ced648329cbb2e82973115ad3e0596a85ab1d2e7f50298f64f0c5cd954c68a8e33bab0321d8503fe2b9aa017f02192a999157e5fe7da923587d3dc1841f84b2bb344a187ee57ae24fa1d0df0977f608a643b3fe5d3146eeb732db5c0366ed1ab7bddbd2720d964a566ac9450baf04e4fa98f1fb7511e901a60cc672a5305236f8d945e42bfc73b6680d4ff45347a47955fa17fdf3ed82a06e5a02e7888e7f51ecf07c16d2bceed4741b4306ea8dfca2ee97cfbcb159851279ea8d5c380c9d1317f449970bbb820670257575f62250c6df171ecb57c3377301943680880f690ccbe5e63276e8c770ce1c6ba28b7c0bfdce1e9e970b1300d815871980b87734ea1226fcfe2faa5111906a90c6966a72a90dbba886d3a5b9eee3ffd0c9078175753d1e3c9adf2f15886353e8afa6df45219ac050910fe5d3eb3514e62df78b29afd7123333fe02893133a51f93293702266233438f8b8e5c696a1b9722e898dee0916fb77c720cf9fc10283915ece44b19ed21ffcf7dfdd8e9e25f5015677c3153a6052a8ebb58d3b4b9076b9c20d58c4f023d048e55e5d5db0731a93df9685c4a9943a74cfb7142d9f82c8f492a0559ac7954839dfd85ef36642663c5d53229cf823a1cfa00082d4a73c6d66b0b6c4a6b5f029bc25110ee72257b4078dff9c1dca8ab2430c86865a6ae97025b508a62156cc879475b87286113e7a8cac5a607cd7ac20dc09adaaaf1be035050eb4c9f6c6d73bf86bd44a8886c3dd0f6429397921470515fb1fd550e60bc69920a891d4ffec826618d202b7214a8e189e808119444bd9160b0ad612714cf61ab2d4904721941551d1f86c65d28324c4cee2afc4f14c6b66d5b3d7686dd7b756b034203638bae9d36cc9c9c5eedd6f5cf61548d2f54992521a8cd3dbba38c60d01880a6cae5feea280b657b2c32f7c9f0bba58748844d558374d0c8247dd811b2b4ef70038d4d42047d4160fa0cd48993af182010695427f6aa93d046a12d6b6e74da1623677435910bea09d4563a387c9b5ea24345a5e6c6bec5c6567f746f93c0837317d7c0a8181e4b09d401b17f8be9d0db4e05e9de4b034a5b9c7c56ed9357c249f664497fbf1a20ec24db4c5f885c885fb660b60aca423f4b19ade2b3c718925a76a9333ca822e87157a2963cf1a27395e934e5fb9d495590f98e7f4b6c05f305e0b3e3559d73b18577af2d501a2262331798164084c8719757c8b9f9e2b661d30a0abc4d8a12142b5a85ad457dec79b84081c8487c65e124ffb2d6869caea77627efa52a35067cb872cf89ba585b41307ddc1831e92b9596aed2528af227becbea7bc7dce011d13a323f14fbfa4b92cf017345c9b411773e702245e97577fb310d326924a5f3837db3a5f243d3eaa52ebd289202f1e9df9fc3dbc1d6595128ada5804a343bac94a0ce8828b169fc1ccd0c5b7e0ca48a6124010190fbaa90427c54a38987dcd1f280c0c2e01bc3c58091cb30804380c8486a60eab1b86bf4a6f3bfb8fc795cda30b27095ee5b92c0da6f0321ce640411888f20efa5f1", 0x1000) getsockopt$inet_buf(r3, 0x0, 0x3f, &(0x7f0000000600)=""/129, &(0x7f00000002c0)=0xfffffd5f) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f00000000c0)={'security\x00'}, &(0x7f0000000040)=0x54) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000400)={0x38, @rand_addr, 0x4e23, 0x800000, "666f000000f79400cd3aff5ec4c34682", 0x21, 0x4, 0x43}, 0x2c) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) setsockopt(0xffffffffffffffff, 0x3f, 0xffffffffffffffff, &(0x7f0000000280)="a8fb406304dd8f9a3bd2113e7facb561636bfd99b452dfa18e047dfe730844790337a6042aba2dd2000000000000000000000000000000000000000000000000", 0xfffffffffffffee6) socket$inet(0x2, 0x0, 0x5278) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000380)) fcntl$setownex(r1, 0xf, &(0x7f0000000240)={0x1, r2}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000cdfffc), 0x0) [ 334.458205] binder: BINDER_SET_CONTEXT_MGR already set [ 334.466785] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:34 executing program 0: r0 = socket(0x15, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040), 0x0, 0x80000d}, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x101, 0x800006, 0xb, 0x1, 0x140}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r2, 0x89}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f000090bff7)="ed0c40fb58b4ba48ee", 0x9) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r3, &(0x7f0000e76000)="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", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x3f}, 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0xfffffffffffff004, &(0x7f0000000240)=0x4) r5 = epoll_create1(0x80000) r6 = socket(0x15, 0x80005, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000003c0)={0x20000001}) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="0e0af27f4831ac8b41068d31230501bfc97c3f24610f85fee356e3c655c16a7bdd3dd5d1305b551b52dce99993b0ebd183517bf58db80a046887c2bec4b08fefb4a9e0e3e0244a9241bbd9529f7acdd632b4ec2727ec080b8f04b7bb", 0x5c}], 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000}], 0x1, 0x4044) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) getpeername$netrom(r0, &(0x7f00000006c0), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000600)=0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00', 0xfffffffffffffffc}, 0xffffffffffffff09) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000640)=0x5, 0x4) ioctl(r4, 0x800000000008982, &(0x7f0000000000)) socketpair$inet6(0xa, 0xf, 0x9, &(0x7f00000001c0)) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[0x8, 0x3, 0x1, 0x1ff, 0x4000000, 0x0]}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x7d5, 0x4) bind$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 2018/04/06 12:21:34 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 334.501120] binder: 24494:24500 ioctl 40046207 0 returned -16 [ 334.503919] IPVS: ftp: loaded support on port[0] = 21 2018/04/06 12:21:34 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400003, 0x400000ff) 2018/04/06 12:21:34 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:34 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x74000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 334.620994] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 334.657783] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:35 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x770, 0x400000ff) [ 334.681259] binder: 24523:24525 ioctl 40046207 0 returned -16 [ 334.733917] device lo entered promiscuous mode [ 334.759687] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 334.764216] IPVS: set_ctl: invalid protocol: 56 0.0.0.0:20003 fo [ 334.811684] IPVS: ftp: loaded support on port[0] = 21 [ 334.877113] IPVS: set_ctl: invalid protocol: 56 0.0.0.0:20003 fo 2018/04/06 12:21:35 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:35 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f00000000c0)={0x3, 0xeb87, 0x7}) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="d4000000e2337cff3439a5618da246816227d1ceb50922c44a9b5a140d0f3c69681e05950dfd0ff4ede0c2080abb4ad27ccc38d777008b30d88a765d651d25fc01270f0a5f331d4de977c28c0a266e0e6738979e916d01f977", @ANYRES16=r2, @ANYBLOB="000327bd700001dcdf250d0000004c0003001400060000000000000000000000000000000000080007004e22000008000500ac1414aa1400020064756d6d793000000000000000000000080008000000000008000300040000000800060001800000340002000800070081000000080002004e23000008000b0002000000080003000300000008000900ff7fffff080005000500000008000500460000002000020008000600ffffffff14000100ac1414bb000000000000000000000000080004000000008008000500b3000000"], 0xd4}, 0x1, 0x0, 0x0, 0x40}, 0x4000) 2018/04/06 12:21:35 executing program 0: r0 = socket(0x15, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040), 0x0, 0x80000d}, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x101, 0x800006, 0xb, 0x1, 0x140}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r2, 0x89}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f000090bff7)="ed0c40fb58b4ba48ee", 0x9) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r3, &(0x7f0000e76000)="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", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x3f}, 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0xfffffffffffff004, &(0x7f0000000240)=0x4) r5 = epoll_create1(0x80000) r6 = socket(0x15, 0x80005, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000003c0)={0x20000001}) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="0e0af27f4831ac8b41068d31230501bfc97c3f24610f85fee356e3c655c16a7bdd3dd5d1305b551b52dce99993b0ebd183517bf58db80a046887c2bec4b08fefb4a9e0e3e0244a9241bbd9529f7acdd632b4ec2727ec080b8f04b7bb", 0x5c}], 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000}], 0x1, 0x4044) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) getpeername$netrom(r0, &(0x7f00000006c0), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000600)=0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00', 0xfffffffffffffffc}, 0xffffffffffffff09) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000640)=0x5, 0x4) ioctl(r4, 0x800000000008982, &(0x7f0000000000)) socketpair$inet6(0xa, 0xf, 0x9, &(0x7f00000001c0)) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[0x8, 0x3, 0x1, 0x1ff, 0x4000000, 0x0]}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x7d5, 0x4) bind$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 2018/04/06 12:21:35 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x5000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:35 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40000d, 0x400000ff) 2018/04/06 12:21:35 executing program 5: r0 = socket$inet(0x10, 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000020ff0)=[{&(0x7f0000000140)="2f0000001c000381ffffff000d0000000c00000001000000000003c91300010000000000040000005867000000050b", 0x2f}], 0x1}, 0x0) [ 335.532904] binder: BINDER_SET_CONTEXT_MGR already set [ 335.543205] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:35 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:35 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 335.587109] binder: 24556:24561 ioctl 40046207 0 returned -16 2018/04/06 12:21:36 executing program 0: r0 = socket(0x15, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040), 0x0, 0x80000d}, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x101, 0x800006, 0xb, 0x1, 0x140}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r2, 0x89}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f000090bff7)="ed0c40fb58b4ba48ee", 0x9) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r3, &(0x7f0000e76000)="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", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x3f}, 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0xfffffffffffff004, &(0x7f0000000240)=0x4) r5 = epoll_create1(0x80000) r6 = socket(0x15, 0x80005, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000003c0)={0x20000001}) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="0e0af27f4831ac8b41068d31230501bfc97c3f24610f85fee356e3c655c16a7bdd3dd5d1305b551b52dce99993b0ebd183517bf58db80a046887c2bec4b08fefb4a9e0e3e0244a9241bbd9529f7acdd632b4ec2727ec080b8f04b7bb", 0x5c}], 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000}], 0x1, 0x4044) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) getpeername$netrom(r0, &(0x7f00000006c0), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000600)=0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00', 0xfffffffffffffffc}, 0xffffffffffffff09) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000640)=0x5, 0x4) ioctl(r4, 0x800000000008982, &(0x7f0000000000)) socketpair$inet6(0xa, 0xf, 0x9, &(0x7f00000001c0)) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[0x8, 0x3, 0x1, 0x1ff, 0x4000000, 0x0]}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x7d5, 0x4) bind$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 2018/04/06 12:21:36 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400048, 0x400000ff) 2018/04/06 12:21:36 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4800, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:36 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x0, 0x200) getpeername$inet6(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x1c) socket(0x10, 0x1000000000803, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns/uts\x00') r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000200)={0x0, 0x1, 0x658, &(0x7f00000001c0)}) renameat(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00') r3 = openat(r2, &(0x7f00000000c0)='./file0\x00', 0x600000, 0x100) openat(r3, &(0x7f0000000180)='./file0\x00', 0x41, 0x9) [ 335.697466] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:36 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 335.758661] binder: BINDER_SET_CONTEXT_MGR already set [ 335.781471] binder: 24580:24586 ioctl 40046207 0 returned -16 2018/04/06 12:21:36 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x404800, 0x400000ff) 2018/04/06 12:21:37 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:37 executing program 0: r0 = socket(0x15, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) r1 = socket(0x1e, 0x1, 0x0) sendmsg(r1, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040), 0x0, 0x80000d}, 0x4) close(r0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x101, 0x800006, 0xb, 0x1, 0x140}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={r2, 0x89}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00001edff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f000090bff7)="ed0c40fb58b4ba48ee", 0x9) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f0000000000)={@rand_addr, @local={0xac, 0x14, 0x14, 0xaa}}, 0x8) sendto$inet(r3, &(0x7f0000e76000)="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", 0x5b5, 0x0, &(0x7f0000bc8ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x3f}, 0x1) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, &(0x7f0000000200)=0xfffffffffffff004, &(0x7f0000000240)=0x4) r5 = epoll_create1(0x80000) r6 = socket(0x15, 0x80005, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f00000003c0)={0x20000001}) sendmmsg$alg(r0, &(0x7f00000011c0)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000280)="0e0af27f4831ac8b41068d31230501bfc97c3f24610f85fee356e3c655c16a7bdd3dd5d1305b551b52dce99993b0ebd183517bf58db80a046887c2bec4b08fefb4a9e0e3e0244a9241bbd9529f7acdd632b4ec2727ec080b8f04b7bb", 0x5c}], 0x1, &(0x7f0000000440)=ANY=[], 0x0, 0x4000000}], 0x1, 0x4044) getsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x9, &(0x7f0000000140), &(0x7f0000000180)=0x4) getpeername$netrom(r0, &(0x7f00000006c0), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xa}}}}, &(0x7f0000000600)=0x84) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'sit0\x00', 0xfffffffffffffffc}, 0xffffffffffffff09) setsockopt$sock_int(r1, 0x1, 0x22, &(0x7f0000000640)=0x5, 0x4) ioctl(r4, 0x800000000008982, &(0x7f0000000000)) socketpair$inet6(0xa, 0xf, 0x9, &(0x7f00000001c0)) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000480)={0x6, &(0x7f0000000440)=[0x8, 0x3, 0x1, 0x1ff, 0x4000000, 0x0]}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000300)=0x7d5, 0x4) bind$unix(r6, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) 2018/04/06 12:21:37 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0xf2a) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4800000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:37 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xb96, 0x400000ff) 2018/04/06 12:21:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x1}}) write$sndseq(r1, &(0x7f0000e6ffd0)=[{0x1f, 0x0, 0x0, 0x3fd}], 0x30) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) [ 337.061150] binder: BINDER_SET_CONTEXT_MGR already set [ 337.065684] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:37 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x8, &(0x7f00000005c0)=[{&(0x7f0000000100)="3c2b2d461ee5e8439b985720", 0xc, 0x6}, {&(0x7f0000000140)="c142316e50f90ca354cf7fec3211dc3a8c0eb70bfa7e64e9acf2b02a991d3502fa858b5c12acd1d7ffaece22755ec90bea871cef13ae218529ed6ba18ab00ffb88a6516460ed287e0513e5c709d1af25d6d5b20e2d9673d75fcb871fc269b572f07e6c2b2c07ab9c2047b18b68e61b44d17bb387fb569d51a921a161cc827640e40b4e97ee526251054e124876176b5bfb2543c82d98fd9035", 0x99, 0x3}, {&(0x7f0000000200)="e0922b0177be1abb57b8a4e265181aba4750362e0a4ab951095665fe5e5bd6cf5f116d661ff83a7c5d9145f8bff70bf8a6477128d47596256d401e231c828a969f2b4fca9667e32779e27bee8beb51bc4dbd7818ef4ab1cc83cc67efed3ca9f0b60228ebdf056edfdf0062b617516d99f8338c8faa56628e583e096e03ec4fb74a527fbe50d8733a04a86062f663c9bb66551c3f19fe582d34ffd17c842c982214a7449b2aff4f1789a42f83789f9aa5fcdb4baf5c1faac0a54b3eeb5dc8940187af4d33182c529274ff6fd6e653dfb69ee9b30b77529b1513d4b7e642f96ae0934449624f692f", 0xe7, 0x4}, {&(0x7f0000000300)="a40c", 0x2, 0x1}, {&(0x7f0000000340)="c6cc31ba2563793556237840fc9238cd939550bbcf03c02fa0af6ca2e04a1f130eaede052d7d6f6e061f6073929206c9", 0x30, 0x200}, {&(0x7f0000000380)="5519bc64f6578c24c52b955bfee7ca5654f71d8db2afbed52d797992561c9b360af85f3b45a9bdfeafe7f416d7ab866611b3c7094595d4ff7f479d19ab38bdb8cee50d7da9e6f00e8d17244182c1fb33879098a106c95247d159bfa6dfdf7be6249ff1ae37125e3638a63aad96fbc700cdc09f5275b13b96c41b524666629068c34f5ac62a846d9be76faa9d6e6fa04634663e0dbaff552c4e1575", 0x9b, 0x2d}, {&(0x7f0000000440)="67592d96903c3e67af996f0488e2b124750f1d23237315c2a2da5ba0c375cb1a603976fe8bb5fd8bf08452b2b407710af1d74f7ff9aeccdf17812e35285b2df92a4e2928aba4f261d7da916c75a1912dd8ce0d51cbaf2ef58f9196648ab2d89a13fb8ee8a31ace1b4d08a10114db39240bfbe5aaee76cb7aa7a375ff35b24f1c6156df47bc65624abfa4e36982169d2460b304c37855", 0x96, 0x400}, {&(0x7f0000000500)="61e9f513904e2508d5ac9c77060e8d18e053749da1216c6b1e5d1d0079ccf3dacf02c0757b5f77b51178e3c26169118550efbc449ef686b01a222839824d844e8a38b842bf63081a90834233a20c811fc67846a530f24c7ae7d260b5c0dc393e67f3cdb71062e4848c1ee3ce166c26ef210e54b731a1d195e49fc9a6fc39c0ef37cd638e0e75515872e63f2707f3c2d71c0fb68a39c51615592c0e6823ed57b0e3bdb94df6fa409ff90aca7449c3", 0xae, 0xffffffff}], 0x800000, &(0x7f0000000680)={[{@nodecompose='nodecompose', 0x2c}, {@gid={'gid', 0x3d, [0x31, 0x36, 0x2d, 0x31, 0x2d, 0x2d]}, 0x2c}, {@decompose='decompose', 0x2c}, {@gid={'gid', 0x3d, [0x32, 0x39, 0x37, 0x3f, 0x31, 0x7f]}, 0x2c}, {@force='force', 0x2c}, {@gid={'gid', 0x3d, [0x3d]}, 0x2c}, {@part={'part', 0x3d, [0x3a]}, 0x2c}]}) 2018/04/06 12:21:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:37 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 337.116107] binder: 24609:24618 ioctl 40046207 0 returned -16 2018/04/06 12:21:37 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.evm\x00', &(0x7f0000000140)='\x00', 0x1, 0x3) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-serpent-avx2)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000b", 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) ioctl$KVM_SMI(r2, 0xaeb7) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f0000000240)="79c737ffe18186d67dba3f649a7ba85e", 0x10) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) 2018/04/06 12:21:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) dup2(r0, r1) 2018/04/06 12:21:37 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7a00000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:37 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x948, 0x400000ff) [ 337.241189] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 337.275577] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:37 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 337.324473] binder: 24647:24651 ioctl 40046207 0 returned -16 2018/04/06 12:21:38 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:38 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0xfffffffffffffd8e) 2018/04/06 12:21:38 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f00000001c0)={{0xa, 0x4e20, 0x9, @empty, 0x6}, {0xa, 0x4e24, 0xf1, @dev={0xfe, 0x80, [], 0x11}, 0x5}, 0x9, [0x9, 0xfffffffffffffff8, 0x9, 0x0, 0x5, 0x7, 0x101, 0xab]}, 0x5c) symlinkat(&(0x7f0000000000)='./file0\x00', r1, &(0x7f0000000080)='./file0\x00') sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x98}, 0x1}, 0x0) sync_file_range(r0, 0x800, 0x4, 0x4) ioctl$TIOCNXCL(r0, 0x540d) 2018/04/06 12:21:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:38 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xed0, 0x400000ff) 2018/04/06 12:21:38 executing program 0: rt_sigprocmask(0x0, &(0x7f0000686ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) setrlimit(0x1, &(0x7f0000011000)) memfd_create(&(0x7f0000000040)="7d0000000000000000ffffea2159b10000", 0x0) 2018/04/06 12:21:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x500, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 338.021370] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 338.039858] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:38 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGEFFECTS(r0, 0x80044584, &(0x7f00000000c0)=""/25) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/sctp\x00') syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="66baf80cb850c47f80ef66bafc0cb80000c0feefc4a19f51f2440f019fc62c248566f247ac4ede5600c4e3791d7ee004c40151e299992c0000b805000000b9336600000f01c1420f5bddb99f0a0000b88eabb2c9ba000000000f30", 0x5b}], 0x1, 0x0, &(0x7f00000000c0), 0xfffffffffffffa3) 2018/04/06 12:21:38 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0xffffffff00000000, 0x4342) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0}]}) ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000240)={r2, 0x1}) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x0, 0xffffffffffffff7f, 0x80000001, 0x3, 0x7, 0x0, 0x8, 0x7, 0x7, 0x800}, 0xb) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x7, 0x4) sendto$llc(r0, &(0x7f00000000c0)="a531fad3bfe85e3716947e4e16bee24fb8aa2f7af15ada672c43212d963f7f649f285421b0f464cad708f9970958333e4432fec24afc91c5e0cf45671668d978cf9236c46dfd07808f8a4214caa4396daab84ca1b86fb71231e33a3af7d4ad85bff79b7d096a21beeff078b9a3", 0x6d, 0x4040000, &(0x7f0000000140)={0x1a, 0x0, 0x3ff, 0x8, 0x6, 0x6435000000, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:38 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}, 0xfffffffffffffffc}, 0x1b) listen(r0, 0x40008000000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = accept(r0, &(0x7f0000000000)=@nl=@proc, &(0x7f0000000080)=0x80) shutdown(r2, 0x0) [ 338.078226] binder: 24667:24684 ioctl 40046207 0 returned -16 2018/04/06 12:21:38 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:38 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40000e, 0x400000ff) 2018/04/06 12:21:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6c, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:38 executing program 7: r0 = gettid() r1 = dup(0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x10000000, 0xffffffffffffffff, 0x34}) r2 = perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0xf8a6, 0x2, 0xffff, 0x0, 0x0, 0x1, 0x40000, 0x3, 0x8, 0x2, 0x8, 0x3, 0x100, 0xcd1, 0x6, 0xd3b, 0x7, 0x5, 0x7, 0x1ff, 0x0, 0x8, 0xdd, 0x1000, 0x40, 0x0, 0xba, 0x80000001, 0x10001, 0x401, 0x5, 0x1, 0x4, 0x8, 0x3, 0x4, 0x0, 0x200, 0x0, @perf_config_ext={0x7, 0xfffffffeffffffff}, 0x10024, 0x6378, 0x140000000, 0x4, 0xbf4, 0xffff, 0x7}, r0, 0xc, r1, 0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0xa8cf4749c47418f7) ioctl$KDGETLED(r2, 0x4b31, &(0x7f0000000040)) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 338.248451] binder: BINDER_SET_CONTEXT_MGR already set [ 338.262914] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 338.285951] binder: 24706:24711 ioctl 40046207 0 returned -16 2018/04/06 12:21:39 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:39 executing program 5: getpgid(0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) gettid() fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000100)) getpid() getpgrp(0x0) fcntl$getown(0xffffffffffffff9c, 0x9) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000140)) r0 = fcntl$getown(0xffffffffffffff9c, 0x9) r1 = getpgrp(r0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = gettid() socket$nl_route(0x10, 0x3, 0x0) rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r1, r2, 0xb, &(0x7f000058a000)) rt_sigtimedwait(&(0x7f0000001ff8)={0x20000000000fff}, &(0x7f0000000000), &(0x7f0000000040)={0xffffd, 0x989680}, 0x8) 2018/04/06 12:21:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xffffffff, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x34) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000080)={0x4, 0x7, 0x4, 0x90640000000000, 0x7ff, 0x6a20}) r2 = syz_open_dev$sndseq(&(0x7f0000ff0ff3)='/dev/snd/seq\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$sndseq(r1, &(0x7f0000000280)=[{0x3, 0x80000000, 0x9, 0x8000, @time={0x77359400}, {0x0, 0x1496}, {0x1000, 0xbfe}, @time=@time={r3, r4+10000000}}, {0x3, 0x8, 0x8, 0x5, @tick=0xffff, {0x100, 0x100000000}, {0x6, 0x7}, @quote={{0x4, 0x101}, 0xffff, &(0x7f00000001c0)={0x3ff, 0x6, 0x776, 0x80, @tick=0x6, {0x1ff, 0x2}, {0x8000, 0x3}, @note={0x3, 0x15f, 0x8, 0x8, 0x2}}}}, {0x6, 0x9, 0xfff, 0x3, @time={0x77359400}, {0x1f, 0x4}, {0x3f, 0xd1}, @ext={0x44, &(0x7f0000000200)="c6eb4b2b5cc241bf080161e57d1a03c9060b17d03ca710e5476aa392d7f65aaa5abd36eddf564f8af974b950863e9ccc0ce679ff5b89757f9d9ef02dd555e2fc60b51762"}}], 0x90) read(r2, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000340)=0x5000) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000100)=0x2, 0x8) ioctl$LOOP_SET_FD(r1, 0x4c00, r2) 2018/04/06 12:21:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6000000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:39 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40000c, 0x400000ff) 2018/04/06 12:21:39 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000280)=0xe8) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) perf_event_open(&(0x7f0000000300)={0x4, 0x70, 0xfffffffffffffff8, 0x80000000, 0x3, 0x8, 0x0, 0x7ff, 0x4000, 0x8, 0x6, 0x2, 0x8, 0x8000, 0xfff, 0x101, 0x7, 0x7fff, 0x10000, 0x401, 0x1, 0x1b6dcc34, 0x5578, 0x200, 0xfffffffffffffff9, 0xd1c4, 0xd7d, 0xfff, 0x4, 0x3, 0x5, 0x8, 0x20, 0x2, 0x4, 0x2, 0x401, 0x10000, 0x0, 0x7fff, 0x0, @perf_config_ext={0x2, 0x8001}, 0x1, 0x3f, 0xff, 0x7, 0x100000001, 0x1000, 0x101}, r2, 0xc, r0, 0x0) r5 = getpgrp(0x0) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) sendmsg$netlink(r1, &(0x7f0000000c00)={&(0x7f0000000100)=@kern={0x10, 0x0, 0x0, 0x9f8a3a74b963c515}, 0xc, &(0x7f0000000bc0)=[{&(0x7f0000000440)={0x58c, 0x1a, 0x4, 0x70bd25, 0x25dfdbfc, "", [@generic="bf841a02406dd4237030d11568f5e8043615e5b1580705314746b0820637e3485875592ada68e6fdc5c4805803c3441a018992f75e9ca6b279827d4e1840233e3c83d1da726578d2e24a2b910edd6f28283d34ed1f74d7e12173a83009dac50dcd61226de7253de5c9a52854579286652767cb449bd208256ea5417ff57f82ddae02de63697b935ff5f90600e288780f718e6046efb218fcbeec7c018a0c5b0b5ec864a8057fdc51967fb99f8e635589f2283f32e523c7eaac5435edc6f5207e97214614bfa37c75af2d32368f32a7", @typed={0x8, 0x6e, @pid=r2}, @nested={0x290, 0x88, [@generic="5dbb445b5da270f421544b69aae7792f0020f4d91810214b33ef967c13fbd3e539cac7845c98fe60de86c8be68fc8a275a427abe7ee3e7292bc6d02234329f3140c660d3d0fec4571eb77b54e570dcb3466ccdccbf321c14e6447b277015c8a3221fd813d8add7d51d06166d334523729184facbc5cc97b9e410664502c1705c3f01582dbc43b7a75e2b0acba49f8177b2a41f7f652345a2f937c66dd4da93106e7493db2e9a372241d6898fe0442d1c3677b6f0093a8f02543164e4b783085188a064d3594e9a71327df143b5d3ea7097074fd2d2a64b76ccf7ad245d086f692050cc7eb86e875552e6e88304dfe0fb", @typed={0x94, 0x48, @binary="b70a69cacbefdec5e7038fae437b04479a3cce2ddd8303435fcbadfb2abb0063866cdc173e8fe7865a20c3e7d0a72d80013a4ecc86a132356e5eae8064e943ee5333882b9883a4a0f615c7a8844d3e44429c11e8bae1822280751e6e04c7a5390026cc2d7254ec5f7813e4fd64ac30829a2af3118af2de5c2edaee45aa4177473e48ad195a96ba10b177249fbf15"}, @generic="85c8a8408759ce86e61e1f8d5bf1ce4bfca245bccca6a8125c81e149acb048eb23f3d434adb116ad090d9d9b14b9d4ba71520b8c5ea0f424f75a03da3653d78de88de217956dc5f6c635c0ae1847976b092a7df6fc2fb79e17421d7ef2665366dcfeefebfefece5c1cd803e9b1dbe18905c1687312b668631191738b23f0870bb9957625d74ea72a90090e8b9412840039cb318366752c8291b0d0c3156755997432d137bd2609cc6fe0676445565ab338ca81743737e1e291893ef476ee7dc0d4991564c8ce136e3c49e730976b0adb988d6ea4fe3cdfc4f1693fc34f3150217a56cd4d672e04709a5f18edfb28447e6e102ddb52", @typed={0x8, 0x1f, @uid=r3}, @generic="6fa15b2acd4b3e3d"]}, @nested={0x2c, 0x6, [@typed={0x18, 0x7, @str='/dev/vhost-vsock\x00'}, @typed={0x8, 0x73, @uid=r4}, @typed={0x8, 0x91, @pid=r5}]}, @nested={0x1e8, 0x53, [@typed={0x18, 0x32, @str='/dev/vhost-vsock\x00'}, @typed={0xc, 0x6e, @u64=0x5}, @typed={0x8, 0x56, @u32=0xb7}, @generic="e5a5ef07a70b130a1d178aaaa7f5c4023b8c7d", @generic="eaa96239d23948d3ce087dc77039c55e09de5321043cdf7754c5324d4cc85b3a9433cdc64e3a0282a304b0709004a587299e6404428eb517fdeb8d6335de0646a9c56af1a7429bab71ec94fbc4b3b7bdfd92955d35ed88", @typed={0x14, 0x1c, @ipv6=@dev={0xfe, 0x80, [], 0xe}}, @typed={0x14, 0xe, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @generic="9ea4d37a2af07c70e9f1c3dba0ebb942047c42b1fd0b56223d9ee91279bf2cd51556476e4c", @typed={0x8, 0x47, @uid=r6}, @generic="3f7a4a97dbdce45b70546dec71da61a685543e3f4a1127cdfbf0dd872fe8d9323da9c8be8ef15cc503e7058d4a5e21ce2219159587367632da2e9347fb2d78c2ae56811d27b7fdf6ed1cf8c7948f98f622b3844fa16e2a84b053d31444d18268a05f6889d75f15eb866f2ec39fa25cf8c95220d399fb4f58aee4292e5261fbfca6e07cb69e1313178fd360180f5e1ca0c43b53e9b846200c762275b9df4012db48d167d3c52d5b42afa963194c2cf0cfca52843fbaf8059be67516762f62494dafce05ef6a7623e1a116a58b2127ace158d15913e28798a272bc0aaeaf12b75f206f26d187cc0a2b7d9135cd632c53d8a4896ba359acd8"]}]}, 0x58c}, {&(0x7f0000000a00)={0x184, 0x1c, 0x1, 0x70bd2c, 0x25dfdbff, "", [@generic="7d35c1ff8cfacc05916a1526af680c954f65a404a0b3c55897c3e3c6422e99bd61c4ebc8bb26ebfe2636c32fda9e5a0b15a1d68bb08061da125d523581e6dde3683c0b2e984e6092d464da9276af584edcbe706937be4b31525f8ab5dbfd63bb195140cbce69f1998fc95c482c4d3c2e3a6a3321", @typed={0xc, 0x41, @u64=0xd8}, @typed={0x4, 0x72}, @typed={0xf0, 0x8d, @binary="74141b0ab0a69335d90920e32878550a44f1ce8f63b60fbd38e9333e72b0c3951613fd0807710e7ad352321a4a134bc610e69b5f0f2ae0722505a79a10f558d82250c8b1c17cf9b99e274144ed8b61bee935da77f4c88d2f0896354c68199218f24cae2c64a800c94036a35cbf0d097cad5a538819d345b6a2d365d30725bd82025307e98b08f84f9169214652b0d1aeba0082af55a758ea37d9421029733dc3773d9697c9030dd49f0df18471b528d151d89dcc5cc3c23ed890781a0929c23959b818d2c0c0801bd7ae4df166a625638f0852746aeec0801c39455819c81368b1e371deb383b3601498"}]}, 0x184}], 0x2, 0x0, 0x0, 0x4094}, 0x840) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000c40)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) r7 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r7, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/04/06 12:21:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 339.013958] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 339.029416] binder: BINDER_SET_CONTEXT_MGR already set [ 339.044420] binder: 24731:24739 ioctl 40046207 0 returned -16 2018/04/06 12:21:39 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:39 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x3, 0x9, 0x8001, 0x4, 0x0, 0x9, 0x20, 0xa, 0xfffffffffffffffe, 0x7f, 0x5, 0xfffffffffffffff9, 0x6, 0xfffffffffffff4cc, 0xff, 0x3, 0x7f, 0x5, 0x5, 0x96, 0x1, 0x7f06, 0xffffffffffffff00, 0xf5e, 0x7fffffff, 0x0, 0x2, 0x9, 0x800000, 0xffff, 0x5, 0x4, 0xff, 0x200, 0xce, 0x5, 0x0, 0xff, 0x2, @perf_config_ext={0xc9f5, 0x3}, 0x20200, 0x6, 0xffffffff, 0x7, 0xffffffffffffffff, 0x100000001}, r2, 0x4, r0, 0x9) connect$l2tp(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @multicast2=0xe0000002}, 0x1, 0x4, 0x4, 0x3}}, 0x26) 2018/04/06 12:21:39 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000080)={0x100000000000000, 0x2004, 0x0, 0x4, 0x1f}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80}, 0x0, 0x1}, 0x20) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000100)={{{@in=@multicast2, @in6=@mcast2}}, {{@in6=@remote}, 0x0, @in=@dev}}, &(0x7f0000000200)=0xe8) 2018/04/06 12:21:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x2000000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:39 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:39 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x406800, 0x400000ff) [ 339.179179] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 339.222812] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:39 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1f, 0x7, 0x3af7, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x15}, 0x9}, {0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, [], 0xf}, 0x43b}, 0x6819, [0x3, 0x101, 0x81, 0x8, 0x3f, 0x58, 0x6, 0xffffffffffff7fff]}, 0x5c) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 339.253270] binder: 24756:24765 ioctl 40046207 0 returned -16 2018/04/06 12:21:40 executing program 0: futex(&(0x7f000000cffc)=0x1, 0x800000000086, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) r0 = gettid() timer_create(0x6, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={&(0x7f00000001c0), &(0x7f0000000200)="6b787728a9cd17300df33c703dceec"}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x202, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xcd6}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000180)={0x12001, 0xd000, 0xf7c, 0x1, 0x200}) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x3f, 0x40) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000140)={r2, 0x80000, r3}) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/95, 0x5f, 0x161, 0x0, 0x0) 2018/04/06 12:21:40 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:40 executing program 7: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x81, 0x1, 0x9, 0x49, 0xba], 0x5, 0x6, 0x0, 0xfffffffffffffffb, 0x7f, 0x1, {0x7, 0x9ca6, 0x5, 0x3, 0x3, 0xffffffff, 0x100000000, 0x3, 0x1, 0x1, 0x8000, 0x3, 0xfffffffffffffffc, 0x464, "a54fdeec0424893ce1cab55d1ef4b6172df9c1d291c3934211aad43dab4bb6bf"}}) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:40 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000300)='/dev/usbmon#\x00', 0xa81, 0x80) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000340)) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="b7636c2c0014c874d1e5b4e03b084832f26b8749e0c622c5b677b007380d261f9e61f943a1985a7363355e1f98f4b02e3311abda2db2d186c8866845000000f54288134fded78b8fbf3300784137f021695c2c237ee0d1d331bee9fea247"]) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x200, 0x2) setsockopt$inet_dccp_buf(r1, 0x21, 0x4c0, &(0x7f0000000140)="748434e580", 0x5) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0\x00', &(0x7f0000000180)="6e66733400230762e3e4f82fd73ba23111c3204976e99c2af4275efffbd0167af0478f2611efaa3c3fb23b8e6438717fe09ac634593b08e145f0173ca75eea55309b760bbb19c32a167e2bcc72c92aba1ef76da346361702965d5e06a682e2d7331112f3fa0373c4c52c41ebcd88e45d30410bb09dfcf50cb0aea24b502c58db117753e040010fb36265df35b80399", 0x0, &(0x7f0000000240)="f9a979b321030000000000000015b3a3f52d438db71d0303ea") ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000000c0)) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000002c0)=0x9, 0x4) 2018/04/06 12:21:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:40 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400d00, 0x400000ff) 2018/04/06 12:21:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:40 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0xffff) [ 340.116300] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 340.125407] binder: BINDER_SET_CONTEXT_MGR already set [ 340.150319] binder: 24796:24799 ioctl 40046207 0 returned -16 2018/04/06 12:21:40 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400600, 0x400000ff) 2018/04/06 12:21:40 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465007fffffff00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:40 executing program 5: syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x40000) r0 = syz_open_dev$sg(&(0x7f0000320ff8)='/dev/sg#\x00', 0x0, 0x0) ioctl$KDMKTONE(r0, 0x5385, 0x80000000000000) 2018/04/06 12:21:40 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:40 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000900c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:40 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x2, 0x0) write$eventfd(r0, &(0x7f0000000000)=0xfffffffffffffffd, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000002fe0)=[{&(0x7f0000002f94)=""/108, 0x6c}], 0x1) r1 = memfd_create(&(0x7f0000000040)='#user', 0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f000032cff7)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x3, 0x2) read(r4, &(0x7f00001fe000)=""/103, 0x67) poll(&(0x7f0000000040)=[{r4}], 0x1, 0x1ff) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000423fe0)={r4}) setsockopt$inet_mreqsrc(r1, 0x0, 0x0, &(0x7f0000000100)={@broadcast=0xffffffff}, 0xc) write$eventfd(r4, &(0x7f0000000000), 0x15a) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) r5 = socket(0x10, 0x1000000000803, 0x0) uname(&(0x7f0000000140)=""/78) getsockopt$netlink(r5, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 340.290258] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 340.325262] binder: BINDER_SET_CONTEXT_MGR already set [ 340.367095] binder: 24829:24831 ioctl 40046207 0 returned -16 2018/04/06 12:21:41 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x20000001000003) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r2 = getpgid(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000100)=0x5) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f0000000200)='./control/file0\x00', &(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='ext4\x00', 0x20005000, &(0x7f0000000180)) accept4$nfc_llcp(r1, &(0x7f0000000180), &(0x7f0000000240)=0x60, 0x80800) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') unlink(&(0x7f0000000140)='./control/file0\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000280)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000002c0)=0x1c) close(r0) 2018/04/06 12:21:41 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x6fa, 0x400000ff) 2018/04/06 12:21:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:41 executing program 5: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x404, 0xffffffffffffff9c) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000280)=ANY=[@ANYBLOB="0453c4ff91b028888269b653a3f8892fe5a359c5f1cdbb00ac8ad5e4d640f47dbc02e46f97e669e476f3b9724b79531066555bd577c8ab364399dfac66641152469d2b81b2e36add316b5c55cfb725999fc1b6a6d1520b957f49c5d77164c28940", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f00000000c0)=0x14) r2 = semget$private(0x0, 0x7, 0x0) semctl$GETVAL(r2, 0x0, 0xc, &(0x7f0000000200)=""/126) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={r1, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x17}}}, 0x4, 0x2}, 0x90) r3 = socket$inet6(0xa, 0x80003, 0xff) r4 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000040)=0xfffffffffffffffe) sendto$inet6(r3, &(0x7f0000000000), 0xffb2, 0x0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x40000000001}, 0x1c) 2018/04/06 12:21:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="147006002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:41 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x3, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:41 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:41 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) sendmsg$key(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x0, 0x5, 0x6, 0x29, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_x_nat_t_type={0x1, 0x14}, @sadb_key={0x1d, 0x9, 0x6d0, 0x0, "b0c09be6a72e3fdc1e30d2084a2e31d86972d207e416c30a9019e732efd610e4f83d11874c124646c123bc2c5451b1fef49e4596f1f4079691b15ee251de72c9d9b0b1d69317426754a7ee5fb0ecd8481de925223f1525ccaa35e50698641a38d035b441dd7c2bf2a102aa60cc3a33d335454237c06877e6414d23cd32ad3271fa0de7a28dac8bd60f0f8b80b5a390229b62ea8a28c53b47a2d35a8b60bf68cf23c5ec81ffe56440fedad431f54cc58828275dc2fb9f21875c24b1d495d8306459dc40c1b674bcce62f87e57354234f975895997fe18de5d3cd0"}, @sadb_spirange={0x2, 0x10, 0x4d3, 0x4d6}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d2}, @sadb_address={0x5, 0x7, 0x0, 0xa0, 0x0, @in6={0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, [], 0x14}, 0x100}}]}, 0x148}, 0x1}, 0x880) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) ioctl$void(r0, 0xc0045c79) [ 341.477952] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 341.516393] binder: 24857:24865 unknown command 64 2018/04/06 12:21:41 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140200002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:41 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x4, 0x0, [{}, {}, {}, {}]}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0x2, 0x0, 0xfffffffffffffffc, 0x2}) 2018/04/06 12:21:41 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3, 0x410000) ioctl$TCGETS(r0, 0x5401, &(0x7f00000000c0)) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:41 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xf46, 0x400000ff) [ 341.535109] binder: 24857:24865 ioctl c0306201 200001c0 returned -22 [ 341.568973] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:41 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 341.611728] binder: 24857:24875 ioctl 40046207 0 returned -16 2018/04/06 12:21:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400f0002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6800000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:42 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400008, 0x400000ff) [ 341.679464] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 341.752056] binder: BINDER_SET_CONTEXT_MGR already set [ 341.775435] binder: 24897:24902 ioctl 40046207 0 returned -16 2018/04/06 12:21:42 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000020800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:42 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_getparam(r1, &(0x7f0000000040)) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002004e207f0000010000000000000000030005000000000002004e200000000000000000000000000800120002000100000000000000000030000000020100000000f7ff000040000200000000000000000000000000200102000000000000000000ffffe0000001"], 0x80}, 0x1}, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0xfff, 0x22480) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x148) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x6, r2, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 2018/04/06 12:21:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x48000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3a) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x1) sendto$inet6(r1, &(0x7f0000000280)="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", 0x1000, 0x4000800, &(0x7f0000000100)={0xa, 0x4e23, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x80}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0)=0x1e, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc9, &(0x7f0000000200)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000080)=0x1e) 2018/04/06 12:21:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140670002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:42 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400004, 0x400000ff) 2018/04/06 12:21:42 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:42 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14f000002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:42 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x5, 0x3) fcntl$notify(r0, 0x402, 0x80000001) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f00000000c0)=""/68, &(0x7f0000000040)=0x44) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000001c0)=0xfffffeb1) [ 342.470445] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 342.483628] binder: BINDER_SET_CONTEXT_MGR already set [ 342.503437] binder: 24921:24930 ioctl 40046207 0 returned -16 2018/04/06 12:21:42 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) rt_sigprocmask(0x0, &(0x7f000078b000)={0xfffffffffffffffa}, 0x0, 0x8) r1 = gettid() tkill(r1, 0x11) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000100), &(0x7f0000000140)=0x4) pselect6(0x40, &(0x7f0000000080), &(0x7f0000000fc0), &(0x7f0000013fc0), &(0x7f0000000000)={0x0, 0x989680}, &(0x7f0000000ff0)={&(0x7f0000000040), 0x8}) close(r0) 2018/04/06 12:21:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000b46b38)={{0x7, 0x0, 0x0, 0x0, "2a421c03781c85e5de4eae2be6be026f26ed58788e01428a987c6eb6d58814a89e3e9d707f1c8d002aaab2c6"}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeadc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24b2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], {0x0, 0x989680}}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x2, 0x0) r1 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x6, 0x200) r2 = memfd_create(&(0x7f0000000140)='\x00', 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000100)) syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x20200) pread64(r1, &(0x7f0000000040)=""/44, 0x2c, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xeba, 0x288800) 2018/04/06 12:21:42 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x100000, 0x400000ff) 2018/04/06 12:21:42 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x600, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 342.653249] binder: BINDER_SET_CONTEXT_MGR already set [ 342.683962] binder: 24954:24961 ioctl 40046207 0 returned -16 2018/04/06 12:21:43 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500080200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:43 executing program 7: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f00000000c0)=0x1e) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:43 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000f02000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:43 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x700, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:43 executing program 5: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) 2018/04/06 12:21:43 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400068, 0x400000ff) 2018/04/06 12:21:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)={0xfffffffffffffffd, 0xb1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000540)={{{@in=@dev, @in6=@loopback}}, {{}, 0x0, @in6}}, &(0x7f0000000640)=0xe8) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000002c0)={{0x1, 0xd001, 0xf, 0x81, 0x954, 0x6, 0x0, 0x4, 0x94, 0xfa, 0x8, 0x8}, {0x2000, 0x0, 0xd, 0x6, 0x3, 0x20, 0x1cf, 0x8, 0x1, 0x8, 0x3, 0x7}, {0x1000, 0x2000, 0x3, 0x3ff, 0x4, 0x7, 0x800, 0x2, 0x2, 0x1, 0x5, 0x6}, {0x2, 0x6004, 0xb, 0x2, 0x7, 0x8, 0x0, 0x2, 0x81, 0x4, 0x1, 0x8}, {0x7000, 0x100000, 0x1f, 0x7fff, 0x80, 0xffffffffffffffff, 0x7, 0xffffffffffff0001, 0x400, 0x80000000000000, 0x9, 0x81}, {0x10000, 0x114000, 0x10, 0x1fe, 0x0, 0x2, 0x0, 0x1, 0x4, 0x3, 0x7, 0x4}, {0x1, 0x5000, 0xf, 0x3, 0x0, 0x1, 0x6, 0x7ff, 0x100000000, 0x3, 0x3, 0xfffffffffffff001}, {0xd000, 0x6000, 0xf, 0xcc73, 0x20, 0x7, 0x7, 0x9, 0x4, 0x81, 0x4, 0x84e}, {0x1004, 0xf000}, {0x11000}, 0x80010002, 0x0, 0x1000, 0x100000, 0xb, 0x800, 0xd000, [0x4, 0x400, 0x8, 0x4]}) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, &(0x7f0000000000)) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000698000)=0xe) write$vnet(r2, &(0x7f0000000200)={0x1, {&(0x7f0000000080)=""/78, 0x4e, &(0x7f0000000100)=""/238, 0x1, 0x4}}, 0x68) mkdir(&(0x7f0000000280)='./file1\x00', 0x20) close(r0) syz_open_dev$audion(&(0x7f00000004c0)='/dev/audio#\x00', 0xe44, 0x2) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000400)={0x7fff, {{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) 2018/04/06 12:21:43 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) [ 343.503835] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 343.519352] binder: BINDER_SET_CONTEXT_MGR already set [ 343.532128] binder: 24980:24990 ioctl 40046207 0 returned -16 2018/04/06 12:21:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140070062000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:44 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:44 executing program 5: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000080)="2600000022004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000040), 0x4) sendto(r1, &(0x7f0000cfefee)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001700), 0x0, 0x0, &(0x7f00000000c0)) recvmsg(r1, &(0x7f0000fa3000)={&(0x7f0000d0b000)=@ax25, 0x10, &(0x7f00002e6f80), 0x0, &(0x7f0000878000)}, 0x0) 2018/04/06 12:21:44 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xe, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0xfdfdffff00000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:44 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400f00, 0x400000ff) 2018/04/06 12:21:44 executing program 0: perf_event_open(&(0x7f0000000c00)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000bc0)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/ip6_tables_matches\x00') sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002480)=[{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001080)}], 0x1, &(0x7f0000001140)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x18, 0x117, 0x2}], 0x30}, {0x0, 0x0, &(0x7f0000001380), 0x0, &(0x7f00000013c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, {0x0, 0x0, &(0x7f0000002280), 0x0, &(0x7f00000022c0)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa}}, [0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x666, 0x8528]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000200)={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000600)={r2, 0x0, 0x2}, 0x10) sendmsg$netrom(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000640)=@full={{0x3, {"18a68442565f66"}}, [{"741ed6558d27b4"}, {"922ee15a6ffe1e"}, {"835f93ef4f618d"}, {"27166846e8e473"}, {"fa5897ab6cc01d"}, {"7a37704d67d866"}, {"6d414a9ab97f01"}, {"e8f46b76584908"}]}, 0x48, &(0x7f0000000b00), 0x0, 0x0, 0x0, 0x4000001}, 0x0) close(0xffffffffffffffff) read$eventfd(r1, &(0x7f0000000040), 0x8) preadv(r1, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/147, 0x93}], 0x1, 0x0) 2018/04/06 12:21:44 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00'}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) [ 344.435521] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 344.457119] binder: BINDER_SET_CONTEXT_MGR already set [ 344.481209] binder: 25009:25021 ioctl 40046207 0 returned -16 2018/04/06 12:21:44 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140002002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:44 executing program 0: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80, 0x0) fadvise64(r0, 0x0, 0x1cc, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000308000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000065b38)={{0x9, 0x0, 0x0, 0x0, "dda52a8bfb30cc12936b8da3effa922ab208de0b3960eadc49fe526638ddffed947db68402df32de3aee7163"}, 0x0, [], {0x0, 0x989680}}) readahead(r0, 0x10001, 0x80) 2018/04/06 12:21:44 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:44 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x404000, 0x400000ff) 2018/04/06 12:21:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x20, 0x800640446) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000040)={0x7, 0x401, 0x7f, 0x0, 0xfffffffffffffffa, 0xfffffffffffffffb, 0x9, 0x4, 0x1000, 0x200, 0x9, 0x1}) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)=0x80000001) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000f81ffc)=0x5, 0x4) write(r0, &(0x7f0000f85fd9)="2700000014000707060e0000120f720011000000f603ffff09000000078a001f05ff0300000500", 0x27) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000640)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@loopback}}, &(0x7f0000000740)=0xe8) faccessat(r1, &(0x7f0000000380)='./file0\x00', 0x2, 0x100) r3 = accept$inet6(r1, &(0x7f00000003c0), &(0x7f00000005c0)=0x1c) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000340)={0x5, 0x1, 0x81}, 0xc) sendto$packet(r1, &(0x7f0000000540)="d37f96df75be69b02e5e01f95de2a8e8e0e3cf53597971ce679569d3a43520830ca951183574be1c2b95757e277e49ba49592001a8a6b2b4a8a5aa933aacce7361000965722f7e080edd978a725af3fa65d8309acb92bfe086d428416a7e6d47c6cd9328580aedba8a1d2f58190351208a1831fcab6a1f", 0x77, 0x41, &(0x7f0000000780)={0x11, 0x1, r2, 0x1, 0x6, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}}, 0x14) recvmmsg(r0, &(0x7f00000032c0)=[{{&(0x7f0000000080)=@in6={0x0, 0x0, 0x0, @local}, 0x1c, &(0x7f0000000280)}}], 0x1, 0x0, &(0x7f00000034c0)) sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000200)={0x28, 0x40, 0x400, 0x70bd2a, 0x25dfdbfb, {0x12}, [@typed={0x14, 0x2, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x4040004) getsockopt$inet6_buf(r1, 0x29, 0x14, &(0x7f00000002c0)=""/86, &(0x7f0000000100)=0x56) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000940)={{{@in=@remote, @in6=@loopback}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000600)=0xe8) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') r5 = semget$private(0x0, 0x2, 0x250) semctl$SEM_STAT(r5, 0x2, 0x12, &(0x7f00000004c0)=""/118) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40040001}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="90000000007cb349041339452b5d5fede7d8d746627bd9b955e116ba618d880f22edc2ce0ef5049bc9be050151da262e0a4d0c60b37a023eb99c60683fbaac57906c01f8094bb53ff862b77104c1056ea639b5b5302f26fbec6b1e4061ffb75f4f4831a7f3478ca54406b3a4a699fbf8b758a137b3a47646533981ad93ad9e440013c606000000ff5dfa08fc49047b3be5c20747945a9b8d", @ANYRES16=r4, @ANYBLOB="010028bd7000fddbdf250200000008000400000200003400010008000b00736970000800080004000000080009004600000008000500000000000800050003000000080006006e71000034000100080002006c00000008000100020000000800050001000000080004004e240000080006006468000008000b00736970000c00010008000b00736970006f66e6fbc0cc614640cbddd2de3161a86820a1481f1ed3187b634fe515a73575771e21742875b0fd8ddb4b2d068f18a3c881"], 0x90}, 0x1, 0x0, 0x0, 0x2404c810}, 0x40) 2018/04/06 12:21:44 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x500000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:44 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getrandom(&(0x7f00000000c0)=""/196, 0xc4, 0x1) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:45 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) write$rdma_cm(0xffffffffffffffff, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000240)) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000100), 0x4) write$rdma_cm(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="03000000400000fa0a0000000000000000000000000000000000000000000001000000000a00000000000000ff010000000000000000000000000001000000"], 0x3f) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)={0x8000000000000000, r2}) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000140)=0x200) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@remote, @loopback}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @rand_addr=0x80}, @in6={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}, 0x200}], 0x3c) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000200)) sigaltstack(&(0x7f0000ffd000/0x1000)=nil, &(0x7f00000003c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@ipv4={[], [], @local}, @in=@multicast2}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r4 = socket(0x10, 0x803, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000400)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x16}}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e22, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x6}, @in6={0xa, 0x4e23, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in={0x2, 0x4e24, @rand_addr=0x80}, @in6={0xa, 0x4e22, 0x443afca0, @loopback={0x0, 0x1}, 0xd2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}], 0x94) write(r4, &(0x7f00002aefd3)="2600000022004701050007208980ff0600cc00002b1f00c0e9ff094a51f101000000000f584d", 0x26) sendto(r4, &(0x7f0000cfefee)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000040)=0x8) 2018/04/06 12:21:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400f0002000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 344.631127] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:45 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xf4, 0x400000ff) 2018/04/06 12:21:45 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'erspan0\x00', &(0x7f0000001200)=@ethtool_channels={0x3c}}) 2018/04/06 12:21:45 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x10001, 0x10000) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000140)={r1, 0x5, 0x20, 0x4bc, 0x3}, &(0x7f0000000180)=0x18) r2 = socket(0x10, 0x1000000000803, 0x0) getpeername$llc(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0x10) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000200)=""/236) [ 344.701532] binder: BINDER_SET_CONTEXT_MGR already set [ 344.733139] binder: 25049:25054 ioctl 40046207 0 returned -16 2018/04/06 12:21:45 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140006702000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:45 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6c000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:45 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00006f4000)={0x80fed, 0x11, 0x0, 0x0}) dup3(r0, r1, 0x20000000020) 2018/04/06 12:21:45 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9d, 0x0) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000040)=0x10000) r1 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) 2018/04/06 12:21:45 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/4, &(0x7f0000000100)=0x1) getsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040), &(0x7f0000000080)=0x10) 2018/04/06 12:21:45 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00'}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:45 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x436, 0x400000ff) [ 345.473742] binder: BINDER_SET_CONTEXT_MGR already set [ 345.479912] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:45 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r1, &(0x7f00000000c0)="c906b58929006925b14d4f069503afe9661475d225216d0efd15de194e0cff5c0b4f2cc828e776edb47a91a4449bf5bf903cee50f1e7ab6c839e0f4b0f6d27b11e4eb7207bf039bac82d83d0727f4c6fd011a63c8356b6f246ed96fa192f7284b31d222f0db13ea21d286bcc2bf3cf5d7183a5023283334a392e3cf688997f6acf3530c81c070cef99f8d6d8ecdd7b96943a7b51cb07dd8d35148a222650d8dd7303c689468a08beb8891f8a90a35e697f82fe4ad47df20b86c328b650ef9586e84500d1f3", &(0x7f00000001c0)=""/202}, 0x18) 2018/04/06 12:21:45 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000022000c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:45 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000440)={{0xa, 0x0, 0x1, @remote={0xfe, 0x80, [], 0xbb}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7ff}, 0x1, [0x6, 0x1, 0x6, 0x8, 0x1, 0x3f, 0x100000000, 0x2]}, 0x5c) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x7ff, 0x100) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000500)=@assoc_id=0x0, &(0x7f0000000540)=0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000580)={r2, 0x8}, &(0x7f00000005c0)=0x8) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x2, 0x100) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="c4c235965bf2d23eb81ecd00000f23d80f21f835800000500f23f866b8db000f00d00f01bee9bc0f5b0f18e166b8c0008ed00fb4948e00900000b9800000c00f3235000400000f303626f3e002", 0x4d}], 0x1, 0x40, &(0x7f00000004c0)=[@cr0={0x0, 0x80010000}], 0x1) write$rdma_cm(r3, &(0x7f0000000a40)=@join_ip_mcast={0x10, 0x30, 0xfa00, {&(0x7f0000000a00)={0xffffffff}, 0x3, {0xa, 0x4e24, 0x122, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}}, 0x38) write$rdma_cm(r0, &(0x7f00000000c0)=@leave_mcast={0x11, 0x0, 0xfa00, {&(0x7f0000000200), r4}}, 0xffffff64) r5 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) write$rdma_cm(r0, &(0x7f00000003c0)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x48) ioctl(r0, 0x0, &(0x7f0000000180)="acb0229687ff009ea9414c92418c08000000000000000000000000000000") write$rdma_cm(r0, &(0x7f0000000100)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0xf}, 0x3}, {0xa, 0x4e24, 0x2, @loopback={0x0, 0x1}, 0x1c67}, 0xffffffff, 0x1ff}}, 0x48) write$rdma_cm(r0, &(0x7f0000000300)=ANY=[], 0x3a) ioctl$KVM_REINJECT_CONTROL(r5, 0xae71, &(0x7f0000000280)={0xffffffffffff8000}) 2018/04/06 12:21:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000000068a66adc45ed1d0200000800008013e000000000000000000000000000000000000001000000000000000000000000000000"]) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x5, 0x80) r4 = getpid() ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000080)=r4) 2018/04/06 12:21:45 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40006c, 0x400000ff) [ 345.532318] binder: 25090:25096 ioctl 40046207 0 returned -16 2018/04/06 12:21:45 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000900c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 345.699563] binder: 25126:25127 unknown command 0 2018/04/06 12:21:46 executing program 7: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000100)="14d9187e3367998c279d3ed64ca73ce5b663f53282b1ce5fdd3fdbf4c9b41704a0d5c453f188778f6145020e7b81cc28ed6e41337d28cce97cdc434becee1e80075df765479008e26b3b764b83ba010d0ee512c4ca0d3b8ee220939d440d14cdff77dd4cc32df02cf4fa27f8157f71db28916f67916161cec880eefc28531eabe3ffc596ac654856ed55acdae868994cece791158c22462bc6047599287b27c76ad7b75b152e9ad8cbf8ac67293fff617cddedc951280674d3bbb009eafdc2199d8911556540d7ae50b935296192cc52cd65ef72078b47cb9efcc1a06e99930c", &(0x7f0000000200)=""/212}, 0x18) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0x8b5, 0x4) 2018/04/06 12:21:46 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000398000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000838fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) r1 = memfd_create(&(0x7f0000000080)='/dev/vcs\x00', 0x0) sendmsg$kcm(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)}, {&(0x7f0000000380)}], 0x2, &(0x7f0000000540)}, 0x0) futex(&(0x7f0000012ffc), 0x3, 0x0, &(0x7f0000060ff0)={0x0, 0x989680}, &(0x7f00003cfffc), 0x0) r2 = pkey_alloc(0x0, 0x0) pkey_mprotect(&(0x7f0000011000/0x1000)=nil, 0x1000, 0x1000008, r2) pkey_mprotect(&(0x7f0000012000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000f8d000)={&(0x7f0000012000/0x2000)=nil, 0x2000}) 2018/04/06 12:21:46 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400009, 0x400000ff) [ 345.720310] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 345.751327] binder: 25126:25127 ioctl c0306201 200001c0 returned -22 2018/04/06 12:21:46 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:46 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) open_by_handle_at(r1, &(0x7f00000000c0)={0x1008, 0x7f, "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"}, 0x1) listen(r1, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev_snmp6\x00') write$binfmt_elf32(r0, &(0x7f0000001500)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x9, 0x2, 0x200, 0x9, 0x2, 0x3f, 0x6, 0x3c2, 0x38, 0x2b8, 0x3678b4ac, 0x3, 0x20, 0x2, 0x600000000000, 0x2, 0xffffffff}, [{0x0, 0x0, 0x8, 0x7, 0x6, 0x7, 0x7, 0x9}, {0x7, 0x1f, 0x5, 0x0, 0x4000000080, 0xb15, 0x1ff, 0x1}], "817a82225c73d23cc3945a00a6eca94629bef57824dc74f8f3ff6b88505b9d0e6ecaf9d42448d0adf2a27a9f054025fdbcab0ada610dba87574a298f4583401e2de67e253bc9448f3629f67256f6b668854d916c8a3067903a6c5df3fb7de5cc", [[], []]}, 0x2d8) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000001100)) 2018/04/06 12:21:46 executing program 0: mkdir(&(0x7f0000109282)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) fcntl$lock(r0, 0x7, &(0x7f0000027000)={0x1}) ftruncate(r0, 0x0) [ 345.862478] binder: BINDER_SET_CONTEXT_MGR already set [ 345.872467] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 345.890360] binder: 25126:25147 ioctl 40046207 0 returned -16 2018/04/06 12:21:46 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00'}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:46 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000900c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:46 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400500, 0x400000ff) 2018/04/06 12:21:46 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000007fffffe00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:46 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x48, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:46 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000000)={{0x2}, {0x0, @random="c35536937552"}, 0x8, {0x2, 0x0, @multicast1=0xe0000001}}) 2018/04/06 12:21:46 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x82000, 0x0) ioctl$KDSKBLED(r0, 0x4b65, 0x2) init_module(&(0x7f0000000040)='eth0\x00', 0x5, &(0x7f0000000080)='ppp1:posix_acl_access\x00') socket(0x10, 0x1000000000803, 0x200) 2018/04/06 12:21:46 executing program 5: r0 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r0, 0x10000008000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x801, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0xffffffff) [ 346.637779] binder: BINDER_SET_CONTEXT_MGR already set [ 346.640175] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:47 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='vlan0\x00', 0x10) r1 = socket(0x10, 0x1000000000803, 0x0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x109000, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000100)={@local={0xac, 0x14, 0x14, 0xaa}, @empty, 0x0, 0x6, [@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x519, @multicast1=0xe0000001, @multicast1=0xe0000001, @local={0xac, 0x14, 0x14, 0xaa}, @loopback=0x7f000001]}, 0x28) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002002c53b2000b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de2fff), 0x0, 0x20000815, &(0x7f0000a57000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_int(r0, 0x0, 0xe, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 346.680217] binder: 25170:25172 ioctl 40046207 0 returned -16 2018/04/06 12:21:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x10399}, 0x1}, 0x0) 2018/04/06 12:21:47 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x25e, 0x400000ff) 2018/04/06 12:21:47 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:47 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f00000000c0)=""/4, &(0x7f0000000100)) [ 346.849931] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 346.882769] binder: 25206:25208 unknown command 0 [ 346.918733] binder: 25206:25208 ioctl c0306201 200001c0 returned -22 [ 346.951105] binder: BINDER_SET_CONTEXT_MGR already set [ 346.961339] binder: 25206:25216 ioctl 40046207 0 returned -16 2018/04/06 12:21:47 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:47 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b0900b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:47 executing program 0: mq_open(&(0x7f0000000040)='-$\x00', 0x3, 0x0, &(0x7f0000000080)) 2018/04/06 12:21:47 executing program 5: syz_emit_ethernet(0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="671988b996e3ffffffffffff86dd00000001000000000000000000fe8000000000000000020000000000bb000000002f2f04cd728f73d3e5e1770f3e2def319e", @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f00000000c0)) 2018/04/06 12:21:47 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x9, 0x1000000000803, 0x550) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:47 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:47 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x522, 0x400000ff) 2018/04/06 12:21:47 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 347.635515] binder: 25224:25226 unknown command 0 [ 347.647282] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 347.662620] binder: 25224:25226 ioctl c0306201 200001c0 returned -22 [ 347.690542] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:48 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000680)='net/udp\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/snmp\x00') preadv(r0, &(0x7f0000000100), 0x361, 0x10400003) 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2002b9020000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000000000100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:48 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000140)={r0, 0x2, 0x1000, "63873811bbf958c9c48ffe669cfc9dfaa6344ee309df47a8d955e656cfceffe3fa7d35"}) r1 = accept4$ax25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x10, 0x800) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x5, 0x1000000000803, 0x1) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) [ 347.717646] binder: 25224:25242 ioctl 40046207 0 returned -16 2018/04/06 12:21:48 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x1e8, 0x400000ff) 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6c00000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 347.812093] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 347.942928] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:48 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x400000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:48 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400010, 0x400000ff) [ 347.974428] binder: 25270:25272 ioctl 40046207 0 returned -16 2018/04/06 12:21:48 executing program 0: 2018/04/06 12:21:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9030000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 348.064692] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 348.099434] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 0: 2018/04/06 12:21:48 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xe, 0x1020000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902fffff00000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 348.115823] binder: 25291:25296 ioctl 40046207 0 returned -16 2018/04/06 12:21:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00 \x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:48 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400006, 0x400000ff) 2018/04/06 12:21:48 executing program 5: [ 348.290422] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:48 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xb20, 0x400000ff) 2018/04/06 12:21:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x200000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:48 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(0xffffffffffffffff, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:48 executing program 0: 2018/04/06 12:21:48 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x1000000000803, 0xfffffffffffffff7) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f00000001c0)=0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfb, {0x4}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x963c}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x80c0) r3 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x200, 0x2200) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f00000000c0)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000100)={0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000140)={r4, r5, 0x3f}) 2018/04/06 12:21:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000100000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 0: [ 348.430376] binder: BINDER_SET_CONTEXT_MGR already set [ 348.436586] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 348.469696] binder: 25336:25339 ioctl 40046207 0 returned -16 2018/04/06 12:21:48 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902f0ffffff00000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:48 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:48 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000080)={0x18}) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000040)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:48 executing program 5: 2018/04/06 12:21:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x600000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:48 executing program 0: 2018/04/06 12:21:49 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xe5a, 0x400000ff) [ 348.619808] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 348.687951] binder: BINDER_SET_CONTEXT_MGR already set [ 348.747270] binder: 25364:25370 ioctl 40046207 0 returned -16 2018/04/06 12:21:49 executing program 0: 2018/04/06 12:21:49 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x13, 0x803, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000000c0)={0x3, 0x0, [{}, {}, {}]}) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r2 = semget(0x0, 0x4, 0x6) semctl$IPC_INFO(r2, 0x2, 0x3, &(0x7f0000000040)=""/42) 2018/04/06 12:21:49 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:49 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:49 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40000b, 0x400000ff) 2018/04/06 12:21:49 executing program 5: 2018/04/06 12:21:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x700000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000007fffffffd528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:49 executing program 5: [ 348.833762] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 348.857503] binder: BINDER_SET_CONTEXT_MGR already set [ 348.870135] binder: 25387:25394 ioctl 40046207 0 returned -16 2018/04/06 12:21:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000c24000)={{}, 0x80000001}) 2018/04/06 12:21:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902fffffffffffff000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:49 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:49 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0xffffff7f, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:49 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x407400, 0x400000ff) 2018/04/06 12:21:49 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:49 executing program 5: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x40000002871, 0xffffffffffffffff, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvmmsg(r0, &(0x7f0000002e80)=[{{&(0x7f0000000140)=@in6={0x0, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001640), 0x0, &(0x7f00000016c0)=""/118, 0x76}}, {{&(0x7f0000001740)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001800), 0x0, &(0x7f0000001b40)=""/223, 0xdf}}, {{&(0x7f0000001840)=@in6={0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000002d00)=[{&(0x7f0000001ac0)=""/64, 0xfffffecb}], 0x1, &(0x7f0000002f80)=""/210, 0xd2}}], 0x3, 0x0, &(0x7f0000001b00)={0x0, 0x989680}) recvfrom(r0, &(0x7f0000000000)=""/101, 0xfffffeb9, 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000073c0)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000380)}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000076c0), &(0x7f0000007700)=0x8) 2018/04/06 12:21:49 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x401}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000040)=0x1bd) [ 349.067079] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 349.082275] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000067000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:49 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000007c0)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="400000001f0001010000000000000000fe8000000000000000000000000000aa0000000000000000ac1414aa00000000000000009783e029dc2b0a000000000000000000000000"], 0x1}, 0x1}, 0x0) [ 349.126215] binder: 25411:25425 ioctl 40046207 0 returned -16 2018/04/06 12:21:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x2c, 0x14, 0x109, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x2c}, 0x1}, 0x0) 2018/04/06 12:21:49 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x406c00, 0x400000ff) 2018/04/06 12:21:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7a00, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:49 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:49 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x7, 0x7ac8) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9027006000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:49 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000380), 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc, &(0x7f0000000080)={&(0x7f00000000c0)=@delneigh={0x24, 0x1d, 0x517, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, [@NDA_DST_IPV4={0x8, 0x1, @broadcast=0xffffffff}]}, 0x10399}, 0x1}, 0x0) [ 349.318352] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 349.320751] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:49 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000004, 0x0, 0x40000000, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x280900, 0x0) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000180)={[0x0, 0x5000, 0xf000, 0x5001], 0x7, 0x1, 0x6}) r1 = socket(0x10, 0x1000000000803, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40000, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f00000000c0)) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:49 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650007fffffe00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:49 executing program 0: r0 = creat(&(0x7f00000004c0)='./file1\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[], 0x1023c) truncate(&(0x7f0000000280)='./file1\x00', 0x0) write(r0, &(0x7f0000000180)="15", 0x1) r1 = open(&(0x7f00000003c0)='./file1\x00', 0xc01, 0x20) fallocate(r1, 0x0, 0xffff, 0x9) close(r0) 2018/04/06 12:21:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x79}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000007b40)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000003}, 0xc, &(0x7f0000000740)={&(0x7f00000051c0)=ANY=[]}, 0x1}, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)) [ 349.391261] binder: 25453:25457 ioctl 40046207 0 returned -16 [ 349.428727] QAT: Invalid ioctl 2018/04/06 12:21:49 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x85c, 0x400000ff) 2018/04/06 12:21:49 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000001d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:49 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0xfffffdfd, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 349.456774] QAT: Invalid ioctl [ 349.472723] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:49 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) flistxattr(r0, &(0x7f0000000280)=""/118, 0x76) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x4, 0x92, [], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/146}, &(0x7f0000000040)=0x78) r1 = socket(0x10, 0x1000000000803, 0x7) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 349.555594] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:49 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000000100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:49 executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x28314000000, 0x40000) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000040)={0x7, 0x3, 0x5, 0x2, 0x2}) bind$inet6(r0, &(0x7f0000021fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) 2018/04/06 12:21:49 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200f0ffff00000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 349.601721] binder: 25490:25494 ioctl 40046207 0 returned -16 [ 349.655642] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:50 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x10a8, 0x400000ff) 2018/04/06 12:21:50 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x300000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:50 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x14, &(0x7f0000788ffc)=0x100000002, 0x4) sendto$inet(r0, &(0x7f0000a6efff)="cf", 0x1, 0x20020003, &(0x7f0000385ff0)={0x2, 0x400000000}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000280)="ff", 0x1}], 0x1, &(0x7f0000001640)}}], 0x1, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000000440)=""/192, 0xc0}, 0x40000002) 2018/04/06 12:21:50 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500020800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902fffffff000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:50 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) rt_sigaction(0x1d, &(0x7f0000000180)={0x1000, {0xcecc}, 0x10000002, 0x38b}, &(0x7f00000001c0), 0x8, &(0x7f0000000200)) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) perf_event_open(&(0x7f00000000c0)={0x4, 0x70, 0x7cc0, 0x4, 0x2, 0x1f, 0x0, 0x6, 0x8, 0xe, 0x8000, 0x5, 0xec, 0x80000000, 0x1, 0x7, 0xffffffffffff0000, 0x9c, 0x80000000, 0x1ff, 0xfffffffffffffff9, 0x1, 0x5, 0xffffffff, 0x0, 0x3ff, 0x0, 0x5, 0x100000001, 0xea, 0xbe, 0x10, 0x400000000000, 0x3, 0x2c7e, 0x3, 0x0, 0x328, 0x0, 0x5, 0x0, @perf_bp={&(0x7f0000000040), 0x7}, 0x3, 0x3, 0x3, 0x7, 0x0, 0x8, 0xb2f}, r2, 0xe, r0, 0x1) 2018/04/06 12:21:50 executing program 5: sendmsg$key(0xffffffffffffffff, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f84ff0)={&(0x7f0000379fa0)={0x2, 0x5, 0x0, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80}}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}]}, 0x60}, 0x1}, 0x0) 2018/04/06 12:21:50 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9027fffffff00000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 350.620521] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 350.640162] binder: BINDER_SET_CONTEXT_MGR already set [ 350.655816] binder: 25530:25539 ioctl 40046207 0 returned -16 2018/04/06 12:21:51 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="000000000000280e4000000000"], &(0x7f00000000c0)=0x11) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}, 0x2, 0x7}, &(0x7f00000001c0)=0x90) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x7f, 0xffffffffffffffc1, 0x3d, 0x2c}, {0xffffffffffff0000, 0x87, 0x2, 0x9}]}, 0x10) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={r1, 0x2000000000000, 0x1, 0x0, 0x101, 0x1, 0x3, 0x10001, {r2, @in={{0x2, 0x4e23, @rand_addr}}, 0x2, 0x80000000000, 0x6, 0x0, 0x1000}}, &(0x7f00000002c0)=0xb0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:51 executing program 5: r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000440)=@broute={'broute\x00', 0x20000120, 0x1, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x2, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffdfffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'sit0\x00', 'vcan0\x00', 'ip6gretap0\x00', 'gretap0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @empty, [], 0xf8, 0x178, 0x1c0, [@limit={'limit\x00', 0x20, {{0x0, 0x101}}}, @statistic={'statistic\x00', 0x18}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x2f8) 2018/04/06 12:21:51 executing program 0: socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000000c0)) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f000003e000)='@&prockeyring\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000f36000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f000030c000)={0x0, 0x0, 0x0, "98de7a8c5ae95ec8792c92151fc33a454f13eeab65c0322901ca6bd31bde2c51f06c5f0b014f9f91eeb7647c7240f476c8d75dd000aa8faf8fb5740200a6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000044000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000040)) 2018/04/06 12:21:51 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x2d4, 0x400000ff) 2018/04/06 12:21:51 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500feffff0700", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 350.803678] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:51 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200f0000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:51 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x2000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:51 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) sync_file_range(r1, 0x4, 0x20, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, {0x306, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x36, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 'yam0\x00'}) 2018/04/06 12:21:51 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x100, 0x0) r1 = socket$inet6(0xa, 0x2, 0x6) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = accept(r1, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x80) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000100)={0x7, 0xa1f9, 0xad0}, 0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000001c0)={0x8f4, 0xffffffffffffff10, 0x100000000}) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000580)={0x0, 0x25, "42a9b5d9c8dd5fd23dd6f44b3420aeecf79bcf1271e27a302f83423391736b5ebf1d4af275"}, &(0x7f00000005c0)=0x2d) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000600)={0x0, 0x1}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000e00)={0x0, 0xcb}, &(0x7f0000000e40)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x5}}, 0x706, 0x6, 0x9, 0x6, 0x400}, &(0x7f0000001180)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001200)={0x0, 0x10, &(0x7f00000011c0)=[@in={0x2, 0x4e21}]}, &(0x7f0000001240)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001400)={0x0, 0xdc, &(0x7f0000001300)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x101}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in6={0xa, 0x4e24, 0x80, @empty, 0x80000001}, @in6={0xa, 0x4e24, 0x94, @mcast1={0xff, 0x1, [], 0x1}, 0x80}, @in={0x2, 0x4e24, @rand_addr=0x6}, @in={0x2, 0x4e22, @rand_addr}, @in6={0xa, 0x4e23, 0x4000000000, @dev={0xfe, 0x80, [], 0x14}, 0x61}, @in6={0xa, 0x4e22, 0x20, @mcast2={0xff, 0x2, [], 0x1}, 0x4b}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000001440)=0x10) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000003900)={0x0, 0x2, 0x3, [0x100000001, 0x4, 0x7]}, &(0x7f0000003940)=0xe) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000003980)={0x0, @in6={{0xa, 0x4e21, 0x400, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}}, 0x2, 0x80000000, 0x7, 0x1, 0xffff}, &(0x7f0000003a40)=0x98) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000003a80)={0x0, 0xb8, "abab21307e58cfed4fa026c52b4f2ba0f0d352f4606a821f631cc933ce4254120fdcfdeb103b85430ddffedbc2e853928c66b7203d4a424444eb7c4337dd08e2ae992f4f0ec18a96ac8e41bbbebce46e56fd3ea9866439731328befd62c38f21c3ebbcab6313bd44463ee5d797e01d86e8b3dfc0b76e09489b0d17e65f3210f27b851ef7a2f3643030ab6cdfcbc3222aa282137f02da74cd5f72f1e2e07e98a84fb12b3901773f96f8fefcbb2a88d1e167eddce2e1f07923"}, &(0x7f0000003b40)=0xc0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000003b80)={0x0, 0x5, 0x10, 0xe6af}, &(0x7f0000003bc0)=0x18) sendmmsg$inet_sctp(r2, &(0x7f0000003d00)=[{&(0x7f0000000380)=@in6={0xa, 0x4e20, 0x1, @loopback={0x0, 0x1}, 0x297a}, 0x1c, &(0x7f0000000540)=[{&(0x7f00000003c0)="bfc5742465ee3fc6ae6f5f367edadc425d9a657d38d8e4058a15d369d2f935d72d784a349b09277e5312f1f5c9", 0x2d}, {&(0x7f0000000400)="03f9cddc4fac0d111bb888804d500495ffa64c5ae62c8aaf188e41eff7286b3b9370e76dad1b95f2aa67", 0x2a}, {&(0x7f0000000440)="7b8f519281a9d5e0f53210eafb21dae8bdc2ca6c7c436a80ce3869ba6c9e5b646791aff9f778be634a2fc44ff54bd3410d51be26841f7ff4569626b2596c566a0211ebbcec7be95e5ca00f8e026d1ca75a89c8eaa0fe2843a45297b61a13a1576912149e3e00515d74d5", 0x6a}, {&(0x7f00000004c0)="e93dae14e3f8220c6fe460735d2854d452376481581ab066e28efc5100a4c1af21aa2669ee30b27cc23286f348a2a68365661d39f5ca4183dd845920190f18da8e8039d86ea1", 0x46}], 0x4, &(0x7f0000000680)=[@init={0x18, 0x84, 0x0, {0x7, 0x0, 0x6}}, @sndrcv={0x30, 0x84, 0x1, {0x800, 0x8, 0x4, 0xffffffffffffb867, 0x5, 0x4, 0x0, 0x7, r3}}, @init={0x18, 0x84, 0x0, {0x3, 0x9, 0x6, 0x5}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x7fffffff, 0x200, 0x8, 0x0, 0x4, 0x102000000, 0x82d0, r4}}], 0xc0, 0x80}, {&(0x7f0000000740)=@in6={0xa, 0x4e21, 0x7fff, @dev={0xfe, 0x80, [], 0x16}, 0xffffffff}, 0x1c, &(0x7f0000000d40)=[{&(0x7f0000000780)="bdf27824ea784f57efd6f9a7d8c44da2ac7235bd58f5121bea427e88257dc8e6ddbf8b7abfe1b405a27931f9237a88bb90a3311d758929c63655e1d9faf8992c1b26db", 0x43}, {&(0x7f0000000800)="b654f7", 0x3}, {&(0x7f0000000840)="d920bcabcf5c75840a64a16ff8a620005e87841f6ffd1fc7a6355975105797c62b6ddaa3d531c269a928eaecf019150f46b83c159a7159c96df892f282b0a27c43dbb0085c", 0x45}, {&(0x7f00000008c0)="682c7c92dc12303ce83f913728b322417a0731a3293055c198ecd230702fb395f085a6ab8361ad2c114524bbf5f50855e25cdbb33c74f46561620a8080b93c3294eb5100ba5f98623a876c696e824b6027a81caf8c9f71ffe98d01112f62178c2dd90b41c9384d9d3b34ce40e0f2b561c51a1d40955112e4c04903c65f5649a1199388b3ede66cff4a60c291", 0x8c}, {&(0x7f0000000980)="75e650c4cd747209b47253549326637e194351952fc0a81f631985715405935fe92eeecb85f1c7c18d478e6f9140dc86957e1bcb9cfa24617a60c9758c9c7ede5650be27b0e807d616df15cb9f0a62a4c91d39d7bf10e8f54930066883263085ac0444847d56f306d09a51f462cdb2eba2ebfa1892df5c359b553a65da1299d1658f1fd9579b1fe2d8f8eb0033c8dd1e5f2c206918da0c7eea365d2662e99cbe74f6cf9caae955393a760a71176192e9413d759048d24f0b876648dc933903c2edcd", 0xc2}, {&(0x7f0000000a80)="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", 0xff}, {&(0x7f0000000b80)="3b5400ae04aa248d9b95ff4e55fa229226244e413a4d6d7ed3d9e11426aeb65de0c4d2", 0x23}, {&(0x7f0000000bc0)="faa0b36fb92c005cf54fd3c7415b3264af7b778b486b1e0852833ae79e6af69847a72ec8ce69e48aee35300d260ac89db80eb1bf82bdb8428db6f4706efb0d743dc77dbbe097188e9e9685325587a0887af7e1ae1af163948742bc9cbbbf253f0e645f41c2eac15c1a7ef4a3fbb57b9bb11c01c7125f07db8d52eff3b0ae9614aef1c5", 0x83}, {&(0x7f0000000c80)="ed8cd31dd8733fc028071e34b6051f5d981a031bbc52c1c70c01cb950c6ccbe1fd5d2293633e40abaeb4d956baf7a06439460511496c839daba518a3f67de8f802f877fe9266ab8334941c1ae5f1308a6bd3c4621c4f7a9dab089f3f1f9060189eee3d233e4e8070ef55e9698436266cfb8e6e2f51bdb108fc472d3b81365bf2390d348fc690695eaf08eaa95d89502d2d22d0f9a03828007cd13c", 0x9b}], 0x9, &(0x7f0000000e80)=[@init={0x18, 0x84, 0x0, {0x8, 0x0, 0x3f, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x4, 0x4, 0x5, r5}}], 0x60, 0x40}, {&(0x7f0000000f00)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000f40)="336c322df2a4c2ee56788df3b8eda48c6d4565095fe71ce3021d", 0x1a}, {&(0x7f0000000f80)="2d44a120722179013b5e5c803a6e45e0fdb1171786f5ad420d6d31be02dd4121", 0x20}, {&(0x7f0000000fc0)="3f80222600", 0x5}, {&(0x7f0000001000)="d2616477780deb24845462497888bcfcff0f4aa50be1c1ef01cc8191f067a65d0403b6931450317a8ba22a95342b991bf6f61ba6e3a01ba0bb09255c23ce33dad184cb2d7af83f", 0x47}], 0x4, &(0x7f0000001480)=[@sndrcv={0x30, 0x84, 0x1, {0x6, 0x1, 0x2, 0x6, 0x80000001, 0x100000000, 0x5, 0x9, r6}}, @sndinfo={0x20, 0x84, 0x2, {0xffffffffffffff59, 0x204, 0x5, 0x3, r7}}, @init={0x18, 0x84, 0x0, {0x1, 0x5, 0x3, 0x100000000}}, @sndinfo={0x20, 0x84, 0x2, {0x2f2f, 0x8002, 0x1800000, 0x6, r8}}], 0xc0, 0x20000004}, {&(0x7f0000001540)=@in6={0xa, 0x4e21, 0x100, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x3}, 0x1c, &(0x7f0000003880)=[{&(0x7f0000001580)="14200b8de58878e1055f0555cf95156b16a28620e87de9a8d875f51c9be5bb433224d0f1f226d9d8f874e228391990dac0ef6fecd364ea75373f50acf3e4520d0d18bcf7d425557cb348c08d4b856aeb0140e985db7598f2ec63c1c8adefd5652f6f4b1701c1d1f72d8a62e76c3e7524f8ec782032ad9709dd0845e47f7af1a34591493d303098a5cc4a1dec5f54303a8862c6d412011fda0ca96eda47fcd1d2f4a81c97f3a758ad213448f58d6ffc98ca02e62eaf8f24ba332888222be0b278f91bd311c86a63ce1f09b3", 0xcb}, {&(0x7f0000001680)="57e83aeb9bbb45743b8121b0bdb8f55ba74066392c0090f820b76b2ec34d1c864508bf22d65c4cfafaefa6645d29d1c9b3ad2ca0ac8e68af5ce7c6003ec1818413600ce7748ba7e198ee8a443d6e56fc26a708c43ab2caeac38164548481184245e3cbcfdcdb5f5bfec74b93940792be83531e30dbfa0c105e5154935686488335c02bca88842cc9d1c6801176e8f165bb58c200e4cf5e", 0x97}, {&(0x7f0000001740)="11bcf0e2b29ec2393f8402e8ba80fa97a9fa97df83946c2ccbf762b7cd3848b98d5dcd96443c910119c4fa32068875c9e0c3f139685fb52ae44faa0d02dc1184b31456f459ac9895a54c71c99d70372cd205cee775812a3246c210e7edc16354f5b4f22c837dbf6cdccb39794f049a2391a30a4a7906a8504e5a991950b96298b4163e598b2a240306b458", 0x8b}, {&(0x7f0000001800)="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", 0x1000}, {&(0x7f0000002800)="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", 0x1000}, {&(0x7f0000003800)="9f180e08dd207b62c811ba3f0e9c57ff5353e2ccccd5a5b5fe96f7a964768d2ce1ff7fc955fea9a9", 0x28}, {&(0x7f0000003840)="c82dcffd6974", 0x6}], 0x7, &(0x7f0000003c00)=[@sndrcv={0x30, 0x84, 0x1, {0x2400000000000000, 0xe72, 0x8, 0x7, 0x8, 0x7, 0x8, 0x9, r9}}, @sndinfo={0x20, 0x84, 0x2, {0x8000, 0x20b, 0xdc6, 0x100000001, r10}}, @init={0x18, 0x84, 0x0, {0x4, 0x5, 0x5, 0xd39}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x100, 0x1, 0x3, 0x1, 0x8001, 0x656e, 0x40, r11}}, @sndrcv={0x30, 0x84, 0x1, {0x0, 0x1f, 0x2, 0x3, 0x7, 0xffffffff, 0x1, 0xfff, r12}}], 0xf0, 0x8090}], 0x4, 0x1) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x400, 0x5, 0x4, 0x100000001, 0x42}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000340)={r13, 0x3}, 0x8) setsockopt$inet_dccp_int(r0, 0x21, 0x1b, &(0x7f0000000180)=0x5, 0x4) connect$inet6(r1, &(0x7f0000000000)={0x2, 0x4e20, 0x6312c6, @loopback={0x0, 0x1}, 0x3e}, 0x217) 2018/04/06 12:21:51 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000000000/0x14000)=nil, 0x14000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000009000)={0x8, 0x31, 0x7fffffff, 0x15ee, 0x3fac, 0xb9f5, 0x7e4, 0x513, 0x3, 0x2a6}) r1 = syz_open_dev$sndpcmp(&(0x7f0000001140)='/dev/snd/pcmC#D#p\x00', 0x8001, 0x280) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f0000001200)=0x4) r2 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000000cfe0)={{&(0x7f000000b000/0x1000)=nil, 0x1000}, 0x3}) perf_event_open(&(0x7f0000001000)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000005000), 0x2}, 0xc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f000000ffef)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000011ffc)=@assoc_id=0x0, &(0x7f0000005ffc)=0x4) r5 = syz_open_dev$loop(&(0x7f0000012000)='/dev/loop#\x00', 0x0, 0x400000) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000011000)={0xb4, 0x4, 0x4, 0xeed, r4}, 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) signalfd(r6, &(0x7f0000011ff8)={0x40}, 0x8) syz_open_dev$sndctrl(&(0x7f0000002500)='/dev/snd/controlC#\x00', 0x1, 0x0) mq_unlink(&(0x7f00000011c0)='!,\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f000000f000)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000001100)) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000004ffc)=0x10001) setsockopt$inet_mreq(r6, 0x0, 0x0, &(0x7f0000010000)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x0, 0x12}}, 0x8) readv(r2, &(0x7f0000008fe0)=[{&(0x7f0000011000)=""/232, 0xe8}, {&(0x7f0000011fff)=""/1, 0x1}], 0x2) read(r2, &(0x7f0000000000)=""/4096, 0x1000) readv(r5, &(0x7f0000002480)=[{&(0x7f0000001240)=""/93, 0x5d}, {&(0x7f00000012c0)=""/203, 0xcb}, {&(0x7f00000013c0)=""/153, 0x99}, {&(0x7f0000001180)=""/32, 0x20}, {&(0x7f0000001480)=""/4096, 0x1000}], 0x5) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)=""/250) 2018/04/06 12:21:51 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:51 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:51 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400002, 0x400000ff) [ 351.647146] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 351.665127] binder: BINDER_SET_CONTEXT_MGR already set [ 351.667374] QAT: Invalid ioctl 2018/04/06 12:21:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020670000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:52 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000100)={{0x3f, @multicast2=0xe0000002, 0x4e22, 0x2, 'wrr\x00', 0x24, 0x400, 0x46}, {@empty, 0x4e22, 0x0, 0xc2, 0xfffffffffffffffd, 0x1}}, 0x44) 2018/04/06 12:21:52 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400074, 0x400000ff) [ 351.692377] binder: 25579:25589 ioctl 40046207 0 returned -16 [ 351.707880] QAT: Invalid ioctl 2018/04/06 12:21:52 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000007fffffff00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4c00, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:52 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x430d, 0x402) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000040)="0ae552d63aaff50cf4ee5b01a6d5f0b81ad085ab92e0ba99ec0920e8f9438174ed9c53950f8f98ae1964bf343f3a9409e88db94ee25dc5a71c8364d571a861f9d2a7c09b1031af", 0x47) fgetxattr(r0, &(0x7f00000000c0)=@random={'btrfs.', '/dev/snd/pcmC#D#c\x00'}, &(0x7f0000000100)=""/246, 0xf6) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e21}, 0x10) getpeername$inet(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x3) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000002c0), &(0x7f0000000300)=0x4) modify_ldt$read(0x0, &(0x7f0000000340)=""/20, 0x14) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, &(0x7f0000000380)={0x80, 0x2, 0x200, 0x2, 0x3}) r1 = semget$private(0x0, 0x4, 0x4) semop(r1, &(0x7f00000003c0)=[{0x0, 0x7fff, 0x1000}, {0x3, 0x8, 0x1000}], 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000400)={0x0, 0x1, 0x42, 0x100000001, 0xa4de, 0x1}, &(0x7f0000000440)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000480)={r2, 0x70a7}, &(0x7f00000004c0)=0x8) clock_gettime(0x0, &(0x7f0000000540)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) utimensat(r0, &(0x7f0000000500)='./file0\x00', &(0x7f00000005c0)={{r3, r4/1000+10000}, {r5, r6/1000+30000}}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000740)={'nat\x00', 0x0, 0x3, 0xd8, [], 0x0, &(0x7f0000000600), &(0x7f0000000640)=""/216}, &(0x7f00000007c0)=0x78) bind$vsock_dgram(r0, &(0x7f0000000800)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendto$ipx(r0, &(0x7f0000000840)="e9dc0b5ab7df7bace7901054ff4130c01607e9510ed566ffc059142eaa21345225129fa3c8f13bdc303b26bacf780e1dbf576afd586cacabad7349b2294bc38f47b046977fb012bd7dfd89fa5c3fb23e7de4728aeb78d437c62e", 0x5a, 0x800, &(0x7f00000008c0)={0x4, 0x0, 0x6, "b59bfa369e16", 0x7fff}, 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000900), &(0x7f0000000940)=0x4) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000980)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000009c0)={r2, 0x9}, &(0x7f0000000a00)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000ac0)={{0x18583e220b683b95, @multicast1=0xe0000001, 0x4e21, 0x0, 'wrr\x00', 0x4, 0xff, 0x12}, {@broadcast=0xffffffff, 0x4e24, 0x12003, 0x2, 0x4, 0x8}}, 0x44) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000b80)={0x4, &(0x7f0000000b40)=[{}, {}, {}, {}]}) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000bc0)={0xfffffffffffffff9, 0x10000, 0x9, 0x9}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000c00)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000c40)={0x81, 0x1, 0x5, 0x101}, 0x8) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000c80)=0x3, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000cc0)={0x100, 0x7, 0x101, 0xfffffffffffffffb, "d8d1fadc9dac119725fad483bc75360b684d314ff241893c59ae830e31bb7f81a686ab2735c3b004e8a9e761", 0x40}) 2018/04/06 12:21:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200f0ffffffffffffd528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:52 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) [ 351.874416] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 351.890182] binder: BINDER_SET_CONTEXT_MGR already set [ 351.907484] binder: 25617:25619 ioctl 40046207 0 returned -16 [ 352.489535] QAT: Invalid ioctl [ 352.499230] QAT: Invalid ioctl 2018/04/06 12:21:52 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40000f, 0x400000ff) 2018/04/06 12:21:52 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9029effffff00000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:52 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f757465000000020800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:52 executing program 7: r0 = shmat(0x0, &(0x7f0000fff000/0x1000)=nil, 0x0) shmdt(r0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:52 executing program 5: socketpair(0x8000000000001e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x4, 0xfd8, 0x2, 0x40, 0x7, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) recvmmsg(r1, &(0x7f0000004800)=[{{&(0x7f0000002d00)=@in={0x0, 0x0, @loopback}, 0x80, &(0x7f0000003080)=[{&(0x7f0000003000)=""/26, 0x1a}], 0x1, &(0x7f0000003180)=""/222, 0xde}}, {{0x0, 0x0, &(0x7f00000037c0)=[{&(0x7f00000035c0)=""/145, 0x91}], 0x1, &(0x7f0000003800)=""/4096, 0x1000}}], 0x2, 0x40, &(0x7f00000048c0)={0x77359400}) 2018/04/06 12:21:52 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x2, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:52 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:52 executing program 0: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0xfffffffffffffffc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"626a7368300057000300", 0x100}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x408300, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000100)=""/47) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x4}, 0x68) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) socket$inet_smc(0x2b, 0x1, 0x0) [ 352.650265] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 352.663413] binder: 25646:25650 unknown command 16400 2018/04/06 12:21:53 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000e87000)={0x10}, 0xc, &(0x7f0000a3bff8)={&(0x7f0000000080)=ANY=[]}, 0x1}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x0, 0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0), 0x8, 0x0) sendto(r0, &(0x7f00000003c0)="717e4b58d8161257d86f5d64ec82a3a137a840a1346fe5d35d0c14f736750a11f9be4576fc92296881b9806bc6bc6d4d8b359d3e4e7a0de25b70", 0x3a, 0x10, &(0x7f0000000440)=@ipx={0x4, 0x9, 0x877, "c1af3c2c710a", 0x6}, 0x80) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$vcsa(&(0x7f0000000300)='/dev/vcsa#\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000407ff6)='/dev/vcs#\x00', 0x0, 0x0) syz_open_dev$binder(&(0x7f0000000580)='/dev/binder#\x00', 0x0, 0x802) bind$inet(r0, &(0x7f0000000500)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f00000005c0)={{0x2, 0x2}, 'port0\x00', 0x0, 0x20800, 0x7, 0x4, 0x8, 0x9, 0x3f, 0x0, 0x3, 0xd407}) r4 = syz_open_dev$vcsa(&(0x7f0000ca8000)='/dev/vcsa#\x00', 0x1, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f000093f000), 0x8}) openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x401, 0x0) r5 = dup2(r4, 0xffffffffffffffff) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/enforce\x00', 0x105101, 0x0) getpeername$llc(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x10) getsockname$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000340)=0xfff1) fallocate(r6, 0x10, 0x0, 0x205) signalfd4(r1, &(0x7f0000000240), 0x8, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r6, 0x40485404, &(0x7f0000000680)={{0x3, 0x3, 0x101, 0x2, 0x4}, 0x81, 0x10000}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000000380)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000280)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f00000001c0)}) mmap$binder(&(0x7f000000c000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000000540)={r7}) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="11c61b5da47e"], &(0x7f0000000100)=0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000011f9d)}) 2018/04/06 12:21:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000fffffff0d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:53 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0x1000000000000a, &(0x7f0000000080)=""/4, &(0x7f00000000c0)=0x4) r1 = dup2(r0, r0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x10000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x181000) gettid() ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x48000) setsockopt$inet_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000240)=@req3={0x4, 0x2, 0x6, 0x8, 0x3, 0x100, 0x3}, 0x1c) gettid() getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x26, 0x3, 0x200, 0x3, 0x1, 0x9, 0x7, 0x7, 0x0}, &(0x7f0000000300)=0x20) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000340)={r4, 0x840f}, 0x8) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000380)=""/157) [ 352.702182] binder: 25646:25650 ioctl c0306201 200001c0 returned -22 2018/04/06 12:21:53 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:53 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400a00, 0x400000ff) [ 352.780273] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000ffffff9ed528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 352.820950] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 352.837796] binder: 25646:25671 ioctl 40046207 0 returned -16 2018/04/06 12:21:53 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000c31000)='/dev/ppp\x00', 0x2800, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000100)={0x6, 0x7}) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000e9f000)=0x600210) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000006bc0)={0x3ff, 0x6488, 0x0, 0x10001, 0x0, 0x5, 0x800, 0xffff, 0x1, 0x9, 0x8, 0x80}) pread64(r0, &(0x7f0000974f42)=""/190, 0xbe, 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000000)={0xf5, 0x0, [0x10000, 0x6, 0x3, 0xeb]}) r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000140)="deea6307f7d17b7f3eef91d48e662f68f85f2de27aa1161be31548dd3f32b95e390af59b282c294035ae6a2e476fe5b300cb69f17e14951c4dbb06d5bfad8117d6e85777d91381bb367dd3a6c08db9c521b0d4b05b65e05e89a3a70c936f4ba34898f68f1a3e2dd1a18edc1d28ddd7", 0x6f, 0xfffffffffffffff8) r2 = add_key(&(0x7f00000025c0)='keyring\x00', &(0x7f0000002600)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffa) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004100)=0x0) r4 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004140)={0x0}, &(0x7f0000004180)=0xc) getresuid(&(0x7f00000041c0), &(0x7f0000004200), &(0x7f0000004240)=0x0) r7 = getgid() r8 = getpgrp(0xffffffffffffffff) r9 = getuid() fstat(r0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000004900)=0x0) r12 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004940)={0x0, 0x0, 0x0}, &(0x7f0000004980)=0xc) recvmmsg(r0, &(0x7f00000069c0)=[{{&(0x7f0000004d80)=@nfc_llcp, 0x80, &(0x7f0000004e80)=[{&(0x7f0000004e00)=""/74, 0x4a}], 0x1, &(0x7f0000004ec0)=""/149, 0x95, 0x5}, 0x7fa8}, {{&(0x7f0000004f80)=@pptp={0x0, 0x0, {0x0, @multicast1}}, 0x80, &(0x7f0000005080)=[{&(0x7f0000005000)=""/122, 0x7a}], 0x1, 0x0, 0x0, 0x800}, 0x7fffffff}, {{&(0x7f00000050c0)=@nfc_llcp, 0x80, &(0x7f0000006440)=[{&(0x7f0000005140)=""/186, 0xba}, {&(0x7f0000005200)=""/97, 0x61}, {&(0x7f0000005280)=""/243, 0xf3}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/139, 0x8b}], 0x5, &(0x7f00000064c0)=""/81, 0x51, 0x8}, 0x5}, {{&(0x7f0000006540)=@sco, 0x80, &(0x7f0000006640)=[{&(0x7f00000065c0)=""/96, 0x60}], 0x1, &(0x7f0000006680)=""/29, 0x1d, 0x3ff}, 0x5}, {{&(0x7f00000066c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000006900)=[{&(0x7f0000006740)=""/69, 0x45}, {&(0x7f00000067c0)=""/187, 0xbb}, {&(0x7f0000006880)=""/85, 0x55}], 0x3, &(0x7f0000006940)=""/69, 0x45, 0xffffffffffffffff}, 0x8000}], 0x5, 0x40000000, &(0x7f0000006b00)={0x0, 0x1c9c380}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000049c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000004a00)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000004b00)=0xe8) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000006c00)={r16, 0x1, 0x6}, 0x10) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r14, 0x800442d3, &(0x7f0000006b40)={0x8, 0x100, 0x4, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'bridge0\x00'}) fstat(r0, &(0x7f0000004b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000004c80)=[{&(0x7f0000002640)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000028c0)=[{&(0x7f00000026c0)="bf1b23068c7e7b21d83916737e3edaa69f9485bf4af07ca8b0b598ea1f9fece9d1ff17346e61452c058416b0efa3ac6bfbeb065d212324024482c75a94", 0x3d}, {&(0x7f0000002700)="8157db5b7450085c9141ef46ba52b2418c18266c63ae4d1687f4a6d831e6e20e8b33d1eaea7561ccc8853295286ba0a908e4285df6216153127a243597e899fdf08056484842bfa1f5c141f3fe8979bd60cfd54799c2963c73626db71c087f180b2c89f2793c461efea7374b1f39abc36b0afa2588809a1139545e407980766ef59588b299d430efa38b3aac5649b37c88054a7fc37141f03e4f06", 0x9b}, {&(0x7f00000027c0)="6ae173a0d4895322fe30103ffcae6ccce4fe6d7ad397dea22888ba268d49eb4a573f3e344d19897235ec0720649f55cd97a5effdc272d3e0b918139db25d1ac123fb2a1a36db4aaceb087ccfe6e553ff87c8ba599e5e107252dfdeb08f89adaa447e26ad48d726e1779f0ef795d3d0343e7204ff02a05d37e30904f735a253f5e2ef0a9d4dfc38b8e5eb7ce6fa74a44388885ffe60b48997c2e275a4ef2e6e533610fac1cb99b5784d255969c4e2cd37dfe9ce37642502032a44f1e32f368580e23bf37d121dfc7b3858a1d852cffca6405a252350586c7ad490c786e99156ffb0551ecfd40374b80cc6a65fb6c31d957ba806551919963f66", 0xf9}], 0x3, &(0x7f0000002900)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="f7000000"], 0x38, 0x40004}, {&(0x7f0000002940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004040)=[{&(0x7f00000029c0)="7abfd0504449ddac23f72325b7b7e528223610ab62b1e273af215c11d98af95c83ff6665097b45c3235025bc162e41c34be0d6bf4502e43cc64ba38adb8e7f24988a85134a2d07e135aebe5358ed8530d8d654afc41b26a7eab65f2bdc314b16d233bc95aa31d3bc83a861942c9b925ec3e2757131fd", 0x76}, {&(0x7f0000002a40)="f7f9070e7a2806de5df6e37cf6add2f7d79c72289dec8c3d618d7a6b2613bf9a520c87d533d276f1d73224c70ca37e80abc84edf967e2a00e2894ee559f53a43e1dba1584db97ebac19f5a5d02f832fa951a5fd92083ec5a062f789987ab6262d9ff0865fb9a2344df220a998c2a3209dee29ec5617b7e8bb2053cf52bd2847b5df29b1c8411521e8c34fe4b2e044d5386e0cf6b94f36690f7f02dc5e6cdfb778053e7c7b1f2643c71d5b399b1ac30a5e4f0119b61dfe1f3c76472073a93ce67c2546065b8c49a0ea74a4d5193dce186644e05c918247aca7cd7c9b96064b6791722b6deb8f74252", 0xe8}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="4657301f00294812d5ae1e2922fd2d0bfb5d894e000a6c04d02d85861accca724949019dbc9fba76de96787dd46ce16bb5fe7838fac5fbba3dbdde140f78fd64904b2cba5c89c19668388009", 0x4c}, {&(0x7f0000003bc0)="a9527dd847f3697293e929334b07fd5ed770c2814b44199d7aeb5d5a5788de26348c36a9deaa27d302745864263c9eaa893fd2654bca313591896d4e90b09a30bffe35e98477da9eea253eeb0eb6a22880591d232acb1eabe1b5a45911ff2adc44daaa7a7e0c95ae07a56ccf71d75730f421b154ddaaf2db51b3cc83b347f6ec8bc84a7c71eb1cf839a4dc56db0b49433c1144d66526babefa154948f661062ccf44c06a931773efd9cb2d593793af7b70567dd4de32def71720e490b1c41295d2dd7a281fc3e4a65d9a5224", 0xcc}, {&(0x7f0000003cc0)="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", 0xfc}, {&(0x7f0000003dc0)="a89f9f712cfc4ebd28ad62a7d03204ad9f80e4ba2a7363f5bd10f6f3c58ab7e1c99211bfdd8f3fe280fa5ceae36446bf0e3d4befaebf4dd86dcc355dd2743adfe1af1f140a7ec2", 0x47}, {&(0x7f0000003e40)="cbe62eed7fc254a9a48dffe35cccb6b0159971f837db6ca4b9cc172b1b32567b9e4f25911bf88568f3a37c8b336e8f0cae98c04deb0c7a2aa76d74feef1d7d8e761128475cd11dcf57b327a8b836ad1300dbcb9f9faf1a2c3f28a0498063cce7646d3d2263778aa2", 0x68}, {&(0x7f0000003ec0)="880a3181ba262e20eb7a26da83e206559a888bad596171c72cfe418f03e80b0888c7c636858e55e227609e34e75706035871631d22e65731ee4e05199c3a8bb953f68ed6c508a6b7a19e3d8425a92b9b2d6670e89304b9aa85fc312ec68e9e8b2b397679c0a945a69b4cad88dfb8e9c420cb6f49c81b77cff1080fd3ae42d0bee1049df9d2f9f4e935b511bd7e52beb8bc452c932c0a4cc34d7eb604", 0x9c}, {&(0x7f0000003f80)="f445f1f284a7e1224d7144c93fa3ca512e314b97a9befb934643cee0ac39cac3a5fbfb1b5c4d2ba684b0e56d71e5e01fd2ca6913d3bae2c44d6685998303269f1865a6df2c37e83a7551bb3c7ddc53ada02f1496d6194b3c17f3427986bd4e1a79f8fb899e5d457d537eaa9f2f4d96c23d031af82105358debc1ce3a163d727859a0b46cd960c7e1c721bac59b061ce9666143e62ee6cceec60b58a32fc376b120dec0", 0xa3}], 0xa, &(0x7f0000004280)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r3, r4, 0xffffffffffffffff}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x68, 0x4000000}, {&(0x7f0000004300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004680)=[{&(0x7f0000004380)="50fb865afb3e9528f891fdad8b436572ed4142d08f85f44177cded434a36e85bbffa9f7b0c8a390959988d035dd464d88a5b3ecd25026e9349b430f41e6bc1792861ab28affaaa39fad363e5d6bf2d6f24a18ba0b321a43e3affd285f83aa01270638dca61d589ec7955f36108e6912416bcf5d9e4cc78", 0x77}, {&(0x7f0000004400)="97b5b68966b98f4d67b111e425ac0eba4790671ae6ce9ea38a56ee3df2ef691796b9d5749c8e0afb1ddcf9ccc992abf85349f0b6dac027419dbfeecc5fe7b09a820cc200af1613e6ad8c310c32dd25abf17fc5f32454fcdf23ce6899eccc2cbe557151aba7e130e3aec01b4ae60de1a3180da6f3beea726d38e571d980175e35cc3085bf44a5e232140fa2b093348bf76e8e8dbd84b969e7398e8b13a5c4925a27588c4b176e9fe86701eb15352041ef00ada62d0f56b4ca09c3baf3dc7b41192c47d0d31c", 0xc5}, {&(0x7f0000004500)="76842e38c10f3824a5073283b2d72707a5bc8db574724729efffbf06d91bb020f4cb82aeed24666d7edec923b4298637bc2f5f2010a5a46a98b320b60603e1ad8064e79b5d94b1e681ab78d48954cfcc620849765e4bab4692be6d30807f8cadcbdb7291648eae2ce7", 0x69}, {&(0x7f0000004580)="6776a3b025e015691911c00b0c31b5a2646aafd54ac69ee33c414b0a87dfe818ceff04ca0e35ece31a1dcd01173be864f81f93d8c1d63feaaf30bba792c7c5725bb80deac85eca7aaee2553fb111668fbfc7d17f256473a0d81b67b822e054ea4313c9f9d1b53df222945c184b86da5a5e4731d92fdeef62b32b41228a00c3c7f7e5b434e6da765b05d1953a05673eed68382e197178558b11e3030b2dd56460d222bfbff3b4108e0acbaec9228d88991c0fb64e77022c1689f40a9b40baedac4b4a3f8d9e61369c1133e266dd3b6b2214599d8545325baa6baa49aefd0326b67d8a6bdc6c09bf320d9e", 0xea}], 0x4, 0x0, 0x0, 0x4000}, {&(0x7f00000046c0)=@file={0x1}, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004740)="700984a519f5a344f0aeefb14f577c26b308cce92bb979e2a117b521886ddfcaee9bac85612416aa4afbd3eb06bb77c809ba5acf1e949fa235b9931775e7fdc740cadcbb5fcc507edeee327c4b2d2e28a22025be28819be6f74717e5e53ac44778750137045b56459988f9c0c224616c37031752a5ec17ebf329dde07e426eff547181c43d059f4e839c2eb852ac57fca0f86de1e07215729ec6e418949b92a6ecdf76dd1d74e5e02622a086aa5ec66592fb6241fa05e92016c7a2f108c4b23f9d0039c0911c1657a1c81f35b191b82a2eb89cf568137af863b8df76056322b146542456dee9124f23b052504ff5159e47268bc72a4af78a", 0xf8}], 0x1, &(0x7f0000004bc0)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="00c6a2a82590b033557f0856d3be5e76007a7800", @ANYRES32=r15, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0], 0xb8, 0x4004040}], 0x4, 0x20000000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r14, 0x6, 0x21, &(0x7f0000006b80)="2a651d10ed7fed1ceb55d3e4729a843a", 0x10) keyctl$instantiate_iov(0x14, r1, &(0x7f0000002540)=[{&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="747736a8ecdc74b80dd889ece6563cc5b762e4b2551bfe9ed7f0425167dc216c0dd23da793ccd23796160f0f895e1831dba8e50fd73381d25dfc8b4de0e53e3cb85019e071db26bfaf754d3dc8c854179d3beb267c2acbfbe200acc2dc8a15ed2d179579c6ff395912d80b87d2eca9faffbe3838c1efde2adc5c50f7ea636227683f385fdcf58a24c698e06b0deb59701bf197aed7c9bbfd96bfac8561b000800a58529aa694a7de6496feb280141d6546fc8b7e5a62b093f9de61b094ad90ee6349026f449f39764b2ba4a6d9a37c4a7beceee49c4b2dde621ed33414ecdef63722a875c15ee4ada37a744b53b6a00ae4e4a3bfd68de60c1b1554137bbef452acb7e58924194746a385fd97f2e57e25cb7bf2187f1a4742a3b9344e27d9a1248aa986a4aad368a6d250ce6d9c6028d982a3cb79c14d96c0e54d55da255b78600b8993bed4b0c737f20015a347438b01bf75c82de5806050e52587322c07935ec7c36fe7e6beb0f9b560eadf6d01e8390ee80214078374dc1c35457f3414a69d60a60be6fae7c66d2bbb4be02a9ed9f2bc1fe202ac7c9d67b0a9c25cd715ac075843ef62f7dbac78bbab9f77548e899914e5e23df575df7407ed14e7abd32d656050a851a13a940f35d423dbe8eba2f81b0decd78924ebfdf9be917a2be61915aeb800f0af9899962ffb5d2aff52712afd3c7ed60d91a5f01d58ec5d17dbee610f541c8adad926e78907754ef488a1598e1f39ebccf2a4f04f531dee49bba4fe4322a5cb1b60d514f9e7f5949219e8e0bb13ac8ca86074b07757076b41e926798ec00a222c774bb84da6ecc1200664343c112db54e7f803aae08b10eb3a6c30079f51db50a5a386d296f116d8869cd4bc1ac76c402e55d88e9f8b251bb8e6ef50c4c8f95e1dabb0af32b45cfde4c46814546b5e2197bb92469b7082cc569da9243d5ff54ded23c4dddfde68a252b2c4a42436a6c8cc2d68f78686e7c02697bb6b0aa5fa83c2ecef24d1374e6d354ce2d24998969417f64706c86cc0e3f4a120b38546cc8cd1348b296da2a9e65855635064666d7ba6a953055db81bedbffd37c8350d7256ab46f09871b0b6d713441355d9ad277ec8b6c20c5ebb709fb857605a2918e7d8a0569f01bf3faf692c6061fea31064117483f3832cd1b098171101f0264896eea8c0d172beba25b22e1f30a5d327fe0b0138366cea1b96880145810eb229a52cf95c623c0aba0a4f431cb8e7b6c0d9dcf519ddb275dbd39462a8d57f5485021986b8c30d8b7654eb2e467f099d7c650e3779aa15848066a2b56ad510bd9048993e1b3ac257e5a506f516b9a070c03e5d43e232172642f1392b98af40eb22b502b3cbb8cf06247db7eeaa28a9eb2be672cb00beb279393a8fb7af12fd32f7f835008ed902bb866f7ac183dcf2a1a5718456b7bf85b593601b4128cae79f5a85db266e251dbf553d54d6498e761658ecc9b4a2977f79b03b6419f9aa18506ec74b1809aa2f5e9c69ff49e7d92138e6918a2760362aead6e26dcacdbb4d7ea21b5dab0df6e338ff71a5cf29c0e5c813a96ff907d2b701848ba361142035f7abc59b9d6fa0d6d44efaef0226ee730240e664473851577dd9ae960982f0eb0213729fea56597c21df250532e0b496ba1d4f8810c1c0387df23a737d85ef6b0a4faf3c82f30e847440a26708f8aea62398e5209131b61b4d68d0df63351e48f25c10d3f0cac4c9084d2b87c60054ba084772e3688c4a584a2b40369ece0aed72d48a041e7bbfe166d6271f541fb3775881299ff0a2c574734e52c6087ab80a52a6e35eb81b858f542e45c2ce15dcef2e361352089f55bb94a71553fc81b4991c10ecafb693c778a6c81d70b0fccbe3a0e6f2df315f10728c1f705ea07a9b6e77f57362ceb299a3cd84cd3ab32e2e1fa3dc2dc1f6fe13549b54dd2192f6e1f5f33a7a54b6f9a04467b85baef7746a09d32f1a9e425f7c0f8254deb3367271079bfa2996cae63a10971d42daf66b71a40b7634e713ddd9864de2673c1634e0eadf50fbe858f2447ee293a45892be3bc283084aa064c95ff8900ac8a3bc9a0760dfc8b5de7cf36dc0d547b813ec2c2cd509dc3915fdde7d4aa4dbd18e30ab8fa93f1a60f99c2b89d5deaf066e7d1dd7a869d7e2c18dc8913471dd78dc7a39207107912a57ab2b651d6a185547dcc21b28ca80f42730ea32bbd25567615b7d66b811d348c72dc15e5be0125ef40e153b9fb50283a7b0654640a1d157d51fd3e9feeb991c035e1a51dc08fb8a41e27d6d3d03e989ca1a7e384f473da00e637e15bd6a29b744202c1bc2a9d8a9a37b216d085ed0042ef75e7919f4932c75a8918cba789a6a22a7fc7eca9bfc54289b1fa3a9fe3d745107011124f7797b0d98b1a8e05626d3dff51ab11275bf883665e72aa90e78c0f4f02ba945f37e37156cb2e4236e58a3d800159034379af9daca9b0d09a1b62d0d16de4adbaa73ddb196ed173ef88c6c136c574aaf19d9e1047ee53239b68ea281cb6c53f7d8091283e45c88e1e8090475b49c4d0585143471d518ef4409fcc1bb996136a2863ae7b88cfb0b1d84eb64f4f205b34af8fded3d71a0276f0f84c6a1537819a8872048edc21902ae744f06a2237056bd16d8e0bbe4d34b328005291cb6138ec51a5bb192bc9a87bfd3f73831d5a00d9c7d8cf07e14306d43e38d8bcfe385d7a069cf2c96352fba89193b8fcac2bec71fe21203ed6264753da16b69ab81b87f0aea1c5af4a3367e1baf61a0330390a4eeb9b4b42e3bb6c15ccc73e8dade086f5c6752e12b2d57ed1dd378cd77fe9060110e5f2d2e99d6ccc75278e6f6378c152289165e305d4ba2a8f3db4ce7e350fee1f8ed4ed41d188112a52d738fe145dd88818105f7495fd0019ab266fb740fdb469b8c61a542101f1bea22a9693f1484ed105db7e10bdc89bf1ccfdb4ebf07220bfa3e5ed3e4a9c014e9bdf152c36f405826ca8c2dd8f1496689707e52ccdd4df8579d8ec60b99b16c766700846ab4a4d88a8fb56ae5154452d3aa5cc4381b20e8ed6fa39e54d7c35240d81e792c085beff1d4fe4beb7af87f272c54a98141e1b7c2c8c32abb60cf7f8bace33030090f78f139e723b15c5350c6cd7eb7b5d38477f6745e3d72007381f5392bcab14befec1c59b317ac51743b8683c808f6e9db092511066c5c9a603bfde7a7c4d667aa64b43ad4c5c016813551ccab8ee2b646b12eed3ef94000f590d6782c53e8f475e65b63fae795c5f8d749890d789a9258534819b77bee63f8de8a5bb757272d55dec4d291de6836438d648e0ab98edf48cc780a38827c18d62b6539cce22d09e2dc8fd7ffe5c0fbd8b8a145d16dba0e1e5a2207df0b131b2b0fe52bf249bf10d526017a117322947ba9757adcc510a7ba39ecbf018a83c4595e4fa555f6257ecdb713d52820896fe5583da5cd007edf4344ddef126ffc12e9f7f3eddda811aaea68e80bb68533be0f43ce824f16b086b61641d1e5cbf70c9ed365efda24db44a8aec3a8071ad809c057793d7b016abee85d691cd7d748099567c90243ab9ede9a44d851b74b8c171389777da26a83ad878c76c818373a354432a0cb682d4761c130cd79e1d22fce1c950286ab2fe49de32f9b0f9236ae5712c55b2253db7109febfb63944e4d3cb81dc5757d3b5e7974e543de1f12ba5350d95f65b74423593f1d1d2c63a85ce1ec1da06b221b0331bebdbc9cebc1d0e421e8de614d5b2a39786afeb380f285ae32cc5c25c2776499a6760a2632f638341a055cc2ee40bd9a584ca87a4a01d570d83761e1ae414fd578ab7e572a91cca5984cf063f08907fbf376a1f6a1ceb514589636872309a856f9341f676c1b21ef52a85aadf16a9cb555f40a5f73cdad14b5f628dc2b402300c2d861e67466be29b5c112f97a69719b69eea326768b3423088bc941dabd4ed70965d1d9b8c72ac4b969f265abde273831678c65debd9839d961af02f832df0cbe9b7a51bb763e2935011de3e415c7bc479ff895e173e881292a949133b5ab55c1313d0bc95918f34078fc3ff1caa2d91fbf29f02b7b142367a5f52a1da67088c4510bf11cf8a86c3bfa84223061ab4b902473fb4b641d2f7295806e38d6054fbeadec9a2b3ed9c53b1b71189b34e93af792c33444187a9d6cf04d3d6e862db12620cd4b0372c263d28e8bfeb0d011ed0240a8fd5586a18a3122614d79cb29e9e196971fe6520068c457e9f6abbffbb5a8594bc17e9f4468a9ea00077942751858f4bffa781c0af3a99af17e3b8e9810db3415b3697dfdbd7e389b6fca815765d0b7cc944c754d63c387c9a61c5bd8fd7e97e68c410c020bb8f552175616e6929a9585abc29d2e62270fc0aca446e62a96abd6fbc368f6db2fad95f493fac1b5421e31c51256f381d8a5bab9cceca295fa0eb7587f811b892bd7efd7669a057a52e62bab749e1f696691b2acacf11c8c9cd129aa0f3ef58a368c22efd52faa897e8ad46d1fb5498f5cc747a5abf0e7a43bb91081e8787b91e30090ef54faad5e203b70e346fe6cca76cc55048292e06dcf434d30f35f54af8173faad19b402cfaabfdd93be256bc2720f83aea9a404a254df4a17116c003334217cab6d1059a12cb2807db8b7d35f6d06acee4836dccd65016f0afb4e8ce22a0b7c9fbf8a6410bc5a8b40453522950a6f9b8cf8d27d4adc72ad6d63028aa5f9fa0fedb0c4b2d1329dfe52a862fb55b313a24381f3cc3c86a4f5f97870b1e3594febebedc846a902f8924a628191ab9c41a6105d04962ba3e645a751467afb0ca1e695771ac4acfbcbe76f1faa46d4f31e3d9bb58dd236e2df4c0a680dd7f9ca1593aadf8cfedb281623e4204e682a8c536f06059decf229771fb6e0073772b9f1597b5a5746a8d678c5d9db006cbb09df4082baf6d4cc1d492c9b5f5b22d3706cf673aaf31ba5bfdb3569299ccc90a906962b0fc50092f41eba28f8dc55de58f37dbb85aef3c34f40797655ea313c4ea63a18df574a5133efe6c49632543f4fbb441a7576e803ee324c727cbeb25f71b5092c70d07867506457e1c7e6bf53b76bbd155822bc5ee1739194bf646a4efce2f0bbadab7a5a2b7d5f7df2eccaa540b31b1b86f70b2531469f6d1583635b7e4acd267a85d822de18abfbc75f3f10e438b17192b46a67e3707b911d9eaa3d83d54802f14f184243e158287b22b5ffc9453594b19b206dcc678a0fa8976ffe098bc238f0c6b69586fe12e64c162a97d722470300c7522e115a3d310cd3880f1874aa2567fded40b68dd1455af68a9893f9b6a61cbf7026b349f4a03a7fc488652219a265c77fb777e98544a81e27021ccbf56b5bba4e7e1dc88bd9de416cb2a6a09829ab6c522f7d5fc162eed17c153cde958e128cb56a8ca4d32dc303fdcb0ba5bfc7ad56e4b7473b6340d2d16d33d26c6323e172a023262ef8160733a832633a1a66b95dc4103e2b8ba300c0979f70798e5ecb064da60cacfb1734c54c38abeca2645162c57126a0519abca1658e66fae98cb1de95947c6958f130eaf4497f7fc5aa430fff47d991dede93a744a43892c3f8c7a3214ae04234008a767869136c88b7877ed8a711c260037f5a7bc84df577af003770b88d18497468dec1c6d97d32a50797f2f61456028e7886cf95b1fe0921402ca9e80c9dfcf1efa1ca7db6d1946b34eff5530600545dad11788f9ef9cdf82e63a2a8cd9acda5931048b4558cd1fb0947ac77f53c7f6ce116b425a3ff1bf380f11528a842389c625b8d85f47c614f84e759d3b4b8403288e6d66d3801", 0x1000}, {&(0x7f00000021c0)="bac8fca3927ca48ddd9e611639689772e8e1059442e157f0f35d110125e1f69f15ad201351b7a1e18d32fce645aa916db516588196f371924a89049cf3ef0718da3a65b3a37213ce596e00d64470275a5d2945e6f9d44b1fd7f03eacb43d941dccff6ee0bb6b259e43fe", 0x6a}, {&(0x7f0000002240)="87294d70a442fd4cc83fbf26ed551bb81c2e870eaf93a30aedb1307686e3b5f9131b1cf135d9594ed0391311d3a7eea5ff8befc45971fed6678fe8202d22c452", 0x40}, {&(0x7f0000002280)="01fa71596eedc964c57713a5a094c3ec654607545cc2ba900ffcf41d10821a6131bebfe4f829a6df801abbbda820d69c8fd2c25b75bed2326d8c3f6a26cc9a4e2483f16e32cbb679889393edf3217fab237d0ff50e0c1da8597ab24d6e3c9051a47e323a7f738d17c14cab04a07ee12fd4f22c375f225dcebb36325f0fb7a1be0aa20c68dc9e72121a90b2094739c5db39a4f96a80e5256a21359547540f41b3b6b46ebff1acee07b2e59fc6a1d242a79408cdfd4c6c15f2ea52528022a1e6cfa44e7a900fac0c460e255eda9e67ba15871977f1e90af9c457f3eb398dc7a5bf92d9717404c9aa3f4cec17ec711cf3fda7cdd0cb6ed5b7282a", 0xf9}, {&(0x7f0000002380)="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", 0xfb}, {&(0x7f0000002480)="0da55a18c3b58d1b5704f716b268a9024801343a74a5abbae20132423a74438ce3b17abfb24d26339e950b9bdf6c8eee2351a50a442be2885a538168eae91fb4911b720c69f9799383460c4e7d6ebe5501278fe723830d8dcd9b08688cb91afdf5ee09d8626ad0cc9ee1be1e881fa32f2a7f1dd5f12d97585a1eacc9c703a51c6dfb249cadf76e671b09b7d9fe892c8e757811061490929985ed39b0978188cd69790672b31f01db40a3f9c6ed47ff693e426adf600fe7d9a33ab39a5f", 0xbd}], 0x7, r2) socket$unix(0x1, 0x2, 0x0) 2018/04/06 12:21:53 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x200001, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x20, 0x3ff}, {0x5, 0x401}}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000000c0)) ioctl$sock_ipx_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'yam0\x00', {0x4, 0x5, 0x1, "e51da688c23b", 0x9}}) r2 = socket(0xb, 0x7, 0x1) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:53 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xfbc, 0x400000ff) 2018/04/06 12:21:53 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000200000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:53 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0xfdfdffff, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:53 executing program 0: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f0000244000)={0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_open_procfs(0x0, &(0x7f0000c1aff9)='ns/pid\x00') setns(r0, 0x0) 2018/04/06 12:21:53 executing program 5: r0 = userfaultfd(0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x401, 0x2c4082) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000005540)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000005640)=0xe8) r3 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) socketpair(0xa, 0x6, 0xfffffffffffffffc, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) open_by_handle_at(r4, &(0x7f00000000c0)=ANY=[@ANYBLOB="0800040008000000"], 0x200000) r5 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000480)=""/176, &(0x7f0000000300)=0xb0) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2) ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309}, @free_buffer={0x40086303, r5}], 0x0, 0x0, &(0x7f00000000c0)}) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000005680)={0x0, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000005480)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x3}) r6 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) close(r6) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r7 = creat(&(0x7f00000054c0)='./control/file0\x00', 0x111) syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0xf6ca, 0x0) mmap(&(0x7f0000011000/0x4000)=nil, 0x4000, 0x8, 0x10, r1, 0x0) r8 = socket$inet(0x2, 0x3, 0x0) sendmsg(r8, &(0x7f00000014c0)={&(0x7f0000000080)=@in={0x2}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)="a75fdcf8382d87057501070000000000dc72564f955555cc153a58", 0x1b}], 0x1, &(0x7f0000000040)}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r7, 0x4058534c, &(0x7f0000005140)={0x5, 0x800, 0x8, 0x3, 0x400, 0x3}) 2018/04/06 12:21:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902ffffff9e00000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 353.053851] binder: BINDER_SET_CONTEXT_MGR already set [ 353.058429] binder: 25698 RLIMIT_NICE not set [ 353.068584] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 353.076212] binder: 25699:25704 ioctl 40046207 0 returned -16 2018/04/06 12:21:53 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000080200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:53 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x80000001, 0x8, 0x6, 0x400, 0x5, 0x3, 0x3f, 0x80, 0x2e9, 0x38, 0x6f, 0x6726, 0x5, 0x20, 0x2, 0xf7, 0x1, 0x9}, [{0x60000000, 0x63da, 0x7, 0x6, 0x9, 0x8000, 0x9, 0xffffffffffff47de}], "da30c88f6068336465137133f3235409efaabc362398ff53a343617c53b87482841a1b6308c1f2996e70fa6da0c104cb0d3a8bbf72a5ea0a6a6b4ffcac9d007d4a7f20acd9164ba60c0c5f144ff0f4e0bb94f0735719606a9e6b18c5c98961b859687f0254d06ee337252d8b3ec8d860bf02a0ace2c291b071fc0da61d8ab22707aad3c6298179146a02ed9f38a5e96152ff496e52119ee112f9198b7de3cf9052b46c9ad13391055d1c1655b605a76df35723704d49d75c252bfb69933cd986a762ebbeb672d229496064a54ef0f0d9d09c632401e19f8ae6c01506b464546a7dd571bdb8"}, 0x13d) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:53 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4c000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:53 executing program 0: 2018/04/06 12:21:53 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x34a, 0x400000ff) [ 353.204725] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 353.241927] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:53 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902f000000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:53 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:53 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='illinois\x00', 0x3cc) sendto$inet(r0, &(0x7f0000fa0fff), 0xeb7475328bdbcfc9, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) r1 = accept(r0, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x18) [ 353.269563] binder: 25727:25731 ioctl 40046207 0 returned -16 2018/04/06 12:21:53 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0x66, "419f1d0f3521c67f2c6431318328dd37257bfc9233829fdcbc8cf8022c27ec9971e41c21af6177882771406f75ac3e2e87bdfda2f48be0cae98fef38593687840f18f9d1e2722ef8795ebc2a9504bc0c44909911dd5ec5f31513c03505f8fe0da7d5357f8d23"}, &(0x7f0000000040)=0x6e) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e22, 0x5, @loopback={0x0, 0x1}, 0x8000}}, [0x81, 0x192, 0x6, 0x9, 0x3, 0x2, 0xffff, 0x1ff, 0x3fffffffc00, 0x100000001, 0x2, 0x1, 0x5, 0x3, 0x3]}, &(0x7f0000000240)=0x100) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000280)={'mangle\x00', 0x1c, "7dc7881b9a7f89c33f9cb6ebee3c32b824ee06a90a044f25bd0f2b26"}, &(0x7f00000002c0)=0x40) [ 353.386807] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 353.856789] binder: 25697:25761 transaction failed 29189/-22, size 0-0 line 2848 [ 354.051831] binder: 25697:25765 ioctl c0306201 20004000 returned -14 [ 354.090625] binder_alloc: binder_alloc_mmap_handler: 25697 2000c000-2000e000 already mapped failed -16 [ 354.114680] binder: 25697:25766 BC_ACQUIRE_DONE u0000000000000000 no match [ 354.121801] binder: 25697:25766 BC_FREE_BUFFER u000000002000c000 no match 2018/04/06 12:21:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x60, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020200000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:54 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x9, 0x4) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000100), &(0x7f0000000180)=0x4) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000040)=""/27, &(0x7f00000000c0)=0x1b) 2018/04/06 12:21:54 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000008800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:54 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400300, 0x400000ff) 2018/04/06 12:21:54 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000048d000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00009f9000)={0x0, 0x0, &(0x7f0000d58ff0)=[{&(0x7f00003faf57)="3e9438ea8d897269fe3a58c1f7a62d7306e09f28788f6af1950c8a1cefe5d1698de5804648f5082f441a5d528cc2b25fa8b5276ac22cb46e64533e3b1a8041d24d46c71d1b51f74cdc430e84057c7b4ee51a74017443c56e5658f10d4982075c02e579de92c5839064b666aa97c7d185edf8a3262cf7fc9df323bbb39a58ceb077047c260b39c102ae356155834ec1c80412ed84e33ec810d0a722ae2ea419655fd2237db42f5c2f0e", 0xa9}], 0x1, &(0x7f00005e5000)}, 0x8000) r2 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r2, 0x0, 0x0, 0x40007) sendfile(r1, r2, &(0x7f0000ccb000), 0x357) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={0x0, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000001c0)=ANY=[@ANYRES32=r3, @ANYBLOB="ea0000000a7618cc9153ba08c56d9a0e0a3604619a708e4dd199bd5b3d2f8b10cf036ca15902b278b11bddf3ca89d577fa426533200035661bbbc6d1accb24fe118bb587ce1e4849122f68f4b91c50f5e8b7c69f55c36e828e6ac1d07d5e466b30513ca25be63c076cb3241345717dc4f2dae5410ac5b189ff6faf70dad967ebc3be105fd9bc79f62ac89041da2629c4f91c593fbb2b870705c72d670eda77dd9d2231b4d393429ff304826346a32334275f1db524be175e4f0ce412472a32af1295447a457a36325c5a940f94427714ca7d05062716a32c3d60c5b4eab6f97e1731"], &(0x7f0000000180)=0xf2) 2018/04/06 12:21:54 executing program 5: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$inet6(0xa, 0x7, 0xfff, &(0x7f000000be80)={0xffffffffffffffff}) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f000000bf00)=@add_del={0x2, &(0x7f000000bec0)='bpq0\x00', 0x1}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000a40)='/dev/rtc\x00', 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r2, &(0x7f000000bbc0)=[{{&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)=""/37, 0x25}, {&(0x7f0000000280)=""/184, 0xb8}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000580)=""/247, 0xf7}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000000740)=""/148, 0x94}, {&(0x7f0000000800)=""/155, 0x9b}, {&(0x7f00000008c0)=""/243, 0xf3}], 0x8, &(0x7f0000000440)=""/19, 0x13, 0x1}, 0x3}, {{&(0x7f00000004c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002a80)=""/186, 0xba}, {&(0x7f0000002b40)=""/145, 0x91}, {&(0x7f0000000680)=""/31, 0x1f}, {&(0x7f0000002c00)=""/161, 0xa1}, {&(0x7f00000006c0)=""/27, 0x1b}, {&(0x7f0000002cc0)=""/175, 0xaf}, {&(0x7f00000009c0)=""/34, 0x22}, {&(0x7f0000000a00)=""/13, 0xd}, {&(0x7f0000002d80)=""/4096, 0x1000}, {&(0x7f0000003d80)=""/162, 0xa2}], 0xa, &(0x7f0000003f00)=""/4096, 0x1000, 0x2}, 0xff}, {{&(0x7f0000004f00)=@nfc, 0x80, &(0x7f0000006600)=[{&(0x7f0000004f80)=""/4096, 0x1000}, {&(0x7f0000005f80)=""/131, 0x83}, {&(0x7f0000006040)=""/238, 0xee}, {&(0x7f0000006140)=""/215, 0xd7}, {&(0x7f0000006240)=""/42, 0x2a}, {&(0x7f0000006280)=""/184, 0xb8}, {&(0x7f0000006340)=""/191, 0xbf}, {&(0x7f0000006400)=""/216, 0xd8}, {&(0x7f0000006500)=""/2, 0x2}, {&(0x7f0000006540)=""/147, 0x93}], 0xa, &(0x7f00000066c0)=""/198, 0xc6, 0x2}, 0x46d}, {{0x0, 0x0, &(0x7f00000068c0)=[{&(0x7f00000067c0)=""/193, 0xc1}], 0x1, &(0x7f0000006900)=""/4096, 0x1000, 0x6}, 0x9}, {{0x0, 0x0, &(0x7f0000009e80)=[{&(0x7f0000007900)=""/4096, 0x1000}, {&(0x7f0000008900)=""/118, 0x76}, {&(0x7f0000008980)=""/182, 0xb6}, {&(0x7f0000008a40)=""/4096, 0x1000}, {&(0x7f0000009a40)=""/106, 0x6a}, {&(0x7f0000009ac0)=""/92, 0x5c}, {&(0x7f0000009b40)=""/244, 0xf4}, {&(0x7f0000009c40)=""/64, 0x40}, {&(0x7f0000009c80)=""/254, 0xfe}, {&(0x7f0000009d80)=""/250, 0xfa}], 0xa, &(0x7f0000009f40)=""/86, 0x56, 0xb6}}, {{&(0x7f0000009fc0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f000000b140)=[{&(0x7f000000a040)=""/46, 0x2e}, {&(0x7f000000a080)=""/126, 0x7e}, {&(0x7f000000a100)=""/4, 0x4}, {&(0x7f000000a140)=""/4096, 0x1000}], 0x4, &(0x7f000000b180)=""/255, 0xff, 0xfffffffffffffffe}, 0xffffffff}, {{0x0, 0x0, &(0x7f000000b300)=[{&(0x7f000000b280)=""/78, 0x4e}], 0x1, 0x0, 0x0, 0x4}, 0x7f}, {{0x0, 0x0, &(0x7f000000b580)=[{&(0x7f000000b340)=""/129, 0x81}, {&(0x7f000000b400)=""/38, 0x26}, {&(0x7f000000b440)=""/27, 0x1b}, {&(0x7f000000b480)=""/202, 0xca}], 0x4, &(0x7f000000b5c0)=""/30, 0x1e, 0x6}, 0x7}, {{0x0, 0x0, &(0x7f000000bac0)=[{&(0x7f000000b600)=""/164, 0xa4}, {&(0x7f000000b6c0)=""/65, 0x41}, {&(0x7f000000b740)=""/193, 0xc1}, {&(0x7f000000b840)=""/177, 0xb1}, {&(0x7f000000b900)=""/230, 0xe6}, {&(0x7f000000ba00)=""/168, 0xa8}], 0x6, &(0x7f000000bb40)=""/71, 0x47, 0x9}, 0x1ff}], 0x9, 0x0, &(0x7f000000be00)={0x0, 0x1c9c380}) seccomp(0x0, 0x0, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f000000be40)) accept$alg(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xa, 0x4000000000080, 0x2, 0x1}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r4, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f000000bf40)={r1, &(0x7f000000bf80)="9ec53bb5aace8e25092ba12073e1498f87c35316ffd84b145a727af4d6a031"}, 0x10) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f000000bfc0)={@loopback=0x7f000001, @loopback=0x7f000001, 0x1, 0x6, [@empty, @empty, @empty, @local={0xac, 0x14, 0x14, 0xaa}, @empty, @broadcast=0xffffffff]}, 0x28) vmsplice(0xffffffffffffffff, &(0x7f0000000380), 0x0, 0x9) sendmsg$nl_generic(r2, &(0x7f0000000540)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) 2018/04/06 12:21:54 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) [ 354.264386] binder: undelivered TRANSACTION_ERROR: 29189 [ 354.304488] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 354.316418] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:54 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f00000000c0)={0x4, 0x4000}) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x6, 0xf, 0x7ff, 0x90000, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)={r1, 0xfffffffffffffffb, 0x4, [0x80, 0x100, 0x7, 0x200]}, &(0x7f00000001c0)=0x10) r2 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:54 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000670d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 354.339065] binder: 25781:25788 ioctl 40046207 0 returned -16 2018/04/06 12:21:54 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xcf8, 0x400000ff) 2018/04/06 12:21:54 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4c00000000000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:54 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000ff6ff8)={0xffffffffffffffff}) gettid() r1 = gettid() fcntl$lock(r0, 0x24, &(0x7f0000003fe0)={0x0, 0x0, 0x4000000, 0x0, r1}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x400000, 0x0) pipe(&(0x7f0000000000)) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000000c0)={0x9, &(0x7f0000000080)=[{0xffffffffffffffff, 0x100}, {0x8}, {0x523, 0x9}, {0x1, 0x2}, {0x4, 0xffffffff00000001}, {0xffff, 0x7ff}, {0x0, 0x8}, {0x0, 0x101}, {0x1923, 0x1}]}) timer_create(0x7, &(0x7f0000000100)={0x0, 0x7, 0x0, @tid=r1}, &(0x7f0000000140)) 2018/04/06 12:21:54 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 354.479702] binder: BINDER_SET_CONTEXT_MGR already set [ 354.501531] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 354.509463] binder: 25803:25808 ioctl 40046207 0 returned -16 2018/04/06 12:21:55 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x5, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200040, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xa99f, 0x80200) dup3(r0, r1, 0x80000) fcntl$dupfd(r0, 0x0, r0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x20080, 0x0) ioctl$TIOCCONS(r1, 0x541d) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000002d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0xffffff7f00000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:55 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x40007a, 0x400000ff) 2018/04/06 12:21:55 executing program 5: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vhan0\x00', 0x400}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x2080, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0xd9, "81a94756ee2bbea3c928f7dd8dd455f68ec03240462536db3137e071e00a02510a5b0347c166f242caab20eb7ca3f2e574e4a1ccfc09b90389fc4e55dd9d3333151d8564d43ee930218ab6b6fb0e266e533d5a3d671e4beb4dd82a9adbedaa3fa83a05896d7cff11cb9334883a60a82b0a2f539610f13fed0d0c43c6db14218e5c41f13a779c9dd372ebcd7c81c26b5a0df0573eedfa00fc839c260627dc3b396ad9d56f4e9bc44ff939983b85d35707513f19085f64586d578273aa729b34b96fa84180d8354f2d1e769ba2ad84ed9c052afdb94a76dbcbac"}, &(0x7f00000001c0)=0xe1) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000440)={r2, @in6={{0xa, 0x4e24, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0x6712}}}, 0x84) ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, &(0x7f0000000300)={0x0, &(0x7f00000002c0)}) r3 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000200)={0x20000000000004e3, &(0x7f0000000140)=[{}]}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) 2018/04/06 12:21:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:55 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x0) r1 = socket(0x15, 0x80005, 0x0) getsockopt(r1, 0x200000000114, 0x2718, &(0x7f0000a44000)=""/1, &(0x7f0000940000)=0x10) 2018/04/06 12:21:55 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:55 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xfff}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r1, &(0x7f0000000180)=0x4) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0x10001, 0x4) [ 355.409246] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 355.424225] binder: BINDER_SET_CONTEXT_MGR already set [ 355.449182] binder: 25827:25839 ioctl 40046207 0 returned -16 2018/04/06 12:21:55 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902009effffff000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:55 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x4ac, 0x400000ff) 2018/04/06 12:21:55 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:55 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00001b3000)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000dc0000)={0xffffffff80000015}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000d40ff4)={0x7}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, [0xb4, 0x1, 0x40, 0x800, 0x3, 0xffffffffffffffde, 0x0, 0x1f, 0x1, 0x7, 0x3, 0x4, 0xecc, 0x0, 0x3f5d]}, &(0x7f0000000300)=0x100) r7 = dup2(r3, r2) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000080)=0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000b1eff4)={0x1}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x3f9, 0xfffffffffffffffc) 2018/04/06 12:21:55 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6c00, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:56 executing program 5: mmap(&(0x7f000053b000/0x2000)=nil, 0x2000, 0x0, 0x84132, 0xffffffffffffffff, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x6, &(0x7f00000022c0)=[{&(0x7f0000000080)="74fe8bb558d36a5ddf72f1bc7b740250e7a80bbecb631fd12b94e0a3420f18bfe534eab3e5c120054396190a602b062c95a1bf96be5e61e5e603ac0c1fb831ed0a32553bc11a924fe59292be73c0f58bb39158aa5600173f042bf57635ced1feb64d195c3393b8e50f1d683c2c4c2514c9999214a4eb1e67f2c956381897ac9ff4aacde23afd82bb7931b78517a7df9a86694aca002e910bc02f9cf439c3370b10f195128b50cfa5f78d14a1a0a2d1db8223931d53e4c44033fc587fb080648791f0a5794db54ccf25b257d12b0ac88b90ae5e251ef11a6f267d7934212af3565ded2ba68a58d3e7b4e57e25ecb608ecd04540a885364fc90d3cf0e7d694b365c52c327136fd6ac06ed8ed0cd6f9750c29f8c46bb811a41f76504f4e96b7556d16de4f40566511c95258bb3f3b99f73e5df755c230cb0f58343dd3315741745f193d49af8b98e00b2c3df1d7cbc28259e5e7bf2991b8a8528226d8b8f54ef22c6b247262ada80a73424bec5c6877987d1ea2c9bc4e19089c86db1972f530d521621e773047d7003bed579e952149b93756aba6dc09a951bf16b798d5d002f5b7c5214437743fd6cc10499d19f44b8eca40992bf5bbb75bfef98d9e06e18eb0dd1e49ffa73ee14105326d74f41d84f34f540e7267e5a8c33d26639f51d1288e65b297d53b60585bf44495cb15f870232dee9972fffd91a91301bc45e37e5a0e8b5f7ab7dbdd3ea5f70a8d14253603b22a0068dab65fd20395be282364e7a2a6899c0a676d4f2b1c35adcb8ce055dc69e28eea857ddf725b036715c6849d3feaeb9c5283a041895a84a8f1a00eed85a00fd674f63acf4cf030b9c20981fe89c2f757709d18fdfb1688c573e3542cf79fdad576e33ec6cc7a350723ef2f6c81367eb20855af7d6e1e4c339fe67a9dfb5c6bc321b5368fa9bce73f9964bd4d5237c369abe768f69bf83752a9760c96c58da8491ecc9b388c7fdaf705c0d2e8c649451759f55f88749c6a1c61c9ca5306a27977b15da3935d4934cf89a58c8cca23e8fa22f0ac6567643d6fdee8b6f9b1c215cefd61d569f2631b24e18a05d82f7c341f83acfe50cd37a0a0155ee6854f3590aef3980ac0a27fd8f3630dc5a69b8b441aa6e2276caca2284715f94f6fb02e3637fa2f865e699a43b327ffad0a4932c7d0b9900fd5b35a10e8e63bb33aa62bbb30ddfb09d6905367c199d877a2a1ea663c08e52c37390c5e08a7cee07b7395ebef1cdc552aa21a8dd914c1790b8265b5b825b639a3d795cc8ec2622bc863bf947507ca867b8dc7538906d13dbb125b75a80cd140ce6fb4e92431712f7fd0ab1cab29d578219fee7b5e2b616b5b89f2f8cdbc81794343ffc126e4622849804367e7e11544789011234635d4bffa29280598eee1a57b9499368b6d1ec7d546017994a0fef955b7277bf408b4b9b8ee6888361335d6143fbf7365c1fb7e5166fabccd4a7968b6abcb312e3f1b4074352d53d9ae9ad7eb01a7b24667582a499aeae0528d0ec7d030eac98be767cb77fd15e1cd0c3590dfb95edfd87e3cf81e2e77216142b88ea17fc65bcd2ec9b90d49318b36e7b8d9487b875ef5d5be0e7b55cbebce16bf45fe3acfca872c0bb68221fd32f657892b8147d7c75865f517567564f3a03ea396acffdafde25546006ab34e5ce7f9a70c0fd5126f442915bfc35c2232ea9f47a08dbe9f6eab2eb26fb941c7038d4841d3733728b3ef41808e63fa63c86fb0fa4746be7907e41613cea980fff5703c9193b397dc44c22caf71bb5794eb274e25704e387bd8cff02b6c190c0a6b257b08f4954eee7a246b154b7f4697b2a602ae6e62931ab6792593e3449aac1216c3aa02dc5315e793f70a6e4716afa50437522e343435773bebf3e4f56d83e402423a732f346d59a7749e607c3a12e4de2fe29e8242d582c1638414289a6296a50d41085bd91f67702b144f0942d9e07ecef1787bc8547bc1029b65a90699e691b03e2cf1a16317e0807b7b67b158342c25dde7951b8a8aef57130061893d34ac304d7949060fc3e31d0881a6966e7e39e3037d9c633dd3081ca1b860adc25e3bd0cb7eda9a1da8157a0e2de24f2db71f6a9e6b768dc401c8b0bb8b11c8b01bee26ea9d1fdc8a07ca4742dc31691474fd3bc20c207aea654b94696b8417cd3df8f98ff3e00321a009401faa3cc529b595fbf3299383c94ca586d670d4713f656e277bf2b16255409bdb4edd63880293f42b082393ee765b1d67b704976f1c4894e6dccdc2ce6bc1e55ab3c92af6e71785003c8f2b56af62625c2d574fe5c349f71405f6de41b63a43bce2d57b225730e11e76f7b3260a4da68c6c88853696b38f19a6dd79237a9ae2192de40094e6ec74a0780e5ddb6aeefe474cf2797c92264162b6bca1f3fb62092c4f322ed9ab9e7765beeef81062dcf2acd616cad821a466f2bc4bf924c132a8c72b1c0d2c999174fb15cab9aa64a4d42131914fe081230ea9951fb24e551c67bdc8110175bb505a91bc969df9d96d5d1148ac8f80c6fc6ea547d2e132ea2e8f60532dc7a649b7dc3f991cb27f72cdcebcafd9eb04c9b7fdd7cf6760bc37b98e2515396a373aae15686fc1b02a6a3a57aea9f85e627d72cf85bfbbba6f333888ccd9735c2c5b4396b9572b053ea63ab110c6ccd635620d928ef5d2de19d0d4cd77a7ac9de797694ba582688af8f82f60d79f267028356df48c21534ac90e9d45b0fab39f35dc9beae147da12af9bb686d6fd22518379e92fae14a743cb3512639ca7c92d8c617055230139ff7676bcc58e4178cd917050acb86d19c71877d30806fcdf59a4b9a073586a38134e9f8234442dd522a7132b42b328066b1cc145254f9c9842a714ae49eb902b3b3dd945737bbd2a9a3eaa6780a70a069dadbdbc8a6693ef43feff00df7123e4351e06f34b3018b4da8a058587a8be74b6d0288747dcea922819bbe9219c4345f425bdff6a49b126021b5328d5ff068e9e3b323482998bdb6273d77aae9292df36a5d57ecdf1375d8a2969543c25ad372f26deb07bd1ba0392ffeaf70886b78955a866765aa4e77b1edc4c0591c79833cbe039930bafb503af72bb2a99fcafb441c0252b04fdb59223bb7d7082c7ae09a87d71801039a02819399afeea6c3e3ffef32d976e91f3f7aef0d558845b1adf7ab6b1ba78a764bc9a24c2516f22b02140d2651e5f748f8116f05748b91935e45c8de9829b61282d69099387cbbac185e2d50bbf8c71421515d4cd561000a8321f379fe271c3adec0346dc21cc3f960216ff89af69617c5ec865a365f29cbc1c08f650aeba764c26e1741c79809d72771f1b75fca8796e3972a93dc992b7bcf5934a4125bd325ab29bbd6badb99196a38777a88f45ca461b5c286f4620f664731221d465df201eff04d4e04693d64260b7a1f3ac6c2aaaa6085bb6e8ced8ed18458d61f49c6fdd52b3598b616d0089495e351a9042b5a713662ce58bb058b86a2475f9adf8de7011be7fff1429d9f3b4474fb82391d706765e7b462d8ddf3e1c58cec7fb0f153e91de455920fe06c3a5d773e5119118ced4e5d092b6dd9076fbeb4f6fabcf5a282fb6f28b422900f44894f844705899847ab0e3f2c235df62055017e76f5c333b6fa2764522791139a8a895f36571b23b7b7e749689da3a595e1a8ed292b66541d502810516be5dd5d06ba87985f3e74b6fcdf4a05e2ca8a4de94e0609a4c4511b0e0875787b523e3f7336c8fb5a07a5df5f14625ec55c3983450453333f5d9ba89195c284fb743da9a9218141f96f8d5f98a095968ee514bf930df283b8956bdd3c0c444d884111ee13e028ccb3d4e96e06d07816161738e278490699c2acd9009863da7941d4238ef0ff9f3c79f303cfb3a28d33b3ad71123da260033f44cdb997548734fb3446893c5bf45229ff6915c6e2a4bebe8963a8f851107f1c0471b7d47a0fb2bb38d45b8bb107b74a984ec4bea33630e0ad70a9dc6057955aaf9c29db34be2dc2e731e60f87eaf5600502be95f77cec97e94f1b45e5a4f6c0dd66fd6a040c506ac8b5c9a3080ad320745e658c65ac9be30f442315e542a14e71b15b578617b6c19ee2e86b3a0a0ec0c8e5a2784addd68875e55022ed24f00794d67613bce68f22bebc6af34daf49c94723782eebdc21beb7460e290e3c7cf95e31eb66ea683da0561c96a14a6dcd1b4f790307dfd8ed7904007b12c7f2849fe9801319dd9b43af3f817169e2d20af6770e9ed32f684c78a82b64a10e35fd3e7be2f40cf1b6f66127c37c8c4ced26c5e9ff2e3f42c314227a05dae2127b4e2927d4944b5fa8cb9eb71df98c49fa14aa6685a81aa2d2cab846bf7692db5be73521a96aacaea478ce7fe8c52ed7e280a2db06f2019fa786fbc6c90772fc079be6b3ee1092fb998cdd04239c927446be185dcaa54a732f6a397228647e9a02c7c8c2f759d4a529df3bf253cd629a2c483ae6b96c6996b23b14b7bf37e9e9b0ffd2047fdfd9dc9d0577ac006fe982238c1b2b5c9e5d5d257432d844ae13e066caa01d5483a03f4d48078c044cb8b0968bab7e152ecab0e04b083aa3f5d4a75412816c6a870b8d58543fa73383a1ebb35c8c45c8ef278c3c50afe8b2c675bd260168821fa02495a453b0a641c48632403f5cbbdb8b94a29835db85d7568a8ed0a5cc31c73b3a83905b65445829bb1adf3f231285db74b375bee2d7a9864292e3ccc183672e1bf52c149edbc5b0762217c5ea38e15d1d39e258163f8216778edb21d560849e4698c492cb42500553775e218b5fc9b4f347aa480630bd1beda2f352c29a05af2f5a25daa31dcdb42586415d501787b60d0ad60a8cacac202dca2f76e7c70084a117b4752256adcecfd4df2104d4b315d746c934eeb6c756458e88f4697228c69259bd904ce891f7b61eb3974f0e82d0e95ccb30474baf2a220b51e50d6cc97ca4d277a1e9eb130f3feeb624db671ed2c1d953d0da25076670d6ebbaf162cbdc9c1e0b6f0f6c53b60414f6ef589c0a3e8c00b7630b06a47ac2c2bf499d8e9742660cd0389bf81c78a0e84bfbe54534cf0b0361095f65cf7af1bd9f7f18a325afb9000724ee7449037924adea43c0124a4d843194bcca3076bebc2f4641cd3cfe5ec420437fe9bc1e6354a5a10bd49ec3e119acf70cd12d3217deb577596fe415149c1348ff143a3965e7c79db958421041f214de216294508f817d867ef9823464a183a48a6571caf8105ad251feb9122448aeb04bfb5e20bac760b5d4e2f5560160d39639025359ca9c4c914224276339b1c3e702755d0081b8e67c5a46585786032c07229b0911c45e538ccbb6c92303671d8c69a9230cf8f0de88295b46e8af6eeedb8cda94e0e89462f6e64df11929c1823e37540a67967aefa70cbd1faa7dc948beef1f436d2b695e5ab7a2bd51f35657d8633fedf12ff4fadd585fcc405c5367a0b092f97156a51a1bc4d1825d2bf550a70da13aceb09f36167c636046dff1d7e24afe8ec6a90efb8bf21d48d190e70a0bd94730369d440a71d2c30fc9478165023b650ad84cf70de889df3b58d88a5af610a8aa8cdc49b4891120765e157e06b3b9e7130a82974757cf60569f6e46f9a9e40c7be949c3323032d69d0fbaf8db69f29c00b1a808f8fc05aea7f8adbba8d9d6e61e310cbdef0f3b47d346bd6f9c66f4d0297296d3063693d1fc65626c0da8a3decb36dbe3d53b53dc4b6a4ab7dc3fd31767f2d1c811d35cec711e3f7893cd924420ea6f6198cc790f048372d751df26c94bb0864a022eb59f9df8f748f98ff", 0x1000, 0x8}, {&(0x7f0000001080)="e5bb7711f62246b0831c3764f1ddfd619d64477228e29a03431c5b7f96a4842600b7e80be2e6b3754600361574ee3b77e8ea276a1fc479754e2f8ff7951895848890a896fbede611fa5f3e5cfd12ee93fffb717920adca89ac477fadffc95dc76169bbf7ef458dfaf396a69ac13a18a33f859236ab3e24702c37dea5dc1c6a1dd99150c6ea5639e9a7993902aef4dff744e04d1aa8e1957efd83b1fce28806d80425bf9c3bc84b0f4a7fe112f7428c45ba8677d682548c24dbdd98930a8f40469853016165106f610881e2599b35736c6273a0cf", 0xd4, 0x8000}, {&(0x7f0000001180)="812ca328df6c64242828f030edcdfe5adfb76ac0", 0x14, 0x3}, {&(0x7f00000011c0)="546ce544473d9dd696cc65c751de7140c23402c2b03affdc3bc0a1a0280a412c941e771eaf673481ebe5e33318b5fd1ed088bc11c5a98e20ebb4956497fa9d7effd659bb41dc8edb9c36e8b4bb2111fc5804644023c5c94bad7b2f03bc7eb5315264982e5e1e6ffd619b6884f8367ee6e34494b67616c3691aff83af81e0caae9b986bcdaa5286ca2e790a05bc96a4ab5ca395db1fcb106c0b23dcfb66dddff8c6daa63c0d3d6c82348614711149ae21f8e6a2b3d35f81b2f9e461a2197529c36dfb71540a89e0bcddd5d6cc8dddb7d934f85f794ec93b3404b5c28f586a5849800aff4949a0ed3868967090dd71ca9588e536ab43be2e02bc32e93a57e3ae03e27ece5c2fe26aab955bb3e22c3e72fadd1adc3346df670b07fa36a3e6173498019dbf3fae64a7be198f76df64dfaeedaa581ca9942e945102091bb2fa2a98f4a80d62e054d3508439787b2655df31cbf31cc9c550fce4f37cbf2141ad9bb1858cf1040c23ba1c51209237a615b2a1fbe2d680d0934ffb6c5efeffaff6201819ea2661f0360dbb47901ab76cba64c67d24e198a1e21e40c2421663326fdb5a1d20abd224d3b4e3a6f094b3859162cbc60ac139e4980a4f5a15338286ea31f679aaa52d2261d328de795a4d1c9908bbb7be619217efcbc4f8601c5a6803391bdb49602f3e1f2ae6a651de47135543c1913327a3394cf794cc2fac76bdaa855360138668e7a7254734dac058a8d692acf9132dfdaf6e2724f7f04fe12ab9af92ff1eb8f875c6506fa7519f4e37054c27a4f90a1ea1994a991a2a7b0217ae4bd9dc842bdbcfbd165a3879e17580d62252892495da603b338abb446728852d79c38538d9601003eed37bc0e286721f1fdc73b98fb3b54723975712c2335fb156de351a59f42f38c7d0e65242311865f33fe9a2a637269ac42ea7fb257e4e6658e3c5547d9cd97e71faddf82bcb1f5481d7b32284ebf5ea9d00912220976f0346931e2aa2f097020707b1f57eb87abd6918d9be3f5ca438243c42defd0acffc64b7564f292e3c697596f2726a2217ffa7e4777fdf3c4f093097f2c92ed9aef0343b886cd963b077b879c853441e870659a64c46b63a3c4728d740193b62711d00561af4848208384fe302ccc71c6f077088c7f77e32463e0185745d142ea6a25d95a7aef9546741868302b19a0be08878e062c1bad61e8eec19176b631ccc6484263507f2f10a43a5df2017f84a55c3a074a0a0140da6f06bf9da75f6866d8954b7dd1079ce6219eee1b0e788a1983e5f44888d3703895ecd19d3ef6ef42c42fee7e8f604878bf9eb49681f774bd32e9824d7e21d43edd66364769c196c78bb050663a426910fb007ef212459c7ac22a44275f4ab7383e7fe7466aff52dae9bd58303001f2f92b2f46ccc5d956ac534c3e1db37e8cb115ba938d909d69d92f25ac5052351040f04edd788867db46a10bcfb4649a5befcbbc6128efcd6cb08b9fcd251f174d89b0f7007519b6758fc7ad8b7147b879b71d4fd47431e273020a8234cd12727bc527124a8d652a52783ea63efc9cf5132a05ed553b3af2858b666dbd8f4e82aa27e44d521f3d7c30bf35f117e396205a26031689cd070f922030455a092599889d3f75f124b7ac32d8bb9b1f9b1e72e1a68adb2090c2cea9f4fe3183cc8b46806c09fb90592b565eecb4f95870c7ed165c2bf84a68ecf47fc784df11d5db1422e46dba9de2459238c8c989778c0f258dbd832475e01e357b9780300da5dcfe9daab4bb8e4c7a8e10d93a2dbbe25a93846ca57e09b68f2dce3d01e17893558d4c2498256863004d4f5f113ca0de78a0e47efad047ef9a81eedb7b1a4da25e8393dc104c378080cb4508872d2d691904e1811bf4cb3e54ea5365560312f063eaac405e76befbaae413e2fc88d9bccb16476c582081672052b5318b825eb5ba23301a958d89ea7f8cdaf5e0f0c271faa2267e9a61c153b2f3a3529f3b52b73bde40ddbb0156a69978c692a748c1d97108bdec8d57cd47060a96ad0e84f59a7aa3b965bef31b4baa738ca28c8c47afe838b8794adb8d071f5d132535075ca8fff6fdba8689ea4be861a9cc019c192be72bee91eb1d584541bdf9016e15075893ac1bbf5c714f8468a84eff7d848896794d2723978648bd4359d0e50918ac3b52931c33fb5a148bbdf3db0126942ee6b529bc198ace7cc234a714db1f61a2eb10e1c1df8f69c25a35270ca0f5cf31acfd05bbd25bf792928fe3a63ec5ef5d5d6b0c0e1ca052c19107bb86b6a18420c66ee09bc1fae1f44f9904bd331898d93be1db5747ab35a919defb99664d5b36b34016030bc706b669a7dc3d5695be25e199383bd7759ae6db1a28737af02aacaa7fa5956e1d8f8598991c7ac114dc15e44bfcdde50ed7e532615882d5433d81828f8dcdcf53143e464e2ffee3003a0b963292509cc6acfaca83401c49164cfae2c94a1d00d11056e14b8a81ea116b954eb57fc91e07ec420fe18486a49c7da015db8542a68a8d12025302ad3d31014103dd09b9311f27df7413924695de5199741878ef483c45c2f1803dcb6fd0387a09fae81e29d428a0c2647d6fde5496fdb2009e9f5503f549d09fa0be8ce103751eab8ab0708dda440d10a0cce05c81d1a7f0ff68a38aaa1940bec5f898982a277643bb1523e75354f49ce863de6fb97741ecc65a4217f32533abbdd714709b0d9546e3e22357fe874734ece4c483c3173ef67ab947dc40c94bc56d9dc98e031b10952be5e3d4dc8b207cacff7749fe88e0fa93592615804f0585269a1e57a1f33ba5cfa8635cdcfeadc31925efd3d2bbf6485910fb0e87f0adce26a2bb84790426c11a27c80227b6f06a121d3932d3351647736c4675c523581a7831953982182ac994eb019995d8bc85dfa529b988b1293c8583041cac2eeed126b77b9d3afa896b162375d22681ab532a09dcfbe9645125d979f9372c6df2705d7eddf36bff915e2c5dfbd64389b288dea03c016999fe6bc2be47f6d6978766f185c5f908bd244b1d2363fd9f35d73489c71f2cc700ecafffd49fe2642599aba1b3734002948823aea5d9abda5d5a6aa86edce3b2380aab02b64e1aea91073aeb1baab3d120824af48769aaadd1d0f75c244f5daed98a0120ede0d5c91c142539d01810233a6abc51db046bbeaa1e012e8ce7699e654351b8cb7f7a1346968a006fcb9e09b4452e74308695e5630ac631a192e6312383dc6678455797b0400ce4e3320558b7810315586b1e5b0794b09d5d84c2bb14a7a887544e15c7ec16ec74c2a563c51ee3cb9d2249a10766a23eed7fddc8881dc3d37826f4863917dd35d5141b38812829c0eef781e5893c5f7706f21b5b9371cb1690c2d878e855dcb5261be14d527d76f81503dd6fc64aab29ad876417927cd5ad3a556fb9b090b6050ff99757a6c10bd4be19a8b893268a071b70181a3dc4a526c303a9def5baecfb29255fd058d0d3955b7344286ef7b1a7f7cb782c85891171b3a81213b3ee8096efe4cc6985151d451644d5442acda8fc89083fc1877517310693f2f780f245dbd8330d727723bc2743dc136df15a8b736ed4f38eb538aacfe7bc1cc76f312878540b2fa60141b8bfc24a5d11d2b83cfd0c5c2d209e39a2145c4b6deb6d509cbb5abba526b5f6ba6750faa11b1465bf201254a6881fcb574cdc8820d1a1a534d8d1a90446ccbeeeedfb40392c4d2971ef431e46ee7d977fad2d356d5718e146d7a89c3bad63be3b5001926c7e4194dbbc5a5fd569fe8baa0c8b2910799eb51bd1e129149f121bd7fbd0a037863b6be3e00edce580bbf7f6e54eb750d5268596d775e9637409df12d174ced9fd58a843bbab6536b97a473ca643a37a1abff65ea33dbdc470e9b9c42ea527a5b1498b231a6dff11837a71c51d19b6373969c4795ab00c5842661fa8b5e6e04fdd44db5cee3aa526cfba71cebeed81f70dff0895669f1998c4af4783af574156baa9302874ac9368de8f9b52d99db310163df6dd76cd147c505b08e5f3ff60a72c857b51bb383225439c09487332c064b461aaffbf9fddf2a03c64f9cb8d631e1634bc6b768a748f356a509b45564097c0dc9d3656c275239fa5fe9a94f58853c85ead91e4253d6ef6b21b66c2a44fb8245a5881407f0fb39a78d247372ec4ca17e030f40951bee1acbce5ff5022d536609e1891c8f41a1576b8d5c8d5dcc09cea01860c9dd9913506f5c4e5a3a45d37b243355d79c78ca28936f14f51aa110340556b100c2a91d556edcf570e8414d156420f9023040546b85476467336c26eda5ff3cb84cad81686170b466bb980bf359821c686038a857f909e072a3231aa5605a0a08d2207461e5dc0c9374769651aa929d7086968fcfdf39cd0792e72f74ae3d6f3668f0ce603c57249fc97f258381ecb4739fe35b49c7748208c5f563e661eed2e5e94836cb7e8e724e187aa2a7d475d34cf71ba2a908713005d9fa3526a89098a32b2ffa5b1c94812f6e06373b118eb68ec9fda6424fd7c72c7cd555acc9a198893a51587c365c02f13cf5f967bbd1519d5a26605be6b9bc3eaa05bf1738a1007d4d73b08830e3872f61b4a17b5cb586db52a153ea8c53124e74600db89571ee1b7c99ce69104e0fdca7aba8aa1f5714d01254f20e762c5cb37aecb9b1cc225ef9f0fe98602b05b5b852a9797956ff6db416e3e5c205529dccb2a837e07eddbed71eb3a440fc6cd344acdac4c6a5c6453ee4af6783fd821ff7e5eed2aae95cc4435077afc676fb8b9ea2f65ac610f5d21a362d75f4c136e2820dcd7cfad037bb981df15056f0e46071e1e46643d6ea453bd782d481bff6c968c32de64d3ad6fc1d162ea88aa2bd9fcae00bfc98061568047573f5000cabf4c12579790092c7aa6912eb52df02e35efb5882209cc7789c91871a7b5c4386f9bac76dd65cb28288b944a319b701ef6e12a3b382cce10b076da59fadaae81a8cd788e6f1276536d4c92e2990bf0b43c03d9270e3535d1d86f60c77d376f734c281c9f44d27ad2e97aaeb016fbdddd6225ee0cd52c392563fed3b925504ee879313855c771a92b6c94b4d2a34541f54add81186235c14d4b45a4fe9dc37af1061eee6bd0eca1d56c608e70104d560f3f20838320436cae25ff483a5e3340eda63bf0ac9e300c54dad1fc7b895d665759d9e1b18c1d57ced9f1bd1c6494960d1560494fb8ac69ee1f2185b4ce4b95ecc893ede597e90e0d74782b4a5fd87c46fc431b10f80abd6754cd0f544d33157304abe404bfcfaed473a494d6d35195485ec23f0bc68828a995e86d9bee5f9ebb6d411346a15abd286cf80d4e64d212831f5480dd9da2a5d79af339d9ffbc93f694afbdec02102b51bc49dc6d46bdf96d36f3c12e81dacf4f6a7c04765f40ad3f926fe76c35b09f8feccf2d04c5d55779914cc649fe58b6493d48c61eb1a86e776b7f4c827d7d4cf18911ceca114c1a731a222381f3eb9cd02f030f41e53ec86beec09998f672e213127d95cd9107b02bca66cf4f2e3d15929dc50f31b060e3ac493b568844239003201c403ac7a9b280241504752f940b33bc4becf760645b5331603df59c22f8ce31fd6c7c2cfe23c7dc36e2db10368eca41b98fa636c7383500e67270cd591a0a98f83fd6a3894673ab3588cbc45cc32a8e0583b9dc426fdb4f6ce0856ff3f6ccfd53508ae3fa5f0b51e973f1ab75082cea3e5af7c71efdfc8fbd5530971e040c57e25a692a00774342a707457c1b4ca5f85d78918b36dc3f5cec8bf3384e42591872fdbc3c13790ccb4ed", 0x1000, 0x3}, {&(0x7f00000021c0)="b81096ea035e45e5abb880e76cc6976b00792b0e9503a1744e3fdab94e3c0aa4e1bf457d601f04686e35921b729cd653f9fca8c8954a21483fb5fde7b6155db9dc13dbcc97ed51241b863a47b57627981717e24820f496cdd71811e09ed5efc97e4eee380199f0d6db53d66baf0d14689514a8acaeb5551722fcc1ed23df8653eb", 0x81, 0xfffffffffffffffd}, {&(0x7f0000002280)="86fca132e8ce4b4b989e3ddd987b4ee60f19300a0c9bde4ec9573b93419d0a04d8ce714e92c2b9d1c4b21f85e624", 0x2e, 0x7}], 0x84000, 0x0) munmap(&(0x7f000053c000/0x2000)=nil, 0x2000) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) 2018/04/06 12:21:56 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10cbd36e, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0xff, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}}}, 0x88) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 2018/04/06 12:21:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000f0ffff000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 355.611927] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 355.671473] binder: BINDER_SET_CONTEXT_MGR already set [ 355.703755] binder: 25867:25871 ioctl 40046207 0 returned -16 2018/04/06 12:21:56 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x7e6, 0x400000ff) 2018/04/06 12:21:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000000100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:56 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) sendto$inet(r0, &(0x7f0000fa0fff), 0x0, 0x20020004, &(0x7f0000000080)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, &(0x7f00000000c0)=""/188, &(0x7f0000000000)=0xbc) syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x8, 0x0) 2018/04/06 12:21:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000002000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:56 executing program 7: socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x800, 0x0) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f00000000c0)={'syz_tun\x00', 0x600}) 2018/04/06 12:21:56 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00001b3000)) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000dc0000)={0xffffffff80000015}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000d40ff4)={0x7}) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000200)={r6, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}, [0xb4, 0x1, 0x40, 0x800, 0x3, 0xffffffffffffffde, 0x0, 0x1f, 0x1, 0x7, 0x3, 0x4, 0xecc, 0x0, 0x3f5d]}, &(0x7f0000000300)=0x100) r7 = dup2(r3, r2) getsockopt$bt_l2cap_L2CAP_LM(r7, 0x6, 0x3, &(0x7f0000000340), &(0x7f0000000080)=0x1) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000b1eff4)={0x1}) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x3f9, 0xfffffffffffffffc) 2018/04/06 12:21:56 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:56 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x300, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) [ 356.372007] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 356.381150] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:21:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000000c0)) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:56 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200fffffff0000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:56 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) perf_event_open(&(0x7f0000536000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0) recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x9) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r2) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getpeername$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000001c0)=0x14) connect$packet(r1, &(0x7f00000003c0)={0x11, 0xf7, r4, 0x1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x4, 0x2}, &(0x7f0000000140)=0x10) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000440)={'gretap0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) writev(r2, &(0x7f0000000b80)=[{&(0x7f0000000580)="449cbf7e044632c42b2186cff75ef3679914503b3c8d9383463ad45aec25316b89231253d1c8750bc7a91f997dc2c0e96ece15bdca140fb888b4d039ea2922f5e2af1d734510a0c0d5d8d95d0c059a7e7d91a53506b7f2ecff1e39efbc822c38435a1824ced8edc063eed6d9f2957463a62d5dc4a800595b29f653b98154c928063cf92c234e6b427b40cdc1729900063853ee0b57aa146b66bd2f45cde1231d46c21bbfbc4f3b75ab57987aeff6ce1f7042d2bfe5a0dd", 0xb7}, {&(0x7f0000000ac0)="89656f85f28e3595b593fa3850406087d851fc1b547d3dfdc01987e6bf2779ad9ade5d55117f0c4c58aaafc4acc74a50f402507ca2b10b900656ecbcd23133f318e782e5057af50acfbcbecc73f95aa8c5740bee91d3261c410507ca919ce7eca8c78bad1c712d84b664b1c842f6cf070aae2645d4658fa351a56d315d86837cacfd0e4fa6b4c236bd3ceb59b5548d7aa11180b1d11d0a8e8ef3d5b6c890168179c0f5940fe623f6ea9ed8a73145132962fd7148ca8ba5e23476ba0247cefe", 0xbf}], 0x2) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240)='/dev/loop-control\x00', 0x100, 0x0) sendfile(r2, r2, &(0x7f0000000080), 0x102000004) sync() dup2(r3, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) write(0xffffffffffffffff, &(0x7f0000ffdffb), 0x0) prctl$intptr(0x2b, 0x0) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000480)) r5 = request_key(&(0x7f0000000400)='cifs.spnego\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000680)='/dev/loop-control\x00', 0xfffffffffffffffd) keyctl$get_keyring_id(0x0, r5, 0x3) ioctl$int_in(r0, 0x5452, &(0x7f0000d6dff8)=0x4) 2018/04/06 12:21:56 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400900, 0x400000ff) 2018/04/06 12:21:56 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:56 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(authencesn(sha512_mb,ctr(twofish-asm)))\x00'}, 0x58) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x1) [ 356.434713] binder: 25893:25906 ioctl 40046207 0 returned -16 [ 356.521911] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020070060000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000000c0), &(0x7f0000000100)=0xfffffffffffffef0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) signalfd4(r0, &(0x7f0000000040)={0x80000000}, 0x8, 0x928a2468e0d09b01) 2018/04/06 12:21:57 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x5, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:57 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xa34, 0x400000ff) 2018/04/06 12:21:57 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:57 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:57 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000002980)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000002940)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r0, &(0x7f00000001c0)=@accept={0x8, 0x120, 0xfa00, {0x0, {0x0, 0x0, "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"}, r1}}, 0xfd40) 2018/04/06 12:21:57 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000001c0)=0x0) r1 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x8, 0x10001, 0x0, 0x7, 0x0, 0x8, 0x100, 0x4, 0x9, 0x6, 0x76d, 0x0, 0x8, 0x0, 0x2, 0x5, 0x7fff, 0xe777, 0x1, 0xa6, 0x9, 0x5, 0x1000, 0x5, 0x100000000, 0x5, 0x2, 0x1ff, 0x5, 0x508, 0x100000001, 0x80, 0x3, 0xce, 0x7fff, 0x8, 0x0, 0x1, 0x1, @perf_bp={&(0x7f0000000100), 0xf}, 0x20, 0x4, 0x5, 0x2, 0x76bb559e, 0x12, 0x100000001}, r0, 0x2, r1, 0x9) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x4) ioctl$DRM_IOCTL_GET_MAGIC(r2, 0x80046402, &(0x7f00000000c0)=0x2) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000002040)=""/4096, &(0x7f0000000000)=0xffffffffffffff22) ustat(0x0, &(0x7f0000000080)) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000200)=0xffffffffffff7fff) [ 357.362978] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 357.364840] binder: 25953:25959 unknown command 0 2018/04/06 12:21:57 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0xa7e2}, 0x10) [ 357.411419] binder: 25953:25959 ioctl c0306201 200001c0 returned -22 2018/04/06 12:21:57 executing program 5: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='em0@mime_typevmnet0eth1:procem0\x00', 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f0000000040)={{0x0, 0x8, 0x1, 0x0, 0x8000, 0x1f}, 0x3, 0x8000, 0x4}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000013000)) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x8, &(0x7f00000024c0)=[{&(0x7f0000000100)="a2308a5396c272e3d4e19f2953736f6f95873b2cc55743a3bb3d4b261e3f19300aba89cdbac3f7561b8f7d6a582edc84757348b432218881c7853b0d76cbd6275609ebdbaea8f944138fcc5d0d9e338eed38f655774b92df2631d5bef3b0670dfb021755d76fab8c0db1eb8af35010d2057fc08c6ab214700f7a9bb0c2d1c2c613e08e33fc8bfad832583126a28e26a222ebafcc785c27af24a78e78606d6c5cece58e9717927e8e5476d5db45461672b6bbe63bf74b4479e54a62de25308902c26a717693f151a3aa9a1f4037865efdb188", 0xd2, 0x5}, {&(0x7f0000000200)="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", 0x1000, 0x80000000}, {&(0x7f0000001200)="fdc61aa82b3c74f7ed0ac18a02523685a4ae14ea3d19790f5403388bc484d33aead1680279fdeb6ead4c5c0e9f7127b5b25ac79317792117ef571b3b764cc76b34895dce4cf115fd7124b0c8ce686a1b01f73898857a49e5070a56ce046d24b13f0d937bf5e191ff254190aeff005269fa4a36568d9638", 0x77, 0x33}, {&(0x7f0000001280)="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", 0x1000, 0x7fffffff}, {&(0x7f0000002280)="8634018871f843214c0eec977722025873e5571750abcd8b83f8c3b23588ac4a6b0f1bf06d20bc2604cdd4859832bf0d75e76e210fe70737837daea173296bfb652c178e3b91fbfda8b6835bc5dde85b135abd2d46effc46d9b57bb634e35ab6639f379d11ddd466ba4ac31b9e0210224eebba309ba8b99e7f50b7150350568b7deecc0a1ce450f78974bf9d380e997549819b823856dc49bc561ce43308b20558c424ac98ed61095879ad2cc3f0be4d4720bbb38d8653f06bbcba94299c78952fdc42514f7de7c7c80eb58b8b0468111e876d4affbf3d83abe82823386411", 0xdf, 0x4}, {&(0x7f0000002380)="516b9f1547043a98ddb510087351fcedd8183819002d52d36ba765a8088d83693a8c8608b903984dc8e5f26a0297fcb618fb67a204d069c7d506e9b42d78cb07fd2e209b8abc94ab202475709c744ee2d43e213a0e99d0c5381e8a19766838d8e8de86614871c1578e50adef8c53f8590d4d4aed73885681201ef19afef5d8e92f", 0x81, 0x1f}, {&(0x7f0000002440)="4265ca6c0d97090f0312b7a3dc02", 0xe, 0x5}, {&(0x7f0000002480)="ccfc4f056c4183fb26f98b073963d32d6332b1", 0x13, 0x4}], 0x50403, &(0x7f0000002580)={'nouuid,', {[{@noalign='noalign', 0x2c}, {@quota='quota', 0x2c}, {@logbsize={'logbsize', 0x3d, [0x7f, 0x67, 0x77, 0x31, 0x3d, 0x31, 0x7d]}, 0x2c}, {@gquota='gquota', 0x2c}]}}) 2018/04/06 12:21:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020002000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:57 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00 \x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:57 executing program 0: r0 = socket$inet6(0xa, 0x4000001, 0x8010000000000084) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000001000), 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f0000b31000)="f9", 0x1, 0x0, &(0x7f00009e1000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}, 0x0, 0x0, 0x7af0, 0x0, 0x10}, 0x98) 2018/04/06 12:21:57 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x111e, 0x400000ff) [ 357.453497] binder: BINDER_SET_CONTEXT_MGR already set [ 357.472994] binder: 25953:25977 ioctl 40046207 0 returned -16 2018/04/06 12:21:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200fffff000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:57 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x40280, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xe1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000140)={0x0, 0x1000, 0x10001, 0x3f, 0x5}) 2018/04/06 12:21:57 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)=""/172, 0xac) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 357.570931] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:21:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x4000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:58 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000aa000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000f3e08)={0x2, 0x15, 0x0, 0x0, 0x2000000000000151, 0x0, 0x100000000, 0x25dfdbfc, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}]}, 0x1c}, 0x1}, 0x0) [ 357.739642] binder: BINDER_SET_CONTEXT_MGR already set [ 357.759623] binder: 26013:26019 ioctl 40046207 0 returned -16 2018/04/06 12:21:58 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200f0000000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:58 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000140)=r2) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000001c0)={'syzkaller0\x00', &(0x7f0000000200)=@ethtool_rxnfc={0x29, 0xd, 0x3ff, {0x1b, @ah_ip6_spec={@empty, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x15}}, 0x38000000000, 0xffffffff}, {"dc4e", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x0, 0x6, [0x4, 0x82c0]}, @hdata="bd668b70d8c5d81f11e6684c1f40b1da8c11db5f330e58da72fd40babc80550379b91c6e800ae06cc2ac21cfdf85fa91349c53aa", {"08f4", @empty, 0xfffffffffffffffd, 0x10e3, [0x9, 0xfffffffffffffff8]}, 0x80000000, 0x3}, 0x3, [0x6, 0xffffffff80000000, 0x4]}}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r3, 0x40045542, &(0x7f00000000c0)=0x3a32) 2018/04/06 12:21:58 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xc82, 0x400000ff) 2018/04/06 12:21:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x7000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup3(r3, r2, 0x0) readahead(r2, 0x3, 0x9) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x400000b7}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/04/06 12:21:58 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:58 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0x9204, 0xf0b1) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) 2018/04/06 12:21:58 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200f0ffffff000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:58 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 358.353511] binder: BINDER_SET_CONTEXT_MGR already set [ 358.359942] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 358.392282] binder: 26031:26042 ioctl 40046207 0 returned -16 2018/04/06 12:21:58 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x29, &(0x7f000001b000)={@multicast1=0xe0000001, @empty, @dev={0xac, 0x14}}, 0xc) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x600440, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x100, 0x8) 2018/04/06 12:21:58 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x68000000, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:58 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x20020000, 0x400000ff) 2018/04/06 12:21:58 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:21:58 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) accept4$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000180)=0x14, 0x80004) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f00000001c0)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x6f, r1}) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 358.547575] binder: BINDER_SET_CONTEXT_MGR already set [ 358.574866] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 358.599250] binder: 26061:26068 ioctl 40046207 0 returned -16 2018/04/06 12:21:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200ffffff9e000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:21:59 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000380)={"66696c74657200000a00000000000000000000001e00"}, &(0x7f0000000040)=0x319) readahead(r0, 0x8, 0x10001) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x401, 0x8200) mq_getsetattr(r1, &(0x7f00000000c0)={0x2, 0x1, 0x8, 0x20, 0x1, 0x400, 0x6, 0x80}, &(0x7f0000000100)) 2018/04/06 12:21:59 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(seqiv(rfc4106(gcm(serpent-generic))))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab2719", 0x4) sendmmsg(r1, &(0x7f0000003900)=[{{&(0x7f00000036c0)=@nl=@unspec, 0x80, &(0x7f00000038c0)=[{&(0x7f0000003840)="6ef28cbae3151da27ad4d2374d8712d2830e1f79bf956f1505756af18f2e6e70", 0x20}], 0x1, &(0x7f0000007340)}}], 0x1, 0x0) write$binfmt_elf32(r1, &(0x7f00000004c0)={{0x7f, 0x45, 0x4c, 0x46, 0xfffffffffffffff8, 0x5, 0xff, 0x6, 0x4098, 0x3, 0x6, 0x7f, 0x364, 0x38, 0x22e, 0x6, 0x7, 0x20, 0x2, 0x2, 0x9, 0x5}, [{0x7, 0xfd3, 0xfffffffffffffffd, 0x0, 0x8, 0x100, 0x2, 0xfff}, {0x5, 0x80000001, 0x8, 0x4, 0x62f4, 0x1ff, 0x0, 0x8000}], "6ce42957bec39b71a2a8cb70c02299506ee2c914d99e2413b332770abd405f03698687b7965af574f96288fdb666e371b006e4598f6b359db4aec2ee6f9895d3148d21c46e2dfd", [[], [], [], [], [], [], [], []]}, 0x8bf) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000240)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4}}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000001700)=""/4096, 0x1000}], 0x1, &(0x7f0000000340)=""/80, 0x50}, 0x0) 2018/04/06 12:21:59 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400700, 0x400000ff) 2018/04/06 12:21:59 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7, 0x80000) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000240), &(0x7f0000000040)=0x67) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x4, 0x7, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000001380)='/dev/rtc\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f00000013c0)={0x0, 0x1000, "e55a5f1502b9a492b60a3f8c5ee135a7a8f72e74d1b6855d56c58f750a4f20f80d80e7a0d4aa74b0275882538441f17f245dcea40daff53ebbb61f2f74d57bec3be872e76c452c11f5453b42ca7aece31dd78dcc3a2f1309a0c46e7ed4d37edf8bc1a2446f971d59766f890cc988ff76ee5b68b13f94ec7b9cb73865908424d7febd58682bb2ac2853525cf7197969799fbb442edb56316ae5be23fb3baea90ce2a9918da2a730e39e13dcde438771887a47cd38ad0c35e58ae4fe287c7230c33bb80d3ac8b44d4c6b57e309c9660994a58a9b6bafdeba24d67e1dcfa5574cb3361e6f62d733650b0af7496fc97887674fa11004c9ca33388c03633b9b6966cf8082c65d2ff886bad6059323bd1d11984754dbaaa790c752474b27d34a0282e735885f16faff15b273cad614b1f419f1e9e5c8ba977b4cfa8424232207f0ebba787282f32791265bb5a8bba3c85ddf76184292511a02bc7c95024f19feb806769287c8d78eeb6409b991d42c6a318d54f3bb7144c43d0d23c632e9756c4e159a2636f2f101fb6f3d6c2a11d24acc2a564e304c373c46397dddd482a42751039ebb3eb0a25c6b7cf5cd6910e7b84848530c6175354c03097aa280c32cae2189a9caedcc3543175bcb2dce46631bbee28cf915032eb2751e383734b24f2aad83cf1b869bd70c1dc76814dcbbadd56f6021998123bcd090d4b2ae95004e5c7fba089c11d0eab6d5aea745150904d723ce81cd08bf99d66215ae92f9162b791fe8b136634c136614c60686ee6682705ef359761398809e42e38c8696712b5cf6a98d066728c45a7cea0b5e6344c72779c320f249857f38bcfb050d4cd57001ee58c5d07758940abf947387d48faefa3460ae6ec1fc998d1449bace4807de7c8a299ad5db5b45ee38ed357b48866db75ecd3af8f4daffa1f6392af38c5986a7c5b9663fc018b97d69582fc319164d1f14342076480aead26f751dba3ce8e4bb3628d414afa5e4cd6a5c80ea2c8d8db5ad987704339f0cca3092f8826634d7e73f96e149517d2fe15f9d718a932cccc99427238b5fb5772d3e87ad2738d8f65b7e7b43ca2a0fc664017473c58b7443d5cd08354f6a497df6ebbb398b433e857707e7093ada43884e23af81057603df9282b38e3bd2cefcf220389c85a3be0cdabc112a77e57570b4044ded84cf053aa4e35df92f166cf28f8db4770fc19fdf318d4943a3b9a7b577be77d10ba16f938d1286a01aac220025d111dbbeafa7d9b07d1c9537cdd8f699a3c6bc85a55db8d2957c13809d96f3c13b3371599f6b8d5ea21845ac7ae80290c751efd3ae2f22e3873bd1a9d21232bb39e6ed3212321406258ac7a83e2099d636782faf8f695215488b1b8f85f46921db8d22b2d4a2f9dcca48beaef725a007396dff2293387ea31296e4119689ba751add7b450d38531dcc32e2613b0211e3aa345516371f903ea4d188a43f605bc96e7b16f389b722655f77d2221ba08d9552b7e907d2a759435994e01f3d08f5fd6c5ce6b6b8c52d8d1552ce15d7a9db1ab9894d794051937b3addabab9ba2460089b7fc83841d61b95febfa0aff0122c73d35fa8d18c67702ff0f164c63527e178d6d09cb21cde9b276c3bd0366c08915ebd898ca25311837a3d692a9cf4e77397c304c52f6d1b9ae7c23827aa862f06fab4691d59d66920721c20a8f32f920be8ccc5f3ca91f30103c4d0c4901671cf250ad6dc2c1c12d4966d3f989a4d8adae1ff04778b66de5dd3fe360f7ebcbe2a20f10096b39425a57aa0440b389f7c6964164618b7c1ae0435c79d5a52a500623ce4aa0945c5a576852eda82b6c26d48158c8ef91fe1cdac76678e63849242ec626ee664380166ccffdd77c06c2276abd284a394f3ba98e99d93bde329d6cea549bdee67ae2858ec1b438dd2eca4ed71aa266b0855136ac11f77da7d6ba61064774fc7c87f7c7f32fc1943b64547df80e8377c13ecb9d3d7eea0949f18feba0a2c70e727fce015f6b6604ff8fd262b2a94d885d3c88310cd449cd4e771e40037b8769b41c5831769d0b755298e79af17e24235553747c9820506466c337e771df355ed700ac3cad4297dc67b96c028cee032c6b1d6a9a71aa65fc0ac6619b725074dc76ecd56e407a595263fe8ddf8c1ed6806aa8d6c7a0fc6ff0b1ba9c8b888de7303710bb9efe677f2e22a8b75d0c4009bc7cb3c770607df31a95e74b06fc0bf987777efa5132235282086c2cb346095449a13ae67af33717bc85732b622fa32a276ccd88b94da12fbe4d74bb57e205321624f3b336a25bf4969a1931db31824ff77de8a4e27550e38022e736162b75c38bf0063f192c52a694b75704e1124ac56c7e93e525e19713ca2887fa84e90dfeaec42a44fc8e75bd341ad639ae7c6c339a029e8d1bad46b2f479e91a65418c3283ec3839b9ebd589057f519909622eb41eb16e19eb7f972f67b1c916b5fffe4c3f2af9cd95ef230655e0cd79f51778c79cf6914e83d21581f8a5da15d8d4ee80c12f6cbd8f1cbc9ddbcd0b607e4e38646756070f69cec2bf7a7fe4b3bc49145a466de02febaf3ab48c78240fd44f5ced777f3d75f4bac650eca33ac0f9b41cfb41002dece02e7206b37af3370f56551a5db4da7c40d19d3b586f0e6bf2f870078bb3e8e768fdaa1a056477c5c17bb04fd2aa804e0b9ef5499dc2073f065c8a4a3e897b057fa9dbc9cab86c0b65dc516329cf711cace92a29229b797e6e9e3a94ffbcba3d73bebbd2f1fdc5f3e4d984ebe429a7b0d3be42ad9b63e42511c91fd2e32053d43a2da5c45aca334a20acb689af0be4002de9ad6ac46ad4ce9118e6a5755c7c0c566a69a1795840b4b757c70dbfbef9fa2c01552805e5b3302c9e640125d87fc25a571ce3cf6fc41b18545b5835dd879e342c2832ef74b4a651fc735bbabbcb84a7891e27253eb7cc259c7f733247191cdc2e46171b45e4269cc353895894ead8e69f1fc25bb305d5324929f8722dd59c2c5b87c56ab107d2c42d2cd684068ba11d3d418ded120c99f380e0a13e9c6e87e5cf7cd93cad1cd5d102846dcb8672f1af889110df850e0d3c115612c2bc83cd37a2fc5ed136e51f526e319a0563b5ec0fe301e6af96c7dbae12c96200cc44738b15ed7a1f66b81dd6e90b9b10d8dcdd522eb2d948b494c05793181650ccc436498a1125e641014a7696704279b54bfe2d7f8f41211c6fb5e1dbdd52240941a1eeed7e34c90052c59ec55675d2ea03f588a1bf8a42dc1e61ad98d2ff03c3659b70a109115cb88a295ca487df456e17418909b62eb2410dbe0980b1910c29d4b6033fb885d8ee546ccc24e8be9d2b14af0b00359cf8e9bfd93d148aef80eae36dabfc20186736c8deaa21caea28dfeb64b8e9f9639275128521fc92942c8b16f470dffdbb0dd1c6c9e308da270e1fcb5a362084085160bdf0242eeffcec09fb66ab75d97eb3194507c2580d9712efa964fba9a9afd8c56ef475a7898f4fe0e0f6bead1f5956bd01b9d41e195515e9b4ac70362ff3de972b79988738de459026e87c4878509b4ff49a1ce2de569fccd143df2554dbde524d6727c7f99911ebd2f7e757a9b2dd9b9bde541c70dc0fde47b560a9bf6f318ff4369f22b13b9f799ad6b4cb4f5aed2601302acc6bb51f57979fc9156564dc9003abd6122e36eb296e442a36737a9986109fd6ef2626ee89352a216ce132de18a30cc49331a77d962641b061283b81ab19eb78a215afc7ffac3ec4c7dfef882c51e1320679ffc8af7d1f91e11be9d7471c648294584c4ff70fbd7d8e0622fac49eeb65637b0d6e273ca8887d379f4d358659b378b74890d6e1e205cb383431b9ef7750eb517fc5e88bd5bf836e1361e0983221a17d0d95da82fd33ff3a0c6c6257f53ab4bf58f183709a7ced0f6ba1fa6cfc7c1df40465b881d5710d5857d5a95d30ac73f4a013239908e6dc842511c3729fd65862fffdc7d7e2dbe93d5848a47749f01e7e71a95352d2ca4e23dfd5e9acca1fabbdc1137c57ec0567a4980f81e659c343e2bb81e48de12ada3b4ca6ddda79414655a8ec37279cc4b9789597083cf17bb4424b30302b23189fa1aa3230de41d11b090492808cafe36feb6b179f0dc7834aa219722d9b1ddfced83ca81255ad86bae6bf6ddff106294710cd2ae50625e43326657623ae13fd3614de114f316a0f4e22183983d648a9be1930890c0ec46d3e67383274438dde25e3a06afa979a991bd67a5eb14c44bfb8e601897365b92fb336aa99abcff2dd30bb47de322b3bfd15dbcd77bddda6ba00f560cc5eeb912b6b19e00d611e2d4b4a8b0c701ab11f89b90b0790bd8794b2908b5cea7fb7e7475fe7b2dfddbe958ffa4394164a5e4b670a73945a5dffc308fa41027601634551588903513a64d3357db740e7041c033ba29a828753286d077eb61a9ff34502413bdf6793be2e0ff36d6b553032e7900eeb91512978e68bcdd80fd33a26677d648256a87d2c57407a32cad89119cf3893efffc1700acd64334533b4ccabbd2bc0b4f0d2e9dc241b3d9cc2a9533a84dd150b5a14efab4ed080de68f3f7b55bf6fe41f6a0ae5fc487a9d1f99adba2f8866683ed2f38dfb20854be156bccbbdbcaa0131a9f29dcd0de26daa1be49a6d7e84e880085a1a9694c81e353b50c7d1e909f79224af5b3656624f2a0439553b89e09e2b4aab7ef4324f9847fbdc56092010bdb39d0ef1c92461821a4ed3c82b2d989c46c7d8c62dbf295c907aff66d3f98ff27636517cbf87cb01866e2fce3fedf62465cefbbd310d5e18dd58cea4535c9772f42aea5215c0f498ba4c8de11931b5aa33add2f6ba00af931c5b4faa77bd8af8c5c3aa47c4ab0d9f0b8e5bce7f1862821436a24d5195da71fcada5a7872937b76aa81a6feecf73f6e91d992a725fe71155cdc091178e8d5b53259b28f2c009257568b451bcf667021899b23d6f62c11084588213a0fa8f7943d103ae8697cd1089c605dd3fc92d72dfabd7d2169618486d2887f1be2f92536a8cba450ccbc1c75ed76a84fbc678396c265043de72ddec1915bcdccfb0f243d222950a41726dd711be61ffb7c2249dc24e9b75dfa2b1de25697823b6052feff222d60a23ce18cbf6e06295b54b8225011e5e121a93daddbf4da22f572b27da6783241e774294b7c276a50da005b206c9a45a69b65bf828236d36b2db60e9fd5e88f4895f9da7a42551abaed0130043cc5dcfe58f3e2e22321b798a43f53ab1bf22fe6202c42dfb22595a589a84edb5e5fb2de777cad3515f832d4ce6cf476f68930ccd7a96639517def9b38206c55410b628b9a203aeb23a980032ba69c3f7ff4c4c18a535aaf68b0c3b4787b8adac16dce290a20fd6bd1ca0d6b2a382fd70ae1c6693b4d2a157558bb65a3372096e7dffb06292de1c87689dd22f7203c46ec89ba1a6034e66fd46140bb9254a5e11dd7fecc482b7daacaa153c5d104d1e05f48f0a593279a3e388180745219872ca0be6cd4388b8a698c4510af92a8d69c76061e62ffb248b6d025ea8e885c96a51ee90e86fa867d0cff27de5994fef9df9f2a5fa5399d709bbc5325effd74ce2f43c22511fa6e839fe7c0e27c96df96fa0bebbc493ef1f30a458839829021f06c11feef12e4008f893ba2e168b55e89dcb0ea49f71340f3dd78c39e5330ddb6801bbe674260f2040a742eac5b3c421a9e1bf6050a0772cfc7485e4dfc4edc808df765b1abb3117c7cf3d2d598cdd622a9a59bc7479b9d9c731652700c5822779e69e4746d8e39bf3f715262ccde8b0cd5c841928b33"}, &(0x7f0000001280)=0x1008) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000012c0)={r4, 0x39, "1e02cef8f15e905dd088ac90108c46eeb45c827bca3a4b391e2e11e636c4fc86472bfe26c263dcfedb1cc6120ff5ac2111c0019b564c3fbdd4"}, &(0x7f0000001340)=0x41) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) perf_event_open$cgroup(&(0x7f00000000c0)={0x1, 0x70, 0x101, 0x9, 0x3, 0x7, 0x0, 0x6, 0x11000, 0x9, 0xfffffffffffffffc, 0xe9df, 0x20, 0x81, 0x1c0, 0xffffffffffffffe1, 0x10000, 0x7fff, 0x1, 0x5, 0x8, 0x10001, 0xffffffffffffface, 0x9, 0x6d, 0x5, 0x3, 0x3, 0x8, 0x10000, 0xfffffffffffffffc, 0xcd28, 0xffffffff, 0x3, 0x1ff, 0x7, 0xffffffff88ada0da, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x6, 0x20}, 0x10, 0x3, 0xf1, 0x5, 0x8, 0x100000000, 0x5000}, r3, 0xc, r1, 0x9) ioperm(0xf8, 0x5be800, 0x7f) getsockopt$netlink(r2, 0x10e, 0x2, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:21:59 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:59 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x0, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:21:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x6800, &(0x7f0000000140)=[@increfs_done={0x40106308}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902007fffffff000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 359.350111] binder: BINDER_SET_CONTEXT_MGR already set [ 359.357216] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 359.376989] binder: 26086:26097 ioctl 40046207 0 returned -16 2018/04/06 12:21:59 executing program 0: r0 = syz_open_dev$amidi(&(0x7f00000015c0)='/dev/amidi#\x00', 0x2a, 0xc00) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000040)=""/203) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)=r0) syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x81, 0x800) 2018/04/06 12:21:59 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x400000, 0x20) bind$ipx(r0, &(0x7f00000000c0)={0x4, 0x101, 0x8, "fd3b3a6d4760", 0x598}, 0x10) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) clock_gettime(0x4, &(0x7f0000000280)={0x0, 0x0}) sendmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="7310bd61ed9aed4ae14ee12bcd2cac6e15e3e29f05fa9f8d9d1052944a37e46b3cae9f7811fbf654150ca7ec571b073330cd505497295ff13be7e0a1850160390a217acc26a4d276e3279dd0728be982bd1e8a3425e580a84019f518f66a90319d656c89e7850b2f799eabc61482dd1bcb2e907aab18dea798a71ff52f75e53aa3f2d571c8287bd67c138bbf455c53d94588881e9c7be7a7eb79ee2a54cc8f3b326ff4e9af348b8be9bc7ff2ca3a5d041a4b348eff87b963f11e20d69cca82cd6d7fca393a2c40d86fc04e8ebb016cbeda5407420b7f79f36652412041334ff1f49b7b228387132c0e98996f3830d2677e2cd183f1", 0xf5}, {&(0x7f00000003c0)="caf8636b534f8d7fb7264c750b9c581c2eccb42c8fdc113e1bffe73f69bd2add07e9fc44e636d49e7b365e41309b53d61f1a94750340fd4960e82f817411ded219febba86e34f3b9a3a74620c061ef4bd790a4cb540f143b1f797c74dc990430df4cab682f5ca6b5a9bbdb20592d1643110510a1a2a806f7d61f52c2ef04b2c0566997ccbcac4a47d9a1125a8ea16e7cbaa673c3e5073e6a915cb4b3d60c1f75bb94517fee7be551fad99d8b767f087513134954f8869efa20457b9be7", 0xbd}, {&(0x7f0000000180)="cc0b5fb104b9a5685bc0f341317b69d63f013af5a702933c2e3d215ed4a09b8a7cb3a6c23172560add6701e842f081dcce7bdb72430efe34b0ee", 0x3a}, {&(0x7f0000000480)="bb275178cbb1c2f2dcd946bf3e1e742fd2c43e5b3e3cc16f5afc38ac5f432e3a98a3d7a79899ba355e338c174bac635f7628021a96245e4df43a4534bef36e1f5e3722d8f55dbb9abbc1d518f339908ab8f9d252fb8599071321adf73d8d55138f47ffd93ce445b83e7ca02709af3036de6277874f112e2dd7355c0814ca8c9e7b2653cca3e02158a5ebda8d723485becad4eafb07d563108424d8b47e77a7f167f1b70060b7a1861549e7687775b3d781d97adf9558e23122f27965670f1863d2b05bffb0b62d09624b6316d09786b104826dac6945aa0a77183c838426ef84bbdd93477dd8a859ebd6787877d22ff6d09cc9", 0xf3}], 0x4, 0x0, 0x0, 0x800}, 0x40080d0) rt_sigtimedwait(&(0x7f0000000100)={0x1}, &(0x7f0000000140), &(0x7f00000001c0)={r2, r3+30000000}, 0x8) 2018/04/06 12:21:59 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x407a00, 0x400000ff) 2018/04/06 12:21:59 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40486312}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:21:59 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:21:59 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000001000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 359.550678] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 359.572924] binder: 26126:26128 got reply transaction with no transaction stack [ 359.580592] binder: 26126:26128 transaction failed 29201/-71, size 0-0 line 2763 [ 359.625904] binder: BINDER_SET_CONTEXT_MGR already set [ 359.645942] binder: 26126:26140 ioctl 40046207 0 returned -16 [ 359.693945] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/06 12:22:00 executing program 0: r0 = socket(0x200000000010, 0x2, 0x0) getpeername$inet6(r0, &(0x7f0000000180), &(0x7f0000000040)=0xfffffffffffffdf6) socket$inet6_sctp(0xa, 0x5, 0x84) write(r0, &(0x7f0000000140)="2400000024007fff000010000100010001faff000000000000ffffbdffffffff0100ff10", 0x24) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x10080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000100)={r2, 0x1}) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000000080)=0xa77a) 2018/04/06 12:22:00 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x9be, 0x400000ff) 2018/04/06 12:22:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000020800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000670000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:00 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x630d}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:00 executing program 5: io_setup(0x4cc3, &(0x7f00000000c0)=0x0) ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000180)={0xc35d, 0x0, 0x1, 0xffffffffffffffff}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x200, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000006c0)={0x0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @multicast1=0xe0000001}, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x8, 0x1, 0x4, 0x1, 0x3, &(0x7f0000000300)='gretap0\x00', 0x8, 0x3ff, 0x6}) r3 = socket$vsock_dgram(0x28, 0x2, 0x0) connect(r3, &(0x7f0000000280)=@ax25={0x3, {"549255712ce5c7"}, 0x3}, 0x80) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000680)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000340)=0x7) dup(0xffffffffffffffff) accept4$ipx(0xffffffffffffffff, 0x0, &(0x7f0000000780), 0x800) syz_open_dev$sndmidi(&(0x7f00000005c0)='/dev/snd/midiC#D#\x00', 0x4f3, 0x400) io_submit(r0, 0x1, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x5, r1, &(0x7f00000001c0)="a83f05cf4e45", 0x6, 0x8, 0x0, 0x0, r2}]) sendmsg$nl_netfilter(r4, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000400)={0x110, 0x5, 0x5, 0xf00, 0x70bd2d, 0x25dfdbfc, {0xf, 0x0, 0x6}, [@generic="04d09e2943d2d5806c2ec050bd1d42b2d75690db189ff0fb61c84aea34404ff6e67016785cefad52c0d9f691c20cc4c2dc9f3730f3f42873a4f22be3e315ac11f7551be44d1dbb47d70594a3ade9f0683510b7793fb9c2aa75b2108a9e184fff81abd7f07eb9134f7106745d1778657a6d1fa7b69d63eb81cfb857bbf1750572471b0c450c1fa9d2c2f89d8ed0b22dafdda73b8a41f591434755f8e6b4f582edc21bafc0fa85ab845466dd1ef4de33caf39b85ce66aeef7f7d7fda44fb7fafdb78fae8523d254423975d5a8a4ed0ffd1805721ad60e56183b069de5766324e23e1d245c588156254d7685c74", @nested={0x10, 0x20, [@typed={0xc, 0x32, @str='em0*\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0xa5ee524d17c5ccf6}, 0x4000) r5 = socket$inet6(0xa, 0x2000000802, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r5, &(0x7f0000000380)={&(0x7f0000000100)=@in6={0xa, 0x4e24, 0x0, @dev={0xfe, 0x80}}, 0x80, &(0x7f0000000180), 0x0, &(0x7f00000001c0)}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740)='/proc/self/net/pfkey\x00', 0x82000, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x80) ioctl$sock_ipx_SIOCIPXCFGDATA(r6, 0x89e2, &(0x7f0000000080)) 2018/04/06 12:22:00 executing program 7: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f00000000c0)) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:22:00 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(0xffffffffffffffff, r0) [ 360.369143] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 360.386252] binder: 26164:26166 unknown command 0 2018/04/06 12:22:00 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000f00000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:00 executing program 0: r0 = perf_event_open(&(0x7f0000271000)={0x2, 0x70, 0x49, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_TSS_ADDR(r2, 0xae47, 0xd000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f00000016c0)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x8, 0x400) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000380)="a456ebe7f5940a859373fe334e692222f9b922a0d90f6223f60f0b1a1079aa1278d121efe4fb1bdd4c3bc0ec1c49738a4e820f55bccfaf88fa2cfaa8082b42aa1b36c6752fe628d8f72f1eb82586ae3d3401f2b6f174b3") r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x480000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r4, 0xc0045520, &(0x7f0000000200)=0x7) ioctl$KDDELIO(r0, 0x4b35, 0x1ff) r5 = eventfd2(0x100000000, 0x80801) clock_settime(0x7, &(0x7f0000001740)={0x77359400}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000100)={r0, 0x9, 0x1, r5}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) getsockopt(r4, 0x5, 0x2, &(0x7f0000000580)=""/136, &(0x7f0000000140)=0x88) r6 = memfd_create(&(0x7f0000000500)='eth0:\x00', 0x0) setsockopt$inet_int(r6, 0x0, 0x8cf0587cd60eeb31, &(0x7f0000000540)=0x800, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/cuse\x00', 0x2, 0x0) r7 = open(&(0x7f0000000180)="e91f7189591e9233614b00", 0x200, 0x100) ioctl$sock_ipx_SIOCAIPXITFCRT(r7, 0x89e0, &(0x7f00000001c0)=0xffffffff) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000240)={0x0, 0x8000, 0x0, 0xfff}, &(0x7f0000000280)=0x10) close(r2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000001680)=0x1a, 0x4) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001640)={r7, &(0x7f0000000400)="e58c9c3c2d5c2807d75bcf74b77334f31cffaac87291a0ea0dec38b26bb369db620b873772326df48f4f66ca226a09c66c875599c5bbd6682480e47cf6cbd509f18abc865b3eb52602a707048be70034f16440fa1e761bfae92a1f0056f2d4b691e0e901feaf4f83a1835782363e49439333faed9abbf7e4d0e847a151f7c8b024872812d6e472a2a63d06e3fc4dd9dfc8d10d55d16ef6ad62acd2295d09b23753a7d8f14cd0f327b51a7d5d72b23415032c41eab9097eacb679aadb7ac3f4ecedb4fa5782ef8a75", &(0x7f0000000640)=""/4096}, 0x18) 2018/04/06 12:22:00 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:00 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0xde4, 0x400000ff) 2018/04/06 12:22:00 executing program 7: r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 360.431521] binder: 26164:26166 ioctl c0306201 200001c0 returned -22 [ 360.488789] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:22:00 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x4, 0x42000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x1000, 0x401, 0x5, 0x4, 0x4, 0x8, 0x3c9e}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000000000029000000080000004a093da93810da3ea1b501238c55e2d04b1f05f84026edde9094822c3c1ad03ba95db2591ba545a1a2685c2c964986e340a7d4b1daab502f26e4c6a135d9aff8a9e831a1ab6e5394ab4816a51b57eb996d0455dd850661370065b3f0d3cf9b90a839fccea36a2c51444fc05bee205fa2135ab5226d1aa312a8e03605146870cc9d4fb7c27c25bc"], 0x14}}], 0x2, 0x0) [ 360.532086] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 360.536745] binder: 26164:26183 ioctl 40046207 0 returned -16 2018/04/06 12:22:00 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000040)=""/4, &(0x7f0000000100)=0x4) 2018/04/06 12:22:00 executing program 4: clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_nanosleep(0x3, 0x0, &(0x7f00000001c0)={r0, r1+30000000}, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r2, r2, &(0x7f00009c7000)=0x400000, 0x400000ff) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x4) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$KDSKBMETA(r2, 0x4b63, &(0x7f0000000040)=0x7fffffff) 2018/04/06 12:22:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020006700000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106309}], 0x0, 0x0, &(0x7f0000000180)}) [ 360.737794] binder: 26219:26221 BC_ACQUIRE_DONE node 191 has no pending acquire request [ 360.782625] binder: BINDER_SET_CONTEXT_MGR already set [ 360.792139] binder: 26219:26224 ioctl 40046207 0 returned -16 2018/04/06 12:22:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:01 executing program 5: r0 = socket(0x11, 0x100000802, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000010009000700040002000000d5cdad544bc4f61dda94ef1305b1acc52c53b5fdbeab42a25d44397733ffe14c42862806c61ac2358760c59c7edc1afc1379874020f78ddc36d86f01537a2bf84efa1f75aee620f8c516ad348f269d5942987ee47e77f01e39dcc19d2eea8b00913013e5df6a73b22ec8299560551f8a3b07abdc1160d9"], &(0x7f00000000c0)=0x10) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'ifb0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) r2 = msgget(0x1, 0x114) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000480)=""/180) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000d602d56cc00140000fe7100000000000000000000000000aa0000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x40) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000440)={r4, &(0x7f0000000380)=""/185}) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000200)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) getsockname$inet6(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x1c) 2018/04/06 12:22:01 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffffffff, 0x400) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f00000000c0)={0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x40001, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000140)={r2, 0x0, r3}) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:22:01 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xa0, 0x2) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$inet(0x2, 0x4000000805, 0x4) sendmmsg$inet_sctp(r1, &(0x7f0000001d80)=[{&(0x7f0000000440)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000001880), 0x0, &(0x7f0000001900)=[@init={0x18, 0x84, 0x5}], 0x30}], 0x1, 0x0) 2018/04/06 12:22:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000010000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:01 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x400000, 0x80000000) 2018/04/06 12:22:01 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(0xffffffffffffffff, r0) 2018/04/06 12:22:01 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40486311}], 0x0, 0x0, &(0x7f0000000180)}) [ 361.323276] binder_alloc: 26232: binder_alloc_buf, no vma [ 361.328968] binder: 26232:26233 transaction failed 29189/-3, size 0-0 line 2963 [ 361.333463] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:01 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000006700000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:01 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@alg, &(0x7f0000000200)=0x80, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000002c0)=0x9, &(0x7f0000000300)=0x1) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000240)={'IDLETIMER\x00'}, &(0x7f0000000280)=0x1e) r2 = fcntl$dupfd(r0, 0x406, r0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x73, 0xa, &(0x7f00000000c0)="140d09fa844a28cece167929ebbe75965ce6e823ed5a640633dbb3bd1405900b7fb817925825bec7b2c8e103d7f05c6cdb255e2287f1f227b31bdeabbee2044a617f982e0f23eb39bcffc79e10b6c7ceac0b525becefea49a008342d02d3dc76c72463835d263949125d4b0f02244b6c3ff315", &(0x7f0000000040)=""/10, 0x8, 0x300000}, 0x28) r3 = add_key$user(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000003c0)="41c8eef3698605f1ef6f86a758315831ffdb5d7de51c00062dae42ae0da42d2db05420ad394d0fb2a21de81da89ae87b4c67d1b727d1892ba32dbced10db80bd87acf99cc1665f0fcc6b7f320e6cba8698c49071aeb41d8b043c", 0x5a, 0xfffffffffffffffa) keyctl$invalidate(0x15, r3) fcntl$setstatus(r0, 0x4, 0x800) r4 = socket(0x8, 0x676e4ec64a1991c9, 0x5) ioctl$void(r0, 0xc0045878) getsockopt$netlink(r4, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) [ 361.373659] PF_CAN: dropped non conform CAN FD skbuf: dev type 65534, len 60, datalen 0 [ 361.404997] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:22:01 executing program 4: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x4, 0xffffffffffffff9c, 0x1}) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r1, 0x303, 0x70bd2c, 0x25dfdbff, {0x2}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x7b}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4040) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r2, r2, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:01 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000020800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 361.431123] binder: 26232:26250 ioctl 40046207 0 returned -16 2018/04/06 12:22:01 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000380)='net/snmp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000036c0)=""/4096, 0x120}], 0x1, 0x0) [ 361.549711] binder: undelivered TRANSACTION_ERROR: 29189 [ 361.558166] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000ffffff9e0000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="b04bcada47a3f61e84"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x800, 0x0) write(r1, &(0x7f00000005c0)="260000005e0009000000eaf83a0000000000000001000000ffffff000008db1ee9ff4435eade", 0x26) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000080)={'erspan0\x00', 0x8000}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r3, 0x700, 0x70bd29, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000010) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000280)={[{0x8001, 0x6, 0x9628, 0x0, 0x4a, 0x1, 0x1, 0x6, 0x0, 0xfff, 0xffffffffffffddf8, 0x9, 0x39f4}, {0x5, 0x1, 0xc471, 0x2, 0x80000000, 0x3, 0x3ff, 0x6, 0x5, 0x3, 0x7, 0x100000000, 0x1976}, {0x4, 0x7, 0x100, 0x3ff, 0x1, 0x4, 0x9, 0x3, 0x9, 0x20, 0x2, 0x8, 0x8000}], 0x5}) 2018/04/06 12:22:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40406301}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:02 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f00000007c0)={&(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/154, 0x9a}, {&(0x7f0000000200)=""/197, 0xc5}, {&(0x7f0000000300)=""/188, 0xbc}, {&(0x7f00000003c0)=""/147, 0x93}, {&(0x7f0000000480)=""/91, 0x5b}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/169, 0xa9}], 0x7, &(0x7f0000000700)=""/148, 0x94, 0xffffffff}, 0x1) setsockopt$packet_int(r1, 0x107, 0x12, &(0x7f0000000800)=0x619d, 0x4) r2 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='ip6gretap0\x00', 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0xe000000000000, 0xc0000) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000880)=0x9) 2018/04/06 12:22:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:02 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00007d1fef)='/dev/vga_arbiter\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x200000, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) 2018/04/06 12:22:02 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(0xffffffffffffffff, r0) 2018/04/06 12:22:02 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) [ 362.331874] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 362.332719] binder: 26280:26284 got reply transaction with no transaction stack [ 362.348582] binder: 26280:26284 transaction failed 29201/-71, size 0-0 line 2763 2018/04/06 12:22:02 executing program 7: fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x200000, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x70, 0x7, 0x9, 0x3, 0x4, 0x0, 0x4e06c214, 0x1124, 0xe, 0x9fc, 0x7, 0x8, 0x7, 0xb188, 0x8001, 0x3, 0xd6c, 0x5, 0x2, 0x3f, 0x4, 0x3, 0x0, 0x5, 0xfff, 0x2, 0x5, 0x10001, 0x6, 0x6, 0x2, 0x6173f1cf, 0x0, 0x9, 0x22, 0x9, 0x40, 0x0, 0x20, 0x1, @perf_config_ext={0x1, 0x3}, 0x1000, 0x4, 0x8, 0x7, 0xbb, 0x40, 0x8}, r0, 0x1, r1, 0x8) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:22:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200007fffffff0000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:02 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x101002) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f00000000c0)={0x3, {0x2, 0x4e21, @rand_addr=0x6}, {0x2, 0x4e23, @rand_addr=0xffffffff}, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x30, 0x800, 0x0, 0x3, 0x0, &(0x7f0000000080)='eql\x00', 0x9, 0xbc, 0x2}) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a5a2836664200000000000000000000000000000000000000000020000000520000005776cbeea63d6a1f36f568f0bb759586cddc3c24a9adfc5bcbb10d0000d3f0ca069552d9afe771acda76b6278940472733a7de1303bb13dffd7e76851e2139b35860efddc30000000000"], &(0x7f00000001c0)=0x76) ioctl$int_in(r0, 0x541d, &(0x7f0000000040)) ioctl$LOOP_CLR_FD(r0, 0x4c01) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000200)={0x6c, {{0x2, 0x4e24, @rand_addr=0x2}}}, 0x88) 2018/04/06 12:22:02 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x3, 0x81) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000080)={0xb5e2, 0x6, 0x7, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bcsf0\x00'}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 2018/04/06 12:22:02 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) [ 362.451996] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:22:02 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x1000000000803, 0x0) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000040)=0x4) [ 362.496797] binder: 26280:26304 ioctl 40046207 0 returned -16 [ 362.535311] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:02 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000f000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:02 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40046307}], 0x0, 0x0, &(0x7f0000000180)}) [ 362.599510] binder: undelivered TRANSACTION_ERROR: 29201 2018/04/06 12:22:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 362.664582] binder: 26328:26329 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 362.672486] binder: 26328:26329 unknown command 0 [ 362.681231] binder: 26328:26329 ioctl c0306201 200001c0 returned -22 [ 362.712201] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:03 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x6477, 0x3, 0x1, 0xffffffffffffffff}) sendfile(r1, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:03 executing program 7: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x200000012, 0x4b, 0x101) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000080)=""/4, &(0x7f0000000000)=0x4) 2018/04/06 12:22:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000f00000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:03 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40406300}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:03 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='yeah\x00', 0x26e) sendto$inet(r0, &(0x7f0000588fff), 0xfffffffffffffe98, 0x20020003, &(0x7f0000385ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x3) shutdown(r0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$packet_buf(r1, 0x107, 0xf, &(0x7f0000000040)="3d16fba7195641255242b712a10127cd6df92d7edbc5e57b925a0cdb5711eb6bb306e81381751bb497bf394d9e8db5000ba399b69698f5db7021a7ab34a2eb514e27f78a9f892721c38fe1c9d3748b8a65ebc30bef0834ed333b94a7a3229f2f4bbd", 0x62) 2018/04/06 12:22:03 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, 0xffffffffffffffff) 2018/04/06 12:22:03 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200800, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)=ANY=[@ANYBLOB="07000000000000000400010000000000d800000000000000", @ANYPTR=&(0x7f0000000040)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x001\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000007f0100000000000e600000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000005000000000000000010000000000000", @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000d00000000000008300000000000000", @ANYPTR=&(0x7f0000001280)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000f0000000000000c400000000000000", @ANYPTR=&(0x7f0000001340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000200000000000000e400000000000000", @ANYPTR=&(0x7f0000001440)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) syz_emit_ethernet(0xffffffffffffff71, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], 0x0) 2018/04/06 12:22:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) [ 363.341214] binder_alloc: 26350: binder_alloc_buf, no vma [ 363.346927] binder: 26350:26351 transaction failed 29189/-3, size 0-0 line 2963 2018/04/06 12:22:03 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') pread64(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd05, 0x20002) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0x200, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x5}, {0xa, 0x4e22, 0x9, @remote={0xfe, 0x80, [], 0xbb}, 0x1d4}, 0x7, [0x80000001, 0xfffffffffffffffc, 0xffffffff, 0x4, 0x100000001, 0x7, 0x7f, 0x80]}, 0x5c) 2018/04/06 12:22:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000700600000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 363.405294] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:03 executing program 0: unshare(0x80008282) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000b00)={0x7, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000bc0)={0x0, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, 0x2, 0x40000000000000, 0x8, 0x1, 0x20}, 0x98) r1 = syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0xd27, 0x10580) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x8) fchmod(r1, 0x8) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) wait4(r2, 0x0, 0x200000040000002, &(0x7f0000781f70)) prctl$setendian(0x14, 0x1) setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f00000000c0)=0x2, 0x4) ioctl$TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x9, 0x10080) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$TUNDETACHFILTER(r3, 0x401054d6, 0x0) r4 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x8, 0x8000) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80000) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r6 = dup(r5) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000300)=0x1000, 0xfffffffffffffee6) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000003ff0)={&(0x7f0000011000/0x3000)=nil, 0x400000}) timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f00000001c0)}}, &(0x7f0000000280)) sync() ioprio_set$pid(0x2, r2, 0x3fff) syz_kvm_setup_cpu$x86(r0, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, &(0x7f0000000100)="a7660f2ab7f689baf80c66b8dd09a78166efbafc0cb000ee66f20f01c966b80500000066b900fb00000f01c1f436f20f5ffe650f20002e2e0f01ca0f0133", 0x3e}], 0x1, 0x41, &(0x7f00000002c0)=[@cstype0={0x4, 0xe}, @dstype3={0x7, 0x1}], 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000240)=0x7, 0x4) clone(0x80000400, &(0x7f000052cf69), &(0x7f0000000000), &(0x7f0000e9b000), &(0x7f0000ce4000)) [ 363.462346] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:22:03 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x3) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000040)) fcntl$setlease(r1, 0x400, 0x3) 2018/04/06 12:22:03 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f00000000c0)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f000001dffc)=0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000140)={{0x7fff, 0x2}, {0x3, 0x1}, 0x5c6, 0x2, 0xfffffffffffffffc}) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xf}) mlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x6010, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000380)={r3}) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000001c0)={{0x2, 0x4e24, @rand_addr=0x2fe}, {0x306}, 0xe, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, "00080700000400a0b22c582bf3aed17d"}) setsockopt$inet_opts(r2, 0x0, 0x9, &(0x7f0000000040)="e9a5452f583154b9", 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000240)=0xfffffffffffffffd, 0x4) syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f00000002c0)={0x9, 0x0, [{0xb15, 0x0, 0x92ec}, {0xfcd, 0x0, 0x91e}, {0x97b, 0x0, 0x100}, {0x0, 0x0, 0x4}, {0x3f6, 0x0, 0x55c4}, {0x99c, 0x0, 0x8}, {0xbff, 0x0, 0x5a}, {0x2fc, 0x0, 0xa749}, {0xdc3, 0x0, 0x1f}]}) [ 363.504851] binder: 26350:26367 ioctl 40046207 0 returned -16 2018/04/06 12:22:03 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00o\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:03 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000020000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:03 executing program 7: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x0) connect$inet(r0, &(0x7f000005eff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffbfffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) listen(r1, 0x7fd) r2 = accept(r0, &(0x7f0000f06000)=@rc, &(0x7f00008f4000)=0x80) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff}, 0xb) recvmsg(r2, &(0x7f0000000440)={&(0x7f0000000000)=@rc, 0xa, &(0x7f0000001140), 0x0, &(0x7f0000000380)=""/144, 0x90}, 0x0) 2018/04/06 12:22:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={"7663616e3000000000000000000100", 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newaddr={0x2c, 0x14, 0x111, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r1}, [@IFA_ADDRESS={0x14, 0x1, @loopback={0x0, 0x1}}]}, 0x2c}, 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x2) 2018/04/06 12:22:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x630c}], 0x0, 0x0, &(0x7f0000000180)}) [ 363.661189] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 363.687813] binder: undelivered TRANSACTION_ERROR: 29189 2018/04/06 12:22:04 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x7d, 0x40000) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newneigh={0x30, 0x1c, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, r3, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x30}, 0x1}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000001c0)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r5, &(0x7f00009c7000)=0x400400000, 0x400000ff) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00', 0x6) 2018/04/06 12:22:04 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000fffff0000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:04 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:04 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={"d202b99903000000000002000001e710", 0x1000}) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0xa60a, 0x4040) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='em0\x00') accept4$inet6(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, @ipv4={[], [], @loopback}}, &(0x7f0000000140)=0x1c, 0x80800) syz_open_dev$tun(&(0x7f0000000180)='/dev/net/tun\x00', 0x0, 0x0) [ 363.789410] binder: 26398:26400 unknown command 0 [ 363.858716] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 363.861293] binder: 26398:26400 ioctl c0306201 200001c0 returned -22 [ 363.972491] binder: BINDER_SET_CONTEXT_MGR already set [ 363.992894] binder: 26398:26420 ioctl 40046207 0 returned -16 2018/04/06 12:22:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000020000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:05 executing program 7: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200000, 0x8) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x1) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x10000) getdents64(r1, &(0x7f00000000c0)=""/66, 0x42) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x2, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x0, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) 2018/04/06 12:22:05 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, 0xffffffffffffffff) 2018/04/06 12:22:05 executing program 5: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000300)='/dev/admmidi#\x00', 0x7d, 0x40000) ioctl$sock_inet_sctp_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newneigh={0x30, 0x1c, 0x40b, 0x0, 0x0, {0xa, 0x0, 0x0, r3, 0x0, 0x3}, [@NDA_DST_IPV6={0x14, 0x1, @local={0xfe, 0x80, [], 0xaa}}]}, 0x30}, 0x1}, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$TIOCLINUX4(r4, 0x541c, &(0x7f00000001c0)=0x4) r5 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r5, &(0x7f00009c7000)=0x400400000, 0x400000ff) renameat2(r5, &(0x7f0000000040)='./file0\x00', r5, &(0x7f0000000080)='./file0\x00', 0x6) 2018/04/06 12:22:05 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') write$binfmt_misc(r0, &(0x7f0000000040)={'syz1', "bc0cd38a7af6d527bd9e6d370b3975e4c57e257b51afa9dbabe323131d885a9aa8a5ad39f52f94d138bb17d988a56b6b512059ca89da5c7f20c938af314b70a92405"}, 0x46) sendfile(r0, r0, &(0x7f00009c7000), 0x400000ff) 2018/04/06 12:22:05 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000001100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:05 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x4008630a}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000100)={0xffff, 0x0, 0x400, 0x7, 0x1, 0xa32a, 0x83, 0x40, 0xfd, 0x63}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000240)={0x1, 0xb5, 0xffffffffffffffff, 0x5306, [], [], [], 0x40, 0x7, 0x200, 0xb26, "b5ff4e2df7eb5b5cf56f87429f3b7509"}) r1 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000040)=""/81) [ 364.712212] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 364.723738] binder: BC_ATTEMPT_ACQUIRE not supported [ 364.736602] binder: 26439:26440 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:05 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000f0ffffff0000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:05 executing program 5: capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000002000)={0x0, 0x0, 0x0, 0x1}) r0 = socket$inet_dccp(0x2, 0x6, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x100000000, 0x2000) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 2018/04/06 12:22:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f00000002c0)={0x20, 0x27, 0x1ff307543bf68163, 0x70bd28, 0x0, {0x14}, [@nested={0xc, 0x7, [@typed={0x8, 0x2, @ipv4=@multicast2=0xe0000002}]}]}, 0x20}, 0x1}, 0x0) [ 364.777721] binder: BINDER_SET_CONTEXT_MGR already set [ 364.797297] binder: 26439:26447 ioctl 40046207 0 returned -16 2018/04/06 12:22:06 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, 0xffffffffffffffff) 2018/04/06 12:22:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x400c630f}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:06 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0x15, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@exit={0x95}, @initr0={0x18, 0x0, 0x0, 0x0, 0xa0a6, 0x0, 0x0, 0x0, 0x530}, @generic={0x4, 0x4, 0x3, 0x3}, @generic={0x7, 0x401, 0x4, 0xc2}, @generic={0x3, 0xca9d187, 0xfffffffffffffffa, 0x7}, @map={0x18, 0x7, 0x1, 0x0, 0x1}, @alu={0x7, 0x6, 0xf, 0xf, 0x8, 0x80, 0xffffffffffffffff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}, @generic={0x1ff, 0xffffffff, 0x7f, 0xfffffffffffffff9}], {0x95}}, &(0x7f0000000100)='GPL\x00', 0x56, 0xf6, &(0x7f0000000180)=""/246, 0x41100, 0x1}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000300)=r1, 0x4) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r2, r2, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:06 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000028c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = accept$alg(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000140)=""/46, 0x2e, 0x1, &(0x7f0000000200)={0x2, 0x4e23}, 0x10) open_by_handle_at(r0, &(0x7f0000000080)={0xba, 0x5, "cd1d3bbe6170b01e6a89497417a348f3bf8032d26197c0b85a6070b253e4a4eb6186124a77c6a835ef5765bf7e2b7d8984f42e2e5e7d417d6a06b6392f66ba3d0e74c6809102058eefcf9c947887c592b8eaafcfc727030f4ea23228770f16d41ebc088b000d877dd697d66dd411d7b76db1089cd33ac072fc3b07edfce429e4c7c2bddab54598feb2cdb5bdbd7de83958cce04953b0e7b2a6a4b07d42a95dd57e597de494c452ce07473871473ecb73d752"}, 0x400400) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001740)="a7118230eef5e420406dc6a099da077d64d054e0293b261fd23e223ac994e771d39076c63413ac4c3797871c905a3788788903cb54e0b814d561537a2e51405ff0b5bbcb5fe7f41a21b44db2d47be29e7e805a6d3d2a98cea5945db9b758fad872a60d0c8531afe1dbf4d5962f155c685eb8975a7feafedf838264a64caf9ed61617b79b77d069e76fd54e623a555cba8ba8ca09edd10a35df95900f9d33c0a1432915befb630f3817870dd103772719fa860c424444da74127123d602411922ba69da4be74592a2633006173e3032637897f2b2c854f198ba142ec086f77c7e30554da81ed8e909212eb2741f5ead4e7826952da178501059ce35b6a7dad2492d6c300d7e3a79db4dbbcb077f7bd5155698c60f0f67aadd05b74021e51bb42bc76aff6b00934ccd3fd43c68f93fb297a3fc9dc07f703f71b3341914bcf9fa416488e25137c1fcd0ab2eeba0daba608a7d4b7fcefe1795bf172103383dc8244b07bd111b8c02971f3b5d39b75f0469b8b1f5c9752a82588556630412895521c47e4380fa879878b030df6a5c0d1c90c644ee38cef883b494bb804386bab3a4c4d8eddbf004c229c835b76841aec0169f7b84bc1d5e9b350673591e30c2764e389f20b0517201e5229dfe74f85c337fe98fecce8094f44057ade7cfb2242abd5f3e6cda843b91b129cd22d35614135637c0ace0ab6597b7b17e457b0a9e033d7ddaffb3e0bc990a17971e8d32003e08b0e5c25b17b69853325c912d0a1c1a53332c428db887922385e08a4cc0bc37215582f19ab59849188e7ddefbc3a7277beb7ec2ea3fa77b1de525d88b54757af0948c95cf2c6feea18071e479a0de1902089bff7c6ec3e338d52ddec29c124545881b5b9e3a56b221695e5d97024c47763c4927bbfd88d6ce901dde80956cc0dd9a4d820ed5da40ac4d12835999ad4d7b817cffba97b5ec9ed549083217029d522245335b181a9d90ce5c9271209aa89988458891424f0d7d11fa48f04e461fdeacf1367b2f3b71e168a501a5c0a8fa0a950047874651fedcaf2dfb490a0881e449070976c75546c691be5d32718ad4b49961d66adb0e75d0cf398c167f81c51d3804e741f825960e1c89bbf590731a61c21ac00e435d493ab66263a96b3b4f7ecccb1ef5550c782bde990e4bd3b738b652abcf99b88e81523abd30531a225575f31213f08cb8f88b77b35a8e332e47c41d01bda34d67e9caee3b3decf81bb42f58a0610f8cd56ec13d8d6effa7b8c7710cf31bc69ecea380613e9ac69142fedf1a39e6e83b6dc84882c537f23c8e6601412330d44696d711587cfd2433530ed7f9cdfbceb9af4babb5f74c4070df26e859e0564ee71ab1bdcb2b954ad12504614a7d0efebbc5a793d475ff5a7aa368e35def723102c7b4221248105db2dc39c14e8338167fc906939730708203bdac46bd37e3f97b8a7e0efb49279ee031a0732f1d1ef3c877447b432958bcd9f5d0febc59b439b4fa0bb9ab1bfeb451c3f203f1aee841a2379da0e89d3216cd96f9aebc38a5a330e7bea1f8016d655fe60d7077fe8b7aff504533d17f393af11e5fd350f3c5f4ac26c2102396408d8f7136f8a9e05cd45ae6ba1b277f684708136fe75c9a2d19961ff9f3a1c8d92ebcded91cf3fd8dd15ee8e736fe3f395e6eb8bde95ddd24258fb68bad6d5a508b68b77ffa8ed7f25c43343757833df59e024d551772f94a69929ce720d993b9e853b625af04b47e91a59a3c1b1b29c39796199b41aa72390c87919338b0b2f595c73a810231dffe470b4374023487a1a90bff58ba3e4e3ed0cc6b67dbdca0628885a010cf8cf092fb13181a4d6a8eba473989ca29b8b8ae6042d6f455768c19a602f9d47df0f3d4e37526db745facc0bf5c4ccd880438352e92a1144dcde4e63c1e4f7b42b6c5ae6df876ad4f5f5533deef339ba7d14d6867897421146d5d96b8bcb63b97d73835be1a4334df9ade8bd100a9d2f9126aefa031a320707e8b29d48257913bb37b8f83260e4ad88db013ade6f4952cc8c397465fe03b21ef2e935480c32eb1fb71cdb0dd87420360c8e984b9b07c9dfb4b7b40c42dff2693c029eeb9b77cadb8d408d73f005d25ad479360a01a2731a2207a1d60481b9d59b5ef54d995f8b67a905a747a4fda15fde7a432232e3cc32561b344dee355cc7e32bbd5fc1ad75288391df78017171dd228e1d368ab8969b0e23f7a16c5d6e67800d98b6c3dea15a6c7b76a25ea69c9cb75e7934a6adc326d6224d7ab2948eebc6f0a729c960e1c0c3c4eb5f89934ab7d3e67eafacb96387999be29f77685a99886f4131090a7cbc4ef0900dfcef0653ec51970ae8cb5f8f08c71e9b825fddffa9893dd95f3acc3a7fbab91d8ce44080eb0a2f66b7b064d74591ec06be4b043d9fb157294f4650c2a543e9696a5140ca128688472df977fa4c1667ad7a0986699a15578f5efa8267d581fd5267e4927a6fc073202289fd948e5ed9ff638f3ffed87764f3f7a371b2f30f1d906477a19dd93145e0d977f55939eb6ea2b05fc47704e720deaa229ca9b18bef779163ad80974d0be2251314a4bd2a3af946738f0b18c1134898d5b8e1d2e74e51552e0f1103c9870a5087e9487e0d33efcb922197bc10aafcecc6d0e116baa301b1f2b7c845d181572f4514c6b4a0d1b206074104ce0c7ec8b0a9b22290c94d14212c3f03752ce2e9cdab9608373508407d42366f1576b1c698209a5ebc570e60f94995c8cba57f02a637bb0fbdd2a3e33ec1c11ecf4ecc146e6bebc1222c6173718340f990cd905a62f9b375a93bcc80bb7b9816937e0243bae776fb7d98080bd0b7f324425725521c8e8bb906cf9517947eec7b2cfd18a8a93645254d86914ae411080b001355c44d5a6ffdec77651b941696a4770e794213b487bc7604f94726e095d105ad22cbd663f251516262225793ccd9833628a759fffe91e54aae2aff28de63844edb24fb0bffeaf984cd52d30ef3aa7ff9072059dbef925e2554e8ed6cf200120f32edd0a90936fc5b0881370ecaaaf3f3314304947d98688428e33387d47392eb32f9715734b056987ab9618f83cf010de3a6b87ef60273add766e719defdbd9ebb68746b476080f9c1b10578255cb962df386387f87ed4a9322d76798995053dfe68cdd1e3855d14cbe8dbcc1cc968d20e9954dfa5f279bc49b96fb1df74683a78eb1f0a668fb29c339a5baeb79c3d8030749ce8b90b73bfed120bd50fc7754c63c0690e1d8ab7299d4f95e84e97bc674c950a9e1d1541d5e0df6ce4e0a92b0f55a74b9bbed3d2dda26340ad4a2fe65d2c71c658cbd7e35ec7f006ea0e2caa06565b2147848cf0cf4a01ba2f17b6eae932c2d86cbef2fa071521da849cdcdbb5d9e0984f35198dbcc80538b1e406e742dded107d52bab2dbd2a9e4d48f51e7ffd5566619392ac2938d6f56b292ed34b633cbdf3a3907a7a4e9cfd770a097889818342ea1b7740fb79da30918b18b0e688ba82f454c6e2b23fb73a3bd407b3e4ac9fe8d785ebd2fb66b4834b78e47a545ec30da7f644368c17406af028ff4844eaa28fd051acf91f65bbbcc44fad7ed3781fcc6fba610e4fb29f1011ba96912d6b0fd3cd3e17773422c82d6ac47f876ee17932bd3ccf3df163150c22c54df4fb7289d0ed2d6e1df655cb1bf8ebe13b6410e56ac4b04fb84273d43008eb2872c7bdad9832b43c19c870bbf48f04211c2a778665c7ef3553b19b2beff91766cd203920a3e12b23a17ca30bd801d486aab6a5f12b938612913eb5507fd952ffbab2e76f3eee5de82e9a40a0ea45112ceb4204b0e2a3da1be128810973f5664bb2e7560be7c8835261b1b20909fb862101e34059964907b000b18c39a41566c51287c38c933a532726e58347e6f9dce930b10b74148999ec0093b2132d47d77f647304b2cb9539a8c98e9d0afe9f2743b4afd5b9b1ef8e3e0ca93de83b682657c6319ea1c9871f2b5094e30d61164e66ea4b6dd20104509955d61f91d14aa2e941fda2c64830178daff905ab163f6168f34b08d729ab7b65e2a8953be9028521ae53239b8af653521d2e07f1cb7704c31b95d8582849a72217ecaca777d73280daef123fba0e1a0166159f67f16d5c82e3a5dbc715b2e8f9e291a541330fc438943f3ce88d0ea448c200e6946d08bc50d1ceab202e84b05044bde6828ee6bc876eae1bbfdbf7268ab9fec11007ed2b39b86c20f39a186c2516bb7e6e67a7050b14537c1c26179d93ce411f016682e66e9a3e33f149bdd8a1701c0403453c5f3e7dc25e34acea7f05152f67fd766a04cb23f4ee7e006893b0b3d207268b82e2125f2bf0d1328b1f20c925592471f5eb1bab8c1450e181c15bff5847c7ba00ff26ebd61d6838b5879c123a5037d13b3bcbe989428d68d700693aa8196a67d304b116711f81f6f61a36c7f0f748dbfa1340b740818fab5dc4916a95622ab9f8e2c942a204bad25b06e3f255de10bd84f9f7cdcfea84c98afb4770840bf5330c6548631f0aebad9625415885dcc857506298c172eef922a7934ba086976e81ae7edfd3ee3bcf54e07fd952ae5b7b641bdfefffc06323c6e5c6acf338a7f934bee681570bce05638c6405fa7bfddc60a151c7f89b858037a12c61b3bd5245850db831c68a2faab54094b2025777a328fb285781bd761eb4ce7d34816265db102212a3e4f6a085871b3a3c20d2565efd39d8bafea36f18a78b34a9e841839f2ec096ea2fd7f74a32f2d2a18830c54d7e7fa9bb9f3eed3c0e23a27fcaf8d7b2170a8f1700000000d070853427df05d933b00151da7256e14a16cb8814264da2c341075fcc15b07505be23f45cba12e6af5a606e3bf4709532b5e118aa41762f2234957559936cf6339629e55940ded5bc1b9c85c60384a391f0e9785f878dcd94cf5526b3574b47226b4eb6638c333fe658e0feb9c3007b8963fa8040684ec26cd17761d3a59b2b3879cdc08e84dde92c43831f169748b7927231adc8fa62914a685da299c746a5aebc527da570a3d5d36bca3f9f74a5ee86ac671e6b001887aa16266210eede6ab8cc3aa34b3ce1d442b8271db73772bdac9eb8cd0a61f257c5802046553cd660629d76114d054687e56a20d567f2362cf71c72d7b7b898c2c3e88474df942d6c3c76b753339cfffe3e99eda176e451bd5d5b90a5fe4d39294a299c1dfc6686a7c2ccd827886d6d145cc4412e4aa23319aeba46bf07960a49b7eb962b57c536fdfe0ab64b52535ae1978bcab3eded29b15fac4a3826b0b62fdc3d0784144eefb57be2f4e9b8868db11e69565b05197d7232a8b96b43fc6a52d7cc89ae8545145f41f1c47343f67837bfc4f2af87d8b8f066092858f6ff905b32801d9e424db8b48933a5c3b9e1ac001f1487c0694d4108f2033ddf2483514a9e2ddb43face0586bacdc77c7da3890626237311a4507f782edbf235159329397f29863cd64910a4b348083d52f9174718e1dabc0e028ec617926c4acb949d9ce65f969deb6c8bce742f2e5bc0beec3f063156b2e13abaaa38b599781020503cd198176ad9d99798b07754ab366322e39ac06b7f2d32f675c1680c0c9bd5f3ae7005426a45014421a18980442a0671ec260cf1a778f5835e725ed93eb2", 0xf90}], 0x1, &(0x7f0000001500)}], 0x1, 0x0) recvmsg(r1, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f00000013c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001400)=""/6, 0x6}, 0x0) 2018/04/06 12:22:06 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000600", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000067000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:06 executing program 7: io_setup(0xbc, &(0x7f0000000000)=0x0) r1 = socket(0x2, 0x8000a, 0x0) bind$ax25(r1, &(0x7f0000000340)={0x3, {"ed14b67e072570"}, 0x6}, 0x10) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000100)}]) pwritev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="afe006286e90cd23dd0c1035a95fbc3b5be34b6a76d2cccae3f7d7a07e0920b77bb7407aeb29c04d5698808a4cb55f37e136746f5d61ed83c26c8c850afa2e7bc8695f0afe8174e3773afe2e2418886e92c61fd47c90ca0610889c6cdb882fcf0529c5560a0bd76f3a9dd8f3e7460bb2247a97da0042f9e601887a649a1074d3ad66ece0db1b0eb619c01eecb5b8eda129670cb11e8e86265ffc2c0779594d4df2688340f9e1d81a47bc2a0640652012f2a0d2f3443395d37917ddec72401964414a9d01fe4504184ba3befadac1461e37d8cb8427070b992f1da3d9f003e3342cc9af5221fd83", 0xe7}, {&(0x7f00000001c0)="d5d4b776c34ce1b49031143a8fc8cfc9818856af331a3334827fc4f9c1d35b44b011f0b99b99e891eb42a962e0dcedebcb4ad285b81a278a869525e41647bbc6e837a22ee132252630b25765b66515ba3be6ce73d223c3b115fb5ebe4597c6f982d5b1bd031b1a49d5e8895da481d68be7bc6a77e3770994b36372538393cf1789705aeb68507e08a3ba8e5e5de91876151ae32c9d9951701e7d", 0x9a}, {&(0x7f0000000280)="1bdc9e047013422d4a79b84a2dac615d9d29b9376eab7e4c2e81496d5c3b165c30272c33fb8f9bf4b5ed13f9963f5d10b050aa8a1fd63b75cf7a1523b858316edf4fbf2a42be732caaeef664515d47279968e8a3445fdf", 0x57}], 0x3, 0x0) 2018/04/06 12:22:06 executing program 0: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r1, 0x80, 0x1, r2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x1, 0x0, 0x0, 0x0, r0, 0x6f}, 0x2c) 2018/04/06 12:22:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200009effffff0000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 365.708226] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 365.708737] binder: 26468:26476 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 365.724202] binder: 26468:26476 unknown command 0 2018/04/06 12:22:06 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000000000000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:06 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0xa201, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r0, 0x0, 0x1, 0x4c, &(0x7f0000000380)=[0x0, 0x0], 0x2}, 0x20) r1 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x2800, 0x0) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1a4, 0x33, 0x100, 0x70bd29, 0x25dfdbfe, {0x4}, [@typed={0x8, 0x55, @fd=r1}, @typed={0xc, 0x1f, @u64=0x3}, @generic="4cbb0dec1115ab0ef6b8cbceea780a6cb3169fd88c08a1e9949a6dc2037f76d6c97f4285216dce7bcaf2fd7284bf", @nested={0x14c, 0x7e, [@generic, @typed={0x8, 0x50, @ipv4}, @typed={0xe8, 0x60, @binary="80528209d963338330b79a165f24438898071c95065e55a0c04f846d8c5bdb5d0556c8075daa7e8726b10b4d54b6fa62ed4bfd01f2f91b30f41ede1dbcc2b0d72207bb61afee8948a19dd8f5e36e0782b7e8e8d5b642edd166fcdf0c186fe12373aedf7097f1fe9e47b8393baee5a7a43892f09ed08e825d6ad8eb6098447ec434896852f9fda72686bc3d5384eccdf2a9e5335a8a63d316cca29a24be94f869db2fe27af90f32cd38614f4ad7272abcdc40e1b73e5227a0d5fd998b66ce5d6d04e38cd9525fd89646abbe50bb30adfa63bbb0c5848d9f4544f75ac2435f24481e839f40"}, @typed={0x14, 0x41, @str='net/protocols\x00'}, @generic="8b8103066a459efabd158f800c4a71fc611479a4f50d8fbf41f6c3b56db1785126ca33af700d7a9db3c8747f38211efc3d085de100e1c526e6ce32", @typed={0x8, 0x5a, @pid=r3}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x40010}, 0x8800) syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') 2018/04/06 12:22:06 executing program 7: r0 = socket$inet6(0xa, 0x80805, 0x0) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x3}) connect$inet6(r0, &(0x7f00000a4fe4)={0x2, 0x4e20, 0x6358c0, @loopback={0x0, 0x1}}, 0x1c) 2018/04/06 12:22:06 executing program 0: socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) [ 365.805175] binder: 26468:26476 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:06 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000f0ffff0000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 365.857538] binder: BINDER_SET_CONTEXT_MGR already set [ 365.859701] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 365.888168] binder: 26468:26499 ioctl 40046207 0 returned -16 2018/04/06 12:22:06 executing program 7: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x240200, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a000400020007000012020000080000e10c00f41ee400", 0x39}], 0x1) 2018/04/06 12:22:07 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000100", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:07 executing program 0: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000078dff8)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) link(&(0x7f0000f3bff8)='./file0\x00', &(0x7f00009db000)='./file1\x00') getresuid(&(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000200)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000340)=0x0) r6 = gettid() ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000380)=0x0) sendmsg$nl_netfilter(r2, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210000}, 0xc, &(0x7f0000000d40)={&(0x7f00000003c0)={0x960, 0x5, 0x8, 0x200, 0x70bd25, 0x25dfdbfe, {0xa}, [@nested={0xc, 0x1, [@typed={0x8, 0x63, @u32=0xdf88}]}, @generic="864affa4023724bf976cabd625e8203976709fc3e977aa47d92a82fdc3bb0a2cce1be6a401d19bef92edb995c8e1818db464340b9f2709428cc2672825e84f5f8b883d865e1c6327a9f20592b047720781f07276f97496153825b4b10d7016e7", @nested={0x3c0, 0x4b, [@generic="a246f73ca3f78e30e28116c5d540cda9c133359746ff77eb7ce2161b9e897c4f10e4ac60081b3f9a26e9c3fedc36f9e39125fb5517c1007c97e7964978d6a42f05c9a21256ab63d93322cc1f6bfbf6fa0e76348038fd497301c47d7e7232a4c37d99c50a64e2e2203bb7be06259bd675a84858b5ff", @generic="c32404f4559d631afa87463d27c5c7dd8a3a474d0ab8179b93aa37a6faea889c038b475fa60ebdf10ce8c215f9ea07c71eb3e17ce6d54e3de0b6cf99d6c3de16b5dd358ba97437f6952d9e2be01d042489ad023734cc185dd8879d480142fb70e1b9f7c6fc849d9efc1675941a69f41ed64fc1838eb150730f0fcc52658ea16c85d5e582ac95069ce4c979f28c94238d88858ed7439be344d66956ea0b926c875ab34c9f03f24924ac6fa04b48cb532f49bab645e410c21e49e39fc9fa9292133ff0f6663d98eeba1750555c296fb0b401869bd868fb391dd2aef32ef2a8b0194fdf1c7c2c82868d8852", @generic="1ec05122a55fd73c2cdd930d5d205450927c0328474a969b2a99c58c9bfe1d0a7b987798f85e340df60645d6250dbc6e478487e9278eeb5523431bbf0133f8470c51d3e7dab0ead5d9fedb0b4dc0c994b9c211709293f31d3d9315925ca52c240de7ea79335a9477a2ce907ddca9d16b38239aba15fa2506c0863ff15ba4b46e", @typed={0x104, 0x9, @binary="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"}, @generic, @generic="029e9ef7d308b7c30303962fff0ab5f941a7c0222c874c028a5a576a373edd679106c9a7ebe4428b", @generic="93cdad32fecbb3c4c4cc04759190554a828e2c00aa00ec269ae0a8301e48b914c9645688be29d96acbefdf294feaad8f3f4a25649be3bb35ec578bdff13633a1a5ff31684179f3d11b0c68c84c0c6e30a0634745bab4f72a92083345e805a8e4071ed8b6610932f1a72753f8ea7ea50e23d7c5d11783b9bb02a26b93e35383bfbb4e267b40e41b868fbffab6fa08aad244cff7ba02a62b0c17ec7197c632747c6d", @typed={0x10, 0x67, @str='^/eth0}&\x00'}]}, @nested={0x1d0, 0x72, [@typed={0x8, 0x72, @uid=r3}, @generic="fed662edb82821391b1c1e2149abf0cabbe267add8dd940a0b5876c2d56182339d1ae0f5a897ea80ca9a8294b513b09265179d1f00cd70234a89dbcf36ebe85f871a6fb69716d0c27f88a55e6f232bc65c4c8ea5bac612969b823693443ed36410ed9dd005a8ed66e31d93a1ad916351ad875f1e910ab8a95ed13ce73a9c4de39bc1e9ca769f841970fe309e5467f1092eb50178306f3e79676d7562e003fa82b4b917c76d7c2478a55627becea4c10caf1f1aeff2e60b5b16ae", @generic="9a66d27e2fe090c5c9432032c1a59accace5aa87d63cb8f06ea8b59a658e969dfa93f415dcb8f69e4ecce9856498bd9538e4cb67ef8c3a92c8f153a5c6ca74e92819fbf5c0e545bde7cb43300b278ae8593ad463b41d5cd4044673cc0f9f8917db2b4362213b89cb5279117fddb09b6e4d3b81fcccb398849d4a26dfb6ac27c7d40c5ba1e23f4d51db89393c0ea2ac6669019633887d7595b471ebada88a44fd66f7347d1f4f923be9c61d4c94c4de53666b5ab11278f72770df2c444baf996b547c4894391089c025d765db5d9cf0acff6851582c523f14f92eb11a", @generic="c4ef489a3a4cfeba8cf9d3940226964eccabf3daab04a3c457adc74a", @typed={0x8, 0x3c, @uid=r4}, @typed={0x8, 0x89, @fd=r2}]}, @typed={0x8, 0x13, @fd=r0}, @typed={0xc, 0x18, @u64=0x4}, @generic="4b420ff94d1717cee6abe5fa78e814b2efc88f1802b6c2fd32b252960045ab6c2ae792d842deec173d57a113cdbdce3b5a5fd1d9c66023ea1403595397c83dc70f92e77bad5789fe3dbfc847936a9dfe0e9575f289fc1c29628e2ac5822400", @nested={0x194, 0x1e, [@typed={0x8, 0x45, @pid=r5}, @generic="9909759107208f12f0aac6c6df64ad1ce7e16031581056304922efb72dd3dc945eef6cc8e3ea55e5bcae39c0796e3ff0b5a5e6c8f1b8819e906e1639bada8d9f1003c849d4a96c4514ab6870e3e774580ca9d44ac0e7584942440e003f62719cda43908595b2ef46809c89978bcb04b668e3cef2e80c54db71f4ede15e4fc482c7d7a004c7c8da293acbe8e25bb5f53aa48a6f793b34f605a82dc6b1648780614b664393808d585b23e984a3cd7efe7baacd82a9e2d80080f77851a5d4f59ca7c2d3abf450fd1fa5afe58782d1989137632f2d534924", @generic="fd", @generic="a9f0608f5f5de353525cbdcc2c2850ec7683005787b58af24b3be42aba9ca655e0af1b3193d4526e987be8e173ae265ec5e77b5896d628298cbeda39cf6172eda738b97888c49f7eaaebe06a85309164933ddd2b9178ea3d799fc7d06956c30476d4362432c4365b2da147bbdc03da170e40f9fac1154041fc194c7158f6170a4f3cf0a0a0e2e4d4800d2faf1da1abf0eb62daee336fe3c4a9ab1df79bb789b350ba4c51a22fcdad7406286f731b84302a"]}, @nested={0x148, 0x7, [@typed={0x8, 0x2b, @u32=0x5}, @generic="86b47e272fe7307ee241f484e689d6fb4092ddb3949a3d5e8e7fcf8d016374c1665d3abe8eafd3065255be443769826ed44a316c87c37b6f634372c785d0e3fbaeac22d874414f25736b541280ca5fdaa38276c9abc3b29c1cca8d1ad141f8f44869ae6cea6dee3323475edb0ccc87b280b25dafb91fa56810a53a1563380d213b353aa356779759157133e8fd93e8bebc291661dd9727ef21db308d55d8352098f46405e93a17925ecafd9619319f597457e5da0370521d61d00e0af7381ed67bb86b23d200d13bf42ab156519ed5cf7fcc80c0ca5bfb53cd1a8f68cb305b30f7f3406ff1376b21852e13969786", @generic, @typed={0x8, 0x8, @pid=r6}, @typed={0x14, 0x58, @ipv6}, @typed={0x14, 0x1f, @ipv6=@loopback={0x0, 0x1}}, @typed={0x14, 0x7e, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x8, 0x5, @pid=r7}]}]}, 0x960}, 0x1, 0x0, 0x0, 0x40080}, 0x4000881) rename(&(0x7f00000f7ff0)='./control/file0\x00', &(0x7f0000636000)='./file0\x00') rename(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='./control\x00') creat(&(0x7f0000d92ff0)='./control/file0\x00', 0x0) dup2(r0, r1) 2018/04/06 12:22:07 executing program 2 (fault-call:15 fault-nth:0): recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:22:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000fffffff00000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40086303}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:07 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:07 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/25, 0x19}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_acct\x00') lseek(r1, 0x2, 0x0) 2018/04/06 12:22:07 executing program 5: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) getxattr(&(0x7f0000586ff8)='./file0\x00', &(0x7f0000d8e000)=@known='security.capability\x00', &(0x7f0000a2af87)=""/121, 0xfffffffffffffdd0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000000000)=""/246) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000cf1ffc)=0x600210) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) pread64(r0, &(0x7f0000000240)=""/226, 0xffffffffffffffc6, 0x0) pwritev(r0, &(0x7f0000ed8f70)=[{&(0x7f00007d7f41)='k', 0x1}], 0x1, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000880)) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000940)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001a40)={0x6b, 0x0, &(0x7f0000001b00)=ANY=[@ANYBLOB="10630840040000000000000000634040030000000000000003000000000000000000000011000000000000000000000018000000000000001000000000000000", @ANYPTR=&(0x7f0000000840)=ANY=[@ANYBLOB="78000000000000001800000000000000"], @ANYPTR=&(0x7f00000008c0)=ANY=[@ANYBLOB="852a687701000000", @ANYBLOB="0400000000000000"], @ANYBLOB="050000000000000003630840", @ANYBLOB="2f6300425c186058c679e92d6dc400"], 0x1000, 0x0, &(0x7f0000000a40)="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"}) write$sndseq(r1, &(0x7f00005cbf70)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result={0x0, 0x8}}], 0x30) readv(r1, &(0x7f000035dfe0)=[{&(0x7f000044affd)=""/3, 0x3}], 0x1) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000340)={{0xffffffff, 0x7, 0x1, 0x26c4, "02e9ebbb216a45b57ded9462aa77ca8133f988213e0b529833a4215c24f9def694acbbf5122e58431cb90f5f", 0x80}, 0xad6e, [0x5, 0x5, 0x20, 0x8, 0x21, 0x3f, 0x2, 0x0, 0x1, 0x100000001, 0x7, 0x5, 0x5, 0x80000000, 0x1, 0x80, 0x3c73, 0x2, 0x6, 0x7, 0x9, 0x9, 0x1, 0x4, 0x3f, 0x8, 0x4, 0x80, 0x8, 0x81, 0xfffffffffffffff8, 0x100000000, 0x401, 0x6, 0x7, 0x3f, 0x401, 0x7, 0x1, 0x3, 0xcf5, 0xeaad, 0x8, 0x9, 0x8, 0x1ff0000000, 0x7, 0x7, 0x1b, 0x6, 0x2, 0x80, 0x2, 0x6b5, 0x9, 0x5, 0x9, 0x0, 0x6, 0x101, 0x9, 0x9, 0x2, 0x7, 0x401, 0x0, 0x6, 0x20, 0x21c, 0x8, 0x4787, 0x7f, 0x6, 0x5, 0xffffffff80000001, 0x5, 0x2, 0x3f, 0x4, 0x3c, 0x2, 0x100, 0x626, 0x6, 0x93, 0x2, 0xffff, 0x7fff, 0x14ddf1f8, 0x8, 0x3, 0x1, 0x40, 0x8000001c, 0x9, 0x9, 0x35, 0xffffffff, 0x6, 0x9, 0x3, 0x2, 0x8000, 0x8001, 0xfa5, 0x857b, 0x0, 0x3f6b, 0x10000, 0x80000000, 0xfffffffffffffffb, 0x3, 0x2, 0x1, 0x8, 0x3, 0x400, 0x7, 0x3, 0x7d, 0x80000000, 0x1f, 0x2388, 0x7, 0x3, 0x699, 0x280000001, 0x9], {0x0, 0x989680}}) lremovexattr(&(0x7f0000001a80)='./file0\x00', &(0x7f0000001ac0)=@known='com.apple.FinderInfo\x00') ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000140)={0x2}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f00000001c0)) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000180)) [ 366.714181] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 366.736525] binder: 26541:26543 BC_FREE_BUFFER u0000000000000000 no match [ 366.743565] binder: 26541:26543 unknown command 0 [ 366.749283] QAT: Invalid ioctl 2018/04/06 12:22:07 executing program 7: mmap(&(0x7f0000003000/0xffc000)=nil, 0xffc000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="363e3ed2dc66baf80cb8ec35bf8eef66bafc0cedb956030000b800000000ba000000000f30f2a40f01caf0824137040f01ca660fe4316682c5030fc758bb", 0x3e}], 0x1, 0x0, &(0x7f0000000100), 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r3, 0x41007701, &(0x7f0000000140)='\x00') ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000073, 0x0, 0x3}]}) 2018/04/06 12:22:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000ffffff9e00d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 366.767735] QAT: Invalid ioctl [ 366.771845] binder: 26541:26543 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:07 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 366.819512] binder: BINDER_SET_CONTEXT_MGR already set [ 366.830195] binder: 26541:26561 ioctl 40046207 0 returned -16 2018/04/06 12:22:07 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x792, 0x0, 0x95, 0x3, 0x7, 0x3, 0x3, 0x747, 0x293, 0x40, 0x15a, 0xffffffffffffff01, 0x100000000, 0x38, 0x1, 0x2, 0x3f, 0x66b}, [{0x6474e551, 0x4, 0x6, 0xa626, 0x2, 0x1000, 0xafa7, 0x4}], "2f5da05f12f14726830788d06f5f29faaeeabe6b4c4a4f40f9e8f1ebf1b31f6b637cdd408c51ac974dea9718dbee4662d84cc88658f1bdc271c7adc126ee63c728ad6f2a9d2831d57bcadea317a8b5e6d85746d7127dc37d5d67b9838e0fd0861a12718ba4c7c2ae2f0f6d5b76634388149bfb0625447cbebaf02c09ff3675b272dd9179c13aaf326c7715ad89860263d53b15e9a18a944846aa9bb9ca20221cb07dd918575155a19f26c178698df01b721831e7c7defcbe11cbc9879fcd3abee52cfd51dd32707da755aede75c58671f7473743c198709d116609251d01fd508df506a094d14da0bf35f584749cec855ef12f36434e96139d013953944f93361d644fccb7f55d83d83e23a5f83bcb277fbadfa3657c36e620411d17517ba99bf610ff38104258dfff3bdfb5a05e6598bd8a4710effc5e273401b30b981310655e1655266759d383e85795df0b4af6a36cd7a69acfe547ffdb8f23d9ed54a7e55024fca9037c7806bd64d71921f198e930d66e0b9d25b58801bf525485433631fcf9339e3f7a29e78f1f12c5a5bf0178a31455089f4961c316aea172656e6c608e7d5a75ce012a3950f217a3ceef8a4604f4800202109df60679e63dd31deb4929a8d7798379807d0af757501ce1a72651c0a680c6d4f001ebb0a6a2f03bca3404837ee9eca845d7ba06fca0dfe6b87c837fc69ab8e2ec879445f59d403585a1e32eec6a98dca1cde4bac5d8abd73bb001a00920edeac58b07fbd8a84ab2f4c13722a6797b7827ce91d9593b87c8b63fc8015e24c75f465d27894cc0f16038ca28ae899e4c4057013c3f767fff8f21fb039dd87ff117d67f3b0cafe8d03f8e26000c36b88b160cca0763609238174f56d00f9049f453bd72efae4fc9cd405cfc650d16fa5c4abd037298d72d42cca50f7ec4808c90fc3c9bae3de139b409862a25123ff331d11fdc8ef452b81b1a5444b8d4556cf3917e88a10975a5b29e75a458768025cac5bfcc0573d55ca117a5ffe425aefdbe00373b6e3601568792941903e33967ba75065d78005e3028f39fa06f1a6c207380f08c8255bfc6c0010369fa5c971eec0e838bad55be5f2b3151f7b91515b448959bb398ad4265a6e59520ddfff1e7525d686ce0b5d94e6dd123ec086f666711eb1639359aff763d84194435cea1f2f614ff06921d0ec15cdee596bc57e5ccede253f40376920bcf93c63f60536990754e9aafbe5fb2a8239c670ee0dfb09c35c1fc2d0c257bb10ee2b24666cf47a08b4d33bdaecf64f02732d91986ac1e05f7bb71f10525a3704152320425d4ebe7e6638024f2441dec83aaacf201ccac0ed878d0fb6cb1ce400dc3ffa569b47e58e96b983ced792397964b87a57bc6811e4b7f4ec08b58c85aa0d749a2f918c3ee77e8e7c75a80fca616880a382e58ecd8b11b391c0b1973c39f94542d1dca8f3a229eba407e99f88db54a48075e7a5f9a2f89048a049393927c167a7aa0918f992dc912a5abf0fe5e464e0ce7e0837fb8bb435e531d8757c9893705286f8759521057c3d03f313bde5df6019cc3fb685ad5e29b934c88bb4ff6e27fc9c5a8c27da98eaf37afc94e3de20a43c8df6a73567b3ad9a2aa9607fc5b175e9f3187592b145d908d066661027ac5227a47c4f40effd2aa5a47fa8f55505ffc01c80f4a6b464ebdae317ca5a3ff634e35a1fe54dcffbde3bb31a22cee2c12d1adff38853824e443d85ecc4407575d19cfb4f9fe73aca7de88eb3d42f0d8f347ecb391c1dd680883c05963860b2745e7c86779a553ebb38395043bb9b0af9cb2304b6d4b1ea9d0f8c8115ed28edef3d90c02723683cca1275b4af43fab2b2befa07dde9f295fee560afed9f034aa22155f9f4e8f4d9a650480dcac4785f1db680fca1aea3a2dc2a1d7547bb780bd28d77543dca8ccd300e34526fff8fbe06060fbf85b1a5568596d49e90be8e68047da39dedb5d0a12444148e5f12ef523782a20c8d151c6b4e3a7ba5784e575ce7f03670f97ef6b172a96c62806dd9e87930a5748e9b7ea23ffd93d7856bbeb3336f6b859addc374e9a42c024c3877436c6a2ae880b8ec92a9a6da11ae34b508b9321b28dafd4bbfa201250feda7e52e909a37f9ffc998ac1df658c574f2d6923b10dce99d197b899dafa88e6fdd4c75e594a0c9d52618cb76bd876d921283d5b5c8fb4fdf87c24977acb6479e09edf51de9943c180cb20ee65dd14d46d8bd5f6b3d06a67fefceaa9adafe262c634910cf4c50e78633c0636812c5e00d8535d0dfb139668b6f39b5667dfadf1c73f57151156f43fd317ca6a8d4162df1f8cad452968be7658f549df6ce372dd7d9d65fcfbc27acb6d758ad425eaec39e35074432f5f0ba348890d091337c442af4e6facd4a873ee68e900c3dafbd5f864e43a958930cd53b1438ccdbf9325c633a5b2ceb3ffbb611b2b85c6fed2f18973016a7e798e8118fc620a03043c183822e0a667e9335239e7dae8188bae19b65fddf8180b83eb43930b995c6c3aac87e6a57ec920b3d5dde43dde0756892b048ba0d42bac8feb0bf12e60499a260919061054502c0a8eec8230a009da532a30bee7f53d6bae4e3cbff477c8cdedc851175e63c93d9f84fc28dc65f32c6e0846e9d15cd7f3bd2c881db727b9ba17319aba8903f9c02b5e04b4d59c6c4e2ff10bc3561d4aee1d58677656e36b91e98c561ecab8d835c9e69c168155383577e14cceb14887125a62c85abb0ff0d8a5c7998068414fab3e29268e82b6cfabea8b40fa2f0b978449eb4f9734bc01a62021d5f05fc59bf58529296d06ace63b087d30ae1a26f9a8edde97bf263eca0847b7e3b76924e2a99a56526ac216eeaabf949c1e97af256b5042e92952f112ae51d71f93fe648c2263cbd4fb7e2e9936a9b20243d2d9b4bfd90d82b91c8b784a16aeee8cffd69acd5b18f799bb59fbb63c41ed65569be871de973dc03d2ac11b2b5105af10d1fee0ea4d4ad649b5572d5a45187f808115d60b395594e1763fedb554051ab12fb621005a7ee9a96e939230f153c2f8e55f8874285680d86c1738b2a9d1a9a3a8fce331dfd93297454849a6bef9e1f4c06ba9a031e499002a02e717daa8805fbd3c4d20d2c50560f1901c36a69fecdd753c6342a7e0192ad81eae58dc527f51441cee7989be66619f4a4209ff41619ea4ee04b4fb811eb7e518c9ade6face131621bb22b94c0c4afa63b5f5809a332cac5341b53e9edb77cc29256f0143ea8d4483cedf3faad32915cc0e84493b03ce93eebcf0b67d18884bed2c5b6fe6a8f5a08cb47b3b29ad3fe2894a3ca022eff67e50284f741459a4bf5d38ce7564ce0bbe841bc3187e18a855b56f34e1b0e2a729dd81cc2ee05570a62191dae22cbdfd49a2c9abe91d9372e8ccc918bae0a6eedcdc450d0b4cac4af308ba9b4af7631648116a1761ab8621e2476a63e367b89ee013aa326e9eceaa5f123611f7d55845bdfe0b2d9c59c1fef45771f05dc379dd36b1f979a9ef7c2d1aaba84ed06129efd73668c1465cb5b696264da0639fa99d9c333a46e000154acd3133cf5f1d0b1a76dab8ea50110273ef1b90abf9b4ab169b297b1eea13071b3ad3087c8e0002757b57926bdbcd2092467714b0affc73f525c8cdb92ed6df902abcec30593a9ac96a8973e5192383c46e86f6a98c1e01ceef487a9212fa50eb09ebd0011f588b14d828eb7fa1ded770926a1dcc6b93fc7d312ad45ead41d10abb0406475374ae46334b404da1295f8409ddcb44dc25fe96b2097bd62ea33a1eea32e3770747df7c89a9375d04a5070645a944fb89af4efefeb9f0025421e9b1e2fd72bc6892788a9cc1fef77c45e883018d6d7b297655d95b930a4583313a373ee10dc5f57875a99358b254f79299eac0acdc99a292590e4f5fab9118c73421cdcfd9f6710c4351998065192013975a9316d7f2c84111cc86207ae9cfe9122d76d7336a537a146953e84a4ee3f074f9ac570aaf1c7bdd78b1de99394bf5f7f9b0f5cff0032f4db7121342577895387fda6dc5ec71bbd83fb86e3d6e6637db69dd3734dca35a3118f0ab6b33de1e444a4fbee0519b5384376719dd291d7d55a399b7d91e1056204001ff091409806be7d6ca88508357424234f03bf6cab9b1aa7136383b2a841b9f236684b6ffdbe21ca8346e8499f73d5ecdb2f9ab725e49c7637d78b96058bb0d831a7d08806dca3f665132536d4a39a1671e8d2dd8d2b58fa592674fa8e7749f7c243ef36316a3230407f9c8a59b675185d965bea1a4dc8cf37a48269105a9a220ba770c3d9fe817693832bc5e2aaa246444b2d3b7eebdf76dc928cfc72086cfca914d174391e80685e7c7912ecd584b1b4c61f33e601d8fa554a5db10456ab5af1aa0e09501ab8e20fe953390accde9eb4c5a22578ddf06b00e3c240a7cd54e1a70588d8069abca856de32e914f71cc416bc95646e63a7e1e573b6e519ec8008ef985b9f63e109c1aae68891a834c4509cfb937ebe81095a3c3fae18a1d21accba8d5551a4e7e203068e0c5592b530be89df896b04fc7ec0779368ddc240b1686b9319b8a49cedc31804ae44d5cd5ec3758782a4a527786436d9985c81b906deda76b2f573756bf6c71d74375a77d26a8f7fb6c979d348d55e77e010f8518f0fbbc366a63a9aa22363876d2d5e004a85c10bccb2e2650cb14dbf49a4ed6b447e5633c2f19a072bf84da4552451cfae262d5d7d0487dc826e893adbc09a376eba3cda15985d74ade3c82ee476e6a54ba155aabb8a7ca23785df9f5073fd3fd676950657a35eee8721c880005661c495b6e955a2877939722a1b8d837a8a6b9c4b58bbaad46bbe0e6d6280757e92f167adf2733d0aeee38c192ea9e6bb9683b5e584b2632cd2367ea0369b06b9d625dd91b08163c8df5b85b58654584208a4443b753d1d7b5f59a16aae8cad1e0605b723063e34f18dfec68930b9f5a3a6d9cd7ec406c81abb5394d50ccbd1cdd0a5ec55d289e35e808e2c8f5a5ac01c89146a08c2daefb4879baddc2c46b17f84de3e6a3f468a9c8ad700e9faff1d62a91ed87c2d9193c38f966b61d472e61e488781b6573901401ce2f1852eb2aed39babc7707a1c83ae7eca0cd2de25c535871f5fcc4098c42fe61643e5885a8804d170c74748c67e85790e18cb08fb65331eaf762ab1c241d69f3e5553b4557c726edeb13edbcac9db960991d096949060401f2d511177ef80d634a853b7b03189c54e4c5947f07c8d2597c58bf271d2e18865226abb26d7dbfac2918f93f8dbae872b1774a749697a638c03dc93b93d6d3915785af81a918bdef74b96ee6561c6fa960e96cb51dda8e297c0716fc94badd86b2a5a6a678576abb4bdc114bae483afeb7296d337eb98366291330d56a052d1c9c2f3e84c45f4b0f65c256f851483c03636a9fd58ff2f29789a18fe9933f32007d25df3a04648fb080aa23b6cdf67d75f565c3d0a2e74c588e9c89292f9f94b7e0656e020d60d71b7af6b4ace36bd97162f1b8fb73f0eba9849a76cf577e6052bf69843058950fa75bf667a529042ae531ddc6e74b3dbedbb2693081979de421cf4de8c48df51b828681b0b72553a97bec95a2b27103d0584286072ac37182f00ff9203f38af93f5d2d952b42f5d0216edbb76112da36ba71e46a0fa45f4d731ce200ca49c0d2a3d5a62f5a1723c7d8d560d10692ef0d39dd64ae1753d404b862340119f85cbc8c6ea0ef2b4674e2218e40bf1cdd8467bd1a64e45c1b74bab97d8d33184700baf3cc2817875598a90715f54830f5c7954"}, 0x1078) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) set_mempolicy(0x3, &(0x7f00000000c0)=0xa14, 0x2) 2018/04/06 12:22:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000670000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:07 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x400c630e}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:07 executing program 5: clone(0x200, &(0x7f0000fbf000), &(0x7f00000078c0), &(0x7f0000f8b000), &(0x7f0000007980)) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140), &(0x7f000027a000)) open$dir(&(0x7f000050bff8)='./file0\x00', 0x2, 0x0) [ 366.902904] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:07 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100)=0xfffffffffffffffa, 0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000000)=""/192, &(0x7f00000000c0)=0xc0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) close(r0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x400, 0x0) write$cgroup_int(r2, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00/9?P?'], 0x6) [ 366.998543] binder: 26577:26582 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 367.005813] binder: 26577:26582 unknown command 0 2018/04/06 12:22:07 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000f0ffffff00d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 367.073472] binder: 26577:26582 ioctl c0306201 200001c0 returned -22 [ 367.092275] binder: BINDER_SET_CONTEXT_MGR already set [ 367.110340] binder: 26577:26593 ioctl 40046207 0 returned -16 2018/04/06 12:22:08 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:22:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000007fffffff00d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:08 executing program 5: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x176a, 0x410002) r1 = perf_event_open(&(0x7f0000014f88)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, 0x0, 0x0, r0, 0x0) socket$pppoe(0x18, 0x1, 0x0) mmap(&(0x7f00002c3000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x10000000) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x101, 0x800) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f0000000080)={0xa90b}) 2018/04/06 12:22:08 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x4010632f}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:08 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:22:08 executing program 7: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000a6b000)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) getsockopt$inet_buf(r0, 0x0, 0x2d, &(0x7f0000000040)=""/124, &(0x7f00000000c0)=0x7c) write(r0, &(0x7f0000257fe1)="1f0000000104ff00fd43544007110000f3050100080003000100ff07ffdf00", 0x1f) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x161000) 2018/04/06 12:22:08 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x101, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000040)) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000100)={{0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x0, 0x0, 'sh\x00'}, {@dev={0xac, 0x14, 0x14}}}, 0x44) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000000c0)="25646c801a08ccfda10000000005d004") r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000440), &(0x7f0000000480)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f000012afe4)={0xa}, 0x1c) unshare(0x20000000) r4 = shmget$private(0x0, 0x4000, 0x121, &(0x7f0000ffb000/0x4000)=nil) shmctl$IPC_RMID(r4, 0x0) unshare(0x68000200) socketpair$ax25(0x3, 0x3, 0xcf, &(0x7f0000000540)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000580)}, 0xfffffffffffffe58) 2018/04/06 12:22:08 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') getsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r1, &(0x7f00000000c0)=0x200400000, 0x400000ff) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x1) [ 367.940074] binder: 26615:26616 unknown command 1074815791 [ 367.954544] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 367.956509] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 367.966848] binder: 26615:26616 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000067000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:08 executing program 5: r0 = open(&(0x7f0000fe0ff8)='./file0\x00', 0x80040, 0x0) r1 = open(&(0x7f00009f7ff8)='./file0\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000fdbff8)='./file0\x00', &(0x7f0000887ff8)='./file1\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000080)={0x3, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}]}) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) link(&(0x7f0000b71ff8)='./file1\x00', &(0x7f0000f16000)='./file0\x00') [ 367.988694] sctp: [Deprecated]: syz-executor0 (pid 26625) Use of int in max_burst socket option. [ 367.988694] Use struct sctp_assoc_value instead [ 368.016144] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/06 12:22:08 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mixer\x00', 0x20100, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000400)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000340)={r2, 0x54, "5f757e10dfa3266b65a50f1c25290ca9b905a8870c1c8af219425259ac3a5914cd0a96f1567c48663f534f350c6800df1c27f7da751397d328fd460ddea7d8818d73b9bc4702fd410f1f812e0b8d85838207c568"}, &(0x7f00000003c0)=0x5c) accept(r0, &(0x7f0000000040)=@pppoe={0x0, 0x0, {0x0, @link_local}}, &(0x7f00000000c0)=0x80) r3 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') chmod(&(0x7f0000000200)='./file0\x00', 0x10) ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x6) signalfd4(r3, &(0x7f0000000240)={0x10}, 0x8, 0x80800) ioctl$TCGETS(r4, 0x5401, &(0x7f0000000280)) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000100)={0xbbc2}, 0x4) sendfile(r4, r4, &(0x7f00009c7000)=0x400000, 0x400000ff) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000180)) [ 368.041329] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 368.060327] binder: BINDER_SET_CONTEXT_MGR already set 2018/04/06 12:22:08 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 368.084452] binder: 26615:26632 ioctl 40046207 0 returned -16 [ 368.086944] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. 2018/04/06 12:22:08 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000200d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 368.127545] binder: 26615:26616 unknown command 1074815791 [ 368.148211] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 368.159150] sctp: [Deprecated]: syz-executor0 (pid 26645) Use of int in max_burst socket option. [ 368.159150] Use struct sctp_assoc_value instead [ 368.178767] binder: 26615:26616 ioctl c0306201 200001c0 returned -22 [ 368.253765] IPVS: ftp: loaded support on port[0] = 21 [ 368.317009] Buffer I/O error on dev loop0, logical block 0, async page read 2018/04/06 12:22:09 executing program 5: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000000180)="1f0000000104ff00fd4354c007110000f305010008000100010423dcffdf00", 0x1f) syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101400) write(r0, &(0x7f0000000100)="1f0000000104fffffd3b54c007110000f30501000b000500000010d10200cf", 0x1f) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0xfffffffffffffffe}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={r1, 0x8e}, 0x8) 2018/04/06 12:22:09 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001c00004e2000089078df133b13b401beca2b96"], &(0x7f00000000c0)) r1 = open(&(0x7f0000000380)='./file0\x00', 0x1011fc, 0x40) recvmsg$netrom(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@full={{0x3, {"0c7db471e4ab97"}, 0xffffffff9cbc38ec}, [{"ab52434639cc6c"}, {"22f460a7cc2a64"}, {"c64e2776cf739a"}, {"a0b7c5cdd066fd"}, {"d6e244f3933e45"}, {"7d3eae6cba4fc4"}, {"5db0b2d3408cda"}, {"ddef7e0fd8f9d4"}]}, 0x48, &(0x7f0000000340)=[{&(0x7f00000001c0)="9ae9c6303a9a710bcab49d7374fd0ce33d7571747dbb45d0f2101c41112c95ba0c6422bd0482703489877a3907fc01563d546f37b610a850ae01d301afbf365593bcd48cfa1444aa4ce707e44e2b24a49f20139cb494ef872477420223a47c7e72845a55d6320089980bf6b0af6bec040b0a52d9ce570084b0ca74ff8757ac09d5309b2f3fe5c777909c41e6c8f3b0b4fa", 0x91}, {&(0x7f0000000280)="f1b0cd89b5bfab927ad8b07d0b8c5d1642a922e4350e7fe779e641b858c85c42f1b5c119c908afc340ec63791e874279326715fcf9373807438c540bd2139fba49cc914cbd900112f4d51cc97aba3520eec8ceba127a0e011b6f4baa68fd48efb833d81d10a06302917a2a30739d9b882e704cfe45baaf6b08f1c7f3f083d154e8b568ae07a250", 0x87}], 0x2, &(0x7f0000000380), 0x0, 0x20000000}, 0x0) pipe(&(0x7f0000000100)) 2018/04/06 12:22:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000200000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:09 executing program 7: r0 = socket$inet6(0xa, 0x5, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480), 0x0, &(0x7f0000000000)}, 0xc100) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000480)="ac196409c9bb21ebe73f4993", 0xc}], 0x1, &(0x7f0000002000)}, 0x8000) syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x200) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000000)}, 0x0) 2018/04/06 12:22:09 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000007fffffe00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:09 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000040)=0x7, 0x4) 2018/04/06 12:22:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40046304}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:09 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0xc0045877) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) [ 368.850222] Buffer I/O error on dev loop0, logical block 0, async page read [ 368.903956] binder: 26660:26662 unknown command 0 [ 368.910873] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. [ 368.919295] binder: 26660:26662 ioctl c0306201 200001c0 returned -22 [ 368.930674] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 368.962276] netlink: 'syz-executor5': attribute type 5 has an invalid length. [ 368.987932] binder: BINDER_SET_CONTEXT_MGR already set [ 368.998957] netlink: 3 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/06 12:22:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000000000100d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:09 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f7e000)={0x0, 0x0, &(0x7f0000f7efd0)=[{&(0x7f0000000140)="db63fb00dd9cad6068f820d5a1bfc36271551a22849d9ab1b25cd4ff2936058d8c67d682041141017b18762214bdf90f5fed0166eab29e73", 0x38}], 0x1, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000b2dfc8)={&(0x7f00007ebffa)=@hci, 0x80, &(0x7f0000f75000)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1, &(0x7f0000ec7000)}, 0x0) socketpair(0x4, 0x4, 0x9, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffff9c, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) write(r1, &(0x7f0000000000)="6888981c721e2135c7f4077cecf649faf7dd6f862d3b2cdaf47a0b263aced4ae6be112e89844c31f27ec2a517569c110fa2f7a1b7e", 0x35) [ 369.008109] binder: 26660:26680 ioctl 40046207 0 returned -16 2018/04/06 12:22:09 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000200", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:22:09 executing program 7: r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x3f8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000ac0], 0x0, &(0x7f0000000240), &(0x7f0000000ac0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xb0, 0x130, 0x180, [@quota={'quota\x00', 0x18, {{0x96}}}]}, [@common=@redirect={'redirect\x00', 0x8}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x198, 0x1e8, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}, [@common=@mark={'mark\x00', 0x10}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x470) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x3, [0x0, 0x401, 0x100000000]}, 0xa) 2018/04/06 12:22:09 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000100), 0x1000, 0x0, &(0x7f0000000180)="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"}) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000001280)=""/70) getsockname$netlink(r1, &(0x7f0000000100), &(0x7f00000011c0)=0xc) r2 = getuid() ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x20200000000000) mount(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)='v7\x00', 0x1000000, &(0x7f0000001400)="907d703ba02161833fae866fbaa388887c679600025a71c578379db0449417446eacc81bb2967819da55d989bb9f2f0fcdff38ed501701903ff3f3619ca20c45a37455ee916d8587c68a1262ecce7787d0890d4f7b474af36a82fb6a285b3adccedc9ec19aed7506f7a062e52efda1dd8a4f2604b28046c9edadc06f3c663c15bbce86706cb1bf8277ba6fdc23cc257f88487eb5617d207007318d46caa4a5bddd842cdfe184ff235aa14c9e14470fca0877a6af926bb7522d8568bfa4da26407fc3a4864c947ec51e472ff5aac831d54529562533491fc11fe3366f") getresgid(&(0x7f0000001200)=0x0, &(0x7f0000001240), &(0x7f0000001300)) fchown(r0, r2, r3) sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e22}, 0x6e) connect$netlink(r1, &(0x7f00000000c0)=@unspec, 0xc) [ 369.069616] netlink: 'syz-executor5': attribute type 5 has an invalid length. 2018/04/06 12:22:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000f0ffff00d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:09 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x630b}], 0x0, 0x0, &(0x7f0000000180)}) [ 369.133073] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:09 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0x543d) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) syz_open_pts(r1, 0x480) shutdown(r0, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/06 12:22:09 executing program 5: membarrier(0x40, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x10000, 0x80) r1 = socket$packet(0x11, 0x2, 0x300) accept4$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bond0\x00', r2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280100040000040000a600000000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000008001300", @ANYRES32=0x0], 0x28}, 0x1}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000240)={@loopback={0x0, 0x1}}) 2018/04/06 12:22:09 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000007006000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:09 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500007fffffff00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 369.241943] binder: 26711:26714 ERROR: BC_REGISTER_LOOPER called without request [ 369.249687] binder: 26711:26714 unknown command 0 [ 369.270639] binder: 26711:26714 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:09 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000026000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) r1 = syz_open_dev$sndtimer(&(0x7f0000022ff1)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f000000efcc)={{0x100000001}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x101, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000000040)=""/32) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close(r1) [ 369.329891] binder: BINDER_SET_CONTEXT_MGR already set [ 369.361418] binder: 26711:26721 ioctl 40046207 0 returned -16 [ 369.377868] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:10 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x2, 0x9, 0x3f9, 0x0, 0x0, 0x7f, 0x80, 0x3, 0x6, 0x10000, 0x100, 0x3, 0x6, 0x0, 0x1ff, 0x6, 0xfff, 0x28a, 0x6, 0x1f4, 0xf28, 0x5, 0x238, 0x3, 0x2, 0xc969, 0x8, 0x0, 0xe8, 0x2, 0x1, 0x6, 0xfffe000, 0x1, 0x9, 0xfffffffffffffffe, 0x0, 0x3, 0x2, @perf_bp={&(0x7f00000000c0), 0x9}, 0x20100, 0x4, 0x401, 0x3, 0x400, 0x4, 0x7ff}, r1, 0x6, r0, 0x8) sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) getsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/06 12:22:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000fffffff000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:10 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r2, 0x400, 0x70bd29, 0x25dfdbfb, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x9d}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x8}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [], {0x95}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f0000000040), 0xffffffffffffff8b, 0x0, 0x0, 0xfffffd4a) r4 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f000031aff8)={r0, r3}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000540)) 2018/04/06 12:22:10 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40086310}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:10 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x125d) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:22:10 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0x543d) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) syz_open_pts(r1, 0x480) shutdown(r0, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/06 12:22:10 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:10 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f00000000c0)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffff}, 0x2}}, 0x20) write$rdma_cm(r0, &(0x7f0000000180)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, r1}}, 0x7dbc) write$rdma_cm(r0, &(0x7f0000000040)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) wait4(0x0, 0x0, 0x0, &(0x7f0000781f70)) ioprio_set$pid(0x2, 0x0, 0x4001) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f00000002c0)={0xfffffffffffffffa, 0x0, 0x0, 0x7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000080), 0x8) clone(0x0, &(0x7f000052cf69), &(0x7f0000850ffc), &(0x7f0000e9b000), &(0x7f0000000000)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0x262) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000003c0)=0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x0, 0x0) ioctl$TCXONC(r4, 0x540a, 0x7fffffff8000) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000100)=0x400008) rt_tgsigqueueinfo(r2, r3, 0x19, &(0x7f0000000400)={0x2b, 0x10000, 0xb4, 0x5}) getsockopt$sock_buf(r4, 0x1, 0x3f, &(0x7f0000000500)=""/161, &(0x7f0000000140)=0xa1) memfd_create(&(0x7f00000005c0)='\x00', 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev, @in=@multicast2}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) [ 370.042110] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 370.067150] binder: 26753:26755 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 370.074658] binder: 26753:26755 unknown command 0 2018/04/06 12:22:10 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000009effffff00d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:10 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0x543d) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) syz_open_pts(r1, 0x480) shutdown(r0, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/06 12:22:10 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000000c0)={0x3, r0}) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000180)={{{@in=@multicast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000280)=0xe8) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000480)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0xe51b, 0x4e21, 0xe5, 0xa, 0xa0, 0x20, 0xaf, 0x0, r2}, {0x271, 0x0, 0x0, 0x6, 0x8000, 0x1, 0x99b, 0x5}, {0x8001, 0x400000000000, 0x10001, 0x100000000}, 0x2d, 0x0, 0x0, 0x1, 0x3}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d4, 0x32}, 0xa, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3504, 0x0, 0x1, 0x100, 0x3, 0xffffffffffffff81, 0x40}}, 0xe8) connect$ax25(r1, &(0x7f0000000100)={0x3, {"f4fd02d6d7bcb7"}, 0x8001}, 0x10) getpgid(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) getpid() fcntl$getown(r0, 0x9) r3 = getpid() r4 = syz_open_procfs(r3, &(0x7f0000000380)="d3054e06a926c1ce91cc98d06181d255aeaab594a51b08dc764e7a5b7f2a2dd1acb3a62b403bc96d99836d69450b9d8d79bba59b0faffe43ca8702bc2e06f3553d2243f0db5d9fef84bab937cf6960bb32efd9a1c20e49b8292dbf9b71031d8d557e3aaae2555e97eb03124ad9f0581af257b3b9bb86d0e7444d3ce2358a72ed6776c46d344c2637224d1291e0796ccaf3f58f67b3fc15f906af9dafdd8ea927483a967a4ec615fa369bc58961f9729367effae77c9cc5e3643990b05de3cb01a38d2c7b4b5690d4bf0699ea1f0f49b79b0f9f2e53c89052da7b960c40a45c5099728923156f027918fcc321555b54") ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000140)) sendfile(r4, r4, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:10 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000500", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 370.142190] binder: 26753:26755 ioctl c0306201 200001c0 returned -22 [ 370.177230] binder: BINDER_SET_CONTEXT_MGR already set [ 370.213897] binder: 26753:26769 ioctl 40046207 0 returned -16 [ 370.257925] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000fffff00000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40046302}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:11 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) bind$inet(r0, &(0x7f0000b9bff0)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed\x00', 0x543d) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffffffffffffbb, 0x20020003, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) syz_open_pts(r1, 0x480) shutdown(r0, 0x1) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) 2018/04/06 12:22:11 executing program 4: r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') close(r0) sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x104, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x101}, 0x2c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0xffffff07) 2018/04/06 12:22:11 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c06) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:22:11 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/arp\x00') r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xb}) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f00000002c0)={{0x2}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0xa, {0x2, 0x0, @rand_addr}, 'syzkaller0\x00'}) pread64(r0, &(0x7f0000000100)=""/8, 0xffffff13, 0x0) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x78) [ 371.268338] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 371.279860] binder: BC_ACQUIRE_RESULT not supported [ 371.303428] binder: 26803:26804 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:11 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x4, 0x360, 0xffffffff, 0xf0, 0x0, 0x1b0, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f0000000180), {[{{@ip={@local={0xac, 0x14, 0x14, 0xaa}, @empty, 0xffffffff, 0xffffff00, 'ipddp0\x00', 'gre0\x00', {}, {0xff}, 0x2e, 0x1, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x8, 0x8, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0xe}}}, {{@ip={@rand_addr=0xe6d8, @rand_addr=0x8000, 0x0, 0xffffffff, 'ip6tnl0\x00', 'bridge0\x00', {0xff}, {0xff}, 0x86, 0x1, 0x10}, 0x0, 0x98, 0xc0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2=0xe0000002, @empty, 0xffffffff, 0xffffff00, 'syzkaller0\x00', 'teql0\x00', {}, {}, 0xb6, 0x0, 0x10}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x200, 0x408, 0x1}}, @common=@inet=@socket1={0x28, 'socket\x00', 0x1, 0x1}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x3c0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='limits\x00') socketpair(0xd, 0x2, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000140)=r3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x3}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f00000000c0)={'bond0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000040), 0x4) 2018/04/06 12:22:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000f0000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:11 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f017000660f23790f18f90f0d7df301e5e28e0f01cf0f1ba316842e65666c0f0119", 0x22}], 0x1, 0x0, &(0x7f00000001c0), 0x0) pipe(&(0x7f00000000c0)) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) msgsnd(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300285e2ef91f181ece"], 0xa, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/06 12:22:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000000007fffffff00", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) [ 371.341734] binder: BINDER_SET_CONTEXT_MGR already set [ 371.361109] binder: 26803:26821 ioctl 40046207 0 returned -16 2018/04/06 12:22:11 executing program 4: perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r0, r0, &(0x7f00009c7000)=0x400000, 0x400000ff) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x400448c9, &(0x7f0000000040)={{0x8, 0x2, 0x9, 0x1, 0xffff, 0xfffffffffffffff8}, 0x8}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000080)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000200)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001340)={0xa8, 0x0, &(0x7f0000000280)=[@release={0x40046306, 0x2}, @acquire={0x40046305, 0x3}, @increfs_done={0x40106308, r1, 0x3}, @reply={0x40406301, {0x4, 0x0, 0x1, 0x0, 0x11, 0x0, 0x0, 0x48, 0x8, &(0x7f0000000180)=[@ptr={0x70742a85, 0x0, &(0x7f00000000c0), 0x1, 0x2, 0x2c}, @fda={0x66646185, 0x4, 0x0, 0x7}], &(0x7f0000000100)=[0x0]}}, @exit_looper={0x630d}, @exit_looper={0x630d}, @increfs_done={0x40106308, r2}, @increfs={0x40046304, 0x4}, @clear_death={0x400c630f, 0x0, 0x1}, @free_buffer={0x40086303, r3}], 0x1000, 0x0, &(0x7f0000000340)="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"}) 2018/04/06 12:22:11 executing program 0: perf_event_open(&(0x7f000025c000)={0x5, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) rmdir(&(0x7f0000000080)='./file0//ile0\x00') mkdir(&(0x7f0000002a40)='./file0//ile0\x00', 0x0) 2018/04/06 12:22:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x4010635b}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b902000000f000000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 371.463109] kernel msg: ebtables bug: please report to author: entry offsets not in right order 2018/04/06 12:22:11 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f75746500000000000400", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:11 executing program 0: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000000)=ANY=[@ANYBLOB="687696efec548430e198770b091d00000000000000000a004e2000000000ff0100000000000000000000000000010000000000000000000000497cdbd3ac16abd400040000000000000200020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000054028"], 0x1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00003cf000)={&(0x7f0000f4dff4)={0x10}, 0x37b, &(0x7f00005ad000)={&(0x7f00008d8000)=@migrate={0x15c, 0x21, 0x1, 0x0, 0x0, {{@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, @in6=@dev={0xfe, 0x80}}}, [@migrate={0x10c, 0x11}]}, 0x15c}, 0x1}, 0x0) [ 371.539605] binder: 26850:26852 unknown command 1074815835 [ 371.573233] binder: 26850:26852 ioctl c0306201 200001c0 returned -22 2018/04/06 12:22:11 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b9020000000006700000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 371.615693] binder: BINDER_SET_CONTEXT_MGR already set [ 371.624592] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 371.650408] binder: 26850:26856 ioctl 40046207 0 returned -16 2018/04/06 12:22:12 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='io.stat\x00', 0x0, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0xba9, &(0x7f00000000c0)=0x4) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) 2018/04/06 12:22:12 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000004fed)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000880)=0x4) quotactl(0x7fffffff, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000500)="a2de722693a56e59de876ab8d26e7678df43b1998ea70fedec2390235bd657ccafc45dfd65ef303492") r2 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x4000) r3 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x40) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f00000002c0)={0x81, {{0x2, 0x4e24, @rand_addr=0x4}}}, 0x88) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000000, 0x10, r2, 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f0000000100)=""/128) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000200)=""/72) 2018/04/06 12:22:12 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000c93000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x14, 0x0, &(0x7f000000cf68)=[@request_death={0x400c630f}, @enter_looper={0x630c}], 0x1, 0x0, &(0x7f0000008f37)="c2"}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r3 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x5, 0x80000) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012fd0)={0xc, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1063084000000000000000004f64a80c89b0a013b20ede31c673ff843b3af74ec1252a54d374a28d96f84d4ba8520096a162463f5b1bd2f2bd0d24ea744f07cac15be7d3a3fd59c8c909b28fd68def88f0533f7d4419d12bf904db0fc4eac84f428c22818e17a53976bc96d0b156f3100f8300595fa8c5105055b21ab78b80bdb85623e070ffca4b31936efead0bf0d7d1191ccad9ff657bd54a8526ce8d318fea4003870ae9eafec8b0431681e2eba45f"], 0x0, 0x0, &(0x7f0000012000)}) 2018/04/06 12:22:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106312}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000020800", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000f0000000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:12 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c03) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:22:12 executing program 0: r0 = gettid() ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000001080)={0x0, 0x0, 0xffffffffffffff9c}) r1 = syz_open_procfs(r0, &(0x7f0000001240)='net\x00\x00\x00\x00p\x00') exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f0000000040)={0x9, 0x7fff, 0x1, 0x2, 0x3, 0x1ff, 0x7, 0x100}, &(0x7f00000010c0)={0x3ff, 0xbbaa, 0x7ff, 0x80000001, 0x9, 0x3f, 0x703, 0x8}, &(0x7f0000001100)={0x1, 0x8, 0x8000, 0x4, 0x81, 0x2, 0x9, 0x3}, &(0x7f0000001140)) getdents64(r1, &(0x7f0000000080)=""/4096, 0x1000) 2018/04/06 12:22:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000fffffff0d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) [ 372.405060] binder: 26881:26883 unknown command 1074815762 [ 372.410850] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 372.427246] binder: 26881:26883 ioctl c0306201 200001c0 returned -22 [ 372.444157] binder: BINDER_SET_CONTEXT_MGR already set [ 372.453550] binder: 26885:26891 ioctl 40046207 0 returned -16 [ 372.460811] binder: BINDER_SET_CONTEXT_MGR already set [ 372.480524] binder: 26891 RLIMIT_NICE not set [ 372.492116] binder: 26881:26897 ioctl 40046207 0 returned -16 2018/04/06 12:22:12 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00\x00`\x00', 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="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"]}, 0x280) 2018/04/06 12:22:12 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000500)={0xfffffffffffffffd, 0x3, 0x10000, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x7, 0x1, 0x100000000, 0x5, 0xf8b3, 0x1f, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) socket$key(0xf, 0x3, 0x2) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x400000, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="014e17c0aa28583d6bc2ad042c358469bf85e2c426d5b74b7aee1083fcefc02a18297ba522bc934d1430e728a0ba3d2cc682f4cb7b7ef9bc44a680d42d66585fcdeea2437af5c7115eeef53cfa3139cc70ce735f5a99cd798a8c565e2192ab", 0x5f, 0x2}, {&(0x7f0000000180)="85726be3db9766f80329c8e91b53e701a02de02722728687910e648f2de2081b1d90e0ea9346a6ef6a99adbc62d92bed48a218576e44701e14e3e67ec8b5cc0d8fcedadb2f9ec785074d46da9551e858160aba8413cd", 0xffffffffffffff4d, 0x1}, {&(0x7f0000000200)="eca0458ed10c21779f296ad04e6d8942169234c2437f8e869940f12300fdc2109b7da0af43bda0ae61c8877b535bfacb9770dba89d83ac53407a82d0e15c1899659981c05182d34d892d5af0a2edc395c61801c262c542f0183246527e9c440042b6c6a740547a881044af3606e9bdd244684cb8806d5505", 0x78, 0xfffffffffffffffc}, {&(0x7f0000000280)="8bc72c21fb279895263415c552f8ef94b251fa1ab7af25e459b2c8b033de8817ca46cf58b48f370c97f50d47830a40477bfc1b2e143b0e13ccfc33a9ef57b1d1e5b44493dcd1ff361f2c7e65593093242afe370e12a86ee34aaf2ec47dd1b237f126251ef23a35bbc98f2b964e73a9d4851f3bbeb3a53b78a18baaece5c07714b4990702f2da2969ea3c2bf8b91ce2b8cbbf78b55a5562c9eca68acc71a603", 0x9f, 0x1f}, {&(0x7f0000000340)="94ac3aa8e35e80d0bf9fa1f3b5f146818350f2f76705c1591e6bff413963cde1defbbc8ce0a036c378e778a84acf4020b28af5492926b1f38f814c1323eb4f26132757a6ae6fad84ea42ad676b21d2e48b40859fe2cf90f3dd74927349b4421a9ca11ca0d6147c4e673d55debd6a10cde7ed0b975bd9b057f1e3ca11a44310ec91a607b7f5e6b748479dad0af62e6cdbb2fba7780a3744355871f7", 0x9b, 0x10000}], 0x0, &(0x7f0000000480)={[{@fragment_data='fragment=data', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000640)=r2) 2018/04/06 12:22:12 executing program 5: r0 = socket(0x10000000000010, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000002e00010000350000000000000000f9ffffffffffffffffff08fffff40401006115", 0x25) syz_extract_tcp_res(&(0x7f0000000080), 0x9, 0xf34) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in=@dev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000240)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20040000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@ipv4_newroute={0x58, 0x18, 0xf01, 0x70bd2c, 0x25dfdbfe, {0x2, 0x80, 0x10, 0x800, 0xfd, 0x0, 0xc8, 0x7, 0x2000}, [@RTA_FLOW={0x8, 0xb, 0x1f}, @RTA_OIF={0x8, 0x4, r1}, @RTA_SRC={0x8, 0x2, @local={0xac, 0x14, 0x14, 0xaa}}, @RTA_PREFSRC={0x8, 0x7, @multicast2=0xe0000002}, @RTA_ENCAP={0xc, 0x16, @typed={0x8, 0x1d, @u32=0x6}}, @RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x13}}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) [ 372.502636] QAT: Invalid ioctl [ 372.519376] binder: 26885:26891 BC_DEAD_BINDER_DONE 0000000000000000 not found 2018/04/06 12:22:12 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000f0ffffffd528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x2000000}], 0x0, 0x0, &(0x7f0000000180)}) [ 372.565246] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 372.587105] QAT: Invalid ioctl 2018/04/06 12:22:13 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='statm\x00') fcntl$setpipe(r0, 0x407, 0x100000000) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0x2eb, 0x1ffe000}, &(0x7f0000000780)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={r2, 0x9, 0x1, 0x2, 0x7, 0x80000001}, &(0x7f0000000800)=0x14) sendmsg$key(r1, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001030000000000000000100000000303000000000000000000001d0000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000640)={@loopback=0x7f000001, @multicast2=0xe0000002}, 0x8) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x1000, 0xb, 0x39, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_sa={0x2, 0x1, 0x4d6, 0x1ff, 0x7, 0x4c, 0x2}, @sadb_address={0x3, 0x17, 0x7f, 0x20, 0x0, @in={0x2, 0x4e20, @multicast2=0xe0000002}}, @sadb_x_sec_ctx={0xb, 0x18, 0x4, 0x9, 0x4a, "54a2121d37b4b9fa4b0617e20708a3468c09d2cecccaf35c5b63f3f297b7987c966c229ca8b239662cce75e7f5d4afc18e88748e741b85dd5733579b839279a90533071936b00ea541dc"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x9, 0x14, 0x14}, @sadb_x_nat_t_type={0x1, 0x14, 0xffffffffffffff01}, @sadb_x_filter={0x5, 0x1a, @in, @in=@multicast1=0xe0000001, 0x19, 0x14, 0x4}, @sadb_address={0x5, 0x5, 0xff, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x6}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_sec_ctx={0x14, 0x18, 0x5, 0x7ff, 0x93, "507b89cd607b462ed91477c41296ee96aa6321a99708730cc5e9b3dc004e50f4be9041f6e7ba2eb5fd46a8a5609e1c09ed6c230fe76cab488858f7fd588398408546cad24753ac49346cb0c9c54ecb11600126d61361a8979a1b29beceacc783695c6b5a6feb9d34f16aa4d02b4b1e54675b2bc1f954924d1021f8b1d7fc8e6805e108ee9a01437ad177ecd4618c0739e2fcc9"}]}, 0x1c8}, 0x1}, 0x44001) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000680)=0x7) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x3, 0x100, 0x5, 0x37, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x20, 0x9, 0x788, 0x0, "c559094191fd56cff924409a6880d2300bc536d30d7a8a1c7bd2e6c65f827afc3c54e97d5068d9c0e27690ecc1359fdb2e083bf2e8fe2408b0c1600148284253f3f44ad6a2c4eb861606acaf8d3b15ab7989a7a545cd8a30326a3199111c37777ad6d542f039829044d320a14be69855b5ff38147521bc842e7a6f1e2233d7d6c72cc7645ddd9d1cf74386497450d3d1113894bd0f1398413b720f02a81f74bda14701ede9db66f0979cbfb5b4dd86d0b40e9f9023458fcb2fd899906360ac0b213f02793ef5692e501d0923b620c8f44a45a8116e58649783de829de4a2acd42ab1b402ef94da070f77ee077a6afb127d"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x1e, 0x4, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0xfff, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_address={0x3, 0x6, 0x3b, 0x80, 0x0, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x7, 0x32, 0x20, 0x0, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_lifetime={0x4, 0x4, 0x9, 0x0, 0x6, 0x8001}]}, 0x1b8}, 0x1}, 0x4000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)) [ 372.616813] binder: 26885:26912 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 372.617694] binder: 26914:26915 BC_INCREFS_DONE u0000000000000000 node 213 cookie mismatch 0000000002000000 != 0000000000000000 [ 372.654162] binder: 26885:26891 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 372.661287] binder: 26891 RLIMIT_NICE not set [ 372.699709] QAT: Invalid ioctl [ 372.700591] binder: BINDER_SET_CONTEXT_MGR already set [ 372.709835] binder: 26885:26923 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 372.734881] binder: 26914:26922 ioctl 40046207 0 returned -16 [ 373.228233] [ 373.229889] ================================================ [ 373.235666] WARNING: lock held when returning to user space! [ 373.241450] 4.16.0+ #3 Not tainted [ 373.244979] ------------------------------------------------ [ 373.250756] syz-executor2/26940 is leaving the kernel with locks still held! [ 373.257923] 1 lock held by syz-executor2/26940: [ 373.262568] #0: 00000000277a2c12 (&lo->lo_ctl_mutex/1){+.+.}, at: lo_ioctl+0x8d/0x1ec0 2018/04/06 12:22:13 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={"62726f7574650000000300", 0x20, 0x2, 0x208, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000680], 0x0, &(0x7f0000000040), &(0x7f0000000680)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0100000009000000000000004eff6970365f76746930000000000000000074756e6c30000000000000000000000062637366300000000000000000000000697036677265746170300000000000000180c2000000000000000000aaaaaaaaaaaa000000000001000000000000a0000000d00000006367726f75700000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff010000000d00000000000000000065727370616e300000000000000000006970365f767469300000000000000000697036677265746170300000000000006970365f7674693000000000000000000180c20000000000000000000180c200000000000000000000007000000070000000a80000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff00000000"]}, 0x280) 2018/04/06 12:22:13 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002000c53b2000b90200000000fffff000d528201021e181b493576ec4a89eaf91b38598f494ad21f7c35449c4f71549b9051c982f2b5f09607c8785f5bbe15aef9af3681ef8b253d887c806eb456cadad6fb4b2043365a73bac201c2610fd06f5cf412096d5f6882220768c05f59c62e51ff2a59c6258d3d49e02b6fbb55d5d66c1e8c58a42b3e4191cf92fbc889d40c5c406beaf6d9a487e78e7ca66dadc72dea4eeb260a4dc5bb2f2600c3c28748cf8eb5e42e61446b78cf5003038565dc5fb"], 0x1}, 0x1}, 0x0) 2018/04/06 12:22:13 executing program 1: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000140)=[@increfs_done={0x40106308, 0x0, 0x500}], 0x0, 0x0, &(0x7f0000000180)}) 2018/04/06 12:22:13 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10, &(0x7f0000000000)=0x78, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0x20000000000000e8}]}, 0x10) r1 = open(&(0x7f0000000040)='./file0\x00', 0x60000, 0x4) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000080)={0x40, 0xf, 0x3, 0x8, "8e5ff23fd7d6b49e046a5391b28d41c9e0cb319559d74ae8ef2e13ee125bb779"}) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="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", 0x2dd}], 0x1}}], 0x1, 0x0) recvfrom$inet(r0, &(0x7f00009be000)=""/11, 0xe8, 0x0, 0x0, 0xffffffffffffff4e) shutdown(r0, 0x1) 2018/04/06 12:22:13 executing program 5: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000006c0)='statm\x00') fcntl$setpipe(r0, 0x407, 0x100000000) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000740)=@sack_info={0x0, 0x2eb, 0x1ffe000}, &(0x7f0000000780)=0xc) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000007c0)={r2, 0x9, 0x1, 0x2, 0x7, 0x80000001}, &(0x7f0000000800)=0x14) sendmsg$key(r1, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d000010000000160000000000000003000600000000000200000031ebf8c7000000000000000003000500000000000200000000000000000000000000000008001200020001030000000000000000100000000303000000000000000000001d0000010100c58a47566f8d45157c97ec3a0000000000000000000000000000"], 0x80}, 0x1}, 0x0) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000600)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000000640)={@loopback=0x7f000001, @multicast2=0xe0000002}, 0x8) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x3, 0x1000, 0xb, 0x39, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_spirange={0x2, 0x10, 0x4d4, 0x4d3}, @sadb_sa={0x2, 0x1, 0x4d6, 0x1ff, 0x7, 0x4c, 0x2}, @sadb_address={0x3, 0x17, 0x7f, 0x20, 0x0, @in={0x2, 0x4e20, @multicast2=0xe0000002}}, @sadb_x_sec_ctx={0xb, 0x18, 0x4, 0x9, 0x4a, "54a2121d37b4b9fa4b0617e20708a3468c09d2cecccaf35c5b63f3f297b7987c966c229ca8b239662cce75e7f5d4afc18e88748e741b85dd5733579b839279a90533071936b00ea541dc"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast1=0xe0000001, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x9, 0x14, 0x14}, @sadb_x_nat_t_type={0x1, 0x14, 0xffffffffffffff01}, @sadb_x_filter={0x5, 0x1a, @in, @in=@multicast1=0xe0000001, 0x19, 0x14, 0x4}, @sadb_address={0x5, 0x5, 0xff, 0x20, 0x0, @in6={0xa, 0x4e21, 0x10000, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x6}}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_sec_ctx={0x14, 0x18, 0x5, 0x7ff, 0x93, "507b89cd607b462ed91477c41296ee96aa6321a99708730cc5e9b3dc004e50f4be9041f6e7ba2eb5fd46a8a5609e1c09ed6c230fe76cab488858f7fd588398408546cad24753ac49346cb0c9c54ecb11600126d61361a8979a1b29beceacc783695c6b5a6feb9d34f16aa4d02b4b1e54675b2bc1f954924d1021f8b1d7fc8e6805e108ee9a01437ad177ecd4618c0739e2fcc9"}]}, 0x1c8}, 0x1}, 0x44001) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000680)=0x7) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x3, 0x100, 0x5, 0x37, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x20, 0x9, 0x788, 0x0, "c559094191fd56cff924409a6880d2300bc536d30d7a8a1c7bd2e6c65f827afc3c54e97d5068d9c0e27690ecc1359fdb2e083bf2e8fe2408b0c1600148284253f3f44ad6a2c4eb861606acaf8d3b15ab7989a7a545cd8a30326a3199111c37777ad6d542f039829044d320a14be69855b5ff38147521bc842e7a6f1e2233d7d6c72cc7645ddd9d1cf74386497450d3d1113894bd0f1398413b720f02a81f74bda14701ede9db66f0979cbfb5b4dd86d0b40e9f9023458fcb2fd899906360ac0b213f02793ef5692e501d0923b620c8f44a45a8116e58649783de829de4a2acd42ab1b402ef94da070f77ee077a6afb127d"}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2=0xe0000002, @in=@multicast2=0xe0000002, 0x1e, 0x4, 0x10}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d5}, @sadb_x_nat_t_port={0x1, 0x17, 0x4e22}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}, @sadb_x_sa2={0x2, 0x13, 0xfff, 0x0, 0x0, 0x70bd2c, 0x3505}, @sadb_address={0x3, 0x6, 0x3b, 0x80, 0x0, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x7, 0x32, 0x20, 0x0, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, @sadb_lifetime={0x4, 0x4, 0x9, 0x0, 0x6, 0x8001}]}, 0x1b8}, 0x1}, 0x4000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000700)) 2018/04/06 12:22:13 executing program 2: recvfrom(0xffffffffffffffff, &(0x7f0000000280)=""/191, 0xbf, 0x0, &(0x7f0000000340)=@can={0x1d}, 0x80) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/loop-control\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000700)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, r3}, &(0x7f0000000140)=0x51) fcntl$F_SET_RW_HINT(r1, 0x40c, &(0x7f0000000600)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socket(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x8936, &(0x7f0000000000)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'bridge0\x00', 0x21fff}) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x1278) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x82400, 0x0) getresgid(&(0x7f00000001c0), &(0x7f0000000440), &(0x7f0000000480)) dup2(r1, r0) 2018/04/06 12:22:13 executing program 0: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x1, 0x0) perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000500)={0xfffffffffffffffd, 0x3, 0x10000, 0xfffffffffffffffc, 0xfffffffffffffffb, 0x7, 0x1, 0x100000000, 0x5, 0xf8b3, 0x1f, 0xffffffffffffffff}) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/protocols\x00') sendfile(r1, r1, &(0x7f00009c7000)=0x400000, 0x400000ff) socket$key(0xf, 0x3, 0x2) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x400000, 0x5, &(0x7f0000000400)=[{&(0x7f00000000c0)="014e17c0aa28583d6bc2ad042c358469bf85e2c426d5b74b7aee1083fcefc02a18297ba522bc934d1430e728a0ba3d2cc682f4cb7b7ef9bc44a680d42d66585fcdeea2437af5c7115eeef53cfa3139cc70ce735f5a99cd798a8c565e2192ab", 0x5f, 0x2}, {&(0x7f0000000180)="85726be3db9766f80329c8e91b53e701a02de02722728687910e648f2de2081b1d90e0ea9346a6ef6a99adbc62d92bed48a218576e44701e14e3e67ec8b5cc0d8fcedadb2f9ec785074d46da9551e858160aba8413cd", 0xffffffffffffff4d, 0x1}, {&(0x7f0000000200)="eca0458ed10c21779f296ad04e6d8942169234c2437f8e869940f12300fdc2109b7da0af43bda0ae61c8877b535bfacb9770dba89d83ac53407a82d0e15c1899659981c05182d34d892d5af0a2edc395c61801c262c542f0183246527e9c440042b6c6a740547a881044af3606e9bdd244684cb8806d5505", 0x78, 0xfffffffffffffffc}, {&(0x7f0000000280)="8bc72c21fb279895263415c552f8ef94b251fa1ab7af25e459b2c8b033de8817ca46cf58b48f370c97f50d47830a40477bfc1b2e143b0e13ccfc33a9ef57b1d1e5b44493dcd1ff361f2c7e65593093242afe370e12a86ee34aaf2ec47dd1b237f126251ef23a35bbc98f2b964e73a9d4851f3bbeb3a53b78a18baaece5c07714b4990702f2da2969ea3c2bf8b91ce2b8cbbf78b55a5562c9eca68acc71a603", 0x9f, 0x1f}, {&(0x7f0000000340)="94ac3aa8e35e80d0bf9fa1f3b5f146818350f2f76705c1591e6bff413963cde1defbbc8ce0a036c378e778a84acf4020b28af5492926b1f38f814c1323eb4f26132757a6ae6fad84ea42ad676b21d2e48b40859fe2cf90f3dd74927349b4421a9ca11ca0d6147c4e673d55debd6a10cde7ed0b975bd9b057f1e3ca11a44310ec91a607b7f5e6b748479dad0af62e6cdbb2fba7780a3744355871f7", 0x9b, 0x10000}], 0x0, &(0x7f0000000480)={[{@fragment_data='fragment=data', 0x2c}, {@nodiscard='nodiscard', 0x2c}]}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syz_tun\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000640)=r2) 2018/04/06 12:22:13 executing program 4: getrusage(0x1, &(0x7f0000000200)) r0 = perf_event_open(&(0x7f0000220000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) execveat(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=[&(0x7f00000000c0)='net/protocols\x00'], &(0x7f00000001c0)=[&(0x7f0000000140)='\x00', &(0x7f0000000180)='net/protocols\x00'], 0xc00) syz_open_procfs(0x0, &(0x7f0000000040)='net/protocols\x00') sendfile(r0, r1, &(0x7f00009c7000), 0x400000ff) [ 373.541777] kernel msg: ebtables bug: please report to author: entry offsets not in right order [ 373.553193] binder: 26955:26957 BC_INCREFS_DONE u0000000000000000 node 214 cookie mismatch 0000000000000500 != 0000000000000000 [ 373.602261] ================================================================== [ 373.609701] BUG: KASAN: use-after-free in __mutex_lock+0x175f/0x17f0 [ 373.616208] Read of size 4 at addr ffff8801d04f0360 by task syz-executor2/26961 [ 373.623655] [ 373.625296] CPU: 1 PID: 26961 Comm: syz-executor2 Not tainted 4.16.0+ #3 [ 373.632136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 373.641493] Call Trace: [ 373.644074] dump_stack+0x1b9/0x294 [ 373.647691] ? dump_stack_print_info.cold.2+0x52/0x52 [ 373.652866] ? printk+0x9e/0xba [ 373.656130] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 373.660876] ? kasan_check_write+0x14/0x20 [ 373.665102] print_address_description+0x6c/0x20b [ 373.669933] ? __mutex_lock+0x175f/0x17f0 [ 373.674070] kasan_report.cold.7+0xac/0x2f5 [ 373.678382] __asan_report_load4_noabort+0x14/0x20 [ 373.683306] __mutex_lock+0x175f/0x17f0 [ 373.687272] ? get_futex_value_locked+0xcb/0xf0 [ 373.691933] ? lo_ioctl+0x8d/0x1ec0 [ 373.695548] ? futex_wait_setup+0x279/0x400 [ 373.699863] ? mutex_trylock+0x2a0/0x2a0 [ 373.703909] ? futex_wake+0x750/0x750 [ 373.707696] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 373.712879] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 373.718407] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 373.723494] ? futex_wait+0x5c1/0x9f0 [ 373.727290] ? futex_wait_setup+0x400/0x400 [ 373.731598] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 373.736777] ? debug_check_no_locks_freed+0x310/0x310 [ 373.741954] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 373.747043] ? futex_wake+0x2f6/0x750 [ 373.750837] ? get_futex_key+0x1e90/0x1e90 [ 373.755067] ? perf_trace_lock+0xd6/0x900 [ 373.759204] ? perf_trace_lock_acquire+0xe3/0x980 [ 373.764039] ? zap_class+0x720/0x720 [ 373.767741] ? perf_trace_lock+0x900/0x900 [ 373.771963] ? do_futex+0x249/0x27d0 [ 373.775666] ? perf_trace_lock+0xd6/0x900 [ 373.779803] ? perf_trace_lock_acquire+0xe3/0x980 [ 373.784636] mutex_lock_killable_nested+0x16/0x20 [ 373.789467] ? mutex_lock_killable_nested+0x16/0x20 [ 373.794473] lo_ioctl+0x8d/0x1ec0 [ 373.797914] ? exit_robust_list+0x290/0x290 [ 373.802241] ? perf_trace_lock+0x900/0x900 [ 373.806468] ? loop_clr_fd+0xb80/0xb80 [ 373.810344] blkdev_ioctl+0x9b6/0x2020 [ 373.814221] ? blkpg_ioctl+0xc40/0xc40 [ 373.818095] ? __fget+0x3e3/0x650 [ 373.821531] ? lock_downgrade+0x8e0/0x8e0 [ 373.825665] ? lock_release+0xa10/0xa10 [ 373.829631] ? do_fcntl+0x11ea/0x14b0 [ 373.833419] ? __fget+0x40c/0x650 [ 373.836862] ? expand_files.part.8+0x9a0/0x9a0 [ 373.841434] ? __might_sleep+0x95/0x190 [ 373.845403] block_ioctl+0xee/0x130 [ 373.849021] ? blkdev_fallocate+0x400/0x400 [ 373.853332] do_vfs_ioctl+0x1cf/0x1650 [ 373.857209] ? _copy_from_user+0xdf/0x150 [ 373.861347] ? ioctl_preallocate+0x2e0/0x2e0 [ 373.865741] ? fget_raw+0x20/0x20 [ 373.869181] ? fget_raw+0x20/0x20 [ 373.872624] ? SyS_futex+0x3a4/0x56d [ 373.876326] ? do_futex+0x27d0/0x27d0 [ 373.880114] ? security_file_ioctl+0x9b/0xd0 [ 373.884513] ksys_ioctl+0xa9/0xd0 [ 373.887955] SyS_ioctl+0x24/0x30 [ 373.891309] ? ksys_ioctl+0xd0/0xd0 [ 373.894924] do_syscall_64+0x29e/0x9d0 [ 373.898800] ? vmalloc_sync_all+0x30/0x30 [ 373.902937] ? _raw_spin_unlock_irq+0x27/0x70 [ 373.907424] ? finish_task_switch+0x1ca/0x820 [ 373.911908] ? syscall_return_slowpath+0x5c0/0x5c0 [ 373.916827] ? syscall_return_slowpath+0x30f/0x5c0 [ 373.921743] ? prepare_exit_to_usermode+0x390/0x390 [ 373.926747] ? prepare_exit_to_usermode+0x285/0x390 [ 373.931751] ? perf_trace_sys_enter+0xaf0/0xaf0 [ 373.936407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 373.941241] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 373.946417] RIP: 0033:0x4552d9 [ 373.949591] RSP: 002b:00007f38e1ac7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 373.957288] RAX: ffffffffffffffda RBX: 00007f38e1ac86d4 RCX: 00000000004552d9 [ 373.964540] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000013 [ 373.971795] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 373.979051] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 373.986303] R13: 000000000000027b R14: 00000000006f6c28 R15: 0000000000000000 [ 373.993566] [ 373.995177] Allocated by task 26880: [ 373.998883] save_stack+0x43/0xd0 [ 374.002318] kasan_kmalloc+0xc4/0xe0 [ 374.006017] kasan_slab_alloc+0x12/0x20 [ 374.009976] kmem_cache_alloc_node+0x131/0x780 [ 374.014549] copy_process.part.39+0x16bf/0x6ee0 [ 374.019203] _do_fork+0x291/0x12a0 [ 374.022727] SyS_clone+0x37/0x50 [ 374.026081] do_syscall_64+0x29e/0x9d0 [ 374.029954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.035121] [ 374.036730] Freed by task 4518: [ 374.039993] save_stack+0x43/0xd0 [ 374.043433] __kasan_slab_free+0x11a/0x170 [ 374.047655] kasan_slab_free+0xe/0x10 [ 374.051440] kmem_cache_free+0x86/0x2d0 [ 374.055402] free_task+0x166/0x1d0 [ 374.058927] __put_task_struct+0x2d2/0x600 [ 374.063149] delayed_put_task_struct+0x367/0x470 [ 374.067887] rcu_process_callbacks+0x941/0x15f0 [ 374.072537] __do_softirq+0x2e0/0xaf5 [ 374.076316] [ 374.077929] The buggy address belongs to the object at ffff8801d04f0300 [ 374.077929] which belongs to the cache task_struct(65:syz2) of size 6016 [ 374.091440] The buggy address is located 96 bytes inside of [ 374.091440] 6016-byte region [ffff8801d04f0300, ffff8801d04f1a80) [ 374.103307] The buggy address belongs to the page: [ 374.108236] page:ffffea0007413c00 count:1 mapcount:0 mapping:ffff8801d04f0300 index:0x0 compound_mapcount: 0 [ 374.118196] flags: 0x2fffc0000008100(slab|head) [ 374.122854] raw: 02fffc0000008100 ffff8801d04f0300 0000000000000000 0000000100000001 [ 374.130736] raw: ffffea000761ffa0 ffffea0006b6bba0 ffff8801b0f5e480 ffff8801adb06540 [ 374.138597] page dumped because: kasan: bad access detected [ 374.144286] page->mem_cgroup:ffff8801adb06540 [ 374.148758] [ 374.150363] Memory state around the buggy address: [ 374.155273] ffff8801d04f0200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.162617] ffff8801d04f0280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 374.169960] >ffff8801d04f0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 374.177299] ^ [ 374.183775] ffff8801d04f0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 374.191117] ffff8801d04f0400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 374.198457] ================================================================== [ 374.206049] Kernel panic - not syncing: panic_on_warn set ... [ 374.206049] [ 374.213435] CPU: 1 PID: 26961 Comm: syz-executor2 Tainted: G B 4.16.0+ #3 [ 374.221582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 374.230931] Call Trace: [ 374.233515] dump_stack+0x1b9/0x294 [ 374.237131] ? dump_stack_print_info.cold.2+0x52/0x52 [ 374.242308] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 374.247049] ? __mutex_lock+0x1720/0x17f0 [ 374.251178] panic+0x22f/0x4de [ 374.254351] ? add_taint.cold.5+0x16/0x16 [ 374.258483] ? do_raw_spin_unlock+0x9e/0x2e0 [ 374.262876] ? do_raw_spin_unlock+0x9e/0x2e0 [ 374.267269] ? __mutex_lock+0x175f/0x17f0 [ 374.271404] kasan_end_report+0x47/0x4f [ 374.275363] kasan_report.cold.7+0xc9/0x2f5 [ 374.279668] __asan_report_load4_noabort+0x14/0x20 [ 374.284578] __mutex_lock+0x175f/0x17f0 [ 374.288541] ? get_futex_value_locked+0xcb/0xf0 [ 374.293192] ? lo_ioctl+0x8d/0x1ec0 [ 374.296798] ? futex_wait_setup+0x279/0x400 [ 374.301103] ? mutex_trylock+0x2a0/0x2a0 [ 374.305145] ? futex_wake+0x750/0x750 [ 374.308932] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.314109] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 374.319634] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 374.324721] ? futex_wait+0x5c1/0x9f0 [ 374.328506] ? futex_wait_setup+0x400/0x400 [ 374.332815] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 374.337990] ? debug_check_no_locks_freed+0x310/0x310 [ 374.343166] ? drop_futex_key_refs.isra.13+0x6d/0xe0 [ 374.348251] ? futex_wake+0x2f6/0x750 [ 374.352040] ? get_futex_key+0x1e90/0x1e90 [ 374.356263] ? perf_trace_lock+0xd6/0x900 [ 374.360393] ? perf_trace_lock_acquire+0xe3/0x980 [ 374.365223] ? zap_class+0x720/0x720 [ 374.368920] ? perf_trace_lock+0x900/0x900 [ 374.373140] ? do_futex+0x249/0x27d0 [ 374.376839] ? perf_trace_lock+0xd6/0x900 [ 374.380972] ? perf_trace_lock_acquire+0xe3/0x980 [ 374.385801] mutex_lock_killable_nested+0x16/0x20 [ 374.390628] ? mutex_lock_killable_nested+0x16/0x20 [ 374.395628] lo_ioctl+0x8d/0x1ec0 [ 374.399065] ? exit_robust_list+0x290/0x290 [ 374.403370] ? perf_trace_lock+0x900/0x900 [ 374.407591] ? loop_clr_fd+0xb80/0xb80 [ 374.411463] blkdev_ioctl+0x9b6/0x2020 [ 374.415422] ? blkpg_ioctl+0xc40/0xc40 [ 374.419295] ? __fget+0x3e3/0x650 [ 374.422729] ? lock_downgrade+0x8e0/0x8e0 [ 374.426860] ? lock_release+0xa10/0xa10 [ 374.430820] ? do_fcntl+0x11ea/0x14b0 [ 374.434604] ? __fget+0x40c/0x650 [ 374.438045] ? expand_files.part.8+0x9a0/0x9a0 [ 374.442610] ? __might_sleep+0x95/0x190 [ 374.446568] block_ioctl+0xee/0x130 [ 374.450193] ? blkdev_fallocate+0x400/0x400 [ 374.454497] do_vfs_ioctl+0x1cf/0x1650 [ 374.458370] ? _copy_from_user+0xdf/0x150 [ 374.462506] ? ioctl_preallocate+0x2e0/0x2e0 [ 374.466898] ? fget_raw+0x20/0x20 [ 374.470336] ? fget_raw+0x20/0x20 [ 374.473775] ? SyS_futex+0x3a4/0x56d [ 374.477472] ? do_futex+0x27d0/0x27d0 [ 374.481257] ? security_file_ioctl+0x9b/0xd0 [ 374.485649] ksys_ioctl+0xa9/0xd0 [ 374.489086] SyS_ioctl+0x24/0x30 [ 374.492436] ? ksys_ioctl+0xd0/0xd0 [ 374.496047] do_syscall_64+0x29e/0x9d0 [ 374.499916] ? vmalloc_sync_all+0x30/0x30 [ 374.504050] ? _raw_spin_unlock_irq+0x27/0x70 [ 374.508527] ? finish_task_switch+0x1ca/0x820 [ 374.513010] ? syscall_return_slowpath+0x5c0/0x5c0 [ 374.517927] ? syscall_return_slowpath+0x30f/0x5c0 [ 374.522841] ? prepare_exit_to_usermode+0x390/0x390 [ 374.527839] ? prepare_exit_to_usermode+0x285/0x390 [ 374.532838] ? perf_trace_sys_enter+0xaf0/0xaf0 [ 374.537490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 374.542316] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 374.547484] RIP: 0033:0x4552d9 [ 374.550653] RSP: 002b:00007f38e1ac7c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 374.558343] RAX: ffffffffffffffda RBX: 00007f38e1ac86d4 RCX: 00000000004552d9 [ 374.565593] RDX: 0000000000000015 RSI: 0000000000004c00 RDI: 0000000000000013 [ 374.572844] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 374.580096] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 374.587348] R13: 000000000000027b R14: 00000000006f6c28 R15: 0000000000000000 [ 374.595104] Dumping ftrace buffer: [ 374.598625] (ftrace buffer empty) [ 374.602309] Kernel Offset: disabled [ 374.605913] Rebooting in 86400 seconds..