&(0x7f0000000000)='GPL\x00', 0x1) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f0000000180)=0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x2, 0x4004700e, 0x1f4, &(0x7f00000001c0)) 2018/04/14 15:03:13 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x7fffffff, 0x101001) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='personality\x00') bind$alg(r0, &(0x7f00008ddfa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha256_mb\x00'}, 0x58) r3 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r3, r2, &(0x7f00008ef000), 0xc3) futimesat(r1, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) ioctl$KDDELIO(r2, 0x4b35, 0x401) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000080)={'ipvs\x00'}, &(0x7f0000000100)=0x1e) 2018/04/14 15:03:13 executing program 1: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000240)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) unlinkat(r0, &(0x7f0000000040)='./file0\x00', 0x200) ioctl(r0, 0xc1004111, &(0x7f0000000000)) 2018/04/14 15:03:13 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000387000), 0x4) recvmmsg(r2, &(0x7f0000005b00)=[{{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000059c0), 0x0, &(0x7f0000005a40)=""/187, 0xbb}}], 0x1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 2018/04/14 15:03:13 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f00000000c0)={0x9, &(0x7f0000000040)=[{}, {}, {0x0}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r1, 0x4}) r2 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r2, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/14 15:03:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6c00}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:13 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xfffffffffffff866) sendto$inet6(0xffffffffffffffff, &(0x7f0000f6f000), 0x0, 0x0, &(0x7f0000b63fe4)={0xa}, 0x1c) r2 = dup2(r1, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000ec0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x14, r3, 0x4, 0x70bd25, 0x25dfdbfe, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004041) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x5, 0x3ff, 0x7}, 0x14) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000200)={{0x3, 0x0, 0x0, 0x0, 0xffffffffffff8001}, 0x6, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x40, 0x0, 0x9}) r4 = socket$inet(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa2830007a6008000000000000000683540150024001d0004c41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) r5 = add_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a}, &(0x7f0000000480)="5957756a122543e1a13be9d0f608a5f56988853e2f17bcc6ab8f8fc655dbbd0e0cbce70b1c1a95b497b02687386ecb4deaffdbc8c92c158a05af6b91e9fa0d90bf95cc062c7f903a7762c3fe2f78f210c0dffd8813f42e09232aec6a1f5162e67ce9de0e681bd1eb48c00f583880c9b3137815b33efa34258515", 0x7a, 0xfffffffffffffffe) r6 = add_key(&(0x7f0000000e00)="6173796d6d657472696300f47b0bf9d16211ffc3fd3247125ac4fc0e1daba89f73c48b5fb1c6dc41ac841df449ef9dbd72b57c244a04449ae78ab4f8b091ddf1ca849e98a0239bb90d5a615cdf54365ce821c94810b29a19841a4cac93563d59595416b81e2d7eb0f24666d5fb449c2ef5905003c801a33c2bb0d31ae012349d588d3bedfb16e434c802466a0d77cd002295ce1be5c823fdfeeb42e0b1", &(0x7f0000000d00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000d40)="68f8bf294101262bbadf86098cf05994f6b74328853396fe9ec13a643abc3747c9280385e65d0e3b58deca34610e83a593068f8b39f3e63234571a25feb40a1f3eeab62387cb5e239ce43506e20512f79d128213d1f2e70f3c30c64694e0998012ec02d2d541215f6c27000d839ad653f663def9640c4504be425069c3554fdc5a992d731bc3d1575911c1739b30c5151facb65244aed995d960234fa18b4215fcf3c91586abff6265cf245ffc4ad673255abd30cef0ac1b715137", 0xbb, 0xffffffffffffffff) keyctl$search(0xa, r5, &(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, r6) socket$nl_crypto(0x10, 0x3, 0x15) madvise(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0xc) r7 = add_key(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, &(0x7f0000000440)="7d387db8ce196e4ea768f10612ddf2ac3061587671ccc48ca71733fe6b7c", 0x1e, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00000009c0)=""/181, &(0x7f0000000a80)=0xb5) keyctl$negate(0xd, 0x0, 0x1f, r7) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000980)={&(0x7f0000ffa000/0x3000)=nil, 0x40, 0x1, 0xa, &(0x7f0000ff8000/0x4000)=nil, 0xffffffffffff0000}) getsockname(r0, &(0x7f0000000300)=@rc, &(0x7f0000000040)=0x80) getsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f00000006c0)=@assoc_value={0x0, 0x3}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000b40)={r8, 0xfffffffffffffff8}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f00000007c0)=@sack_info={0x0, 0x6, 0x400}, &(0x7f0000000800)=0xc) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYBLOB="fd7eec00cd9dd65a617e40c11e668d259f1f94e50fb3419b59932be40e0629050abd4187aba94734b81c9516c1340700000000040000ab0a460260fe04b9c3c74732f6fb5cc6ee5841a0e3d9155e32310004000000000000985dcb455aa4417758011696f773c93fe8e877489c8ce157f629adf5c103939e1d8af059df22ac12fc265a9e08a12618e7f54327c0ae01e3c68dfa1ffd09bd4594a00f2b549bbb78ae7059d6ee86b737d914a3fd19c7a48ea85de0c6c4dd00af99062c13aabc931f7d57c2894d2830b7f5369c21913b1f52ed7855f848080db2bcfcea38a936310413645c515bc34c65e8296f472c43"], 0x2) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000bc0)={0x8}, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000840)=ANY=[@ANYRES32=r9, @ANYBLOB="0800091bd4f46409000000752d"], 0x2) add_key(&(0x7f0000000c00)='cifs.idmap\x00', &(0x7f0000000c40)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000c80)="2e65a5100029e3aef631bf783600f806d2f5eda5138574cd99ef8d883934fe93122432c4df82fba34f3ac973bbdfc51dfb779642479b8bad1da366c8fd4889dd21e388aa909222d11a", 0x49, 0x0) 2018/04/14 15:03:13 executing program 7: r0 = dup(0xffffffffffffffff) setsockopt$inet6_buf(r0, 0x29, 0xca, &(0x7f0000000080)="6cd0304a817594f6840c69f189f4775d65f1fdab1ca7bf09e0a8f71986e4388220cc98ece3d1bd7def176ae949541f1544ae0265f3aa01afd690d03336c2c3701869ee68a412e1495dc0975f39b7437941d215939a48cdbd6d9be54cb4a626dcfa87ff3057abc4725fd36c9d0f8015c9e76d", 0x72) perf_event_open(&(0x7f0000000540)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000000040)='userloppp1ptoc\'\x00', 0x6) fcntl$addseals(r1, 0x409, 0xa) fallocate(r1, 0x3, 0x0, 0x100000001) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000480)={0x10}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400060000000000000000000000000000000000"], 0x14}, 0x1}, 0x40000) [ 205.598341] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 205.599239] binder: 15348:15350 IncRefs 0 refcount change on invalid ref 27648 ret -22 [ 205.605836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/14 15:03:13 executing program 1: r0 = memfd_create(&(0x7f0000000000)="17", 0x0) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000040)) write$binfmt_elf32(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4600000000100000000000000003003e02000000000000000038000000000000000000000000000099f5ea01000000000000007a8193cc2c0000000000000000000000000000000000000000"], 0x58) r1 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000002, r1) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000580), &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/04/14 15:03:13 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x3ff, 0x107181) recvmsg$netrom(r1, &(0x7f0000001680)={&(0x7f0000000280)=@full={{0x3, {"e978f6f4baabe4"}, 0x101}, [{"a4b1f732784543"}, {"d4c82cce4ee1ad"}, {"7712c149bbb841"}, {"552dd35658e6d5"}, {"4d73f2a4a091cf"}, {"bc1cf56dacd3ad"}, {"1ccbd011509bbc"}, {"236bcadef8d2bf"}]}, 0x48, &(0x7f0000001600)=[{&(0x7f0000000300)="9ce22f02ea5b35f14f5f4b396fd2cf5515e5bb39d16f9017db4fd065e8cf388040a6a3744714d110b350571f9109a78c3c451061fb4004ca43db68e12b007daafcc3674dfbaa81ed8a0abd3dbe78bdf2e77843b06c825361221e524b15884342e644f1fa9a91ba6657d2d4f10fc0451e1ceddfdba6018a8eb661c45a13bf2fe16a8695147148478731c1de6bc93ee34385b5d5c605db950d7e0fdb8fbc4a97b9efb5c909045324abdfe501439865f5cf962b6fc28b9d1a5f654bc7b0e7ad0a8d2ad3be68", 0xc4}, {&(0x7f0000000400)="6e76162d2614058d6afe393422c80bdc80bae22aefb5f72fa922d182b5fd8756bb79910572eb2fbf2b433240cf8a5568d97d03f8b73b0b1350dd7a4124b0bb422f146876fb9f92c9ae46bcb668143a6c7c02893b421df6edc2e7c0fe2f0f58e6b33f1940437b6697a5c95074dc6538b72c3afe1bf56900da6768239c7fc7a47581d7dfd676b1aee86d199049770d74d8a409ecbb61680230d7915f8587c4c53569c080fb6ce0ffc8f5edc09efed53e6168666cf357220120c2dffd9fb400e46bb12c39c9f51dcd2eae3103aa439f3cd2a4b041f39c690530165132a51ef54ba3", 0xe0}, {&(0x7f0000000500)}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="75f23b7034456acb4e1df7fb8d1f6946335553a3e6db8615ddfae384429bc06904ff538a853100b7746fcfe5", 0x2c}, {&(0x7f0000001580)="8a0235", 0x3}, {&(0x7f00000015c0)="1bb2cf9d8f48ada9d147d7e1239b27dc68f9912220c3df3e270ce07d5f694fb387220a0b0c8f4c11122d", 0x2a}], 0x7, 0x0, 0x0, 0x80}, 0x2020) accept4$netrom(r1, &(0x7f00000001c0)=@full, &(0x7f0000000240)=0x48, 0x80000) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) accept4$netrom(r4, 0x0, &(0x7f0000000000), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000040)="b9b4030000b8a53763e0ba95e528020f3066bad104ecc4e17c5bb2a94d49380fc76cd81b66450f204666baf80cb8905b418aef66bafc0cb800580000ef0f20d835200000000f22d80f01ca660f38806559b805000000b93cfa5cf10f01c1", 0x5e}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="012000000000002009c40058731aef410101c00000000015"]) 2018/04/14 15:03:13 executing program 6: syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') 2018/04/14 15:03:13 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr-camellia-asm,ghash)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00005c2000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00002fefc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000a59000)="8b65caa24881e0858feadbf42de09360", 0x10}], 0x1, &(0x7f0000632f70)}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xb0, 0x101400) getsockopt$inet_buf(r3, 0x0, 0x2a, &(0x7f0000000100)=""/80, &(0x7f0000000180)=0x50) recvmsg(r2, &(0x7f0000dac000)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f0000895fe0), 0x36f, &(0x7f0000e49000)}, 0x0) [ 205.647806] binder: 15348:15355 IncRefs 0 refcount change on invalid ref 27648 ret -22 [ 205.678572] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 205.686055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/14 15:03:13 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x84000000004002) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000240)=0x8, &(0x7f00000002c0)=0x2) r3 = socket$pptp(0x18, 0x1, 0x2) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x1, 0x32, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000300), &(0x7f0000000340)=0xc) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040), 0x4) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000000)={@loopback=0x7f000001, @empty, @rand_addr=0x3}, 0xc) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "49ae6fb1f167ca1b250000000000000003a1f2550a0000000000000000619a7880361bc2399d8bd01c11e7fc45000001006ee114192a8970572b21069d6ec959", "81ad8af425caf8fa064aa6c16162a5e1bee887d36cb4a0f4464dac8c97351c79"}) fstat(r1, &(0x7f0000000080)) acct(&(0x7f00000001c0)='./file0\x00') 2018/04/14 15:03:13 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x500}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:13 executing program 4: r0 = socket$inet(0x2, 0x40000000001, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000704ffb)="8907040400", 0x5) connect$inet(r0, &(0x7f000099f000)={0x2, 0x4e21, @rand_addr=0x9}, 0x10) 2018/04/14 15:03:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast5-generic)\x00'}, 0x58) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x101000, 0x100) connect$unix(r2, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a", 0x5) sendmmsg$alg(r1, &(0x7f00000001c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="810b8f68adf1a34b", 0xfffffffffffffda7}], 0x1, &(0x7f00000000c0)}], 0x492492492492430, 0x40000) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000740)=@nfc_llcp, 0x80, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000), 0xffffffffffffff7c}, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000080)={0x1000, 0x8, 0x3f6d504d}, 0xc) 2018/04/14 15:03:14 executing program 1: r0 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x83d, 0x2200) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040)=0x5, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="4332ddb50d0000000000000000000000ca2a6c"]}) ioctl$KVM_GET_XSAVE(r0, 0x9000aea4, &(0x7f0000000300)) 2018/04/14 15:03:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ef60e9bd717431177202a23da75d9ce6ed4c4bad21ec6f777a7ead88384b94279ddbbad59d8143a13048f60df03bbc8c2e", 0x31}, {&(0x7f00000000c0)="e1be40c509df4df5134503d56cba71b25d393bf77b3106472b4e8de9efa66487cc1067069949600bbd5f474d444a807b3b7115b1da963b6f4514c30413c2c791424bf1f22a90a2c9e63f8c4acd56c3c77993f212a073f818843667747eb8eafb37f55ea9c58f425ebc7dee29f64989daf9e623f5655daeb7", 0xfe56}], 0x2) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000080)={0x0, 0x4, 0x1, &(0x7f0000000180)}) [ 205.841459] binder: 15378:15379 IncRefs 0 refcount change on invalid ref 1280 ret -22 2018/04/14 15:03:14 executing program 0: ioperm(0x0, 0x6, 0x0) ioperm(0x0, 0x2, 0x0) r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) write$rdma_cm(r0, &(0x7f0000000500)=@create_id={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000004c0)={0xffffffff}, 0x106, 0x100b}}, 0x20) write$rdma_cm(r0, &(0x7f0000000540)=@query={0x13, 0x10, 0xfa00, {&(0x7f00000000c0), r1, 0x2}}, 0x18) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)}) getdents64(r0, &(0x7f00000002c0)=""/136, 0x88) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000040)=0x9) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) connect$nfc_raw(r0, &(0x7f0000000380)={0x27, 0x0, 0x2, 0x7}, 0x10) 2018/04/14 15:03:14 executing program 7: r0 = socket(0x10, 0x7, 0xfff) recvmsg$netrom(r0, &(0x7f0000000040)={&(0x7f0000000000)=@ax25={0x3, {"8aafabddcfcc23"}}, 0x10, &(0x7f00000004c0)}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$unlink(0x9, r1, 0xfffffffffffffffb) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcs\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RM_MAP(r2, 0x4028641b, &(0x7f0000000280)={&(0x7f0000ffd000/0x3000)=nil, 0x2a, 0x3, 0x2, &(0x7f0000ffd000/0x1000)=nil, 0x2}) socket(0x18, 0xc, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000400)=0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000200)='vcan0\x00') ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f00000002c0)={0x4de, 0x9}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000300)={0x0, 0x0, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x2000000004, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, [0x4]}, 0x2c) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000003c0)={r4, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f0000000380)={r3, r5, 0x1000000000}) r6 = ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r6) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000100)) write(r0, &(0x7f0000000140)="240000005a005f191415f507125a000009037b1595a7f1d6d8210308001000fff708ff", 0x23) socket(0x11, 0x100000802, 0x0) r7 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x1001}) [ 205.912756] binder: 15378:15391 IncRefs 0 refcount change on invalid ref 1280 ret -22 2018/04/14 15:03:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xfffffdfd}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:14 executing program 1: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x400) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x40087703, 0x910000) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x80) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000300)={'ip6gretap0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) r3 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x100, 0x40) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000140)=@sack_info={0x0, 0x81, 0x800}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e20, 0x7ff, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}, 0x0, 0x100000000, 0x9, 0x7fff, 0x6}, &(0x7f0000000280)=0x98) r5 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x5, 0x1, 0x1000, 0x5, 0x0, 0x9, 0x800, 0x7, 0x7fffffff, 0x5, 0x9, 0x80000000, 0x7fffffff, 0x3, 0x8, 0xb894, 0x7, 0x7, 0x1f, 0x0, 0x4, 0x4, 0x4, 0x9f6, 0x8, 0x4000000000, 0x1, 0x0, 0x81, 0xffffffffffffff01, 0x3, 0x898, 0x9, 0x5e89e3c, 0x7, 0x80000000, 0x0, 0xc4, 0x5, @perf_bp={&(0x7f0000000000), 0x9}, 0x120, 0x3, 0x274dd718, 0x7, 0x4, 0x5, 0xffffffffffffff81}, r1, 0x6, r3, 0x0) ioctl(r5, 0x4, &(0x7f0000000340)="f22c8e94ea80cac2ac1b888bca2aa954ee5228a8495bd3792edaf22d1697b15ba4ff8862d534e5c1b814f674404fc76b63746d70e845705683f5afd5fd00f712acad78efc756bc08e4b875842c958dbc2427c6acaccf99ebfb1b5139263871b2b0fc17f2136aceed992d7aac2548f3c76523385deeb6d119de275e0f2d9a35364a5d4b31fac25d8e063d56bbad0b8d46dac9cf62ecdee6f48209ac04fdb2109b4ae2bd40f25249d6384ae1218f60cec1b4ab062e6442f00f324a65d728cbef91eb81cb24b2c2") socket$inet_dccp(0x2, 0x6, 0x0) 2018/04/14 15:03:14 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000000000000005000600090000000a000000000000000c0000000000000000000000000046d5430700000000000005000900ff0010000a00000012000000fe8000000000000000000000000000ff00000000001b00e902000100000000000000020c0000000005000500000000000a00000000000900ff02e20000000000000000001a0000010000000000000000"], 0x98}, 0x1}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') bind$bt_sco(r1, &(0x7f0000000000)={0x1f, {0xecaf, 0x3, 0xe276, 0xd3, 0x100000001}}, 0x8) writev(r1, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/14 15:03:14 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x101008, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20000) setsockopt$inet6_opts(r1, 0x29, 0x37, &(0x7f0000000040)=@dstopts={0xc, 0xf, [], [@ra={0x5, 0x2, 0x1}, @generic={0x922e, 0x71, "c1254784381e1c22c7bbf739a5ddcec794e1520f545fb2c3681468bd80762f41152cb2efd75b171d4ce65f1db350efb19deec807af934f90a175827f011bf59f53de1da969de08b4935f4736fd8335b2894b11671fce5dae061f375c4ccd1ff505a0e4ab5b7e872d8adccc42fa64b009d4"}, @pad1={0x0, 0x1}]}, 0x88) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000fdd000)=0x3) ioctl$PIO_UNISCRNMAP(r2, 0x80047456, &(0x7f00007d9f86)) 2018/04/14 15:03:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x37, 0x2}, 0x160) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x3ff, 0x400, 0x3ff, {0x77359400}, 0x100, 0x200}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x36, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x1000, &(0x7f0000000140)="dbc1b60f4d72c5f413bbec23326c", &(0x7f00000002c0)=""/4096}, 0x28) 2018/04/14 15:03:14 executing program 7: mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) r0 = socket$inet6(0xa, 0x80003, 0xb) connect$inet6(r0, &(0x7f0000032fe4)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f0000001180), 0x240, &(0x7f00000011c0)}}], 0x249, 0x0) 2018/04/14 15:03:14 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000080)="37b48895495115454ec573a6f32b51bd84013780d0fc5cc436bd2574c675cbd2f53a445f567643a987605cd0b6f62b1c3c698fe7f5afcbf757b2a0db9629e9a0e977409441de513888600eb6c403b241cfa095cf3778a2f449354616c98810aef2cba2f3e786fef202d4c02c5f620aea6292a3919757068d9720f1a43f8989719ec4e2209c5c8bdc966656a3ece0e64c1fab6a2842584d7eea3ddfa27263255e3ca4d5de5b", 0xa5}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x480, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x5, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000023047110fa00000600b76c36000000000000000000950000000800000095eec9b1f5ed4f0df2e41f3a38ea"], &(0x7f0000f6bffb)='GPL\x00', 0xfffffffffffffffc, 0x38e, &(0x7f00001a7f05)=""/251}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) 2018/04/14 15:03:14 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000001440)='/dev/input/mice\x00', 0x0, 0xc0) getsockopt$inet6_int(r0, 0x29, 0x7a, &(0x7f0000001480), &(0x7f00000014c0)=0x4) r1 = socket$key(0xf, 0x3, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f0000000040)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f00004c1000)}) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0x9) r3 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000080)=0x2, 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000140)=0x200, 0x4) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0xd1, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xc6, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MIF(r5, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x100000001, 0x158, 0xfffffffffffffe01}, 0xc) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000fe1000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r6, 0x0) connect$unix(r4, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) write(r4, &(0x7f000059a000)="ed", 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffed0, 0x0, &(0x7f0000004000), 0x8, 0x0, &(0x7f000000d000)="62164b44a5c310af"}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000cf7ff4)) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x12, r2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x9, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1363488d8082421f40"], 0x0, 0x0, &(0x7f0000260000)}) socketpair(0xe, 0x80000, 0x40, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, r8) sendmsg$key(r1, &(0x7f0000360000)={0x0, 0x0, &(0x7f000035d000)={&(0x7f000033c000)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x0, 0x0, {0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}}]}, 0x80}, 0x1}, 0x0) [ 206.188347] binder: 15417:15429 IncRefs 0 refcount change on invalid ref -515 ret -22 2018/04/14 15:03:14 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000900)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x77, &(0x7f0000000480)=""/119, 0x41000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000fe1000)={0x5, 0x0, 0x80}, 0x1c) r1 = perf_event_open(&(0x7f000000a000)={0x2, 0x70, 0xfffffffffffffff6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0x0, 0x0, 0x4, 0x100000001}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) perf_event_open(&(0x7f0000000340)={0x3, 0x70, 0xffffffff, 0x8000, 0x3, 0x0, 0x0, 0x4, 0x820, 0x1, 0x6, 0x2, 0x8, 0xc57, 0x9, 0x7ff, 0x1f, 0x4, 0x9, 0x5, 0x3, 0x100, 0x5, 0x4, 0xde, 0x6, 0x3ff, 0x7, 0xe92, 0x9, 0xfffffffffffffc00, 0x4, 0x1f, 0x0, 0x100, 0x7251443f, 0x80000001, 0x7, 0x0, 0x1000000020000, 0x3, @perf_bp={&(0x7f0000000040), 0x4}, 0x19800, 0x2, 0x7965, 0x7, 0x8000, 0x9, 0x1000}, 0x0, 0x4, r1, 0x9) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='minix\x00', 0x0, &(0x7f0000000240)) ioctl$sock_ifreq(r0, 0x8977, &(0x7f00000000c0)={'lo\x00', @ifru_ivalue}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000900)=@ax25={0x3, {"9c5fede8d91e29"}, 0x7ff}, 0x80, &(0x7f0000000700), 0x0, &(0x7f0000000c80)}, 0x50) close(r0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x80, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/04/14 15:03:14 executing program 1: r0 = socket$rds(0x15, 0x5, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000440), 0x1f3) epoll_create(0xd7) 2018/04/14 15:03:14 executing program 2: r0 = socket$inet(0x2, 0xf, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00'}, &(0x7f00000000c0)=0x44) sendto$inet(r0, &(0x7f0000edf000), 0x0, 0x0, &(0x7f0000ee9ff0)={0x2}, 0xffffffffffffff65) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000100)=0x5, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000087000)=0xfffffffffffffe01, 0x4) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0x8, 0x4) recvmsg(r0, &(0x7f0000bd9000)={0x0, 0x0, &(0x7f0000eee000), 0x0, &(0x7f0000b18faf)=""/81, 0x3a}, 0x0) 2018/04/14 15:03:14 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x4, 0x200000) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000200)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000004c0)={0x0, @loopback=0x7f000001, 0x4e23, 0x2, 'sh\x00', 0x2, 0x7}, 0x152) prctl$void(0x3) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x180}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000400)={r1, 0xa1}, &(0x7f0000000440)=0x8) syz_emit_ethernet(0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="14009c63997b8b0270cec6ce83fcbf4afd3e238026a93ed8231664a7b444b9ec3daa572a7c6263764597a216d92907118aef0891a8f83ace4dd82b3a7a6047a192c7498012fe7a0e63a53f92cf5988557c6b9643fadc6dbdd3517ac556c8f145c35c996b87b292c42c80002704f3c6e0154e7453a6a529000010000000000000"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x0, 0x0) sendto$inet6(r2, &(0x7f00000002c0)="3e7ecf60483ae0343b7f59cfd9fd369c681185db8424386a23c5483d6e0d30e3b67a871fd074a4b39babe5c5edb0637f8ee98bd4851465180bfa3a876fdf1ef5c2211b29e46223dbcdd87f29f46e4f6bea", 0x51, 0x4008041, &(0x7f0000000380)={0xa, 0x4e23, 0x6b, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, 0x1c) getuid() ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x0, 0x80000) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, r3}, 0x25c) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$assume_authority(0x10, r6) write(r4, &(0x7f0000000340)="d44d3e4ce674", 0x6) socket$kcm(0x29, 0x5, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) [ 206.283790] binder: 15417:15445 IncRefs 0 refcount change on invalid ref -515 ret -22 2018/04/14 15:03:14 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(cast5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000b78ff0)="a23364fd5e", 0x5) pipe(&(0x7f0000000040)={0xffffffffffffffff}) getsockname$llc(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) write(r1, &(0x7f0000000000)="ff6d83f7db57c1daab854713dd59856bfc", 0x11) 2018/04/14 15:03:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x7a00000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:14 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x24000, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000200)={0x4, 0x7, 0x8f, 0x800}, 0x6) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x42200, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x100000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x0, 0x8000, 0x9, 0x80000001, r3}, &(0x7f0000000140)=0x10) fallocate(r2, 0x1, 0x9, 0x0) sendto$inet6(r0, &(0x7f0000000080)="040100000009cb396da10000009054b932ce5b73832fdbaf", 0x18, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) pipe2(&(0x7f0000000180), 0x4000) [ 206.437120] binder: 15475:15476 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f000006ff44)={0x0, 0x0, 'client0\x00', 0x0, "6318ca4c372bbf06", "99f3c2e1541fe1bfdf54840c086e666dec2aef8735f8bc6ae79d506a1f00f7b8"}) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000300)=@assoc_id=0x0, &(0x7f0000000540)=0x215) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={r1, 0xf7}, 0x8) 2018/04/14 15:03:14 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000000080), 0x0) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x7fffffff, 0x8, 0x400, 0x8, "d217f9fefb9d537962ca6f9d5ed4909ae433a8c3af9700f28c11a7e56c940678"}) 2018/04/14 15:03:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x101}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}}, &(0x7f0000000340)=0x90) r4 = dup3(r3, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$netrom(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000000)=@ax25={0x3, {"fc132bfbb71640"}}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000000400)}, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32"}], 0xaaaaaaaaaaaab20, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(0xffffffffffffffff, 0xc0105303, &(0x7f0000000100)={0x0, 0x4}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0fec8cdfffb8b6008ec8baa100ed8044dca70f005943f3f30f236f66b9360200000f32f4653ef30fbc9e544d0f229c", 0x2f}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000500)=""/109) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000380)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000400)={r5, &(0x7f00000003c0)=""/17}) r6 = getuid() getgroups(0x4, &(0x7f00000004c0)=[0xffffffffffffffff, 0x0, 0x0, 0x0]) fchownat(r1, &(0x7f0000000440)='./file0\x00', r6, r7, 0x1500) 2018/04/14 15:03:14 executing program 7: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000080)=0xfffffffffffffeff, 0x4) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x537002, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000040)={0x101, 0x7, 0x101, 0x2, 0x9}) sendto$inet6(r0, &(0x7f00000001c0)="0401000000e3cde82c46d64e498020c17ae638d830f6eb50f9442d5b595904000000", 0x22, 0x0, &(0x7f0000000180)={0xa, 0x800, 0x3, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) 2018/04/14 15:03:14 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) times(&(0x7f0000000040)) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x4, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f00000000c0)=0x176, 0x4) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f000000f000)="240000001a00030207fffd946fa283bc04eee6d87986c49727008568b51ba3a2d188737e", 0x24}], 0x1}, 0x0) 2018/04/14 15:03:14 executing program 0: mkdir(&(0x7f00008e9ff8)='./file0\x00', 0x0) mount(&(0x7f0000002a40)='./file0/file0\x00', &(0x7f00000027c0)='./file0\x00', &(0x7f0000002a00)='mqueud\x00', 0x0, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000002680)='/dev/adsp#\x00', 0x8002, 0xa00) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000025c0)=""/108, &(0x7f0000002640)=0x6c) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0/file0\x00', 0x0, 0x8}, 0x10) r1 = open$dir(&(0x7f000001bff4)='./file0\x00', 0x40, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002780)={'ifb0\x00', &(0x7f0000002840)=ANY=[@ANYBLOB="2f0000000800000001000000000000001f0000001b782d44451461d7b7f65ff60f24ce48ae7a7c023a8ed92270f9ba506949cf76d3fa25bb306a68a247f8d29e84794ee5a5f719052a27aaaaaaaaaa9d2c83ffff00000002ffffffffffffffffac14140b0000000402010200000000000000000000000000000000000000000000000000000000000000000000000000b780b231673114080002014600000006ffffff8100000000cb0e00000000000006000000000000000400000001000000010000000000000006000000ebabffe9586408c6d3a2f823a9dda61569c39cd2fcf8da1b49df870e6cf6611bfb89f1ac3c85c8604fc34c883a6d2db63da0f157d06df8ebbfb532150aedf89759f967e42204ebf8fd71f8ffcbf60915aa261b724eaec7e56bac363dec4fea7bbc00e7348e62f18792bb67ae8babe11af1781a614dea23cdd426381714569a87dd4d9a4098deedb8af69d117b3191dd1fa8a0095333f01c071bd6240511ccd604c44cc8a93eaac57365d9da5b847551594a19e1b4f4324bac2beafeeacabe1"]}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x3a, 0x1, @tid=0xffffffffffffffff}, &(0x7f00000026c0)=0x0) timer_getoverrun(r2) close(r1) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000002580)=0x4, 0x4) recvmsg(r0, &(0x7f0000002540)={&(0x7f0000000100)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000180)=""/152, 0x98}, {&(0x7f0000000240)=""/190, 0xbe}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/212, 0xd4}, {&(0x7f0000001400)=""/27, 0x1b}, {&(0x7f0000001440)=""/13, 0xd}, {&(0x7f0000001480)=""/12, 0xc}], 0x7, &(0x7f0000001540)=""/4096, 0x1000, 0x5}, 0x2061) 2018/04/14 15:03:14 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x600}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:14 executing program 5: syz_mount_image$ntfs(&(0x7f0000000300)='ntfs\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='umask=3,\x00']) [ 206.496208] binder: 15475:15482 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:14 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000380)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000740)={{0x80}, "706f727431000000000000000000000000000000000000000100eb000000b2a587e2000000000000020000000000000001008e15e7af00", 0xa9824f69d1376637, 0x10800a}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfb, 0x80000030}, 0xc) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1, @time}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000140)) fallocate(r0, 0x1, 0x4, 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0xc0605345, &(0x7f0000000040)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer2\x00', 0x0, 0x0) [ 206.573158] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 206.600764] binder: 15509:15511 IncRefs 0 refcount change on invalid ref 1536 ret -22 2018/04/14 15:03:14 executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="02060d040000ecff00080000000000006685b46a7ee8f31490a17e954f2211f1b8c238000050a7"], 0x10}, 0x1}, 0x0) 2018/04/14 15:03:14 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r1 = gettid() r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x8, 0x2) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000200)={0xff, 0xfffffffffffffffb, 0x7, 0x1}, 0x10) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0xffffffffffff5026, 0x20000) ioctl$TCXONC(r2, 0x540a, 0x4) perf_event_open(&(0x7f0000000140)={0x3, 0x70, 0x0, 0x8000, 0x0, 0x8000, 0x0, 0x5, 0x820, 0x8, 0x100, 0x9, 0x7, 0x9, 0x0, 0x7660, 0xffffffffffff08be, 0x20, 0x9, 0x1, 0x3, 0x0, 0x0, 0x89, 0x1cb1e0af, 0x10000, 0x40, 0x81, 0x4, 0x8, 0x100000000, 0x9, 0x9, 0x8000, 0x101, 0x3, 0x12d0, 0x100, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x4000, 0x7ff, 0x9, 0x5, 0x7, 0x3, 0xfffffffffffffff7}, r0, 0x1, r3, 0x2) r4 = syz_open_procfs(r1, &(0x7f0000000100)='clear_refs\x00') setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0xa20, 0x4) writev(r4, &(0x7f0000c4fff0), 0x0) 2018/04/14 15:03:14 executing program 7: r0 = memfd_create(&(0x7f0000000140)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x7) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x80) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000002000006, 0x501d, r0, 0x2) open_by_handle_at(r0, &(0x7f0000001280)={0xc6, 0x3, "aadfc1da20f97ac7b04b2dfc1e50f498585a9fd154f6fe9fa3cd47d70d71e8ec1da94cbbf15f42f10f5db382ebe44388a8d838e0b590d80ad69163419dfe388ec31e6569ee81a390e13f702008edd05afcd5c2a56f675a6bbbf83a96f533156132be72c8d18860528c1e3d52d1ea25b8a3e8919d4cd1141e87fc89e50f21643e57ebb2d61c1718b29843f10f2fe95fb66d31077e1edb8cba6d666755e9cbdde3039fb23dac4f8f448bd7a966a4784155fbd129a54fa3ce28cb2fdc17d5c6"}, 0xe4000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000001380)=@dstopts={0x2b, 0x25, [], [@jumbo={0xc2, 0x4, 0x100000000}, @ra={0x5, 0x2, 0x273}, @calipso={0x7, 0x30, {0x9, 0xa, 0x8, 0xb57, [0x4c, 0x5f7, 0x8001, 0x4, 0x4]}}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1={0x0, 0x1}, @generic={0x0, 0xd8, "8e164931059838f4d79f69731851c75be49f589b74c1152fdfbeffd794b0eb827477c059216a048c708d07f5a29b8dc2ce8fa82e82d0b2b6a472a63568d9486b4aed26f83fcacd356e703773694a7f7afe3b20138955b2d0e469c452af5ae15f29fdea21ccd1a5a9a7702acc134c5d096cab62348a362fea77ba39a7e73617d4acaf2e4c9f300273c4a7082f59b67e4684a7d22264acd1800be52df02a2642531851779af5357a96b122111ddec3ebad4031ab3d954f47d787d6c69dfa3f0cf99ff4a3b225f5b1c92968268a013580f077ccb5a2d54373db"}, @enc_lim={0x4, 0x1, 0xfffffffffffffffe}]}, 0x130) preadv(r0, &(0x7f0000001240)=[{&(0x7f0000000180)=""/178, 0xb2}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000000100)=""/37, 0x25}], 0x3, 0x0) 2018/04/14 15:03:14 executing program 0: syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="10000000000600000000000000eb323a23efab7f201200005a4d", 0x1a, 0x400}], 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r0) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3ff, 0x206001) ioctl$TUNSETGROUP(r1, 0x400454ce, r0) [ 206.621251] ntfs: (device loop5): parse_options(): Unrecognized mount option . [ 206.657950] binder: 15509:15523 IncRefs 0 refcount change on invalid ref 1536 ret -22 2018/04/14 15:03:15 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000300)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x2, 0x3, 0x1000, 0x1, 0x3, 0x0, 0x2, 0x354, 0x40, 0x7, 0x6, 0x8, 0x38, 0x1, 0x6, 0xb604, 0x8}, [{0x1571595d043775fb, 0x6, 0x0, 0xb9d, 0x5, 0x7, 0x22, 0x1}, {0x0, 0x200, 0x10000, 0x20, 0x4, 0x7f, 0xfffffffffffffff8, 0x7}], "f94d4fe0a9bb4a78185645ccb81b1cf92dd83669166f8ac5", [[], [], [], [], [], []]}, 0x6c8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) ppoll(&(0x7f0000b3a000)=[{r1}], 0x1, &(0x7f0000982000)={0x0, 0x1c9c380}, &(0x7f0000660ff8), 0x8) ppoll(&(0x7f0000000100)=[{r2}], 0x1, &(0x7f0000000140), &(0x7f0000000180), 0x8) 2018/04/14 15:03:15 executing program 2: r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000001380)) r1 = dup(r0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000000)=""/141) socketpair(0xfffffffffffffffd, 0x40000040e, 0x2004, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$GIO_SCRNMAP(r3, 0x4b40, &(0x7f0000000240)=""/127) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f00000013c0)={0x0, 0x3, 0xff, 0x9}) prctl$setendian(0x14, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000300)=0x2, 0x8) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f0000000380)=""/4096, &(0x7f0000000200)=0x1000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x4d, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r5 = accept(r2, 0x0, &(0x7f0000000100)) getsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000180), &(0x7f00000002c0)=0x2) 2018/04/14 15:03:15 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x400, 0x70bd26, 0x25dfdbfd, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}, @FOU_ATTR_AF={0x8, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e21}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x29}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r2, @ANYBLOB="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"], 0x14c}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 2018/04/14 15:03:15 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f00000000c0)={[{0x2b, 'pids', 0x20}, {0x0, 'memory', 0x20}]}, 0xe) write$cgroup_subtree(r1, &(0x7f0000000140)={[{0x2b, 'rdma', 0x20}, {0x1, 'io', 0x20}]}, 0xa) r2 = dup2(r0, r1) r3 = eventfd2(0xdd19, 0x800) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/142) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000100)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0}, &(0x7f0000000280)=0xc) kcmp(r4, r5, 0x7, r3, r1) 2018/04/14 15:03:15 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x7}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x20}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0xfffffffffffffffc, 0xfc6a, &(0x7f00001a7f05)=""/251}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x280000, 0x44) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x4, 0x20, 0x200, 0x100000000}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x36, "f4ce8f7fed013a8e2cdb2ae33a9e831ccfa5565461f30e8893668af698f101c0aa2f99eb964be0ad0a0c411663dcf22663cc47ab2198"}, &(0x7f0000000200)=0x3e) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0xc519, 0xffff, 0x7, 0x2, 0x2, 0x1a3, 0xe7, {r3, @in6={{0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x101}}, 0x4700dbac, 0x4, 0x8, 0x81, 0x7}}, &(0x7f0000000300)=0xb0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000340)=r1) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000040)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) 2018/04/14 15:03:15 executing program 4: r0 = socket(0x200000000010, 0x2, 0x0) write(r0, &(0x7f0000000800)="2400000024007f0000001200000401000d0ff6ff010000000000f300f10ce0fa327b73d8f253b58d1fc318e599ffffff1300ff10", 0x34) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x22040, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r1, 0x4008ae93, &(0x7f0000000680)=0x100000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) syz_open_procfs(r2, &(0x7f0000000100)='net/netlink\x00') r3 = syz_open_procfs(0x0, &(0x7f0000000180)='loginuid\x00') writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)="ee", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000140)=@l2={0x1f}, 0x80, &(0x7f0000001240), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="300000000000000000000000000000001ca01a9b5ea151da3dbdabb475a606e56cab80fab11299a8ab198a0000000000b17eca2bb43e61a4c47962efeb95f8ebfd81a67217ba2709675de1ca9b08469d6c16d85432ac9c00b2cdce1adbec7560c7"], 0x61}, 0x0) move_pages(0x0, 0x395, &(0x7f0000000080), 0x0, &(0x7f0000000080), 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r1, &(0x7f0000000640)={&(0x7f00000002c0)=@nl, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/199, 0xc7}, {&(0x7f0000000440)=""/218, 0xda}], 0x2, &(0x7f0000000580)=""/183, 0xb7, 0x100000001}, 0x40000020) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xcd, 0x40002) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, &(0x7f0000000200)=0x3, 0x4) 2018/04/14 15:03:15 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x7a00}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:15 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-twofish-3way)\x00'}, 0x58) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="c3f1b0f3d622e3cf944fac888d7341d3f7541a3c", 0x14) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) fcntl$getown(r0, 0x9) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000002c0)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000300)='smaps\x00') sendto(r3, &(0x7f00000003c0)="d4892c5b896466ec694cb5ced47f302578af74e212c5328d52df56ecdf6ea3222d4b2852b937b778e259fd945ef6327cde474d5dbc8a9360a04511e4ab309972342d2644c3c42a0f3913bc2f4ccff07a6722197102ed67375d326cbebd357fe85658809448519347dc62c56426f410a192bfcf703d22dc55e67ad977b32b5eb991ae70092d866ed05afe594c588a292055b9da610fef03825edf91870a94a99ad9145c37623b00f0afc92a0797bdd446981f4f94e97bf667ba9f640b433bc074739153016ea9ddb3e50791", 0xcb, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r3, 0x40106410, &(0x7f0000000380)={0xf, &(0x7f0000000000)="9de71d5c3c51389f6588fe39014e66"}) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000340)=r1) getpeername$llc(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x10) 2018/04/14 15:03:15 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0x440000) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)={0x2, 0x0, [{0x80000001, 0x8, 0x6, 0x7fffffff, 0x1821}, {0x0, 0x1, 0x17ad, 0x0, 0x4}]}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x81, 0x8}}, 0x0, 0x8, 0xffffffffffffffff, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f0000f36000)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) [ 207.685548] binder: 15554:15559 IncRefs 0 refcount change on invalid ref 31232 ret -22 [ 207.710257] binder: 15554:15566 IncRefs 0 refcount change on invalid ref 31232 ret -22 2018/04/14 15:03:15 executing program 6: socket$inet_smc(0x2b, 0x1, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)=0x0) socket$rds(0x15, 0x5, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000200)='net/sctp\x00') getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2018/04/14 15:03:15 executing program 4: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x40) r2 = dup2(r1, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x0, 0x8, 0x5, 0x6, 0xa, 0x7}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000380)=0x32, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "71756575651966e0ca00000000000000000000000000000b00e3001b000000000000000400080000000001000000000000000000000000000000f3feffb20300"}) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000003c0)) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={r3, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) get_mempolicy(&(0x7f0000000480), &(0x7f00000004c0), 0x7fff, &(0x7f00002ce000/0x3000)=nil, 0x7) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x1, r6}) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r6, 0x4}) r7 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r8 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0x8020000, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) close(r8) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{}]}) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000000240)={0x1, 0x2, 0x2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000400), 0x0, &(0x7f0000002000)=ANY=[@ANYRES64=r0], 0x8}, 0x0) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x13, r8, 0x0) clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) alarm(0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r8, 0x84, 0x12, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) dup2(0xffffffffffffffff, r7) signalfd4(r1, &(0x7f00000005c0)={0x40}, 0x8, 0x80804) 2018/04/14 15:03:15 executing program 7: r0 = socket(0x15, 0x80005, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@rand_addr, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000180)={@local}, &(0x7f00000001c0)=0x14) ioprio_get$uid(0x3, r1) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf000) recvmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000040)=@vsock={0x0, 0x0, 0x0, @host}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)=""/138, 0x8a}], 0x1, &(0x7f0000000100)=""/15, 0xf, 0x9}, 0x20) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/autofs\x00', 0x1030c0, 0x0) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f0000000440)=""/30) 2018/04/14 15:03:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="c2e1728408000000b69887f4ac13889adbefc321fe11bd9bf0fc4cd56fc7376523ca94d4143455e5a7e9e3efa42216731227d7f770e13aa5ff7733248b3f60664bc06112f0a0efa9d9a865e7c1c6d4f7c1b99ef1d1f14bccdbbfe1721f5e9f9e222383598c557e790da589fe69ff828498d04a"], 0x1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4000, 0x0) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x59, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/14 15:03:16 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = inotify_init1(0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0x7, 0x4) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) fcntl$setown(r0, 0x8, r3) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000003340)='/dev/rtc\x00', 0x440, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r4, 0x84, 0x65, &(0x7f0000003380)=[@in6={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e21, @multicast1=0xe0000001}], 0x3c) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0xc003, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(r5) kcmp(r5, r6, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) 2018/04/14 15:03:16 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xf505000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:16 executing program 5: perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={&(0x7f0000d55000)={0x10}, 0xc, &(0x7f0000c8d000)={&(0x7f0000bfdfdc)=ANY=[@ANYBLOB="140060d0b7d95a00200000000000000000000000"], 0x14}, 0x1}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x3f, &(0x7f0000000040)=""/7, &(0x7f0000000080)=0x7) rt_sigsuspend(&(0x7f00000000c0)={0xfffffffffffffffa}, 0x8) 2018/04/14 15:03:16 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0x0, &(0x7f0000fe1000)='net/rt_cache\x00') bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r1, &(0x7f0000a2effc), 0x6) 2018/04/14 15:03:16 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4400, 0x0) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000000040)="4c357aa84f500594fa869555cc1b5472f2ba81e96cc3cb97f4c840e9f142c0bf89e030f87c75baeecbf4d0411362e02647096497000000000000000000", 0x3d}], 0x1) [ 207.920591] binder: 15599:15602 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 207.957961] binder: 15599:15609 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x300000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:17 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) bind$inet6(r0, &(0x7f0000001000)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0x10008}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="6e617400000000000000000000000000080001000000000001000000000000001b000000050000ffffffff60010000600100801805000018050000ffffffff18050000180500000500000000000000000000000000000000", @ANYPTR=&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000ffffac14ffbbfe8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f0000000000000000000000000000000000000000000000000004800444e41540000000000000000000000000000000000000000000000000001000000007f0000010000000000000000000000000000000000000000000000000000000000000000ff010000000000000000000000000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048004e45544d41500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0200000000000000000000000000010000000000000000000000000000ffff7f000001ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048004e45544d415000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000000000000000000000000000000000000000000000fe8000000000000000000000000000ffff0100000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800f00000000000000000000000000000000000000000000000000048005245444952454354000000000000000000000000000000000000000000000000000000000000000000000000000000000001ac14ffbb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4f0) 2018/04/14 15:03:17 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20000800, 0x0) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x1000008}, 0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x34, 0x83d3, 0x2, 0xfff}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r1, 0x2, 0x3, 0x6, 0x10000, 0x8000}, 0x14) 2018/04/14 15:03:17 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lookup_dcookie(0x40000000000000, &(0x7f0000000200)=""/152, 0xfffffffffffffea7) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) clock_adjtime(0x2, &(0x7f00000002c0)={0x1, 0xffffffff, 0x200, 0x4, 0xffff, 0x6, 0x20, 0x1000, 0x4101, 0xffffffffffffff7c, 0x2, 0x5, 0x728a, 0x1f, 0x5, 0x4, 0x3, 0x4ba, 0x81, 0x0, 0x7813a694, 0x1, 0x100, 0x9, 0x80, 0xa32d}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000140)=r1) 2018/04/14 15:03:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/14 15:03:17 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x12800, 0x154) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x7) r2 = memfd_create(&(0x7f0000614000)="74086e750000000000000000008c00", 0x0) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000180)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, "21ceff9a879a7b5309000000c28d3662f4a6f3eea30e3e76e2a2f3da6b4d22723f229c645193a7e24890039f461c03e84e6754b008426cfd116f141471fe482d", "e29f33faff329c61fac9514be534fecc3b01000000d99c6fc52da131e0376995072f92f3573d9fbabc377d6566a3c714974e1d071656e66bf405b4381df14d0d", "7ca99b62a3b2dec603d5663c8188b2900e84ba4e3f686c6b61f3c3d6a1f81fd7"}) timerfd_gettime(r2, &(0x7f0000000100)) 2018/04/14 15:03:17 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4000000000000000}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x40000, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000140)=""/12) r3 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r3, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000180), 0x4924924924925a6, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000000)=0x5) connect$unix(r5, &(0x7f00002ffff6)=@file={0x0, './file0\x00'}, 0xa) 2018/04/14 15:03:17 executing program 7: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000dac000), &(0x7f0000048000)=0x1, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x80000, 0x0) futimesat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x77359400}, {0x77359400}}) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000100)={0x57, 0x3, 0x7, {0x8, 0x20}, {0x5, 0x41b4d951}, @rumble={0xffff, 0x4}}) 2018/04/14 15:03:17 executing program 1: r0 = socket$inet(0x2, 0x3, 0x3) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101000, 0x0) r2 = perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000a00)={'icmp\x00'}, &(0x7f0000000a40)=0x1e) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x0, &(0x7f0000001000)={0x0, {{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}}}, 0x108) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000001000)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r6 = syz_open_procfs(0x0, &(0x7f000012bff2)='net/mcfilter6\x00') setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000f46000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000a80)={0x3, {{0xa, 0x4e23, 0x7, @dev={0xfe, 0x80, [], 0xb}, 0x6}}, 0x1, 0x3, [{{0xa, 0x4e23, 0xfffffffffffffff8, @mcast2={0xff, 0x2, [], 0x1}, 0x9d67}}, {{0xa, 0x4e23, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x7fff}}, {{0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x4}}]}, 0x210) readv(r6, &(0x7f0000000400)=[{&(0x7f0000000340)=""/170, 0xaa}], 0x1) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4100138fa9b91d5b00f8734f8489888e73d538588cf10431b8613f7bcf1056ce98d2ab91def542c750d3685454bd10168529435a71238f7cb75740c274ec11a930c7a6e9f4892e4c9d8d37db83ef0690c5b099"], 0x1}, 0x1, 0x0, 0x0, 0x10}, 0x8000) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="73656375726974790093decfa81228d538111afb7f000000001f0000000000000000000000000000000000000000000000000000000000000000e9ffff0000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000003a035b695597497807d1"], 0x1) writev(r2, &(0x7f0000000180)=[{&(0x7f00000000c0)="1e5b7b1d30859a82aa0b7eb4ad6ebf0634b21e3b0fbbf9", 0x17}], 0x1) ioctl$sock_ifreq(r4, 0x8922, &(0x7f0000000400)={'lo\x00', @ifru_ivalue}) r7 = request_key(&(0x7f0000000500)='id_legacy\x00', &(0x7f0000000540)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000580)='IPVS\x00', 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000280)={0x1, 'rose0\x00', 0x3}, 0x18) r8 = request_key(&(0x7f0000000600)='cifs.idmap\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000680)='keyring]ppp1>\x00', 0xfffffffffffffffa) keyctl$instantiate(0xc, r7, &(0x7f0000000240)="368ebf72a2ac839828e8a5574504bbeefab99652f51bde83ab57d82e4f38f52e1db852", 0x23, r8) modify_ldt$read(0x0, &(0x7f00000006c0)=""/8, 0x8) r9 = getpgrp(0xffffffffffffffff) ioctl$EVIOCSCLOCKID(r2, 0x400445a0, &(0x7f0000000200)=0x20) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000700)) ioprio_set$pid(0x2, r9, 0x8) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000040)) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000003c0)=@broute={'broute\x00', 0x20000120, 0x1, 0x280, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000140], 0x2, &(0x7f0000000100), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffdfffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x3, 0x0, 0x0, 'sit0\x00', 'vcan0\x00', 'ip6gretap0\x00', 'gretap0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @empty, [], 0xf8, 0x178, 0x1c0, [@limit={'limit\x00', 0x20, {{0x0, 0x101}}}, @statistic={'statistic\x00', 0x18}]}, [@common=@mark={'mark\x00', 0x10, {{0x0, 0xffffffffffffffff}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x2f8) 2018/04/14 15:03:17 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1'}], 0x1) bind$netrom(r0, &(0x7f0000000000)=@ax25={0x3, {"9176d0474ab9aa"}, 0x4}, 0x10) 2018/04/14 15:03:17 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000000100)={0x17, 0x0, &(0x7f0000000340)}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ppoll(&(0x7f0000000280)=[{r2, 0x620a}], 0x1, &(0x7f0000000540)={0x0, 0x1c9c380}, &(0x7f0000000580), 0x8) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000340)={0x5b, 0xfe4, 0x183, 0x0, 0xe3d, 0x5008, 0x119, 0x0, 0x5, 0x5, 0xfffffffffffffffb, 0x1000, 0x0, 0x6, 0x9, 0x81, 0x7fffffff, 0xffffffffffffff80, 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000480), &(0x7f0000000140)=0x8) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text64={0x40, &(0x7f00000002c0)="b805000000b9000000000f01d98f8958010967420f0966ba410066b8030066ef83b90d0000000d440fc71d00000000654a0f01c80fd42e660fd4556fb9730200000f32"}], 0xaaaaaaaaaaaab20, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f00000001c0)) getsockopt$sock_buf(r3, 0x1, 0x3b, &(0x7f0000000000)=""/147, &(0x7f00000000c0)=0x93) [ 208.904822] binder: 15624:15632 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 208.924911] binder: 15624:15643 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:17 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockname$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000a00)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0xe, &(0x7f00000002c0)=@raw=[@ldst={0x0, 0x0, 0x7, 0x7, 0x2, 0x150, 0x4}, @exit={0x95}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ba6, 0x0, 0x0, 0x0, 0x81}, @call={0x85, 0x0, 0x0, 0x17}, @alu={0x4, 0x8, 0xa, 0x3, 0x3, 0xfffffffe, 0xfffffffffffffff0}, @exit={0x95}, @generic={0x337, 0x101, 0x5, 0xffc}], &(0x7f0000000240)='syzkaller\x00', 0x9, 0x5b, &(0x7f0000000340)=""/91, 0x41f00, 0x252f8755ffb59a97, [], r1}, 0x48) prctl$void(0x0) getpid() r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x20000) ioctl$GIO_CMAP(r2, 0x4b70, &(0x7f0000000080)) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000ac0)={0x0, 0x9}, &(0x7f0000000b00)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000b40)={r4, 0xd0}, &(0x7f0000000b80)=0x8) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000040)=@get={0x1, &(0x7f0000000400)=""/242, 0x100000000}) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0xfd, 0x0) bind(0xffffffffffffffff, &(0x7f0000000140)=@llc={0x1a, 0x33a, 0x7, 0x80, 0x5, 0x4, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x15, &(0x7f0000000000), 0x4) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x103002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000500)={{0xffffffffffffffff, 0x7, 0x6, 0xa8d0, "d5c4405935fba9138caf7f1550ccf053e0d83f9498e514f0f94a3b27ae264ae65c3412e31f089bf1d66b696d", 0x80}, 0x1000, [0x7f, 0x0, 0x1e, 0xfffffffffffff1f3, 0x20, 0x9, 0xfff, 0xffffffff, 0x7edf, 0x7, 0x2, 0x80, 0x667, 0x4, 0x6, 0x7, 0x6, 0xffff, 0x7f, 0xffffffff, 0x8001, 0x7, 0x7684, 0x9, 0xf5, 0x3, 0x3, 0x4, 0x2, 0x10001, 0x0, 0xa98, 0xfffffffffffff801, 0x7, 0xfc1, 0x9, 0x8, 0x4, 0x0, 0x9, 0x4, 0x7, 0x6, 0x2, 0xfffffffffffffa85, 0x4, 0x3, 0x18d, 0xffffffffffffff00, 0x2, 0x5c2a, 0x1, 0x401, 0x9, 0x0, 0x8a97, 0x5, 0x7, 0x5, 0x4, 0x5, 0x1, 0x1ba, 0x80, 0x0, 0x3, 0x6, 0xffff, 0x2, 0x0, 0x777, 0x101, 0x5, 0x9, 0x67, 0x3, 0x7c03, 0x101, 0x2, 0xff, 0x8, 0x100000001, 0x6, 0xffff, 0x40, 0x2, 0x8, 0xb34f, 0xffffffff, 0x100, 0xde1d, 0x800, 0x35, 0x92a0, 0x843f, 0x1, 0x100000001, 0x1f, 0x80, 0x8, 0x2, 0x1, 0x8, 0x1a3, 0x80000000, 0xfffffffffffffff8, 0x7fffffff, 0x2, 0x8, 0x5, 0xfea2, 0xfff, 0x101, 0x3, 0x7, 0x60361c96, 0x400, 0x401, 0x6, 0x8, 0x80, 0x8, 0x1, 0x7, 0x732, 0xfffffffffffffff8, 0x20, 0x5], {0x0, 0x1c9c380}}) futimesat(r6, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{0x0, 0x7530}}) r7 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x2, 0x0) sendto$inet6(r7, &(0x7f0000000bc0)="36251e313e0743fc195a1a198a14434e8a0a00b3f452a3b5644e336ec712a16310c9aecc4e3097bc666a8882128a73c368ce731e9fbf3fe18fa52d00c34ac2e57c1c4569cfbd6a621c6dfbc032121aed", 0x50, 0x20000000, &(0x7f0000000c40)={0xa, 0x4e20, 0x6, @dev={0xfe, 0x80, [], 0x19}, 0x1f}, 0x1c) accept$alg(r2, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xb4fcd35419244434, &(0x7f00004ca000)={&(0x7f0000000300)=ANY=[], 0x1a1}, 0x1}, 0x0) syz_fuseblk_mount(&(0x7f0000001380)='./file0\x00', &(0x7f00000013c0)='./file0\x00', 0xf000, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb21, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x9b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x1ff) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000c80)) syz_open_dev$audion(&(0x7f0000000280)='/dev/audio#\x00', 0x7be, 0x0) 2018/04/14 15:03:17 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x700000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:17 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20082, 0x0) r1 = accept4$inet6(0xffffffffffffff9c, &(0x7f00000012c0), &(0x7f0000001300)=0x1c, 0x800) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001340)='/proc/self/net/pfkey\x00', 0x2800, 0x0) r3 = syz_open_dev$audion(&(0x7f0000001380)='/dev/audio#\x00', 0x3, 0xb6ea1ea2fb948879) socketpair(0x2, 0x80804, 0x4, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_open_dev$adsp(&(0x7f0000001400)='/dev/adsp#\x00', 0x8, 0x80000) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r7 = accept4$packet(0xffffffffffffff9c, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000001480)=0x14, 0x800) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000014c0)={0xffffffffffffffff}) socketpair$inet6(0xa, 0x0, 0x1ff, &(0x7f0000001500)={0xffffffffffffffff}) r10 = syz_open_dev$mice(&(0x7f0000001540)='/dev/input/mice\x00', 0x0, 0x20000) ioctl$sock_inet_tcp_SIOCINQ(r10, 0x541b, &(0x7f0000001600)) sendmsg$unix(r0, &(0x7f00000015c0)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001280)=[{&(0x7f00000000c0)="3e83722bf657fd15fcce0317dc785291cc8f7d64db6d283ca58b4ffdbf6db0bd634eae0e27b41fe6347fef7b8970448ffb99494981259b361174c601baf368b19403ed7df3ab877f97e72062f9af6a2e9f3d956fcdc9c305556d8b043b68cf4673624f7580c64b2b797b6d81e69f002557948b73b51cce1ed89615999764a470e3118ac4f908d5c593a930275de837a6bd4565b30a0103f2ea0c1205e9cbf3eef3bd3ab3df7d51ed2dfbe3f64078378f98add7b117e6cc6d6fcb5dae4c22c955bcd7963c28d4478155ac8563c558f500d97737fa8c7187bcfc73361b962ae9879c212ecd557285441cde70f60e40f416f060b5ca92c9febead", 0xf9}, {&(0x7f00000001c0)="2042921241c252c4932c1852729a796bbcd4a9b2477d6274e785198b11bca87312df5c7a1bbcb3615bc0c00ceee253a6316cd842c8ac0fa3da", 0x39}, {&(0x7f0000000200)="b80fb0f9d646eef35f22839178f36c0ca09fe613a261c9fc851d940bf4973f3db908e1ecd12255d5e46cad54d4e1b96117b7595acc37f247c0fa991a5f024624b0ea258519dd7c0e3d0cc886eb08892a0816ab", 0x53}, {&(0x7f0000000280)="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", 0x1000}], 0x4, &(0x7f0000001580)=[@rights={0x38, 0x1, 0x1, [r1, r2, r3, r4, r5, r6, r7, r8, r9, r10]}], 0x38, 0x40000}, 0x23f66aa1a8eba6b5) r11 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r11, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) [ 209.052401] binder: 15656:15658 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:17 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f00000002c0)='/dev/snd/pcmC#D#c\x00', 0x4, 0x400) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000300)) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000100)='./file0\x00', 0x1000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="584653420000100000000000000010000000000000000000000000000000000034fb8fb9e4bf48b6ad26c597eb4f5c1900000000000000040000000000000d880000000000000d890000000000000d8a000000010000100000000001000000000000035ab4240200040000", 0x6b}], 0x0, &(0x7f0000018900)={'nouuid,'}) r2 = syz_open_dev$dspn(&(0x7f0000000500)='/dev/dsp#\x00', 0x1, 0x218800) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xb0, 0x101000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x101400, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x16011, r2, 0x57) statfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)=""/102) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x101000, 0x0) ioctl$GIO_FONT(r4, 0x4b60, &(0x7f0000000280)=""/26) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000003c0)=0x0) perf_event_open(&(0x7f0000000340)={0x7, 0x70, 0x6, 0x100000000, 0x1, 0x0, 0x0, 0x54761a9e, 0x58838, 0x4, 0x9, 0x1dc5, 0x3f, 0x100000001, 0x3, 0xb0ba, 0x600000000, 0x7, 0x8001, 0x2, 0x1c28, 0x7, 0xfffffffffffffff7, 0x0, 0x8, 0xa8d, 0x5, 0xb18f, 0x8, 0xffffffffffffff00, 0x5, 0x8, 0xfffffffffffffe01, 0x1, 0x100000000, 0x8, 0x1, 0x80000001, 0x0, 0x4, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x400, 0x200, 0x8001, 0x0, 0x1ff, 0xf4, 0xe79c}, r5, 0x1, r1, 0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000400)) [ 209.094882] binder: 15656:15663 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:17 executing program 4: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x91d7, 0x4883) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000040)={[{0x4, 0x0, 0x7, 0x2, 0xfffffffffffffffd, 0x100000000, 0xfffffffffffffffa, 0x9, 0x9, 0x0, 0x4, 0x2, 0x1}, {0x10000, 0x8, 0xfffffffffffffff9, 0x10001, 0x6, 0xfffffffffffff801, 0xad, 0x6, 0x4, 0x0, 0x1, 0xffff, 0x20}, {0x7, 0x6000000000000, 0x6, 0x0, 0x1, 0x8dbb, 0x1, 0x81, 0xc0000000, 0x100000000, 0x4, 0xc37d}], 0x5}) r1 = memfd_create(&(0x7f0000000140)='dev ', 0x0) ftruncate(r1, 0xffff) write(r1, &(0x7f00007fbffd)='H', 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x8, 0x200, 0x9, 0x2, 0x0}, &(0x7f0000000100)=0x10) read(r0, &(0x7f0000000240)=""/6, 0x6) readahead(r1, 0x3ff, 0x7fffffff) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYBLOB="3b00000012cf6f6e8273f3bbdcbdb4b7ed5b67b19168d5ca6f2f702ffc5afa07f16c5efa4185dd0599851280d3f045c0343714387e054e7275c834856e4d05"], &(0x7f0000000200)=0x43) quotactl(0x0, &(0x7f0000001000)='./file0\x00', 0x0, &(0x7f0000000f7b)) 2018/04/14 15:03:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x68000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:18 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x8000000) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r1) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000080), &(0x7f0000000000)) 2018/04/14 15:03:18 executing program 0: syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x9, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0)="cc36", 0x2, 0x8}], 0x8000, &(0x7f0000000240)={[{@resize='resize', 0x2c}]}) r0 = socket(0xa, 0x2, 0x10001) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysv\x00', 0x0, &(0x7f00000000c0)="c840138be2e52810d6203519ce8a792d68ebcbd7b70de64690bf1f93913dff0622822bd14f74213ee42dd5dd5cbeae1345a181c16e23ca84a33769230729879b9ffe1f71e3c1d8afc5c97e9c83875a07b3c648e8dceb2e1b50e42c29eab13d1cd984e2f71605489840624c1930077e0cb256c990659d") setsockopt$inet_mreq(r0, 0x0, 0x25, &(0x7f0000bf9000)={@broadcast=0xffffffff, @multicast1=0xe0000001}, 0x207) 2018/04/14 15:03:18 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) userfaultfd(0x80800) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000001180)='/dev/audio\x00', 0x20000, 0x0) r1 = msgget(0x3, 0x4) msgget$private(0x0, 0x8) r2 = msgget(0x2, 0x142) prctl$setmm(0x23, 0x1, &(0x7f0000ff9000/0x4000)=nil) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x1) msgrcv(r2, &(0x7f0000000140)={0x0, ""/4096}, 0xffffffffffffff4c, 0x3, 0xfffffffffdfffffc) msgctl$IPC_RMID(r1, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000001200)) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001240)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000011c0)='/proc/self/net/pfkey\x00', 0x10000, 0x0) connect$netrom(r3, &(0x7f0000000080)=@ax25={0x3, {"8f3a5a3564d52f"}}, 0x10) 2018/04/14 15:03:18 executing program 2: r0 = socket$inet(0x2, 0x5, 0x800) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xcf, &(0x7f0000002000)=0x200000000000, 0x4) 2018/04/14 15:03:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/14 15:03:18 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, r0, &(0x7f0000000040), 0x10000) 2018/04/14 15:03:18 executing program 5: r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(0xffffffffffffffff, &(0x7f000000b580), 0x0, 0x0, &(0x7f000000b800)) connect$can_bcm(r0, &(0x7f0000002ff0)={0x1d}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x8500, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x2, 0xff}) ioctl$DRM_IOCTL_SG_FREE(r1, 0x40106439, &(0x7f00000000c0)={0x0, r2}) connect$inet6(0xffffffffffffffff, &(0x7f0000003000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000003000)=ANY=[@ANYBLOB="0500000002df25"], 0x10}, 0x1}, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r1, 0x89e0, &(0x7f0000000000)=0x8) recvmmsg(r0, &(0x7f0000007000)=[{{&(0x7f00000058c0)=@l2, 0x80, &(0x7f0000005a80), 0x0, &(0x7f0000005ac0)=""/99, 0x63}}, {{&(0x7f0000005b40)=@can, 0x80, &(0x7f0000005e40), 0x0, &(0x7f0000005e80)=""/179, 0xb3}}], 0x2, 0x10000, &(0x7f0000005f40)={0x0, 0x989680}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e23, 0x3ff, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x4e22, 0x100000000, @mcast2={0xff, 0x2, [], 0x1}}, 0x1000, [0x100000001, 0x3, 0xc9cd, 0x7, 0x80000000, 0x5, 0xff, 0x9]}, 0x5c) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000180)=0x4) 2018/04/14 15:03:18 executing program 6: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) getpgid(0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0xd816a4de53a5baa, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000001c0)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f00000000c0)) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) writev(r1, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) [ 210.077475] binder: 15700:15704 IncRefs 0 refcount change on invalid ref 1744830464 ret -22 2018/04/14 15:03:18 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$inet(r0, &(0x7f0000000140)={0x0, 0x0, @dev}, &(0x7f0000000180)=0x10) recvfrom$ax25(r0, &(0x7f0000000040)=""/117, 0x66, 0x0, &(0x7f00000000c0)={0x3, {"0a50e9d8aa7cfa"}, 0x4}, 0x10) write(r0, &(0x7f00005eef60)="220000a8c7001e0007ffe901000f05000880011810000000000000000000000000", 0xb6) setsockopt$packet_int(r0, 0x107, 0xfffffffffffffffc, &(0x7f0000000100)=0xfff, 0x4) 2018/04/14 15:03:18 executing program 1: r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000580)=0xffffffffffffff2e) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ashmem\x00', 0xc0000, 0x0) tee(r0, r1, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0x8) ioctl$KVM_SET_TSC_KHZ(0xffffffffffffffff, 0xaea2, 0x9800000000000000) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r3, &(0x7f0000d1a000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x4000000000000002, &(0x7f0000d11000), 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000180), &(0x7f0000000040)=0x68) listen(0xffffffffffffffff, 0x404) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000eccfa8)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="ac", 0x1) mmap(&(0x7f0000000000/0x8b000)=nil, 0x8b000, 0x0, 0x10000032, 0xffffffffffffffff, 0x0) r6 = accept$alg(r5, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r7, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r6, &(0x7f000007d000)="b3", 0x1}]) listen(r3, 0x3) close(r3) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000600)=ANY=[@ANYRES32=r2, @ANYBLOB="d20000000250422efb07533655ffa6f5637d2a6ea5bc8c5f707bbae2b884ad2ad2941a557c6769ac8e954c76b0abd27a990e120049ddfe8a4d38149a617fe64a28897b1d549d91a9e81baedb8336e45123ca143a3700ff31cbf1a939bc063e6b0945ad5d32d561088586c72f02e6eba63fac0f13e9ba7ed1b6207ab07462cfeddbd46ce9b01f1d02e486c6ee4456e4df"], &(0x7f00000003c0)=0x2) clone(0x200, &(0x7f0000b6b000), &(0x7f0000000340), &(0x7f0000000380), &(0x7f0000dacfc9)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000400)=0x8, 0x4) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='cmdline\x00') pread64(r8, &(0x7f00009f3000), 0xfffffcff, 0x0) lseek(r8, 0x0, 0x0) getpid() 2018/04/14 15:03:18 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001340)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(tnepres)\x00'}, 0xea) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000080)={0x8000, 0x1000000000, 0x6, 0x5, 0x6, [{0x66, 0x5d7, 0x8, 0x0, 0x0, 0x2}, {0x6e, 0xb8, 0x2, 0x0, 0x0, 0x9}, {0x3f, 0xfffffffffffff800, 0xffffffff}, {0xffff, 0x8000, 0x800, 0x0, 0x0, 0x1004}, {0x2, 0x5, 0x1, 0x0, 0x0, 0x200}, {0x4, 0x400, 0x9, 0x0, 0x0, 0x80}]}) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256\x00'}, 0x58) pipe2(&(0x7f0000000200)={0xffffffffffffffff}, 0x80800) setsockopt$ax25_buf(r1, 0x101, 0x19, &(0x7f00000002c0)="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", 0x1000) 2018/04/14 15:03:18 executing program 4: syz_mount_image$vfat(&(0x7f00000003c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000400)="eb3c906d6b66732e666174000204019825972b7000f8", 0x16}], 0x8000, &(0x7f0000000600)=ANY=[]) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x840, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}]}) [ 210.134581] binder: 15700:15715 IncRefs 0 refcount change on invalid ref 1744830464 ret -22 2018/04/14 15:03:18 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x40000000) r1 = socket(0x10, 0x802, 0x0) fcntl$dupfd(r0, 0x406, r0) write(r1, &(0x7f0000fcf000)="240000001a0025f0006bb4040000001d020b00ff0010b500001000eb080002007fffe5b7", 0x24) 2018/04/14 15:03:18 executing program 7: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x204000, 0x0) sendto$ipx(r0, &(0x7f00000003c0)="6d279dc3ea418e1216bdb079e1d5626095eb412c88fedeba4693db497517f131aa040fbb5f0c02bd91361e9e2919893922440d4eeeffd904050a32ec97dce7c44c224858ca67795227cc06aee8e7cef3d448ef3a2974d251b0a5c01f566e280bd27b0f942391ec145fe025ee9afb4c44601a1f85bd42ede5544bb44fffc22a876e71ce8169aa1662255b865fa3ab9d04a03dca015d43d169a28bd3f72514413cabf131b71838fa978a96e7b0e0716cba916220dba0247cda8b", 0xb9, 0x44015, &(0x7f0000000140)={0x4, 0x0, 0x9, "655f73f4918b", 0x7fffffff}, 0x10) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000002c0)=0x0) fcntl$lock(r0, 0x7, &(0x7f0000000480)={0x2, 0x5, 0x0, 0x7, r1}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000d700008200000000000002800020720a0009ffffff0074"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18800000000000000000000005006400ffffffffffffe70000000000000000000000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) openat$vsock(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vhost-vsock\x00', 0x2, 0x0) 2018/04/14 15:03:18 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='c\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x73, r0, 0x0) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x7, 0x3, 0xee, 0x8001, 0x7, 0x6}) fcntl$notify(r0, 0x402, 0x80000000) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) fcntl$setlease(r0, 0x400, 0x0) 2018/04/14 15:03:18 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xf405}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:18 executing program 0: socket$inet_dccp(0x2, 0x6, 0x0) r0 = inotify_init() socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000001780)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r0) getitimer(0x1, &(0x7f0000000040)) r3 = syz_open_dev$adsp(&(0x7f00000001c0)='/dev/adsp#\x00', 0x5, 0x400) r4 = openat(r3, &(0x7f0000000100)='./file0\x00', 0x101000, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x1ff, 0x3, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) r5 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="81c5201e270ad37677f48fce1563e9999379ec8bffb703f0d9dcb0646ff94a81e7e030f16264ab8189321aca8a50384fb89e03464d9553da3ebc04cea100c9d2369ed770136db4a65e5fda150dce35b3cb6a234bc399d5e6c318932b2577291e6448788f8a53fc24efe7eb648e1d7493f8de7a41f4a94e160dbc6c4b03a9d148dc"]}) getsockopt$sock_timeval(r5, 0x1, 0x14, &(0x7f0000000000), &(0x7f00000000c0)=0x10) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000380)=0x0) r8 = semget$private(0x0, 0x0, 0x680) semctl$IPC_STAT(r8, 0x0, 0x2, &(0x7f0000000680)=""/134) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000480)={'eql\x00', r6}) prctl$setptracer(0x59616d61, r7) sendmsg$nl_generic(r2, &(0x7f0000001740)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x402010}, 0xc, &(0x7f0000001700)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x4) ioctl$sock_SIOCOUTQ(r4, 0x5411, &(0x7f0000000180)) connect$vsock_dgram(r5, &(0x7f00000005c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) [ 210.433125] IPVS: ftp: loaded support on port[0] = 21 [ 210.438543] binder: 15752:15754 IncRefs 0 refcount change on invalid ref 62469 ret -22 [ 210.465808] binder: 15752:15757 IncRefs 0 refcount change on invalid ref 62469 ret -22 [ 210.590260] IPVS: ftp: loaded support on port[0] = 21 2018/04/14 15:03:19 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x400}, 0x8) shutdown(r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x269, 0x0) ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000200)) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x1f, 0x1) r3 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x6, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x7, 0x70, 0x401, 0x6, 0xfffffffffffffffb, 0x6, 0x0, 0x7fff, 0x100, 0x1, 0x6, 0x8, 0x1, 0x10000, 0x100, 0x6dd, 0x9, 0x7, 0x9, 0x1, 0x0, 0x4, 0x857c, 0x10001, 0x8, 0x1b8, 0xfffffffffffffffa, 0x7fffffff, 0x3, 0x1ff, 0x7, 0x0, 0xff, 0xf79, 0x5b9, 0x100, 0x5, 0x1, 0x0, 0x2bf6, 0x3, @perf_bp={&(0x7f0000000040)}, 0x20, 0x8, 0x7ff, 0x0, 0x3, 0x9, 0x5}, r2, 0x2, r3, 0xb) connect$bt_l2cap(r2, &(0x7f0000000180)={0x1f, 0x2756, {0x8c5, 0x7, 0x10001, 0x5, 0x1, 0x3}, 0x6, 0xcd}, 0xe) 2018/04/14 15:03:19 executing program 7: modify_ldt$read_default(0x2, &(0x7f0000000000)=""/55, 0x37) prctl$intptr(0x10000000024, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) 2018/04/14 15:03:19 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0x5, @empty, 0x3ff}, @in={0x2, 0x4e20, @multicast2=0xe0000002}], 0x2c) writev(r0, &(0x7f00000013c0), 0x1000000000000120) 2018/04/14 15:03:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4c}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:19 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x7, 0x501000) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000040)={0xffffffffffffff01, 0x6, 0x42, 0x5, [], [], [], 0x3, 0x1, 0x8, 0x80, "7ecab2db3aa817efbe3185b95f8b0ee3"}) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000fb6ffc)=0x1, 0x4) 2018/04/14 15:03:19 executing program 1: r0 = socket$inet(0x2, 0x80b, 0xcfd) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0xcb, &(0x7f0000000700)=@security={'security\x00', 0xe, 0x4, 0x310, 0xffffffff, 0x180, 0xc0, 0x0, 0xffffffff, 0xffffffff, 0x278, 0x278, 0x278, 0xffffffff, 0x4, &(0x7f0000d31000), {[{{@uncond, 0x0, 0x98, 0xc0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xc0}}, {{@ip={@loopback=0x7f000001, @rand_addr}, 0x0, 0x98, 0xc0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00'}}, {{@ip={@multicast1=0xe0000001}, 0x0, 0x98, 0xf8}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0x70}}}}, 0x370) 2018/04/14 15:03:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x9, 0x2, 0xeff, 0x4}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/171}, 0x18) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x88000, 0x0) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000200)={0x1, 0x6, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @empty]}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/29}, 0x18) 2018/04/14 15:03:19 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f00000001c0)=0xc62e, 0xfffffffffffffece) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000180)) sendto$inet(r0, &(0x7f00000001c0), 0x0, 0x20020004, &(0x7f0000385ff0)={0x2, 0x4e21, @loopback=0x7f000001}, 0x10) prctl$setendian(0x14, 0x2) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f00000000c0)=0xfffffffffffffffc, 0x4) syz_mount_image$gfs2(&(0x7f0000000140)='gfs2\x00', &(0x7f0000000200)='./file0\x00', 0x2, 0x6, &(0x7f0000000640)=[{&(0x7f0000000380)="05c6ff5e12eb90a3d52dc268380c01c113ff3f9cec0a294ca08942085cd43010b6716292e79aad5020", 0x29, 0xa475}, {&(0x7f00000003c0)="7446c99d3ab63bf531478982bcdf4a6697f3412c5d130ed8bfbf4997728644f2b91020acf26597e0326d99f565a21b5e502927c9c93d7ccd6987e7601da4bbe6a235e24088a040eadc228af5750c8c28f91cb975171101641eefddc0f54192e927af20dddb046a114945", 0x6a, 0x100000001}, {&(0x7f0000001dc0)="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", 0x1000, 0xb4}, {&(0x7f0000000440)="7dbec92fe23dde37d6adf6b1b729322c0e8221ab05f5f7b5c5eb88f5211592a86e35a90d70fc947e37d35a795afca59b24f7f108e6f132305997eff4164023c79a5d49cc9ce7db4fdeff9d7e98df64bf1ae035d6bc475d1e203ba2e453a0af8bd6478557bc369444115531", 0x6b, 0x4}, {&(0x7f00000004c0)="cd3dc0454a162376bca5e4cbea2fad86d851f05dc0a4368000973e12f95170412107235b994adeadd09ee3dc6c416944548447457715e695bfe651574e6810da41be91dd06d5f6ab59995c98f1714f03e24a540d1f3099eb8869691089ecdbaa4ff56b604f1b2dbcf3b257c520ea5509cb59d7a81000a6a5ab40505e8513288b3928b770c79748093336b3cfeb2d4892a8c80bee3a967c5a97d72c2b2136b367e06c7bf2008a5fb4e2eb653a94c341", 0xaf, 0x6}, {&(0x7f0000000580)="40649d1a17f70728cb762ce152013e6f7d39262960fb904c085798753ff9d6b8671ec902a4fec59b6a67c228d869f0427450b6d6eddba276a7beb7372a2a020cfcd1b0e665d905fcc57b1b0741101657936f458b8ba1b5098f0bbd0b7aed5d9d02a1d27dddbe4b8707603fa8dadff1718e6894d9dde0af7d16fd7c7c1fcd5863e7e5226f4791c85191a854817cc6be9d6b7a37759e8750de19bdd5afa08a0aae8a0d7e7df1ec12064317d1b28f9eb25a837f2f41994da856e4be", 0xba, 0x5}], 0x80008, &(0x7f0000000700)={[{@statfs_percent={'statfs_percent', 0x3d, [0x36, 0x7b, 0x32, 0x0, 0x38]}, 0x2c}]}) getsockname(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000f8e000)={0x0, 0x6, 0x3f}, 0x14) sendto$inet(r0, &(0x7f00006e2000)='!', 0x1, 0x0, 0x0, 0x0) acct(0x0) write$binfmt_aout(r0, &(0x7f0000001500)=ANY=[@ANYBLOB="0f010706880000008d030000160000004e00000009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000025a0d80000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000487b1a49b2a7b4949e37422447dc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6430eec2e087688000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000086a21f6cb5afe285740e71eda6028c0ea8751f6d9716470b994fe3cd4d75f57921c48dc809916987e013b2699b3d13b80531a010b6eb3be87127ad1a1cb03944e7ea4a4b58907dc8dd645b80230ea3550293e7e230967ff70ef00cf2983158322a43a73448168ece2bf553b0b8cc46cd53b371973ed08ebe17c29c9c06ab54103cf22ce375a3e7a0f383"], 0x820) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000bc0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @rand_addr=0x199}, @in6={0xa, 0x4e21, 0xffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0xff}, @in6={0xa, 0x4e20, 0x2c7e0a9f, @remote={0xfe, 0x80, [], 0xbb}, 0x7}, @in={0x2, 0x4e23, @rand_addr=0x80000001}], 0x78) [ 211.530203] binder: 15767:15778 IncRefs 0 refcount change on invalid ref 76 ret -22 2018/04/14 15:03:19 executing program 0: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x3) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, r0, 0x0) mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000140)=0x8, 0x7ff, 0x0) 2018/04/14 15:03:19 executing program 1: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x110) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x4, [0x5, 0x1ff, 0x9, 0x8000]}) r1 = memfd_create(&(0x7f0000000000)="5b80f2feffffff", 0x7) fcntl$addseals(r1, 0x409, 0x6) fallocate(r1, 0x0, 0x0, 0x2) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r2}, 0x8) 2018/04/14 15:03:19 executing program 7: clone(0x200, &(0x7f0000000100), &(0x7f0000000080), &(0x7f0000f8b000), &(0x7f0000000100)) mknod(&(0x7f0000b75ff8)='./file0\x00', 0x2001001, 0x0) r0 = getpid() ptrace$pokeuser(0x6, r0, 0x8000, 0x1000) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='syscall\x00') sched_setaffinity(0x0, 0x8, &(0x7f00009ad000)=0xfffffffffffffffe) preadv(r1, &(0x7f0000000040)=[{&(0x7f00006f0000)=""/154, 0x9a}], 0x1, 0x0) creat(&(0x7f0000b7a000)='./file0\x00', 0x0) 2018/04/14 15:03:19 executing program 6: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) r0 = getpgrp(0xffffffffffffffff) r1 = syz_open_procfs(r0, &(0x7f0000000080)='net/rt_cache\x00') writev(r1, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x1, 0x2, 0x3, 0x6, 0x9, 0x400, 0x6, 0x3ff, 0xb21, 0xffffffff, 0x1ff, 0x9}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000000)={0x3, 0x20}) [ 211.578260] binder: 15767:15786 IncRefs 0 refcount change on invalid ref 76 ret -22 2018/04/14 15:03:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) mmap(&(0x7f0000000000/0xd15000)=nil, 0xd15000, 0x2, 0x32, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) getegid() r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x10000000000101, 0x80000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000533000/0x4000)=nil, 0x4000}) accept$inet6(r1, 0x0, &(0x7f0000000040)) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10200000008) 2018/04/14 15:03:19 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x200000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:19 executing program 2: r0 = eventfd2(0x0, 0x0) read$eventfd(r0, &(0x7f0000000000), 0x8) r1 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0x7ff, 0xc0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000380)='veth1_to_team\x00') mkdirat$cgroup(r0, &(0x7f0000000280)='syz0\x00', 0x1ff) r2 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x6, 0x100) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000300)={0x60, 0x7, 0x5, 0x2, 0x2}) io_setup(0x800000020, &(0x7f0000000040)) r3 = creat(&(0x7f00001c0000)='./file0\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r3, 0xc0045520, &(0x7f00000000c0)=0x8) getsockname$packet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000140)=0x14) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x10) select(0x40, &(0x7f0000000080)={0x6, 0x0, 0x6, 0x3, 0x2f87c29e, 0x100000001, 0xa265, 0x9}, &(0x7f00000001c0)={0x9, 0x8000, 0x2, 0x400, 0x2, 0x10000, 0x5, 0x2}, &(0x7f0000000200)={0x8, 0x9, 0x65b, 0x9, 0x9, 0x0, 0x5}, &(0x7f0000000240)={0x77359400}) 2018/04/14 15:03:19 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x107240, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) truncate(&(0x7f00000003c0)='./file0\x00', 0x0) [ 211.742770] binder: 15803:15805 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 211.785137] binder: 15803:15811 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:20 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x400000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040)=0x2, 0x4) 2018/04/14 15:03:20 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)="15000000000083a66dd24ef184a67ab5d7c8fac7a7", 0x15) set_robust_list(&(0x7f0000000100)={&(0x7f0000000000), 0x80000001, &(0x7f00000000c0)={&(0x7f0000000080)}}, 0x18) 2018/04/14 15:03:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x68, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e22, 0x2, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1a}}, 0x9a16}, @in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0xf0}, @in={0x2, 0x4e24, @rand_addr=0x4}]}, &(0x7f00000000c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x5, 0x80000001, 0x204, 0x400, 0x10001, 0x8001, 0x51be, 0xc0a, r1}, &(0x7f0000000140)=0x20) 2018/04/14 15:03:20 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xf9a000)=nil, 0xf9a000, 0x1, 0x32, 0xffffffffffffffff, 0x0) write$rdma_cm(r0, &(0x7f0000000080)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001000)}}, 0x20) 2018/04/14 15:03:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x289a0100}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:20 executing program 5: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x4008630a, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bbc000), &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f0000442000)}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x220002, 0x0) clock_nanosleep(0x3, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) read$eventfd(r1, &(0x7f0000000040), 0x8) [ 212.510290] binder: 15823:15825 IncRefs 0 refcount change on invalid ref 681181440 ret -22 [ 212.552401] binder: 15823:15836 IncRefs 0 refcount change on invalid ref 681181440 ret -22 2018/04/14 15:03:20 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="013bfc00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000eb3ff8), &(0x7f0000940000)=0x8) r2 = fcntl$dupfd(r0, 0x10000, r0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 2018/04/14 15:03:20 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001e00)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) fcntl$setpipe(r0, 0x407, 0x7ff) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000358fe0)={r3}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20000, 0xa) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') accept4$packet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000280)=0x14, 0x80000) getsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f00000002c0)={@empty, @remote, 0x0}, &(0x7f0000000300)=0xc) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000340)={0x0, @loopback, @remote}, &(0x7f0000000380)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000440)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f0000000480)={'veth1_to_team\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000004c0)={0x0, @multicast1, @multicast2}, &(0x7f0000000500)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000840)={'vcan0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000008c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000009c0)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4}}, &(0x7f0000000ac0)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001440)=0x14, 0x80800) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001540)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000001640)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000016c0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001700)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast2}}, &(0x7f0000001800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004e80)={{{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@dev}}, &(0x7f0000004f80)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000004fc0)={0x0, @remote, @broadcast}, &(0x7f0000005000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f000000a8c0)={{{@in=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@dev}}, &(0x7f000000a9c0)=0xe8) accept$packet(r1, &(0x7f000000b1c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f000000b200)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000b240)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffff9c, &(0x7f000000b280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f000000b2c0)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f000000b300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f000000b340)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000b380)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f000000b480)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f000000bc40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f000000bc00)={&(0x7f000000b4c0)={0x71c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {0x1}, [{{0x8, 0x1, r6}, {0xf8, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8000}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x230, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r12}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x17c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x200}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xa8fb}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r20}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3ff}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r21}, {0xfc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r23}}, {0x8, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r24}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x29f}}}]}}, {{0x8, 0x1, r25}, {0xbc, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r26}}, {0x8, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r27}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x0, 0xffffffffffffff00, 0xffffffffffff0000, 0x1}]}}}]}}, {{0x8, 0x1, r28}, {0x7c, 0x2, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}]}}]}, 0x71c}, 0x1, 0x0, 0x0, 0x800}, 0x4040080) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000040)="f14e45911210d689", 0x8}], 0x1) 2018/04/14 15:03:20 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'teql0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="abe29f3211000000e400000001000000aaaafd00c4ef000004000000070000007904000006000000bb2f33f71b9aed05d1a51282e158f23a9f007041c2a63afc0c71f72e07ec55a7d37764f9e9257bf8497a41591317834520fce29eba9af25aa085183151c4d6dab8c82ec8b2cad1594e5f5d4d3ce33695c5736f544e53c1742351e1c1ec4559544a72933b9253afd7158c5f4e88cc7de0321bff11fc2ffbcaabf427210fd6c69c5905469a66ffab9d672b"]}) flock(r0, 0x2) [ 212.612692] binder: BC_ATTEMPT_ACQUIRE not supported [ 212.618802] binder: 15840:15841 ioctl c0306201 20004000 returned -22 [ 212.626575] binder: BINDER_SET_CONTEXT_MGR already set [ 212.631987] binder: BC_ATTEMPT_ACQUIRE not supported [ 212.637483] binder: 15840:15841 ioctl 40046207 0 returned -16 [ 212.643661] binder: 15840:15842 ioctl c0306201 20004000 returned -22 2018/04/14 15:03:20 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xf5050000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 212.761634] binder: 15854:15858 IncRefs 0 refcount change on invalid ref -184221696 ret -22 [ 212.800471] binder: 15854:15860 IncRefs 0 refcount change on invalid ref -184221696 ret -22 2018/04/14 15:03:21 executing program 7: r0 = syz_open_dev$binder(&(0x7f00006a9ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001fd0)={0x44, 0x0, &(0x7f0000008f04)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000000000000000000a80000000000000000000000002000000000000000", @ANYPTR=&(0x7f0000008fa8)=ANY=[], @ANYPTR=&(0x7f0000004000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x000\x00\x00\x00\x00\x00\x00\x00']], 0x0, 0x0, &(0x7f0000008fc7)}) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x4, 0x0, &(0x7f0000003fe8)=[@register_looper={0x630b}], 0x48, 0x0, &(0x7f0000009000)="d8fc1dd16de371f1d99e3b4d488546c2bbb067efde9e55e9d1048602c19fe0b0078ade697201170fdbcc34816df860d3f87023a9d8567fa3297aac9d65b25106fc55ed85da8cb6f3"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x14, 0x0, &(0x7f0000004000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4c, 0x0, &(0x7f000000bf80)=[@reply_sg={0x40486312, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x222, 0x118, &(0x7f0000777000)=[@fd={0x66642a85, 0x0, r0}], &(0x7f000000b000)}}}], 0x0, 0x0, &(0x7f000053f000)}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_netrom_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) 2018/04/14 15:03:21 executing program 0: mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffff9c) r1 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000c60000)={{{@in, @in6=@local}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@local}}, &(0x7f0000d94000)=0xe8) getgid() getpgid(r1) getresgid(&(0x7f00000002c0), &(0x7f0000000200), &(0x7f0000000280)) openat$sequencer(0xffffffffffffff9c, &(0x7f00007a8000)='/dev/sequencer\x00', 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0xfffffffffffffffe) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000d97000)={0x0, 0x1000000200007d}) gettid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00004c2000)) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000326f18)={{{@in=@broadcast, @in=@multicast1}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000c12000)=0xfffffffffffffe08) connect$ax25(r0, &(0x7f0000000100)={0x3, {"5a0f8047c827c1"}, 0x5}, 0x10) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)) gettid() lstat(&(0x7f0000589ff8)='./file0\x00', &(0x7f000093bfbc)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000021ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap(&(0x7f0000000000/0xda6000)=nil, 0xda6000, 0x3, 0x64031, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="7261770000000000000000000000006d000000000000000000f50000fbffffff09000000030000d68ab64ef68cb1df128fbe4ad3c32cf50050020000000700ffffff00000000ffffffffb8010000ffffff6aca6f1c10572958d862c9318798fb6a34aab380255fffffff1ef2d353247cee7c0004000000004b68b4daf205f6c4d1483a558d5f2e94e160a683f0a633552ddee7cde952e4ab36f984dcf2d8246f16cdac56d38ee4fdb20f3c44d4646895ffa072253890592cb9a725"], 0x1) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000268000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="baf80c66b8d4d9f78d66efbafc0ced66b9800000c00f326635002000000f300f35dbe23e0fe3e40f20c06635040000000f22c0f3ab660f3a600474baf80c66b860489e8666efbafc0ced440f20c066350a000000440f22c0", 0x58}], 0x1, 0x0, &(0x7f00000000c0)=[@flags={0x3}], 0x1) rename(&(0x7f0000000240)='./bus\x00', &(0x7f0000000300)='./bus\x00') r6 = dup3(r5, r3, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2018/04/14 15:03:21 executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000500)={0x10}, 0xc, &(0x7f0000f88000)={&(0x7f0000000440)=@getstats={0x14, 0x5e, 0x401}, 0x14}, 0x1}, 0x0) 2018/04/14 15:03:21 executing program 1: io_setup(0x8001, &(0x7f0000000040)=0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r1 = syz_fuse_mount(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) io_submit(r0, 0x1, &(0x7f00000012c0)=[&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)}]) 2018/04/14 15:03:21 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101802, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x80000000) r1 = fcntl$getown(0xffffffffffffff9c, 0x9) r2 = syz_open_procfs(r1, &(0x7f0000f0c000)='clear_refs\x00') writev(r2, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/14 15:03:21 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x1000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:21 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7f3, 0x103000) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000100)="6c7c73fb7e2a9eed6ec792084abb312e2e2dea12c238c81707fbf35542e9605f5edcd430e3afba0ed01404c653218ae4fdf4a39b9532a6b23d2841a8ea1845af985edcbf378f68d511c997f265b93b1e7643550dfaec67d3f46808dc56e8128732ef859f5996f6f3f96f32eaf09190c326095b090377011d73d30500cd83d7c2a47ea7e1ad44dda2f471ca02955decbf26dd5da72f295cf643a2fe767e2bf029b5bd178c3ab2a0042b612583d5") setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080)=0x4, 0x4) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)={0x2, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x38}, 0x1}, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f00000000c0)={'tunl0\x00', {0x4, 0x8001, 0x400, "90f3a0f92583", 0x1f98}}) 2018/04/14 15:03:21 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = gettid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000068000/0x800000)=nil, 0x800000}}) process_vm_writev(r1, &(0x7f0000000000)=[{&(0x7f000075ef4e)=""/178, 0xb2}], 0x1000000000000363, &(0x7f000088efe0)=[{&(0x7f0000000040)=""/83, 0xfffffe83}], 0x1, 0x0) close(r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000bbfe8)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r3 = accept$alg(r0, 0x0, 0x0) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r4, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f000007d000)="b3", 0x1}]) 2018/04/14 15:03:21 executing program 4: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x100000001, 0x1ee, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x4, 0xfb, &(0x7f00001a7f05)=""/251, 0x0, 0x1}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x8971, 0x6f2000, &(0x7f0000000180)) [ 212.959374] binder: 15865:15867 ERROR: BC_REGISTER_LOOPER called without request [ 212.983804] binder: 15875:15876 IncRefs 0 refcount change on invalid ref 16777216 ret -22 2018/04/14 15:03:21 executing program 0: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x200, 0x80200) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e22}}) r1 = syz_open_dev$sg(&(0x7f0000058ff7)='/dev/sg#\x00', 0x0, 0x40002) ioctl(r1, 0x5387, &(0x7f0000000000)="621df9560b808e810697c1537bb082c56d99e88a6c3384255f0737ff761d0d34740115d5b367fc70b8a7e91723b338a243bb5575a04aef9c017b25175a82ff3d08bfde4e0784e0e547b63f78e326e044259b2e7a4751cbbd31904fb2c529f922c0a8d529d645f691c3908059edaea9b3b8c0c7fc1fbac3e358aa770e1cde35d1e88f73573f259870886ab2c535280000000000000000000000603eac5fe21963f18371033a62a75e9b69a7d22f319bee043452070b820730f9232c") recvfrom$inet(r1, &(0x7f0000000140)=""/223, 0xdf, 0x10000, &(0x7f0000000240)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) 2018/04/14 15:03:21 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000c00)='/proc/self/net/pfkey\x00', 0xa000, 0x0) sendmmsg$alg(r0, &(0x7f0000000b00)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000640)="3eee4f833581955dc7fd3e75a6dad86d683478e0ba96ba36b02af32e0cdf5c8215683dd613698af439f0c21aac75818c04a808d0e3cc3792b484b743df0b7d01ce945e941ac2dad8dae2c0a8ef717973db00eb1562a693fa3552eaee000abe1eb3b2d71b196a585af9a7d4a2d19e790bcd7f6b60322fb69513586c41a38fe10433002e5c6868e651770af45f2e4e69", 0x8f}], 0x1, 0x0, 0x0, 0x81}, {0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000740)="6f65ebbe4cb76387f17bdc0ef22927b836acffad2dd616206311796210f7f13b494f76831f992325cc637155c728e0d24346ad3ea782e31427909c00b25585b63f2f3fee4d60c81bf307bc49476deb28369c5f65811430206c8b5938f011a8e156e6b89128201f17b3720c74744fde401fd79f9a92c3330d343cd1f44ded57da2d6c1a79a677132936fd86bfc01e", 0x8e}, {&(0x7f0000000800)="0e8c26c0a9e8fa6252e107fc5042e1d01969a7f4c5982c675a6f440d3d66e19d0ef31c58a7d2cc71532fd0184cf61bf4ac9a52b1f1e5c3b79e8c1f268d37146d70bae665a8fb76ce17e04946972e77ebd09906d24a301e8db8ca4076568e871bba9828d19eab9c4aee96292a9252cd87571115e2c2e13cef830b0db64091edc279e3ace329b49f98bed27f3370fbb7f1b20d376fbd55320e3f37dbc36b1f5e56d992858fe849702d6f7ba1a65c8ebffccf7d68", 0xb3}, {&(0x7f00000008c0)="2a3945d5b63ac3f38ccaf061436464a3d53579dc675207b6458105ef191f7bb2", 0x20}], 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x1b0}], 0x2, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000940)=ANY=[]) ioctl$sock_SIOCADDDLCI(r3, 0x8980, &(0x7f0000000b80)={'gretap0\x00', 0x1ff}) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) sendto$inet(r3, &(0x7f0000000380)="100adf21e7deed6f77a966df444b95eddc00f37cf99befccd4201c4176e6847b4993e1ca65eab8db9ff90dd028b39fa3f94ed877435bcf560aaf4bfef76b21f099df9bbbf375eee247d68a7da3eec0769da5fde3a5", 0x55, 0x20000000, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr}, 0x10) eventfd2(0x3, 0x800) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000400)={@local={0xfe, 0x80, [], 0xaa}, 0x2, 0x3, 0x1, 0x5, 0x9, 0x1f}, 0x20) ioctl$KVM_SET_DEBUGREGS(r0, 0x4080aea2, &(0x7f0000000140)={[0x1, 0x3, 0x2000, 0x1000], 0x9, 0x1, 0x9}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) getsockname$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10) recvfrom$ipx(r4, &(0x7f0000000540)=""/205, 0xcd, 0x1, &(0x7f0000000340)={0x4, 0x5, 0x2, "67db4cd25f26", 0xffffffffffff8000}, 0x10) ioctl$sock_bt_cmtp_CMTPCONNADD(0xffffffffffffffff, 0x400443c8, &(0x7f00000002c0)={r4, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 213.040196] binder: 15875:15881 IncRefs 0 refcount change on invalid ref 16777216 ret -22 2018/04/14 15:03:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) fadvise64(r0, 0x0, 0x4, 0x0) getpeername(r0, &(0x7f00000001c0)=@can={0x0, 0x0}, &(0x7f0000000240)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xd, 0x15, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7fff}, @exit={0x95}, @jmp={0x5, 0x2, 0x7, 0xa, 0x4, 0xffffffc0, 0xfffffffffffffffc}, @generic={0x7fffffff, 0x7, 0x4, 0x1f}, @generic={0x7, 0x6, 0x2}, @map={0x18, 0x7, 0x1, 0x0, r0}, @exit={0x95}, @jmp={0x5, 0x1, 0xf, 0xb, 0x7, 0x20, 0x8}, @exit={0x95}], {0x95}}, &(0x7f00000000c0)='syzkaller\x00', 0xb3e, 0x9e, &(0x7f0000000100)=""/158, 0x41f00, 0x1, [], r1}, 0x48) 2018/04/14 15:03:21 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='io.max\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x4) 2018/04/14 15:03:21 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0x13b, &(0x7f0000000040)={&(0x7f00000002c0)=@delpolicy={0x0, 0x14, 0x400, 0x70bd25, 0x25dfdbff, {{@in6=@dev={0xfe, 0x80, [], 0x10}, @in=@broadcast=0xffffffff, 0x4e20, 0x3, 0x4e22, 0x0, 0xa, 0x20, 0xa0, 0x1d, r1, r2}, 0x6e6bba}, [@lifetime_val={0x0, 0x9, {0x20000000, 0xfffffffffffffffc, 0x0, 0x1}}, @extra_flags={0x0, 0x18, 0x56f}, @srcaddr={0x0, 0xd, @in=@multicast2=0xe0000002}, @policy={0x0, 0x7, {{@in6=@loopback={0x0, 0x1}, @in=@multicast1=0xe0000001, 0x4e23, 0x3b5, 0x4e21, 0x100, 0xa, 0x80, 0x0, 0x3b, 0x0, r3}, {0x3, 0x1, 0x800, 0x8001, 0x835, 0x0, 0x5, 0x1ff}, {0x416b, 0xffff, 0x6, 0x1}, 0x7fff, 0x3c, 0x0, 0x1, 0x1, 0x2}}, @sec_ctx={0x0, 0x8, {0x0, 0x8, 0xf53dd88a9688a0b0, 0xffffffffffff0001, 0x0, "02bbe55db40a29e312c39092171c97d6fc9287e9d3fd765e87083d7a8ec0188bb27353c680c8c2dbf3dcd1bfb72300803463914f18082ec7bcbd4abbcf981d72e5a5f298c23b61fbe608f4f27b2166d3b057c3fbda6aa940fb4aa91080b5f41ea65dd0b3c95d845d8d21e46fdb54e2d7c8f05bf31abe970d760f696446554586637a5da5608cf5198a4fd35df71daaadc58e95d5ef72463f1feb5a28f040915acdd08394453405b6cf4c8617f729a11d705aca7ce66ae19625dff276664effe059199dd76894a727072d0b73b25f02cf4f2ae6f7f5dc3b5457e7861a283143cedc0e2921698558b5bfb3e09dff123faf7b2d0afd1cab9bab85ff407eed2c17aa2f2fb5ca9a93be8136a5b10c3590bd6c0e7f9cdb4ed60d698a7d52d1bee40595627db99cf253af64e113ba02bc71b4fe3c8d376a0f10e3f556cbb54ce79cba2b7e2757c5de137ed18df5336a605adb6e29889204be79879b0165d2de92fcdac20dd73045749743f761ad311544780853f539c9c01d17d11a25d7392204ad82ee9dd30fe30457aae77fe00a8eeb9262fa572920c2c53c91fdd7d48389ff8a8b05c0db6dcb3496260a9ce282e5212b3c86aa520a8f1bdecd76e6cb36914ecf8a87c61543e704d2edfc0ca09b63eb689d74c7ad9553fd7e3b3956de0c0de06b35112bc50a11c3a596ef304b4084b383e81cc7edb3f768e04748daf76b3ee9e1f32bc1e207a40b80e6dc1695f5590af34c694f02fd65e04f2ea51b14c84cdc6edeb2709a816e41152cad73e88d541fca8e0608e46218fd7a78b5630e375baa1b6e14ad9fc7fb29c37af4c6251287f5433e3255e334994f8f6e0319dc7e0fed0bebdd2a0ee5470ee75c9a5f92f8eafa2ad3d75594c10443ebf5cb009e27c0d65c04bbc749ff4989dff3c4f6f696f045042db7522f2327eb331f66a5c99cda26080548a04ac1e2fe26377805cbc7ffaa665d3c5c84d74736ddd6225546f2029a164ae2e37a06d3eca03c5a98cb3b12e630a6527822095ea69ce0640b7504e1b930ee00ef2453f5dff397c588293c032a8b18faa0c09af98409e5b5db8b7431c545ddb6ed4a81f82b6d961795600f63678bff63858c5eed0fed160cbb080b5ca809d3a683edda66f9887635d327877babdf3e2ddc5791774b7c698394fa03b68562986a143106cb9d552f386843ac366ee9cae942b79ce3a6c46efff306a3ffb30ced6e610baece2d0e10a4a8cbe9b4a0ab78fa5dc6ea341d1b51e717b263b7ceffbf35540e30b358f34fd7debaa1e3318a5b4048feb30e5a6dd54990ac437e8d0030acdfa9f4013b6a05ad5cd833fd3402772fd1334e7f5b86c139ded8a95afc85286a138dca4bdf7ad538cf875b367ba36a401bad3b23eabeba6132d1ed3fc0681f442687060db650845f451604ef741c2b462a0fe7183271f06e9a0cb23b8eb690d9d60e8cce90aa1382985d70955c02cc8808f7d99dd7f9e37de2cbf25d33f212c578c97463c0fce922ac566cf7c4457e9a541840d7e434c1cc13df3468e6e1f169f2e768541de16c9aced57fb6396e7f5f57c8286eabe59e0a30d482951861148ccb495ca8638da08595e95faef300763d715f708e1d5bb32cb87117c5237e5de895df352b4a49c9c5d0a40683815c06c71ab6262e2ed0a8b3e516164bffa09e08df10faddd2d5619b6ea23338c2cb32869013434390aa6e1f89dae8210820dfa13db77a5c67b82021ccd6c3a384cf5c7dffd4920d36d545d5d7f64731937f5e31891bf7c402dd82b058c9c13344ed20717349aff241d6b72929e1f02bf87964cc90ebf2e53f6ae9f639620b5da1ebf2ed5dad56c2ab67cc69c88a600aaca6e4b0030ecbc63d14547b481eded88ed9448ae881281affa161f498b1382527b3466dbfa70e1fca7cf949f54fe35ef3ffdb912a8de1ed5d02974725420645fc17246daad9c154db42fc336b3f37ea2017c49a192a376b9579995c8ea04507b8c6a6f92a4bc669169391865340ecc3a461ac3a40265681a8b4cd5dc0d35a8ce519c71af92082c4845e0810f7914c8435ca89e0c07cf3a0a241d554a112a2e644af3a94913ee27052a14f16ea738f89cd811a3d6828ec9878b9a037d3308d91a34405b18c3088eb0186ac238f78da79bcefc0a72f3d295131d827135d9b474f33749a001b674aeb5d468313025cde242d70a836ffdf6b4e6b00a3c7cfe3bc08e3ca56067b27f8353c809f9bf024c1dcad16e7005d3f31b685f775864d355d9e41ad1e6a12ee8fdf6b8300a60a9ca0ac4153fa707da7c04190bbea9455a88b711483d9b1a0b65b729771852fa595d86347c8a02d658477984dbfbfdfff5e9d6adc33dd3c648d8df7687f9c46b3fa97094d3661fa126a22ab9ed860a46687a8d3a495cb9f22a97b7362144e9c333f8a94fa65791fe3228f2da9226838e5792765e54a57552a1c24572e42c66a3d01c095e7baecabf301cdffcc05cd08880139b2082b6aaf1c9e5336e2417f70dbd9b30eeea90b1f67b35eb7bba9399239a6c4d9195af79fb7291bfc26937395b590d30a1a65fa2a135faadb95cb650deeeb7ee7450d11e6ed7a3cd2078b226f9d928740d8404856db0d352f0a815677923756555b0c47711b5403349408a8cd4f0f69a18c621f91b3c2e1d0b522ad2988fbc79925a61f8b5b6f8cffab7ab124f661062d5d0771365ef67907da64da4dba05a0850a2b78a43b304ab4aca23b07fdde372b4420bec5be8ca88d98c97334f7eb1fbfbc93a420a2218aed27982156f449e69cd38027f52c0496d976fa5c74df398486ab1fd223f9a4766b70a656d4781c63477caae470806188bad1c79f540b8209785b8db417f6ba6be4935d8c204875c5de14b566aad6721ffcebaf9f3f4336659928b6c40540ea77e315c4ba3023862afaa3a33bb81caacabd3dfce714a8577618b955f98c69f5d0fd7ce5e24f807e744c695f4a7a0eda12b48ba7c3f59f2b242b84ddf1d58764f836b5b7a5e5f06db012441cb377af45a5350cbb1b0569975e9c1626623af8fead3e163836af86661ff509cedc1e6ac6bdf8004f418007b26aeaf8b40dec5e572bb5887900cb727be14e9bf12cd5e36de6d0ac2228883d5a7c78d9638ad0b44d6b131099707ed198976012b60421c863621aa8122c77fe80bbfb20ac31c8ab88762e4afb2a010ab79ccc4f4b4d37a7703dc42a2f86563215873f7b59e649fe0d59f0396d0e524ea38c56afbd88c681196509bcf302f2a8f1486a74df55885351e68111394cd27fceca60fea1d5a827cf1721067efd9fa94aeb1044faf866d44102f8000366251669ed5ed3a600ed8d37f59c0249ed6a51ba317d77d30f66186211f4f60a179fcf533a12d590fc5988e51bb4e0ef49df8cb447c96d3cbb6aa1ca41ccc87f50d0953da178021151759aa3da430a7c46259b054e64021bb5ca98a699c48422bedf128ff3422a400ae9fa93873637def19302c8d03d5ae362482ae7a17ad854f07897a6fc09daf8f43e92961d2136bec3f8799931bd073241609155620d95593722d905ad190291e390be258f50932549e407aa3ca6f7c7ef8868f224ea66653783346940cc5f391fa5d5a79af2baada2063d6e6249ea53dd2be70b078da1de49f73c8e8d1cea9cd4818cea2b5d7c6eae2b0c04547680d1c4ce4c9e3a87c85c5275bc0d9267ba296b79c85cfbd3c09f5871a81fe249eb87bdf7a7f91c88fa8f6a35df17984532dd7de6d9375ffca4964a5bd534ec62c99a963c4300c931799b206c65b6aeeb6ca9f4d8156c887fc8b094f9280c565bcdfc9dba6b6aa05628ecccc6a31051b7c44c95c4a4ab5b256c47185e0a37ba781f1c15914df3ca3dedddc4e101b3db15590e5b118ed01cae35f35a590ff54312303d33ec3d40d434596c6e495f998e3a8be350ac264f4e635cd6da3fd543efa5cd107e41e8eada18ca93f0bb5fe9f8d898249dd3f64ec2d10c8fed75deb1e2192fea0ad4f241baab8c2a2c739ed4ce7500ee75a68e4926af9fce564877f78aaec81b64800a03187658a66fb8e3a9d0a3c2cd096b3e896364b74eb2858a444c0ec1a1726a86214d3540cff2a61435769106744d3f110d02d97cfc81122728810c258766d138c0b97036f068c929a095eb039e42be0c5b21cfaf763acab751c7f3e6650fc919176588822fd6aa62166a2902cee92bf26107a3a015571d81d58dc88ad4b3ad26b5a0523083e7e7b2444a8f091c759d7768a7ab2c36bc5096487d48511578fddbd09ce52d86c4f097b16e462481b3cd901784deb1a092094eaefe905641ade953c014d2851bb5edcec9861ae6d8f978d56f2112f6bb27f384302753bcfa6dc7ba97c99a25fd07841cdbbabd1224299d6a1062f06a4f23a50dd091d5a7424e06fbf157bb09d6f1304e25118d3fabab22a59a54ab9ba18a77621f50c86bb256715e6374cacaefd2e7eecb11ac47e0464711211407e3e2d52f14777e60e4e4a0354a189aa4b7c5f3bea1b4446ba8fa09f3bb631d35dfe41b75cd7d1715bcc86d8e5c46e3ea2b02ecf7d74ab8811c51ded72514ea2528dba17fc9445f56b0c0c591240eea01320b4b3634191ac0a608bb8de585b244e87adebd1c9ea613299f59b89d409a21464da321074533e9f145ed8e69634f6596c280ecfced0d3c42c13c1e38306eaccb7d673519a065c3ddeb055295aee5801a9d7abf248841a636fc69466ca0ac0fefbb9d28a65f458061170bfb98d645ff8d8057177a5feeeafa451166dd3e44bc5dd899833f9b0b1db9f8ee75554954b392e415c7743dcbde9dbeed930d80b21e3f8c5de9605bf8e8ec09854cbf20358159b864b198d0e4419751b53889cccda0320f567304e3ed7e4f598a2f7e71c839730e0e6ab62b630d860d7a14f6d4da75db4e9cfe1f9d21d9e3c533ac18bfab9b38de87763b24587a238fbc65f9734a2bf41a81b5b440d565cbfeffd79e27e766fdb41e725fb52640480cdaf34d9ef6e8355144075db18aaab26b5d6514bf0f499881175b72ce38194f010e06a5ceecd2956d6ce20267160f0a2cec2e803fd30fc2229be80aa768f09890992b083501150301852c046f184bc2ab9ae1af144bd946ab0b337023a79696da15e7cb35bc73865170eec9e8a5126cad13a17e621df65cefe1e8313d2c615e67e24136691cdacf47d1e390fa58b1b69737c3032e92a9da667fe11987afb4e35ad13fe489ba5a7e613c808c528df765c0ee1f49ebbc37f055b5634396b994c19e608620d62dd110643e5c90c7b9a3b9323020ae4b7f751766c5ff1e6f668d8b393691108c89758a0bc576414cd09f5b6ad7cd870e7a2d0eca4a962d32a0ba496b334aef38cb9f2cf072bf27a321cf3a510096576ad4d5cc51c6118575c746721ffabaacf7a93b4c8478eea52b50556b2ed9341b90f415ad36ec362761bdc7cfd0bd103c6a40061a0d59d00125670ff9531d7eb1ba79e990e1bfa1cbab8242eb1c64372249359226e9cd1278a40d99dc84687e4b1b9a5335063e6cdcd625e8d3a8cc4bd2ed0fe973c325fb889600094c63b977f01be936784907f66cd1a08ead20dea363af3d8264778f26415e0810ccee5569162a8848dbd579b7e07a3d883c7627cc5e8da71a0f8ad8f4ff4eb3728daf13b5cf7589bfb6262bb29a5ba55661a6c63da06169be027550265a175853961085f6b2450ee32deebd5d46268d67f110a3609a54afac3d643d4e7a1ab1ef14d49ab2bbb7723ead3a5b28eb8ab1a8dcb465f76a31e0b0246850e6afa64eaa0ca6cc137a5792e219d4fbb413fea674e42793d2"}}, @etimer_thresh={0x0, 0xc, 0x2}, @policy_type={0x0, 0x10}]}, 0x13c}, 0x1}, 0x0) 2018/04/14 15:03:21 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000002700)='/dev/snd/midiC#D#\x00', 0xffff, 0x20801) ioctl$KDGETMODE(r1, 0x4b3b, &(0x7f0000002740)) recvmsg(r0, &(0x7f0000002640)={&(0x7f00000000c0)=@ax25, 0x80, &(0x7f0000001580)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f00000013c0)=""/170, 0xaa}, {&(0x7f0000000300)=""/109, 0x6d}, {&(0x7f0000001480)=""/96, 0x60}, {&(0x7f0000001500)=""/95, 0x5f}, {&(0x7f0000000240)=""/1, 0x1}], 0x6, &(0x7f0000001640)=""/4096, 0x1000, 0x2}, 0x41) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f00000026c0)) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000001c0)="c0d0091ee98c34ccd1a2f8b64dc0445e9d2b1b46248d07f2375cc4d8cc5d2c19", 0x20}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f0000000040)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000080)=""/6, 0x6}, 0x0) 2018/04/14 15:03:21 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0xc80) [ 213.368717] IPVS: ftp: loaded support on port[0] = 21 [ 213.736243] binder: 15865:15867 got transaction with invalid offset (0, min 24 max 546) or object. [ 213.746988] binder: 15865:15867 transaction failed 29201/-22, size 546-280 line 3026 [ 213.754984] binder: send failed reply for transaction 68 to 15865:15942 [ 213.765603] binder_alloc: binder_alloc_mmap_handler: 15865 20000000-20002000 already mapped failed -16 [ 213.776716] binder: BINDER_SET_CONTEXT_MGR already set [ 213.780700] binder: 15865:15942 ERROR: BC_REGISTER_LOOPER called without request [ 213.782142] binder: 15865:15867 ioctl 40046207 0 returned -16 [ 213.794339] binder: 15865:15942 unknown command 76 [ 213.795620] binder: 15865:15947 got reply transaction with no transaction stack [ 213.808005] binder: 15865:15947 transaction failed 29201/-71, size 546-280 line 2763 [ 213.812145] binder: 15865:15942 ioctl c0306201 2000a000 returned -22 [ 213.837366] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.842896] binder: undelivered TRANSACTION_ERROR: 29190 [ 213.848399] binder: undelivered TRANSACTION_COMPLETE [ 213.853533] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.921891] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.928279] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.935371] device bridge_slave_0 entered promiscuous mode [ 213.958292] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.964636] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.971643] device bridge_slave_1 entered promiscuous mode [ 213.997658] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 214.021519] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 214.085470] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 214.110765] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 214.204150] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 214.211421] team0: Port device team_slave_0 added [ 214.232314] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 214.239637] team0: Port device team_slave_1 added [ 214.260997] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 214.285343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 214.308156] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 214.315179] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 214.323449] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 214.341964] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 214.349006] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 214.356882] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 214.551225] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.557595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.564220] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.570570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.292115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.364582] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 215.434885] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 215.441194] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 215.448262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 215.514912] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/14 15:03:24 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x5, 0x5, 0x1000000000000914, 0x4000000005}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xd, 0x81, 0x4, 0x4, 0x0, r0}, 0x2c) r2 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x808000, 0x400) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x7, &(0x7f0000000140)=@framed={{0x18}, [@map={0x18, 0x0, 0x1, 0x0, r1}, @map={0x18, 0x0, 0x1, 0x0, r0}], {0x95}}, &(0x7f0000000240)='syzkaller\x00', 0x80000001, 0xc36, &(0x7f0000000400)=""/4096, 0x41f00}, 0xfffffd91) 2018/04/14 15:03:24 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet(0x2, 0x1, 0xabd2, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0x48, "8178f73293cd143d4540e1b0bd5c9bea8b0d4d38ed30c0a2e941d4f3e62f14c0d74c8aa5fcd10c0eab30a2f187999ae58fc2acf131ed38fd750c65851d633a47028eb7af89832d70"}, &(0x7f0000000100)=0x50) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x80, 0x9, 0x2, 0x401, 0x2}, 0x98) r3 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000f21000/0x3000)=nil, 0x3000, 0x0, 0x11, r3, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r3) 2018/04/14 15:03:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x5f4}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:24 executing program 2: r0 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r3 = add_key$user(&(0x7f0000000380)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="00d87cf13aeb59161ccc1d95a70d79ef86d0", 0xfffffebc, r2) r4 = add_key$user(&(0x7f0000002cc0)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000280), 0x182, r0) r5 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)='u', 0x1, r0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x600, 0x4) getsockopt$inet_dccp_int(r6, 0x21, 0x5, &(0x7f0000000300), &(0x7f00000003c0)=0x4) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) keyctl$dh_compute(0x17, &(0x7f0000000100)={r3, r4, r5}, &(0x7f0000a53ffb)=""/5, 0x5, &(0x7f0000c61fc8)={&(0x7f0000a3dffa)={'rmd256-generic\x00'}}) 2018/04/14 15:03:24 executing program 1: mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = getegid() getgroups(0x1, &(0x7f0000000000)=[0x0]) getgroups(0x1, &(0x7f0000000040)=[0x0]) getgroups(0x3, &(0x7f0000000080)=[r0, r1, r2]) r3 = socket$inet6(0xa, 0x80001, 0x0) getsockopt$bt_hci(r3, 0x0, 0x60, &(0x7f00001e3000)=""/30, &(0x7f0000d23000)=0x44) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipx\x00') ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f0000000100)="8ca6ebc68eb9fe53a2c7f650fadb66f2647cbbb7dce0e6def48d8127f289659cb6d68883344e021ff9dacd656977aedfe09bddf513f7efaf1e13380fecb1e80e89ae9799693776f26cba048364864ea03a886fbdad1e0079884bbbecdd6f00b28c179066c83586048e0189ca1b804e5a726bad8f789590b1983f53b3fc28a7da10f8e4e2725071a16e2cf34ddb7e07617fe02a463c44f08a5a25ef57ec99bbf07bfb560bab414014fba3d1dc7b1e0e9ff3791749f9adbd4459b7c3111ce40723575febe492df7a860bef55522748994ce49636c871bf3490efea16d8eab042e616c1860b5a4bd2efbc28c0d1fa1c3c4fa7f3") 2018/04/14 15:03:24 executing program 4: socketpair$unix(0x1, 0x8000000000000009, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000680)="82292f19f7117e59fd51d880ff26d92b12071cfa599ec6b429599416512162370837a3d1363b8750f760bec2f31f3695de13daf5e8ed49ba5c8512572ca19c1188aaecb1454df72b4895a0b73e9ec2b7df67aac77e1af273b44c65adb6b24bf9f2e5ee9d647890c81242c3f93008362b742a485bda47ca7ac2695a0a861714a408367ebdbf1c0b858bfc0b147c5ac3a8d22d859d000000000000000000", 0x9d) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000440)='/dev/autofs\x00', 0x111040, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x1c, 0x4, "777c6a02c137c7ec0514bed62864ca4db893f8664a704ef5be10aa51bfa01cca7f1138d9324488043bff54109176a6560b351368f1dd00716edf5011b37e9bc5", "13c99ea710c6acf381a8fe849c7632f46aaaa9935911bd1cbccdc09f5943dd66", [0x9, 0xffffffffffff0001]}) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000100)) setregid(r2, r2) clone(0x6042200, &(0x7f00000001c0)="6404c874d335df59f93a708da99d9137d6f69f03f209a5885db5a6e30d8b7f41ec9823b68883cdef8d0a937233e57ea4bcf34a3f689161b699a602d765d374fb2f646cde2ed8383f3a4ad2e5af64b19127ee1130549e260e49b19dc381241b", &(0x7f0000000240), &(0x7f0000000380), &(0x7f00000003c0)="4c6512182d55c680b9217537df6a89af09e46b0b19dac79c2582597359242008e19584d51ccf38fbdfd0a58583b8c95b1796cbaa6349428a9749f6545652289236d0373110a83908c0c28cfc882abe0e340eeb52a12ab274c1992344f0c3924b60763d449289237d") setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280), 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptmx\x00', 0x101040, 0x0) ioctl$KDGKBDIACR(r3, 0x4b4a, &(0x7f00000002c0)=""/135) 2018/04/14 15:03:24 executing program 6: syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r1, &(0x7f0000000100)=0x4) 2018/04/14 15:03:24 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getpeername$packet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000080)=0x14) r1 = socket(0x40c, 0x7, 0x7) write(r1, &(0x7f00000017c0)="1f000000160007f2000094ffa4000800000000000001000000000000f30004", 0x1f) recvfrom$unix(r1, &(0x7f0000000100), 0x0, 0x0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x958938) [ 215.971660] binder: 16189:16190 IncRefs 0 refcount change on invalid ref 1524 ret -22 2018/04/14 15:03:24 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077008f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000000080)='./file0/file0\x00', 0x3fffa, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x2, 0x10) r1 = open$dir(&(0x7f0000000140)='./file0/file0\x00', 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000400)="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", 0xe01}], 0x1) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [], 0xa}, 0xb) [ 216.023484] binder: 16189:16202 IncRefs 0 refcount change on invalid ref 1524 ret -22 2018/04/14 15:03:24 executing program 7: sched_setattr(0x0, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0, 0x2}, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x400, 0x80180) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) close(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) shmat(0xffffffffffffffff, &(0x7f0000580000/0x1000)=nil, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000140)=0xa61b52e26d16a979) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400, 0x0) 2018/04/14 15:03:24 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x19a28}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:24 executing program 0: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0xfffffffffffffd7d) r0 = socket(0x11, 0x4000000000080003, 0x0) pwrite64(r0, &(0x7f0000000000)="6e0d058be31d4a118f8615032c2db39c8c09d0edea7b7b1ea26d08f8887024979d19139745745b756bbb02059e68e43df522c0cfaa04b1d93eea16f3d67ee42080e97d71103c36c0341dcd473513d2671db381", 0x53, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) mmap(&(0x7f0000399000/0x1000)=nil, 0x40000, 0x0, 0x12, r0, 0x0) clone(0x0, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f00000d5000)) 2018/04/14 15:03:24 executing program 5: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x3, 0x40000) r0 = userfaultfd(0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x400, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x6}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019000)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) syz_open_dev$evdev(&(0x7f0000012fee)='/dev/input/event#\x00', 0x0, 0x0) 2018/04/14 15:03:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000180)=ANY=[@ANYBLOB="1cb52023e765de5e5233fa66f09ae01b937f607ce641c9621d59285735d36744678dd5f5f6da8c34adf9497b12b1beb19008f5053a5e8028557f43ba202ca29d97c6a94a676569d321ad81ce43913e81404c82cb8fbdd87f409b63bf50855691fa335998ac984195aea8a878639bfab5edfc74daac7d9920fa884225e1b9bc93bf3d0c485f5d6201cf7cb9"], &(0x7f0000000240)=0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000000180), 0x1ba) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x40, 0x0) 2018/04/14 15:03:24 executing program 6: r0 = getpgrp(0x0) r1 = syz_open_procfs(r0, &(0x7f0000f0c000)='clear_refs\x00') writev(r1, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) 2018/04/14 15:03:24 executing program 1: socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3}, 0x1c) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x5, 0x8, 0x6, 0xffffffff}]}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x30, 0x0, 0x0, 0xfffff03c}, {0x16}]}, 0x10) 2018/04/14 15:03:24 executing program 4: syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000000)=[{&(0x7f0000000140)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d050000", 0x4b, 0x10000}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="e0f22bb7"]) 2018/04/14 15:03:24 executing program 7: fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x400200) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x16c, 0x15, 0x100, 0x70bd26, 0x25dfdbfe, {0x20}, [@typed={0x8, 0x90, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @nested={0xfc, 0x53, [@generic="c4e544464cfbc1369d67eb01da6364d2cd0cb3f7316c594f3d27a886981e4c83d36c5aeafeb4a7a5a99a000fd758861b005b70d2ca3ede77534f9ec85b8adc3609c884ac1d2c45f4053ad8d525eac4729db8983e77f80a10f25395dc42db7d60a80375411ec466df4211eda65b7bd835281750bec3a2cea8478110056e9349752031f7f92759bc56827da98fabc35e338c27b04d1da1ebb0c07ae088776471e71b27dbe2f8dece321963ed0281d551c622ece700bcc76f68c0665f310a0af3c9943bacfc1467cecf2f59b830efc7d4c44c85c8d827cf90afd6506e744a5d18553c393534da31e98d5ddb", @typed={0xc, 0x21, @u64=0x40}]}, @generic="54fcee9296ed2a1b", @typed={0x14, 0x2, @ipv6}, @typed={0x8, 0x20, @u32=0x9c8}, @typed={0x8, 0x93, @pid=r0}, @typed={0x8, 0x1a, @uid=r2}, @typed={0x4, 0x6d}, @typed={0x14, 0x62, @ipv6}, @typed={0x8, 0x5e, @ipv4=@multicast2=0xe0000002}]}, 0x16c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20040811) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace(0x4207, r0) ptrace$setregset(0x4205, r0, 0x201, &(0x7f0000000080)) 2018/04/14 15:03:24 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept4$inet(r1, &(0x7f00000000c0)={0x0, 0x0, @multicast1}, &(0x7f0000000100)=0x10, 0x80800) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000040)=@rc, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/216, 0xd8}, {&(0x7f0000000280)=""/118, 0x76}, {&(0x7f0000000300)=""/226, 0xe2}], 0x3, &(0x7f0000000480)=""/216, 0xd8, 0x6}, 0x7fff}], 0x1, 0x100, &(0x7f00000005c0)={0x0, 0x1c9c380}) ioctl$int_in(r0, 0x5473, &(0x7f0000000000)=0x5) sendto$llc(r0, &(0x7f0000001240), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x0, 0x0, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) [ 216.203573] binder: 16230:16231 IncRefs 0 refcount change on invalid ref 105000 ret -22 2018/04/14 15:03:24 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000f0c000)='clear_refs\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000000c0)={0xfffffffffffffff7, 0x5, 0xffff, 0x0, "519a3fd0f94292d72cecdf6907b083f5e5ef11d3a9de91161ea8fe4fc3452fb907f17e777a7227f881901122", 0x6}) writev(r0, &(0x7f0000c4fff0)=[{&(0x7f0000bdafff)='1', 0x1}], 0x1) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x7ff) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000000)=""/15, &(0x7f0000000040)=0xf) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000080)=0x4) 2018/04/14 15:03:24 executing program 1: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1, &(0x7f0000356000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000480)='syz_tun\x00', 0x25) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000140)={@mcast1={0xff, 0x1, [], 0x1}}, 0x14) bind$inet6(r1, &(0x7f0000000080)={0xa}, 0x1c) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendto$inet6(r1, &(0x7f0000000000)="15", 0x1, 0x200408d6, &(0x7f00000011c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3ff, 0x10000, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3}, 0x1c) r3 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}, 0x10) [ 216.273819] binder: 16230:16240 IncRefs 0 refcount change on invalid ref 105000 ret -22 2018/04/14 15:03:25 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x0) io_setup(0xc40, &(0x7f0000000040)=0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x40002) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000080)={0x3f, 0x0, {0xffffffffffffffff, 0x3, 0x6, 0x3, 0x400}}) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000001c0)}]) 2018/04/14 15:03:25 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200077000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f00000004c0)='./file0/file0\x00', 0x3fffa, 0x0) write(r1, &(0x7f0000000140)="88", 0x1) fstatfs(r1, &(0x7f0000000180)=""/74) sendmsg$unix(r0, &(0x7f0000000200)={&(0x7f0000000240)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000451ff0)=[{&(0x7f00000000c0)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x10000054, &(0x7f00001f9fe0), 0xffffffffffffff9a}, 0x4) r2 = syz_open_dev$sg(&(0x7f00000c5ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001, 0x20000000}) ioctl(r2, 0x2285, &(0x7f0000007000)='S') getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0xc198, &(0x7f0000000080)=0x4) 2018/04/14 15:03:25 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x401, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000000c0)={'\x00', {0x2, 0x4e22, @rand_addr=0x100}}) r1 = socket$inet(0x2, 0x803, 0x3) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000080)={0x11, @multicast1=0xe0000001, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) 2018/04/14 15:03:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6c00000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:25 executing program 6: writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000bdafff)='1', 0x3aa}], 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x800000000200, 0x4000) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)) 2018/04/14 15:03:25 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xf2b4, 0x10000) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f00000000c0)={0x3, 0xfff, 0x5}, 0xc) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="efc1dd04b929ec718a1c6ad1175c0b1e182ebbb255e3d31ce465b16d3f62ce8b0f416ba7e1459373e84f8570f66e8a78e30dd63e3fefcd6dd289d4c9a7593549b9428a8c091fa3c2e38dcab217c6010000808c932b2978327a77c100c45f905994238e13189d35", 0x67, 0x0, &(0x7f0000000340)=@vsock={0x28, 0x0, 0x0, @any=0xffffffff}, 0x80) r3 = pkey_alloc(0x0, 0x2) pkey_free(r3) recvmsg(r2, &(0x7f0000b24000)={&(0x7f0000f7ffa8)=@alg, 0x58, &(0x7f00000c2fd0)=[{&(0x7f0000f80f9a)=""/102, 0x66}, {&(0x7f0000af7000)=""/4096, 0x1000}], 0x2, &(0x7f0000fb3fa9)=""/87, 0x57}, 0x0) 2018/04/14 15:03:25 executing program 5: r0 = eventfd2(0x80000001, 0x0) r1 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x8000) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000140)={{0x87, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 'lc\x00', 0x16, 0x1, 0x48}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x4e21, 0x1, 0x401, 0x1ff}}, 0x44) io_setup(0x80, &(0x7f0000000000)=0x0) io_submit(r2, 0x5, &(0x7f0000001900)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x101, r0, &(0x7f0000000040)="f37e7e025ced5dafbe15bcb4b109cec2a50f", 0x12, 0x7fff, 0x0, 0x1, r0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f00000001c0)="6a3eb26c1552db9cbe7a755f85f8482e242af25789d516cedb", 0x19, 0x3, 0x0, 0x1, r0}, &(0x7f0000001300)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f0000000300)="7615a00ace943bf97260dae161b6a234ecf330a111528142c7414fe0bb7d39cb40d538b756f481fce9487ab0da2e59fa071f1381b2cfde3ebe85c8c7ad18f4840ec8c5cdc0a3fab102fe66316bc9b0f362a532b744f5b2e42cbb2f764ef6d0246b927bcc231a11da23842e81066c71065cc8bcae1f6db5a3d830e70a6d594091a79fdef0ae502d631c794e8eb2a701bb1efd0e22bc8c4c63eed9c12eb7f2ebe06b399727e1698fb78fd21297a8c10cf2e357fa9bf3ef7dc9e4dd90b833f542f3168b42b84f60fd631e3a932a12e6e10dfbdccc9d782e587874bcfba33fd80d89106c507a6075ba0b9f28d326171b4cf9d01a905bd04d2c9214110268ebf9d9a90af14c8dbb8dbfe25e236a9a3b940a2fee888aa2fe53027c62c8389bb29cd9b88ea1e59095d53cde2a9408d36704bda499da2817061d4d294279df54b7c204d4769a1634a44997a42f13c1acb60b5bb28ee9ddb7aecacfa3801f968cc68288fbc5ca48432e435bd63df42e8349df8e1d80df9a47dae09f86060e81dab0c9294ddfa89dbace2cd018699a32c854551cef5937aab522268970604ddad2a71ce6b3273350e9bf7a07c1c374d10a5cdb1dde38f50fadf5bd263a6bc3797f3002637e745a7110ae3d75f7994cd0eebe71cfb3114051b743900bc8ce86c91eb4a660460396fdc67ec14a47f9812c4a7a7f8f7e65cd287c6c1fcdabe6bf3128027fe6cd8d693ace54a780f4bf8f218df15e2898c7f363e00bdeab83355e06aedc9d7dc7bcf3dbc08f0c137ded4e8cf3df634a7e95ea87485722f56255634e74614c182283ebdcb39e89e678cf9d2696c6246f23ead2e1423619a45e6a0ac899900b94d2c72ff4ab4beac341035b00f74368b674eef56c5a95af8522188cd4ea0083abcff2b996f03c5bdd88ce81bf5b080ac3316df3295089ac6b8e9d3162dfe149da2bb71e056b591cd78b6fc67f459b581049595aeb95df725e337cf3ea1f002c008971b3c232c8079749be9a447feba209bf463108917d64e14e2780563d47ff037753f031000770f328411c147cc5b5627e4411b9b953ca253820bbafe33d6660fbb7fcf409e6fcd65d7df856dae90e72c92488042dbdd27064d15048548334513e2409acb2410941c9bdc9891895bdaa78a4889154eee785873ae8f1cbcbeded5beae664e7be112e958b298a6690ad46e93d1446ac01ca1bfb89d2051290a0ce7a14365f9dcff6fb0382d5a5042d9b3a825b51d1f2ff4e67260a3cf6b3931c214515d486012fd28eb0b6205f3ceebe2744a91bd09d0e89852002aed5761e0cdf3acc8328ce9a20509aa25ede18ea3dfb681594d6b43628c057aa065345c72353d513a29d19d83a489b27ab7633fe8f4981680bfa9c13678e9e583f74f54915efe867e4ebd7bd4e7c4ae95949ab9364ee5caffda5532690e154761befbc99ac698ab294fb78335a8ce8adf2c50bbf5a4598f0c7aaeac70c364120f77887dc4c8de6249698b36a33c909b0a13e07c653e7627f76c0ef424cd20f4f87e73ebff504ae0ea14f0f15392e7e0866336b4b5b6b52281362d1068bbc1454bd518de5767bd45277e29a5381bedb8aab60f770b839956d78176b7b7a793162888382a2aa63f676371261fe12cc5575962fd516de9bb62f9c1cdd232534e4140595c18807e0ab2f85cf6e26f50154bd29449c9b8d30c90dadc55ee73e7fbba56bf76e247f10c2980940229efa6ac3b2abfd96ae7d9742cb7ffc33c95d5d6027fc9677b6a95e3c3afefc37f8f0f05d1f179b7cff0d475ddc9135758328dd1a7c4b382bf46d90a67bb468fe70fe1b501bf6618b14a9f5c3e49d29daeb918d08dc9712c538bfe3b64bb2f972f15f56f5dc64776429e50bd3182d2816174c81f08a07df8606c9ca3a52b077c8603675132c6403adf4227448bfc85ba3da3b724f3ab84970d2ab56234e1c1d48cddce83a0daa973b9b5740a05c57a49f6cc4e68f2cd3ffe32cc2f65d9f1a2a5874bc4436faeba1193f4d23077f078b0148839a063e6662fbc20439869c9483dbee52bac00e9e6c266ecef01dbf7532d03842f08b26c33cd43c6a0744006d4b9554e34202904a6f250a5e016c1369fc3f7006207400a85e91b3cfc3ad1651812c05580e148187388535deee08570a9c0ac07d10f30bf58eb988df4713e0045fcf96d4c380785a642369efd6a53a51689e273156c6566e3c28af677e096582b70214332db5b453cb115482404cc1464f0cda7ffdae355059c07a19ce73b80304e56494966a4ad3b273ebf5267938f8049e58418aec2f1c209c595eac26dcbb408ffd66241f42ffc408cb174447eaf906e455031e093185317487293e6536f50a0fd336ce96316adac536132475d460096da546cc94bde12a610f44fb32a9cf17a13a7702a36c71d2ad562e566299ff658966ab660e7e602b529de9a24395a2108651f61e7b3786bbad8d760075bc18d8c610ce14a48b14cc12d06d5578a326cafa523d5b960b307e75704e86f249332ea5513a3c22191748c18c168a1d8d2679c3ffc2d2ce1c50912a46b8a955c1a663470e158f68eb70c988a279b16eaf7b73079891f408725405eba646aa498962b6815f729455b14aca81bbb3be7a4bbd7d47fdcadc1dc5d0cc59cdc176aa05ed79880e42ae13b683ffa7e17b9ba12da0f6759c7492a5e290a734454e2191c406952c218b6f00b754c5fcc8afcd8ffae36bf743abf9fa6da9ea5b5a93fd57925e0b225b5426589e11f1e08f014e77254b286aa31b5af9f8c18f1e83838cbbfa0472f1dcacc73c5bb6e2a458ac51a57eb74733654fe673b9169bc7a9dd89ff9a3a427d4a38864a4e376ae76f83d39f8fe7704d8354040f902c2e0c5ff474d5802f27137eec4399fc6e2b417aaad42386cc0e1df70cfb4ac1853db78f7d344993c0f7b106f04ef9925925ce944efda9c20c3bb82b501820b35b96d3e7a4e6c5d8abbae40eb906f5b1d1e6b8ba6af4c09a0a8ebbd96d8616dce9cfff60a9bb1685e7c83ec50ebde8125389553915d457af65bd0f5dd2c2266e1aa66896b820d5f3963f1da6f23ae8141fb9569cc45886147c08aa604e4024538265197e08fb8fd649f0457741592e4ac76964742907b55a964470b6f2be712c5084dcd5b57a866f2ae981ac2e078a15195ee87c2faa69763b94705801cb093c20bfadbc9cf33b9e859b9c37845818f9eb8a23f0e842c0f4a44915b318cfb7b428fca1fb93f9a8009955169450e9c2f1ba8d3d515a261da597d1618b8190b00bcf1b816fd00c6e22ec5675c95e1b79abedd7daa132c0c9eca44649a8246b85804d06b24494c3bac29ad34b8640f5a334806d66403d1c8aeca3a60d216a50112530475607415c3df4c9b0e0f615909f2e25ab5c16eac7493dfeaac70097dcda38a47ed00ee26a95fd12adcb25ec3bae9738a348e14827cf51679ed8af9bfbad3d1a0a609d460de1e8cafd681cf4a3f26e1e0420cd3d83464d5490ed10535f1ffe17213726ead40ca3d41f53b3640574f42bf866577157a827669f86f53ed3ea1bbd4da4379dc16e700c67b5fbc801825e011c885c892ced1f0a7ddf48307ec6c1e347e5b6ed3fd51f00c6a569da716dc8a6098ca2490a1ff32903f831ef49e18480d910c1dd1521221889ae0e52beeb67ed73742dc1768b256a1fbcc5afd1d58f46b481b82b315a032e2191812e6ebabcea347536183452a233e8569f8b4f86d0638dcd5ab5139cb913b724fa65044c7f5071c101dc65e30a02e6a7ecf16051256bdc3ad94a345a0934afb1b84f906e345d72121f0b8c2ca238cad81c3d0dee092d0b8bedc70eff7b0b4cac92b590ad7e23d3c5ca9106a8eb7686d6d6a30b80dc3e1e64ca8853082e159256fcce3c7173886d5a4dfb41837260e37c25758b748f9b948e1e78474b3e678445782f27e809d413e9688f24d5ea78b7c7043cec5505c41b9b90571903360f50f421a25ec98e2a48bb0ebea39a6b64717c98284b9ebe4d82df411dd07a49ddaaaf2639795ffae26955406b478c5cb788e2afd95cfa0b279a2f1121fc1510c10756401ec7cbc01a6aa56afbec25ff4d44d4aa50e623e2b98c30092fc034ecf7497da6894e41415ea0de2781d3b8348b7442a68a150f1b9bd2e1910d4b88cf6078af05076b0b3efd467e6c991320ff507d58d523d510bc3a0fb6a7e2c64ec77583511812e1426f77934cc90952faa321196d16e2c6b6ddc57ada0727cefa719b567cec664339a5879a344f91d19006d9dd93edd8a97416f1597b3db7903f961f2c0869602322ac33e475d7454898b2dd3f33e074dc64021435b12f76700ca0e8e0d4bca82e5a7309e5e8d9139e6657c7fd604880c15de1b0626ea6e3ca466f8bb724e19e9c40cab6b3d95099c5f8e0e8639feefa23941d4887a1f302dab799c46c84aab05cbbfc28aff7b93e0e1c1f8da14f87bfe588ae07ff2093aad00b26c5f3adaf1bbdaec9ec452f79144eb35eefef7b6cf06ad2c11a6f62bc3da2f6d0bd39829565767dfd8f0f00a3089871f2ef1d3d5fd7ddfa52f37fffa99ef4174f20e2fe8643dd92fbf1b045cedb356881b0cb23dc6898b1a5fd44ee02dca60b0d5b4613d31a2f46074f867bb76c0ad9fd5843436e4db868a582c1737e83ecdbc5b68a95e27e47ddd188047887c9e4337761f74846764f2d50b8bfd13de545c3a3fe8ad2e870215b88d5d9ff42361f5c8326bfb777c7280a99916eaf702d1ccc7be91ef92f84f235e54e0baf69e8663da75207dc9a6d122cdb5e45d15197e40460642edccf16e32d693132ef3117d8c52f508c71c09606617f17c43f4ed241452b7082c2f1e58973b3f7c30ede36453c6f97428bd5fab97cfc4bcb874c4a8e9891089f16b4e65065b52b70b0cd03caffad599fe85cf16082a498bf20219f1da932f9465d5b27a29e14bc98eafa95c4f36593f58c4e6c66c04b8821b9758f10215fcb2d72ac2aa9d91046dc6c6fd595da96829eec9de92a4ae2d931188903f4da3a7508494bd959f666ec002e0d92a4eb2c420e5fb9b88e0418e13fab5b4d17aca8fbb20f5a27b9bfa4e30588db8fe0e8e4bc6ca1b4af27ff2002b0e126113191f8daa3ab1dba01ce9133c5bd4142bd23a5597c0bd2d8f808273fc94867fa27fd5cd35b703dbd8fbe5fbfd41c169a2f97e2a0980e50ac7ae5419ee26266a12478ad10254819eff17a6b64ff9d53ec39980d29d0ca43b2426a2316656af1a97db4c727bc2429723b8432af251c2112436f80f4a88e11d77a6eae3ccc64b2a8bb63c41add4999b9ac5caa538f795e30bc3d36d348cd1d40b051a514dd2c94cba1eab95841a4a70c1b2fad91b79bcec4436e114f469a6317fd6bf47fa898aa12cb6697cf053351136627daf1d9d4212174e7c957b3672128d4ace9e6ebaacc02aaf30c0e4195a2964a8af5c8270d8791b6995c741e8f78f3d95ebce9d20765819bee442ad03fbce3f62e4ea77d684d31eb2fe93c1e12f9d523a65153a744402e1d83da2fee5f891ab5ca902bb851114b2d9f5e531ba1e78cebdf761f9112015b5dd3956c72807f720702bb1b9e259985fea89e6cc89c1042f98a0bd91470ca70b8b5822b22ff4f35e828b82ec5ce5258e72406ce0356913b9f16e2778177b30517a3d4aed077a4f405e49fe02cfd7c8a6eebb4508b9ee09f1b2c746f93de4ca076e7adb89639b3a6b463486923bc63da071082fce3179f6188187a781904e65c5cd477b166fa80b47db3966430769c741278bf37b86225b2950abf9a12fb743ecba6e00fb50e8ec4c6e86982d0e64090f60f", 0x1000, 0x10001, 0x0, 0x0, r0}, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x2, r0, &(0x7f0000001440)="8adae6bbc79f953b1729ccdcc8", 0xd, 0x3, 0x0, 0x1, r0}, &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000001680)="2658067e303e62a31496d3de5ea555c25449b9a0dc69a2fe087996830cee3dcf886b6041c90a26d5c0ce82d44af622fa0033a15412bc7ab862de6516d784d00b6d8dfc5ec1108e12cf3b1fd48878f619b497130326cd0001711e68c895f36eb73265b5ed3c932b21956221a6db199e49a188c476aae7865b2560a5e3d757843abbaf347ed210d41ec907407c266d4d05959e3b95b24929f1c832481649412ecca08b9997e36bd7dfc10c1c60446d8c428c261e3b61f037fe82b0f12d5f11a11829bb1163917904a35fd62003113fbaf1fdac4be045a42536b2", 0xd9, 0xffffffffffff27b2, 0x0, 0xab6800ff3b0e5c03, r0}]) readv(r0, &(0x7f0000001600)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001500)=""/231, 0x1}], 0x2) 2018/04/14 15:03:25 executing program 1: socketpair$inet(0x2, 0x800, 0x180, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000480)) syz_mount_image$hfs(&(0x7f0000000200)='hfs\x00', &(0x7f0000000240)='./file0\x00', 0xbed, 0x2, &(0x7f0000000340)=[{&(0x7f0000000280)="85a416ac3d32499c5fd7f92af63be5bf3343b1c3210a821f4d8ee5fcdeddd813505eecdbd1779008a21ed741d81c97d0d71ab9bc789af4670cf4943701e3874213a494838280a651ac3b5d6350376dcf766aed0087b83377305b32f5f9", 0x5d, 0x80000000}, {&(0x7f0000000300)="211b2a15182239e934568ce8ffe596844eb8dc941dad728a05f45106261156ef3767ab8b2218a66d234753adcb1c615f", 0x30, 0xfffffffffffffffc}], 0x800000, &(0x7f0000000380)={[{@type={'type', 0x3d, "741a14c1"}, 0x2c}, {@uid={'uid', 0x3d, [0x37, 0x38, 0x3d, 0x37]}, 0x2c}, {@uid={'uid', 0x3d}, 0x2c}, {@umask={'umask', 0x3d, [0x35]}, 0x2c}, {@quiet='quiet', 0x2c}, {@file_umask={'file_umask', 0x3d, [0x36, 0x35, 0x35, 0x36, 0x34, 0x31, 0x35, 0x35, 0x33]}, 0x2c}, {@umask={'umask', 0x3d, [0x33, 0x32, 0x31]}, 0x2c}, {@session={'session', 0x3d, [0x3b, 0x31, 0x30, 0x38]}, 0x2c}, {@dir_umask={'dir_umask', 0x3d, [0x32, 0x32, 0x34, 0x30, 0x30, 0x31, 0x37]}, 0x2c}, {@session={'session', 0x3d, [0x35]}, 0x2c}]}) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) accept4$ipx(r1, &(0x7f0000000500), &(0x7f0000000540)=0x10, 0x800) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f00000004c0)=""/16) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000400)={0x6000, 0x100000}) statx(r1, &(0x7f0000000080)='\x00', 0x1100, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f00000001c0)=0x4) [ 217.148428] binder: 16274:16277 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:25 executing program 6: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) close(r0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r2, 0x0) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) 2018/04/14 15:03:25 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004}, 0x2c) r0 = memfd_create(&(0x7f0000000180)='#nodeveth0trusted#[(]cpusetnodev+-procwlan0nodevselinux!{\\userppp1\x00', 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000200)={{0x20, 0x4, 0x8, 0xcfba, "8507cde58fabd44f074270388956e4310d4fd3556613d4d0b6a1a3d750e89615e0c3a96e20bb7d86038487b4", 0x8}, 0x0, [0x852, 0x5, 0x7, 0x3, 0x0, 0x100, 0x6, 0xffff, 0x2, 0x2, 0x2, 0xffff, 0x7, 0x9, 0x183, 0x0, 0x6, 0x7, 0xfffffffffffff001, 0x7ff, 0x2, 0x440000, 0x7a89, 0x3c8, 0x9, 0x8, 0x603, 0x8, 0x1, 0x2, 0xba, 0x1, 0x3, 0xf0c, 0x3f, 0x5bb, 0x7, 0x7112, 0x1, 0x2, 0x1, 0x40, 0x10001, 0x6, 0x6, 0x3, 0x8000, 0x0, 0x7, 0x5, 0x4, 0x5, 0x1ff, 0x800, 0x1, 0x40000000000000, 0x4, 0x5, 0x336, 0x1, 0x2, 0x3, 0x2, 0x2133, 0xb25, 0xfffffffffffffb51, 0x0, 0x4, 0x64, 0x9, 0x100, 0x9ada, 0x1, 0x100000001, 0x10001, 0x6, 0x1000, 0x9, 0xffffffffffffffff, 0x6, 0x3, 0x1, 0x8001, 0x913f, 0x0, 0x8000, 0x81, 0x0, 0x2, 0x2, 0x8, 0x3, 0x7, 0x1, 0x7f, 0x5, 0x4, 0x6, 0x1000, 0x2, 0x100, 0x80000000, 0x6, 0xdcc, 0x0, 0x7, 0x3, 0x4, 0x3, 0x5, 0xffffffff00000000, 0x2, 0x5, 0x3, 0x3, 0x15, 0x8, 0x9, 0xb0e, 0x2, 0x7, 0x8000, 0x10000, 0x2, 0x1, 0x9, 0x7, 0x5]}) msync(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x5, 0x2, 0x4, 0x9}, 0x6) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x9) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xbd94, 0x2000) ioctl$PPPIOCGMRU(r2, 0x80047453, &(0x7f0000000040)) [ 217.191245] binder: 16274:16289 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:25 executing program 1: socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000000)={0xffffffffffffffff}) accept(r0, &(0x7f0000000040)=@sco, &(0x7f00000000c0)=0x80) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000008c0)=@broute={'broute\x00', 0x20, 0x2, 0x3e8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'ip6gretap0\x00', 'syz_tun\x00', 'ip6tnl0\x00', 'syz_tun\x00', @link_local={0x1, 0x80, 0xc2}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0x70, 0x108, 0x158}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}]}, @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{{{0xd, 0x0, 0x0, 'syzkaller0\x00', 'tunl0\x00', 'sit0\x00', 'ifb0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x130, 0x1b0, 0x200, [@ip6={'ip6\x00', 0x50, {{@empty, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, @limit={'limit\x00', 0x20}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x0, 'syz1\x00'}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}]}, @common=@LED={'LED\x00', 0x28, {{'syz0\x00'}}}}]}]}, 0x460) 2018/04/14 15:03:25 executing program 4: r0 = fanotify_init(0x40, 0x2) signalfd(r0, &(0x7f00000000c0)={0x2}, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3ff, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000080)={0x7, 0x57, 0x0, 0x8001}, 0x10) recvmsg(r1, &(0x7f0000000440)={&(0x7f00000001c0)=@pppoe, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/195, 0xc3}, {&(0x7f0000000340)=""/139, 0x8b}], 0x2, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000001d00000c000500000089b04c00000000000000000000000000000000"], 0x20}, 0x1}, 0x0) 2018/04/14 15:03:25 executing program 7: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000001c0)=0x6e) sendmsg$unix(r0, &(0x7f0000000000)={&(0x7f0000564000)=@abs, 0x6e, &(0x7f0000451ff0)=[{&(0x7f0000007000)="002a932f01000000cf960802e02348f800000000001c0003f2a576", 0x1b}], 0x1, &(0x7f00001f9fe0)}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000780)='/dev/sg#\x00', 0x80000000084, 0x4000000000010000) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000007000)={0x0, 0x0, 0x80da14, 0x8001}) ioctl(r1, 0x2285, &(0x7f0000007000)='S') ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f00000007c0)=""/223) mq_timedreceive(r1, &(0x7f0000000140)=""/121, 0xfffffffffffffec1, 0x5, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000280)="df2defdf2a1ef20c418311", 0xb, 0xfffffffffffffffc) r3 = add_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)="fb1f6e195408938e85d67c94f0dc61235b4e58b3d0b53c0c335068409edc85769a52777a543b1ec4e782033a51c54a96aa34e8e5f60293fe396220d63c7c3922435654d6f49839b4f1324fb7ce8320368adf50aea4d85922bfff55eff61dfeede61ec1b8a7349cae1d9eb416bef599baca7dcc895ddebbf7d43047764aaf313d346717a3fada86372a05037afb52904924c5ae535aa6adab9b84fd0b435075ec6bb00aa61aa1df4f45da9904bdac9c8069aad21c0242811a98f9df2dbc36681831ba90b17f0f640314f14a3b9276421ea416be880f074286f7cedd2e3ee6872c4af875b621bdeaec76a30e0c7393fa2529", 0xf1, 0xfffffffffffffff8) r4 = add_key(&(0x7f0000000440)='id_resolver\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000004c0)="e785506852c904c05df9d2a9a94a14e7066fd51b78fb4feb35ae9efbcf2ab897fb55c738830c3b8d09983065b149c3201a50a224cbcd9b37f17885aedda0d2e46a1dc028ec205b15110b415bd205e4e261643ee48e6aa23f3ba4b4bc16b623b5fb287135699841e02565851f5bd2005cc11fcc6c8bd11335d657af0e3f3104a046ef52338d38f7c42f4f670816e2be41de13f04e11e001dedc0ffe34e34e5e343cc80a7869ab260c7790f94772ae69dd0b4481922116185bbe2a3aa4a90e99fbd6457eabda8aba", 0xc7, 0xfffffffffffffff9) keyctl$dh_compute(0x17, &(0x7f00000005c0)={r2, r3, r4}, &(0x7f0000000600), 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={'wp384-generic\x00'}, &(0x7f0000000680)="90ce067f154446c19aac5c25a526574350", 0x11}) 2018/04/14 15:03:25 executing program 0: r0 = socket$inet(0x2, 0x0, 0x2) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd1, &(0x7f0000000000)=0x56014935, 0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) getpeername$llc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10) shutdown(r0, 0x1) r3 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x7, 0x63f14bebc6386b6d) ioctl$sock_ipx_SIOCIPXCFGDATA(r3, 0x89e2, &(0x7f0000000140)) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x0, 0x0, 0x200, 0x1, r1}) ioctl$VHOST_SET_LOG_BASE(r3, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000240)) 2018/04/14 15:03:25 executing program 2: r0 = socket$inet(0x2, 0x80000000003, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000024d000)=0x7fe, 0x4) sendto$inet(r0, &(0x7f00002df000), 0x0, 0x0, &(0x7f0000fd9ff0)={0x2, 0x0, @rand_addr}, 0x10) sendto$inet(r0, &(0x7f00001e1000), 0x0, 0x0, &(0x7f0000777ff0)={0x2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="e5039437cc688822eec998a6be632f0fc66005178ea76c0dcb6462b306368f33dae8961908228d215db008b1199cafbb48ff0c3ea884d706817f6450aa62a3744f1059de62cbd17d240dea91d725282a49f1a449f86f4cfb0580949d7d6530c0ce175bf6ddd14cc39ebbdfe8", 0x6c, 0x1000000000044, &(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x1, 0x8400) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x4}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000180)={r2, 0x6}, 0x8) close(r0) 2018/04/14 15:03:25 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6000000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:25 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x5, 0x801) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x7, 0x20, 0x1, 0x10001}, &(0x7f00000001c0)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={r2, 0x7, 0x5}, &(0x7f0000000240)=0x8) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000140)=r3) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x3, r3, 0x1}) 2018/04/14 15:03:25 executing program 5: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) write$cgroup_pid(r0, &(0x7f0000000100)=ANY=[], 0x1023c) fallocate(r0, 0x3, 0x0, 0x3000000004) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x1, 0x0, 0x7, 0x3, 0x8}}) 2018/04/14 15:03:25 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) capset(&(0x7f0000581ff8)={0x19980330}, &(0x7f00005ccfe8)={0x0, 0x0, 0x9}) r1 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x9, 0x4000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={0x0, 0x5}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYBLOB="02000100bc000080749d5e12512d87fff2992c8d7df3b9b5f14a3a"], &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r2, @in6={{0xa, 0x4e24, 0xdaa0, @dev={0xfe, 0x80, [], 0x10}, 0x100}}, [0x496, 0xffffffffffff0000, 0x1, 0x9d, 0x4, 0x6, 0x1, 0xcda, 0x8, 0x7, 0x401, 0x8, 0xeba, 0x4c, 0xfff]}, &(0x7f0000000280)=0x100) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0x5, 0x4) getsockopt$inet_buf(r0, 0x0, 0x484, &(0x7f0000000040)=""/24, &(0x7f000000e000)=0x18) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x202, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0xc) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000005c0)={@pppoe={0x18, 0x0, {0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'erspan0\x00'}}, {&(0x7f0000000480)=""/235, 0xeb}, &(0x7f0000000580), 0x29}, 0xa0) dup2(r1, r3) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x20, 0x2, 0x236a, 0x4e, 0x0, 0x1, 0x2020, 0x6, 0x7fffffff, 0x9, 0x6ab, 0xb10, 0x2, 0x5, 0x2, 0xa677, 0xa6e, 0x18914ab, 0x9, 0x7f, 0xffffffff, 0xf6d, 0x124b87dd, 0x4, 0x6, 0x3, 0x8, 0x100000000, 0x2, 0x8000, 0x5, 0x4, 0xe560, 0x2, 0x0, 0x7, 0x0, 0x4, 0x0, @perf_config_ext={0x401, 0x4}, 0x100, 0x9, 0x3, 0x1a483ac342a5940, 0x8, 0x2, 0x3}, r4, 0x6, r3, 0x8) ioctl$DRM_IOCTL_SET_VERSION(r1, 0xc0106407, &(0x7f0000000440)={0x2, 0x5, 0x6, 0x800}) ioctl$KVM_SMI(r3, 0xaeb7) [ 217.407145] binder: 16314:16316 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:25 executing program 2: r0 = socket$inet6(0xa, 0xe, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) r1 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x80, 0x70) ioctl$KDSETLED(r1, 0x4b32, 0x1) openat$ashmem(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ashmem\x00', 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x3, 0x4d1c90dfbb7cc3af) ioctl$EVIOCRMFF(r2, 0x40044581, &(0x7f0000000200)=0xf95d) ioctl$KVM_SMI(r2, 0xaeb7) syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff93bb0200412386dd6006f5260008110000000000000000000000000000000000ff02000200000000000000000000000100004e22000890783ae68e98168f3edb7c5a4a002f0ee4c004e08cd4fc8767857ab2f1546ce11b2f72761e19b5fc2947aa79f47c80ee301ab0b7de5214d18befd22e2013772060e48a6ca970c02977c452d6e128ee8a0b194e08000000114f3af14a5e7fc30ba84f4601e7332ebcba8d3c0b4b8ee9eba63ff64ceda84f595143bc4d9ac099ed436b4a09812f8b9db8697876014fec2c284115ce9d6d73014bb3dba9"], &(0x7f0000000040)={0x0, 0x0, [0x0, 0x0, 0x4000008000000, 0x7b5]}) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f0000000240)=0x7, &(0x7f0000000280)=0x4) 2018/04/14 15:03:25 executing program 7: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x1000000000000000, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@remote={0xac, 0x14, 0x14, 0xbb}, @multicast2=0xe0000002, 0x0, 0xa, [@multicast1=0xe0000001, @empty, @broadcast=0xffffffff, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, @multicast1=0xe0000001, @dev={0xac, 0x14, 0x14, 0xb}, @multicast1=0xe0000001, @rand_addr=0x6, @dev={0xac, 0x14, 0x14, 0xd}]}, 0x38) fallocate(r1, 0x3, 0x8, 0x8) getpeername$unix(r1, &(0x7f0000000200)=@abs, &(0x7f00000001c0)=0x160) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='&ppp1eth1)em1wlan0em0eth1!vmnet1lo\x00') mmap(&(0x7f0000448000/0x3000)=nil, 0x3000, 0x2000008, 0x11, r0, 0x0) getsockopt$bt_BT_SNDMTU(0xffffffffffffffff, 0x112, 0xc, &(0x7f0000000040)=0x5, &(0x7f00000000c0)=0x2) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2f6c) splice(r0, &(0x7f00000002c0), r0, &(0x7f0000000300), 0x3d, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0x2c4c, @local={0xfe, 0x80, [], 0xaa}, 0x9}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}], 0x4c) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) 2018/04/14 15:03:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f00000da000)={&(0x7f00009f5fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f000016bf70), 0x0, &(0x7f00009f5000)=""/53, 0x35}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x100, 0x0) syz_open_pts(r1, 0x8002) recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/219, 0xdb}, 0x0) sendmsg$nl_generic(r0, &(0x7f00009f7fc8)={&(0x7f00009f7000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000001000)={0x14, 0x42, 0x2ff}, 0x14}, 0x1}, 0x0) 2018/04/14 15:03:25 executing program 0: r0 = socket$inet(0x2, 0x1, 0x0) r1 = msgget$private(0x0, 0x400) msgctl$IPC_INFO(r1, 0x3, &(0x7f00000000c0)=""/221) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0xffffffffffffff40, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000500)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) [ 217.462339] binder: 16314:16327 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:25 executing program 6: r0 = socket$inet(0x2, 0x6, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x500) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000100)={0x38, r2, 0x1, 0x70bd29, 0x25dfdbfd, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xff}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x88}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = dup(r1) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x20080, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000001c0)=@broute={"62726f7574650500", 0x20, 0x2, 0x310, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000240], 0x0, &(0x7f0000000000), &(0x7f0000000240)=ANY=[@ANYBLOB="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"]}, 0x381) 2018/04/14 15:03:25 executing program 1: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x8) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000240)={0x0, 0xffffffff, 0xffffffff7fffffff, 0xaa, 0x7, 0x80000001, 0x3, 0x2, {0x0, @in6={{0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x5}}, 0x1, 0x0, 0x80, 0x1ff, 0x80000000}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000001c0)={0x7, 0x0, 0x2, 0x4d, 0x7fff, 0x7fff, 0x1, 0x6d9, r1}, &(0x7f0000000300)=0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x810c5701, 0x6f2000, &(0x7f0000000180)) 2018/04/14 15:03:25 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f000000efe8)={0xaa}) mprotect(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x1000000) ioctl$UFFDIO_REGISTER(r0, 0x8010aa02, &(0x7f0000006ffc)={{&(0x7f0000008000/0x2000)=nil, 0x2000}, 0x1}) 2018/04/14 15:03:25 executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x2, 0x80600) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x3c, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0xfff, @ipv4={[], [0xff, 0xff], @rand_addr=0xa3b}, 0x5}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @multicast2=0xe0000002}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x100000000, 0x5, 0x8204, 0x4, 0x100, 0x8, 0xfffffffffffffffc, 0x7, r1}, 0xfffffffffffffcd1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000d7a000)={&(0x7f0000aeaff4)={0x10}, 0xc, &(0x7f00004e2000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000c0601000000000000000000000000005f1591d74ac1e5b4626c674ef05ccb86c74677bd79c46f79271fa5667d96dfcb"], 0x14}, 0x1}, 0x0) [ 217.632682] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/14 15:03:26 executing program 4: r0 = getpgid(0xffffffffffffffff) ptrace$poke(0x5, r0, &(0x7f0000000000), 0xd1d) 2018/04/14 15:03:26 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000220000000700000000009b009500000000000000"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x22, 0x1000, &(0x7f0000000400)="288b6692b5c352f6677525060800893cb07d54c70000002100000000000000000000", &(0x7f0000002300)=""/4096}, 0x28) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f00000008c0)={0x10, 0x0, 0x0, 0x1018}, 0xc) 2018/04/14 15:03:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6c000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:26 executing program 7: r0 = socket$inet(0x15, 0x5, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x3, "767c7468315f496f5f6272f664676500", 0x1}, 0xffffffffffffff91) 2018/04/14 15:03:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) fremovexattr(r0, &(0x7f00000000c0)=@random={'security.', 'team\x00'}) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002e80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x58, r1, 0x405, 0x0, 0x0, {0x1}, [{{0x8, 0x1, r2}, {0x3c, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x4a}, {0x8, 0x4}}}]}}]}, 0x58}, 0x1}, 0x0) 2018/04/14 15:03:26 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)="73231e8d6f8ef71ccf1c0f787f5e32537f", 0x11}], 0x1, &(0x7f0000000280)}}], 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x2043, 0x0) ioctl$EVIOCREVOKE(r1, 0x40044591, &(0x7f00000000c0)=0xc685) 2018/04/14 15:03:26 executing program 0: syz_emit_ethernet(0x4e, &(0x7f0000000100)={@random="cd38ffe40f97", @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "e30600", 0x18, 0x40000000003a, 0x0, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@mld={0x2, 0x0, 0x0, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}}}}, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) 2018/04/14 15:03:26 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000811000)='/dev/input/event#\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000000)=@rc, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, "56825420fb74f55c398abbc78a1cb75188b0c4973b9241f0c1ea37337d703f36"}) [ 218.501721] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 218.535653] binder: 16373:16381 IncRefs 0 refcount change on invalid ref 1811939328 ret -22 [ 218.546224] netlink: 'syz-executor1': attribute type 3 has an invalid length. [ 218.577707] binder: 16373:16388 IncRefs 0 refcount change on invalid ref 1811939328 ret -22 2018/04/14 15:03:26 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ptype\x00') sync_file_range(r0, 0x1, 0xffffffff, 0x3) readv(r0, &(0x7f00000014c0)=[{&(0x7f0000001280)=""/208, 0xd0}], 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000000)={0x3, 'veth0_to_bridge\x00'}, 0x18) socket$alg(0x26, 0x5, 0x0) readv(r0, &(0x7f0000d3bff0)=[{&(0x7f00003ce000)=""/4096, 0x1000}], 0x1) 2018/04/14 15:03:26 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="390000001100094701bb61e1c3050000070000000200000045efffff08009b0019001a000f000000030000000000000004e9000206002d0005", 0x39}], 0x1) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xcb, &(0x7f0000001980), 0x0) 2018/04/14 15:03:26 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x80000001, 0xfff, 0x3f, 0x9, 0x1a, 0x2, 0x100000001, 0x2, 0xc459, 0xffffffffffffffe1, 0x7, 0x7, 0x100}, {0x9, 0x95, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x3, 0x6, 0xff, 0x8, 0xff75, 0x1ff, 0x8}, {0xac, 0x2, 0x1, 0x7fff, 0x1d5, 0x5, 0x81, 0x4, 0x7, 0x388d7204, 0xfffffffffffff3b1, 0x4, 0x7}]}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000080)=@nl=@proc, 0x80, &(0x7f0000000640)=[{&(0x7f0000000480)=""/224, 0xe0}], 0x1, &(0x7f00000011c0)=""/4096, 0x1000}, 0x100) sendmmsg(r0, &(0x7f00000025c0)=[{{&(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6tnl0\x00'}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000010c0)="9421e5271f45907f567d604a09fe27abfa55e2aebecfe4a0aeda13b3d2418870405797686467855ad166a77fa809f72ab92d438b38975596f98c0c03126989f5a4a3fe4878335988dfb98b11d880cc928c21fccdcf2086d98e2ac4ab265ff234ba0a86ee14bbb2bf4cc210f6ca6a5d3d18d3110ac82704ac8a979bebe6ea1a803cb5a21babf0a28c6741f5493a7189c764564aa039257ce92830f1a25bb6fb553231195be0ff72269d4b8503dbb0bc6c23f0341aa626735a002006f6c2b036efa5d1e087ee6181ffb3", 0xc9}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x2) 2018/04/14 15:03:26 executing program 5: syz_mount_image$msdos(&(0x7f0000000000)='msdos\x00', &(0x7f00000003c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e6661740002", 0xd}], 0x0, &(0x7f0000000080)={[{@dos1xfloppy='dos1xfloppy', 0x2c}]}) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f00000000c0)) 2018/04/14 15:03:26 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x402, 0x0) ioctl$TIOCGPTPEER(r0, 0x5405, 0xffffffffffffff88) arch_prctl(0x1004, &(0x7f0000000080)="ec37bc08033cbe41fa4843c8de1c8f615f0ada291da1e07ac1434157a940fda7b75f60fde6e0160cbe3fcd3bc47ea9124d4891a5621bc448389a849d4312ae1fcee15362cd7518486197c5d57b8ee7e7a4c178265e8bb524") ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000040)={0xfff, 0xb0, 0x8, 0x7, 0xdd, 0x1, 0x266, 0x7ff, 0x7, 0x5}) 2018/04/14 15:03:26 executing program 6: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mixer\x00', 0x0, 0x0) ioctl$sock_ipx_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000dfd000)={"1281b3f73a3bad4ee0e3721cacda6bdb", {0x4, 0x0, 0x0, "a29fa8ff976b"}}) timer_create(0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f00000004c0)) poll(&(0x7f0000e95ff8), 0x0, 0x0) timer_gettime(0x0, &(0x7f0000000100)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000c2b000)={0x0, &(0x7f0000000140)}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000a4dff0), &(0x7f0000bb0000)=0x10) r2 = dup(r0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f000035afff)) ioctl$int_in(r2, 0x5452, &(0x7f00000000c0)=0x6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ppp\x00', 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000001c0), 0x4) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f00004f4fe2)=""/30) getegid() timer_gettime(0x0, &(0x7f0000bf0000)) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0x2, &(0x7f0000000140)=0x4) delete_module(&(0x7f0000497000)="00aeb0aad0a59015c1", 0x4a00) sendto$inet6(r0, &(0x7f0000e77fff), 0x0, 0x20000008, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvfrom$ipx(r2, &(0x7f000078df0c)=""/244, 0xf4, 0x0, &(0x7f00008ceff0)={0x4, 0x0, 0x0, "b7f24b268bce"}, 0x10) ioctl$TIOCCONS(0xffffffffffffffff, 0x541d) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000080)={0x1f}, 0xa) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00007e5ffa)='vegas\x00', 0x6) ftruncate(r3, 0x7fff) sendfile(r2, r3, &(0x7f0000000040), 0x80000002) 2018/04/14 15:03:26 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:26 executing program 2: syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x9427, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe}, 0x2c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4, 0x218}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="58000000000000000000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x400, 0x40) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000180)={0x3ff, 0x1, 0x5, 0x1, "f25b8f1df1ccd2116745bcbe9ca43a55bc9119373dfa53914da12506675144eed9fd0ee57c21f18a9d07cdbc", 0x6}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x3c, &(0x7f00000000c0)}, 0x10) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f0000000200)={0x1000, 0x11000}) socketpair$inet_icmp(0xfee1dead, 0x2, 0x1, &(0x7f0000000000)) 2018/04/14 15:03:26 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40000, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000080)=""/208) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) setsockopt$inet_buf(r0, 0x0, 0x40, &(0x7f0000000000), 0x0) 2018/04/14 15:03:26 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00004acffc)={0x0, 0x7}, 0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/149, 0x95}, {&(0x7f0000000140)=""/28, 0x1c}, {&(0x7f0000000180)=""/83, 0x53}, {&(0x7f0000000200)=""/38, 0x26}, {&(0x7f0000000240)=""/43, 0x2b}], 0x5, &(0x7f0000000300)=""/205, 0xcd, 0x5}, 0x1) fcntl$getownex(r0, 0x10, &(0x7f0000000480)) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000a76000), 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x2041, 0x0) [ 218.688688] FAT-fs (loop5): bogus number of reserved sectors [ 218.694616] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 218.703280] FAT-fs (loop5): Can't find a valid FAT filesystem [ 218.704844] binder: 16399:16411 IncRefs 0 refcount change on invalid ref 4 ret -22 2018/04/14 15:03:26 executing program 1: socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) listen$netrom(r1, 0xfffffffffffffffe) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x1, 0x4, 0x4c, 0x32b9, "cad330560ec2240ad5aa5d4bd2afbe0bca4d57bd5996d11a21c4b234b2186b86966381de7f40857194bdd269", 0x206}, 0x0, 0x0, 0x3, r2, 0x3f, 0x6, "41458d5dc82d32925fe69ef6f6fb469d94bbc5ff3fa0f00cefeb144adef16b1d8beccdc3c567c33eb9d3d61abb59ecb252f02bf2982f725884746064cc5535ec", &(0x7f0000000040)="9c656d316d643573756d29776c616e31", 0x10, [], [0xbec, 0x9, 0xfffffffffffff205, 0x20cd]}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0xa14, 0x6, 0x6, 0xfb, "d7ac5cc804ea4c6d042a713515b13200c5b32c24c45d41f9c2fc7d21c7a3a4e2bfcd4c402540a5974e65587f", 0x6}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f0000000280)) shmget(0x0, 0x2000, 0x100, &(0x7f0000ffc000/0x2000)=nil) getpid() ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f00000001c0)) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) open(&(0x7f00000002c0)='./file0\x00', 0x400, 0x8) [ 218.758152] FAT-fs (loop5): bogus number of reserved sectors [ 218.764092] FAT-fs (loop5): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 218.772726] FAT-fs (loop5): Can't find a valid FAT filesystem [ 218.797192] binder: 16399:16423 IncRefs 0 refcount change on invalid ref 4 ret -22 2018/04/14 15:03:27 executing program 7: r0 = timerfd_create(0x0, 0x0) clock_gettime(0x800, &(0x7f0000000100)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timerfd_settime(r0, 0x10001, &(0x7f0000005000)={{r1, r2+10000000}, {0x40000000000000}}, &(0x7f0000000080)) 2018/04/14 15:03:27 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000400)='/dev/snd/controlC#\x00', 0x80000000000000, 0x100ffc) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000140)=0x20) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000040)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000180)=0x0) setpgid(r2, r3) perf_event_open(&(0x7f00000000c0)={0x7, 0x70, 0x7, 0x4, 0x6, 0x8000, 0x0, 0x0, 0x1040, 0x1, 0x0, 0x3, 0x1, 0xfff0000000000000, 0x3, 0x3, 0x4, 0x3, 0x8, 0x80000000, 0x7, 0x80000000, 0x1ff, 0xfffffffffffffff7, 0x7, 0x100, 0x7fe, 0xf43, 0x81, 0x3ff, 0x41b, 0x6, 0x7, 0x1, 0x8, 0x100000001, 0x80000001, 0x8, 0x0, 0xffffffff00000001, 0xb0950934aec2e4e3, @perf_config_ext={0x4, 0x7f}, 0x0, 0xffffffffffffff7f, 0xc54, 0x7, 0xa000000000, 0x7, 0xe0}, r2, 0x5, r0, 0x9) r4 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000002c0)={{0x40, 0x0, 0xe8, 0x9, "436f43859f03d6a2ec592e695435c88c3530b59701857fdb9ca2521b5dca99a4e43ebf854276c8e98f365409", 0x6}, 0x0, 0x0, 0x80000001, r4, 0x3, 0xfff, "450770132e363e557356c2cc0c44bebfa437997f65de6da4106122b25c575860f913bfeaa7f8bbedc35c39463eb4277aba7a214ee2d9cb3b032aaacf711ac550", &(0x7f0000000080)='[procuser.keyring\'nodev\'^\x00', 0x1a, [], [0x5, 0x7ff, 0x1, 0x5121552d]}) 2018/04/14 15:03:27 executing program 1: socket(0x2, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x100000001, 0x6, 0x0, 0x0, 0x80000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1=0xe0000001}, @icmp=@address_reply={0x8}}}}}, &(0x7f0000000040)) 2018/04/14 15:03:27 executing program 4: r0 = socket$inet(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000014000)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a60d9d00000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x80000001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x60000000000000, 0xd21}, &(0x7f0000000100)=0x8) 2018/04/14 15:03:27 executing program 2: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg(r0, &(0x7f0000002540)={&(0x7f0000000100)=@l2={0x1f, 0x8001, {0x800, 0x100, 0x3, 0x7f, 0x2, 0xd35e}, 0x9, 0x7}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000180)="744b722e82bfa4f4e20066af3de95f70", 0x10}, {&(0x7f0000000300)="7a3396d725713d543b67c6a66b4f88cce6eae393df8b1b2795065781c894100a02f6c5dad33e74f11f8284b15a4b5fc55e0b32c116b566376c37ceb9459602774cd9b086e4a67cc0773447403a9dfa7749249fdeaf72eb5150c72a73ba28a585265d9ae0a488079a7951d3b664ae1c9dc7b1a3403c563eb114e2f489405e89053b55382090f6a06c9c1eb56616fc0ac00327889d5dc37e7c4f82506fc1ff60", 0x9f}, {&(0x7f00000003c0)="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", 0x1000}], 0x3, &(0x7f0000001400)=[{0x1010, 0x1ff, 0x5, "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"}, {0x100, 0x88, 0xffffffff, "63153dfe585aa9f80f170c44a6f7a340745ebedb9c3f39e4b85383a4af7c0dc0271a1663b7f144fda93ebad9c8a7ce7993fb67c9758be9f480f30ff25149be4a45f49db82eedad730197b1227f078a5826bc63a18e057e903f405d1e3146b6e88eccb3e924de1bb2a91ad27a817280ab43b60e5e30e6be87311b6d4e77edb3590063160e00910a36f63c63c878abfc2929a0fd22c64fa90482f537e27d6075a2f2978b8a4d57b8d4e139a8d277a66e0db52e43867bc45c6eb16cb02cec3e51810ed803a76a7241b8b561a04822fc5cc6c296e97183dd640d7d889eb96a75c9abb5fef988373a4efa750e6f63"}], 0x1110, 0x4000044}, 0x20000000) r1 = socket$nl_crypto(0x10, 0x3, 0x15) signalfd4(r1, &(0x7f00000027c0)={0x100000001}, 0xfffffffffffffe3b, 0x80000) setsockopt$sock_int(r1, 0x1, 0x3f, &(0x7f0000002740)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x1, &(0x7f00000000c0)=[{&(0x7f00000001c0)="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", 0x101, 0x400}], 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0088e0f88ea2be3c6173e5979254b3d7e6413458611cdd56b9cf901cd945f4"]) r2 = syz_open_dev$vcsn(&(0x7f0000002580)='/dev/vcs#\x00', 0x8, 0x181001) sendmsg$can_raw(r2, &(0x7f00000026c0)={&(0x7f00000025c0)={0x1d}, 0x10, &(0x7f0000002680)={&(0x7f0000002600)=@canfd={{0x0, 0x8, 0x9, 0xfffffffffffffff7}, 0x5, 0x3, 0x0, 0x0, "dcd171eb6f2af1f17384017f6c739bc8b3710d968696e290a1958761cbafc999101415be4970f22793c17cdbe00445f33a7f51f01a967644132df5b282c8153e"}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x4044081) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000002780)={'ip6_vti0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) 2018/04/14 15:03:27 executing program 0: prctl$void(0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r1 = memfd_create(&(0x7f00000001c0)='\x00', 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), &(0x7f0000000240)=0x4) get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f0000000040), 0x0, &(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000500)={0x0, @in6={{0xa, 0x4e24, 0x401, @loopback={0x0, 0x1}, 0x9}}}, &(0x7f00000005c0)=0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000600)={r2, 0x97}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x67, "7b899f70541109076918c9eff4413f97d3cb090d58cc8847756938ff378a53a36e358a523f"}, &(0x7f00000002c0)=0x2d) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000300)={r3, 0x5}, &(0x7f0000000340)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000003c0)={{0x8, 0x6, 0x6, 0x4, "b9fee42436f178dd578ce0a634c400e43db23bf76a70062891bd581658a6e84ebfabfb8139de628f5c7048c0", 0x3}, 0x0, 0x0, 0x7fff, r0, 0x6, 0x7, "c45acb83bb6e5431f5f77221a2bedb8d1600710a5ddba2c727cee3bd90b6ca176a7dfc432ce04e4b563ebd2b75cb3ec57e50039bdd358ae147f2621ebf73952c", &(0x7f0000000380)='\x00', 0x1, [], [0x10001, 0xff, 0x6, 0x14fe]}) 2018/04/14 15:03:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x3}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:27 executing program 6: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file0\x00', &(0x7f000078eff8)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000653fff)) r0 = creat(&(0x7f000083bff4)='./file0/bus\x00', 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) mq_notify(r0, &(0x7f0000012000)) mq_notify(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={&(0x7f0000000000), &(0x7f0000000040)}}) [ 219.565616] binder: 16439:16442 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 219.575293] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 219.582767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 219.595813] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 219.603269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. 2018/04/14 15:03:27 executing program 0: nanosleep(&(0x7f0000000040)={0x77359400}, &(0x7f00000001c0)) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000457000/0x2000)=nil, 0x7ffffffff000, 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) 2018/04/14 15:03:27 executing program 7: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x311}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) fstat(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'cpu', 0x20}, {0x2f, 'pids', 0x20}, {0x2f, 'memory', 0x20}, {0x2f, 'rdma', 0x20}, {0x2f, 'io', 0x20}, {0x2d, 'cpu', 0x20}, {0x2f, 'rdma', 0x20}]}, 0x28) ioprio_get$uid(0x3, r2) ioctl$TIOCNOTTY(r1, 0x5422) 2018/04/14 15:03:27 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xf) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xff}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @loopback=0x7f000001}}, 0x101, 0xfff, 0x4, 0x5, 0x7}, &(0x7f0000000180)=0x98) sendmsg$nl_route(r0, &(0x7f000027e000)={&(0x7f0000006ff4)={0x10}, 0xc, &(0x7f0000ec4ff0)={&(0x7f0000d44f74)=ANY=[@ANYBLOB="280000001a00010c00000000000000001c00000000000000000020000c0001000000000000000000"], 0x28}, 0x1}, 0x0) 2018/04/14 15:03:27 executing program 1: r0 = memfd_create(&(0x7f00000001c0)='proc@+$wlan0ppp1em1\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getpgid(0x0) getpgrp(0xffffffffffffffff) r1 = request_key(&(0x7f00000012c0)='trusted\x00', &(0x7f0000001300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001340)='proc@+$wlan0ppp1em1\x00', 0xfffffffffffffff8) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, r1) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/26, 0x1a) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000080)) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f00006f4000)={0x80fed, 0x11, 0x0, 0x0}) dup3(r2, r3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00003c4ff7)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000433000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000445000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000080)="0f350f01cac4e3d17e2b3666baf80cb8b73e9582ef66bafc0cec0f20e035000100000f22e066baf80cb84e823d89ef66bafc0ceceabb3e00003f00c174920000b805000000b9000000000f01d99a000000005b00", 0x54}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000ffd000/0x1000)=nil}) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000240)=""/107, &(0x7f00000002c0)=0x6b) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(0xffffffffffffffff, 0xc0106401, &(0x7f0000001280)={0x1000, &(0x7f0000000280)=""/4096}) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f00000000c0)={0x80000000, 0x1}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, &(0x7f0000001380)=0x1, 0x4) [ 219.614973] binder: 16439:16458 IncRefs 0 refcount change on invalid ref 3 ret -22 2018/04/14 15:03:27 executing program 2: socketpair$unix(0x1, 0x80000000005, 0x0, &(0x7f0000000140)={0x0, 0x0}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x1794}) sendmsg(r0, &(0x7f0000002740)={&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f0000000100), 0x0, &(0x7f00000028c0)=ANY=[]}, 0x0) recvmsg(r1, &(0x7f0000000000)={&(0x7f0000000180)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, 0x80, &(0x7f00000007c0), 0x0, &(0x7f0000000840)=""/122, 0x7a}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0xc0189436, &(0x7f0000000040)) 2018/04/14 15:03:27 executing program 5: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000040)={0xc10, 0x5, 0xcef}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000080)=0xb6ba) ioctl$void(r0, 0xc0045c7f) accept$packet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={0x0, @dev, @local}, &(0x7f0000000340)=0xc) r5 = getuid() sendmsg$nl_xfrm(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000001b00)={&(0x7f0000000380)=@newsa={0x37c, 0x10, 0x4, 0x70bd2a, 0x25dfdbfb, {{@in6, @in6, 0x4e21, 0x80, 0x4e22, 0x2, 0xa, 0xa0, 0x0, 0xaf, r2, r3}, {@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d6, 0xff}, @in6=@ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, {0x1, 0x3, 0x5, 0x8, 0x81, 0x8, 0x8, 0x7}, {0x4bd, 0x0, 0x9, 0x10001}, {0x2, 0x9, 0x6}, 0x70bd25, 0x34ff, 0x0, 0x3, 0xffffffffffffb35c, 0x1}, [@coaddr={0x14, 0xe, @in=@multicast2=0xe0000002}, @encap={0x1c, 0x4, {0xfffffffffffffffd, 0x4e20, 0x4e21, @in=@local={0xac, 0x14, 0x14, 0xaa}}}, @sa={0xe4, 0x6, {{@in, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e24, 0x3, 0x4e21, 0xffffffffffffffff, 0xa, 0x80, 0x0, 0x33, r4, r5}, {@in=@rand_addr=0x400, 0x4d5, 0x32}, @in=@multicast2=0xe0000002, {0x80000000, 0xbd89, 0x0, 0x1, 0x100, 0x3, 0x0, 0x8}, {0x8000000000000, 0x6d27, 0xffffffff, 0xfffffffffffffff8}, {0xfffffffeffffffff, 0x1, 0x4}, 0x70bd29, 0x3507, 0x2, 0x2, 0x1, 0x20}}, @lifetime_val={0x24, 0x9, {0x4, 0x1, 0x7, 0x7}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e22, 0x4e23, @in6=@mcast2={0xff, 0x2, [], 0x1}}}, @algo_auth_trunc={0x138, 0x14, {{'poly1305-generic\x00'}, 0x758, 0x60, "0d8b43a8b9b1bc5aa3719e1a3902471611129d536d4c4a85d60aa55d4b18de8c9b88bfb82f9488852d0300ff45515ba85ef5fc60e66a06786f8c137bac5d088370f59e2f57adb7b89284826c1e6d50d2f8860e5bdbff1b1fd51a6275d404540fab157e42d913199f6131a062cf47a1fd22d77d9e60717b4da9d0c108d0cfcddcbc45debeb25cfacc66bb6bf46b42bf93286d4a7b3abbd17015e9cd63126fbee05c33fe961f53c3d5dc4ba2855764c45b20a53fc3c4137a892c81f1b2916e677d74795f6922286eb2d92afd57d5c9dd619827d171c8accce15a6f2cd331b689220174ee844f9369e1350ca3"}}]}, 0x37c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000740)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000780)={0x0, 0x0}) clock_gettime(0x0, &(0x7f00000007c0)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000800)=[{{0x77359400}, 0x81, 0x4, 0x3}, {{}, 0x8, 0x3a, 0x1}, {{0x77359400}, 0x0, 0x1, 0x7}, {{0x77359400}, 0x3, 0x9}, {{r6, r7/1000+10000}, 0x1, 0x8}, {{r8, r9/1000+10000}, 0x1, 0x4, 0x7ff}, {{r10, r11/1000+30000}, 0x80000000, 0x3, 0x5}, {{r12, r13/1000+30000}, 0xfb8, 0x3f, 0x583}, {{0x0, 0x2710}, 0x20, 0x7f, 0x1ff}, {{0x0, 0x7530}, 0x6, 0xa39a, 0xbd4}], 0xf0) syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x55, 0x24900) 2018/04/14 15:03:27 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x5f5}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 219.684762] netlink: 'syz-executor4': attribute type 29 has an invalid length. [ 219.692204] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 219.724773] netlink: 'syz-executor4': attribute type 29 has an invalid length. 2018/04/14 15:03:27 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$getname(0x10, &(0x7f0000000280)=""/133) r2 = epoll_create1(0x80000) recvfrom$unix(r0, &(0x7f0000000000)=""/111, 0xfffffffffffffdb3, 0x0, &(0x7f0000000080)=@abs, 0xfffffffffffffec6) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000340)=0x40) close(r0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000b82000)) r4 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5, 0x200000) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x6, 0xfffffffffffffff9, 0x9}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000200)=@assoc_id=r5, &(0x7f0000000240)=0x4) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) 2018/04/14 15:03:27 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x8001, 0xffff, 0x4, 0x8}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x7}, 0x8) accept(r0, &(0x7f0000000400)=@vsock={0x0, 0x0, 0x0, @hyper}, &(0x7f0000000480)=0x80) [ 219.732213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 219.750376] binder: 16472:16475 IncRefs 0 refcount change on invalid ref 1525 ret -22 [ 219.769748] binder: 16472:16478 IncRefs 0 refcount change on invalid ref 1525 ret -22 2018/04/14 15:03:27 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xc0, 0x40000) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) futimesat(r1, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {r2, r3/1000+10000}}) keyctl$read(0xb, r0, &(0x7f0000000140)=""/117, 0x75) 2018/04/14 15:03:28 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4c000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 219.914890] binder: 16495:16496 IncRefs 0 refcount change on invalid ref 1275068416 ret -22 [ 219.937955] binder: 16495:16498 IncRefs 0 refcount change on invalid ref 1275068416 ret -22 2018/04/14 15:03:29 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa0800450200280000000000049078fffffffdac14140000000000040190780018503000d0294a0c6d463f"], &(0x7f0000000040)) 2018/04/14 15:03:29 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x800, 0x400) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f0000000040)={0x20000, 0x0, [0x7fffffff, 0x9, 0x8, 0x9, 0x100000000, 0x157, 0x0, 0x80000001]}) syz_open_dev$adsp(&(0x7f0000000280)='/dev/adsp#\x00', 0x529, 0x142) write$evdev(r0, &(0x7f0000000040), 0x35a) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) 2018/04/14 15:03:29 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) read(r0, &(0x7f0000000140)=""/180, 0xb4) perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000340)='/dev/audio\x00', 0xfffffffffffffffe, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000280)='./file0\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f0000000240)=ANY=[]) ioctl$void(r0, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f00000002c0)) socket$inet6_dccp(0xa, 0x6, 0x0) r2 = open(&(0x7f0000000780)='./file0/file0\x00', 0x3fffa, 0x0) write(r2, &(0x7f00000007c0)="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", 0x1f8) getpeername$packet(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x14) 2018/04/14 15:03:29 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x10001, 0x4) rt_sigaction(0x7, &(0x7f0000000000)={0xffffffffffffff0f}, &(0x7f0000d4efe8), 0x8, &(0x7f0000312ff8)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00008f0a07)='pagemap\x00') epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r1) 2018/04/14 15:03:29 executing program 4: r0 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f0000fdef88)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x1) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000080)=@ioapic={0x0, 0x0, 0x0, 0x800, 0x0, [{0x1}, {}, {}, {0x101}, {}, {0x0, 0x0, 0x0, [], 0x5}, {0x0, 0x8, 0x81}, {0x0, 0x0, 0x0, [], 0x7f}, {0x0, 0x0, 0x0, [], 0x4}, {0x1, 0x4}, {}, {0x0, 0x0, 0x80000}, {0x2}, {}, {0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffffffff800, [], 0x7}, {0x0, 0x0, 0x1991}, {0xfff, 0x2}]}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) 2018/04/14 15:03:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x7a}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:29 executing program 0: r0 = socket(0x1e, 0x4, 0xfffffffffffff4a2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f00000002c0)=@req3={0x18a9, 0x0, 0x0, 0x3}, 0x17) recvmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000000)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001440)=""/81, 0x51}], 0x1, &(0x7f0000000280)=""/20, 0x14}, 0x0) 2018/04/14 15:03:29 executing program 6: r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x7, 0x4) getsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000100)=""/105, &(0x7f0000000180)=0x69) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000002480)}}], 0x2, 0x0) [ 220.957550] binder: 16516:16519 IncRefs 0 refcount change on invalid ref 122 ret -22 2018/04/14 15:03:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x10000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) r2 = dup2(r0, r1) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/04/14 15:03:29 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsa(&(0x7f0000e27000)='/dev/vcsa#\x00', 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2000) write(r0, &(0x7f0000000040)="b8", 0x1) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000000c0)={0x3, 0x4000000000005, [{0x80000001, 0x0, 0x6}, {0x9, 0x0, 0x8}, {0x7f}]}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)='/dev/vcsa#\x00') ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000200)) 2018/04/14 15:03:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) r2 = memfd_create(&(0x7f0000000080)='.\x00', 0x1) ioctl$KDENABIO(r2, 0x4b36) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x2}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x140, 0x0, 0x80000000}]}) 2018/04/14 15:03:29 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000000)={{0x0, 0x1}}) r2 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x6, 0xa98d649d2cf8843c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r2, 0x50, &(0x7f0000000080)}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x80, 0x0) socket$packet(0x11, 0x0, 0x300) fcntl$addseals(r2, 0x409, 0xc) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000180)=""/45) [ 221.033497] binder: 16516:16530 IncRefs 0 refcount change on invalid ref 122 ret -22 2018/04/14 15:03:29 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis-generic)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00004f0000)={0x0, 0x0, &(0x7f0000e46000), 0x0, &(0x7f0000967000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) sendto(r1, &(0x7f0000000100)="224b49fd1e310f215feac34bbc176bfc0006f72f9a0f4a6f3f21009562f8c0e3e8f2000000c896d61f3f2d0b9d7bcffc88dbe6b7acdc870f6aee9cc9c4d0021036486bc45228c0dd1e38e4ce49ba4d1ec4373d242e635bdbc45641adf232f7a6f3da8285001a2e70b58306e1793f7abe92abc48367298e347485d520a88c47d7", 0x80, 0x0, &(0x7f0000001280)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) 2018/04/14 15:03:29 executing program 5: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23}, 0x1c) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x100000001, 0x10000) fcntl$getownex(r1, 0x10, &(0x7f0000000240)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000300)={{0x798e, 0x2, 0xfffffffffffffffa, 0x8, "d41e62cb7be1e81c7903e4ffd5082a1c8b69384393e3fcd2e3546bc49b18f55303209f8634c5a69803a2c92d", 0x9}, 0x0, 0x0, 0x8, r2, 0x48, 0xfffffffffffffff9, "bb8c42998c454e2f6614a4d01f7a65a6f37dea709d0ed8fa86222bfcc8509da4b900b3ee439f644f94f8b208b5e1828c77eeeb5c036faebeafc0c953506caa5f", &(0x7f00000002c0)='/dev/audio#\x00', 0xc, [], [0xd177, 0x7, 0x989, 0x95]}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080), 0x4) connect$inet6(r1, &(0x7f0000966fe4)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x800000000000f367, 0xffffffffffffffac) read(r0, &(0x7f0000000c00)=""/85, 0x55) socketpair$packet(0x11, 0x0, 0x300, &(0x7f0000000140)) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getpeername$packet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000001c0)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @empty, 0x7, 0x8, 0x20, 0x100, 0xcd, 0x42500110, r3}) r4 = dup(r0) write$eventfd(r4, &(0x7f0000000280)=0x4, 0xfffffdc4) 2018/04/14 15:03:29 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001800)='net/sockstat6\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000080)={'syzkaller1\x00', 0x90000000000}) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000000)={{0x2, 0x70, @multicast1=0xe0000001}, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x30, {0x2, 0x4e24}, 'ip6_vti0\x00'}) r2 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r2, r1, &(0x7f0000807000), 0x3b) 2018/04/14 15:03:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:29 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2f1e, 0x28001) write$evdev(r0, &(0x7f0000d0e000)=[{{}, 0x1, 0x1e, 0x40000000002}, {{}, 0x0, 0x1}], 0x30) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x802, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000001200)=@assoc_id=0x0, &(0x7f0000001240)=0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000001280)={r3, 0x2}, 0x8) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f00000000c0)={0xfff, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x90) fcntl$setflags(r1, 0x2, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYRES32=r4, @ANYBLOB="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"], &(0x7f00000011c0)=0x1008) 2018/04/14 15:03:29 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000340)='/dev/admmidi#\x00', 0x4, 0x3fffd) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000380)) setitimer(0x1, &(0x7f0000000100)={{}, {0x77359400}}, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0x1, @time, 0x5ac, {0x0, 0x6}, 0x7, 0x3, 0x101}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x81, 0x3, [0x5, 0x100000000, 0x7bb]}, &(0x7f0000000240)=0xe) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, &(0x7f00000003c0)=0x9, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in6={{0xa, 0x4e22, 0x75, @mcast1={0xff, 0x1, [], 0x1}, 0x401}}, 0x3f, 0x1, 0x5, 0x8001, 0x80}, 0x98) r3 = shmget$private(0x0, 0x3000, 0x8, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000140)=""/244) 2018/04/14 15:03:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r0, &(0x7f0000000280)=@pppoe={0x0, 0x0, {0x0, @remote}}, &(0x7f00000003c0)=0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000080000001000000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) r2 = open(&(0x7f00000006c0)='./file0\x00', 0x28082, 0x80) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000700)={0xde, 0xc001103d, &(0x7f0000000800)="e5da5f4e2031651c31cbff1225de4c5d5238025ab9f888e201f7908a7eb22f83b8bc712976b4190c18087bf2fd296bd80e1405032bc2361e72f0a59a0c9b6042cc6970425562e0f32409eb5e761b76b07d141b979ea174fcb07bc288cf5ec560e3151c305b192e46a412df78eeb799a0ee8723946a8c5d149e127660357e60aa6e368b24f736ea54ede0c676", &(0x7f00000008c0)="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", 0x8c, 0x1000}) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x2, 0x13, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, [@generic={0x3, 0x6, 0x0, 0x4}, @alu={0x7, 0x80000000, 0xd, 0x7, 0xa, 0x30, 0xd}, @exit={0x95}, @jmp={0x5, 0x0, 0xd, 0xa, 0x4, 0x20, 0xffffffffffffffff}, @jmp={0x5, 0x4, 0x6, 0x0, 0x0, 0xfffffffc, 0xfffffffffffffffc}, @alu={0x7, 0x0, 0x0, 0xa, 0x0, 0xffffffff, 0x11}, @alu={0x7, 0x7ff, 0x0, 0x2, 0xd, 0x4, 0xffffffffffffffff}, @map={0x18, 0x2, 0x1, 0x0, r2}], {0x95}}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x8d, &(0x7f0000000580)=""/141, 0x41f00, 0x1, [], r1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xe, 0x3b, &(0x7f0000000380)="c953ebb800c3a5c0bbcede2bbb78", &(0x7f0000000100)=""/59}, 0xfffffffffffffede) 2018/04/14 15:03:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x7ff}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={"d208d7f6300000ae000000880000e710", 0x101}) r2 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={"d208d7f6300000ae000000880000e710", 0x101}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'bcsh0\x00', 0x400}) [ 221.276817] binder: 16564:16566 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/04/14 15:03:29 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x3f, 0x8000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x2}) bpf$MAP_CREATE(0x0, &(0x7f0000fc9000)={0x1, 0x9, 0x800000209e1f, 0x8000000001, 0x4}, 0x2c) [ 221.337870] binder: 16564:16582 IncRefs 0 refcount change on invalid ref 2 ret -22 2018/04/14 15:03:29 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f00000000c0)=""/125) sendmsg$alg(r2, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000), 0xfffffe28}, 0x0) connect$netrom(r2, &(0x7f0000000140)=@full={{0x3, {"d385ba2658c1a9"}, 0xe4}, [{"5878203e29ab8e"}, {"97a3376b2e4359"}, {"13e79aa4d7475a"}, {"7ff7442b5562ae"}, {"28255c018f40cc"}, {"5f783b8d5bdd0d"}, {"8825ca7d60f661"}, {"fb0b121fbffdee"}]}, 0x48) io_setup(0x1, &(0x7f0000479000)=0x0) io_submit(r3, 0x1, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f000079a000)="16", 0x1}]) 2018/04/14 15:03:29 executing program 0: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x101541) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000180)=0x3fc) syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa8d0014ff00fe80000000000000000000000000000000000002000000000000ffffe000000100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000200000000000000cd"], &(0x7f00000000c0)) keyctl$set_reqkey_keyring(0xe, 0x5) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) 2018/04/14 15:03:29 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x121000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYBLOB="c20000003034a1106f9a7a8e8c399a41c41c4303224011cf63e13031086d929b471bab2e6a035697ce35ceea61bb2b95cffae9098c3947ad6505d4606d293257e76557f0e25e65d4a5f537b4a889477600fd34533d8c1113fec1bb95f54f760d04ae222326380477f38e064ae5dfb5414eb02e017fd828649aecc39d1b570591428c7a69af6ac92c0d6028716bf6f0418ad7855d55a0b06871ddf28bbe312e11e9e4c57e0b7d64484cfad0515f073bf6d365e8841d5d62805b5305da42d8b3c097235ed4e896"], &(0x7f0000000980)=0xca) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000009c0)={r2, 0x2, 0x30, 0x100000001, 0xfff}, &(0x7f0000000a00)=0x18) r3 = socket(0x800000000000011, 0x800000002, 0x81) fchmod(r3, 0x80) bind(r3, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'lo\x00', 0x101}) r4 = getpgrp(0x0) process_vm_readv(r4, &(0x7f0000000580)=[{&(0x7f0000000040)=""/49, 0x31}, {&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/245, 0xf5}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/118, 0x76}, {&(0x7f0000000500)=""/70, 0x46}], 0x7, &(0x7f0000000700)=[{&(0x7f0000000600)=""/10, 0xa}, {&(0x7f0000000640)=""/156, 0x9c}], 0x2, 0x0) open_by_handle_at(r3, &(0x7f0000000a40)=ANY=[@ANYBLOB="750000180500000020b28ae217cddcd99c8edc7f42ad862e884658e19b4a8c2057be8dd61ae0ee1399cef53f5a383526369da9f71bc8b781ad6e4943b048bd4daad872cf60f448c0c427c9a06f9d94d77bfe0434a5e8df394619650bfb72909c5f104623da6847b4ae2b89e122cfb05dc612f64eab"], 0x1230c1) syz_open_dev$loop(&(0x7f0000001480)='/dev/loop#\x00', 0x6, 0x0) r5 = syz_open_dev$dspn(&(0x7f00000007c0)='/dev/dsp#\x00', 0x4, 0x40) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r5, 0xc0305302, &(0x7f0000000800)={0x4, 0xfffffffffffffffd, 0x3, 0x6, 0xdf, 0xfffffffffffffffe}) getsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000740), &(0x7f0000000780)=0x4) 2018/04/14 15:03:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x100000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:29 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) socketpair$inet(0x2, 0x0, 0x1f8, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r2, 0x1, 0x6, @random="14901eef3aba"}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x3, @random="7c2e1626459d"}, 0x1ce) close(r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) accept$netrom(r3, &(0x7f0000000100)=@full, &(0x7f0000000180)=0x48) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000240)={0x8, {{0xa, 0x4e22, 0x7fffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x88) 2018/04/14 15:03:29 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000000dc01)={&(0x7f0000025ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f0000028fc4)=@mpls_newroute={0x1c, 0x18, 0x503, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}}, 0x1c}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x6, 0x6) pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4800) ioctl$EVIOCGPROP(r2, 0x80404509, &(0x7f0000000100)=""/20) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1c, 0x10000) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000080)={0x5a8, 0x4, 0x2, 0x0, 0x0, 0x4, 0x4, 0x48, 0x10001, 0x7, 0x2, 0x5acf, 0x0, 0x7, 0x8, 0x9, 0x5, 0x7, 0x8}) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000000)=0xfffffffffffffffe, 0x1e6) 2018/04/14 15:03:29 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) r1 = syz_open_dev$amidi(&(0x7f00000002c0)='/dev/amidi#\x00', 0x7, 0x80) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000300)={'ah\x00'}, &(0x7f0000000340)=0x1e) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}, 0xffffffffffffffe1, 0x2}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000240)={r3, 0x81}, &(0x7f0000000280)=0x8) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000000)) sendmsg(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000029c0)="a9", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000040)=0x3, 0x4) 2018/04/14 15:03:29 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2000, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x1ff) syz_mount_image$xfs(&(0x7f0000000080)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000180), 0xa08488, &(0x7f00000001c0)={'nouuid,'}) [ 221.550674] device bridge0 entered promiscuous mode [ 221.559655] device bridge0 left promiscuous mode [ 221.575529] device lo entered promiscuous mode [ 221.576338] binder: 16597:16610 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:29 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xfffffdaa) write$sndseq(r1, &(0x7f0000000140)=[{}], 0x30) read(r0, &(0x7f0000000000)=""/126, 0x7e) dup2(r0, r2) accept4(r1, &(0x7f0000000080)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f0000000180)=0x80, 0x80000) [ 221.609915] device lo left promiscuous mode [ 221.623933] binder: 16597:16628 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 221.629161] device bridge0 entered promiscuous mode [ 221.641530] device lo entered promiscuous mode 2018/04/14 15:03:29 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x3) r1 = socket(0x9, 0x4, 0x6e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000c00)={0x0, 0x1000, "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"}, &(0x7f00000000c0)=0x1008) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000140)={r2, 0x5}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000002c0)=@broute={'broute\x00', 0x20000120, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000340], 0x2, &(0x7f0000000100), &(0x7f0000000900)=ANY=[@ANYBLOB="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"]}, 0x348) [ 221.657518] device bridge0 left promiscuous mode 2018/04/14 15:03:29 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x7a000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:29 executing program 6: mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0) futex(&(0x7f0000000000), 0x6, 0x0, &(0x7f0000005ff0)={0x77359400}, &(0x7f0000000000), 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x80000, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000080)={{0x110000, 0x1, 0x1e, 0x1f, 0x6, 0x3932, 0xffffffffa9ca81e8, 0xffffffffffffffe1, 0xfffffffffffffff8, 0x8000, 0x5, 0x32c7}, {0xd000, 0x1, 0x8, 0xff, 0x96e4, 0x0, 0xc1de, 0x6, 0x5, 0x6, 0x4, 0xffff}, {0x2000, 0x0, 0xa, 0x800, 0x44c7, 0x43d86394, 0x3ff, 0x4, 0x1, 0x200, 0x100, 0x4}, {0x100000, 0x5000, 0xd, 0x3, 0x7, 0x1, 0x7, 0xff, 0x2, 0x5, 0x7fffffff, 0x1523}, {0x1, 0x0, 0xe, 0xff, 0x7, 0x1, 0x5, 0x0, 0xff, 0x0, 0x8, 0x40}, {0x6000, 0x102000, 0x9, 0x0, 0x7fffffff, 0xfffffffffffffffe, 0x8, 0x5, 0x0, 0x3, 0x2, 0x5}, {0x0, 0x5000, 0x19, 0x100000000, 0x4, 0x1, 0x5, 0x7, 0x38360000000, 0x6, 0x85}, {0x4, 0x1000, 0x3, 0x8000, 0x5, 0xfffffffffffff801, 0x9, 0xd8df, 0x5, 0x0, 0x2b2ad6a3, 0x3}, {0x0, 0x5000}, {0xf000}, 0x20000000, 0x0, 0x106000, 0x40, 0x8, 0x8000, 0x0, [0x0, 0x0, 0x1, 0x7]}) [ 221.788228] binder: 16657:16658 IncRefs 0 refcount change on invalid ref 2046820352 ret -22 [ 221.817468] kernel msg: ebtables bug: please report to author: Wrong len argument [ 221.839249] binder: 16657:16664 IncRefs 0 refcount change on invalid ref 2046820352 ret -22 [ 221.854710] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/04/14 15:03:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000373000)={0x10}, 0xc, &(0x7f0000579000)={&(0x7f00000000c0)=@mpls_getroute={0x1c, 0x1a, 0x101, 0x0, 0x0, {0x1c}}, 0x1c}, 0x1}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) 2018/04/14 15:03:30 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x2}, 0x3c7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000001d000000000000000095000000000000009200faebe422e30f394b387d6ba7622ae0dc93da3c6bb4a5aa1deeb24c3463d5981063d38cac043025bb0d"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000080)={r0, &(0x7f0000000280)="09b67a94df6a04596996a854db9a4f3dc4455e9b3aa0fc7d75936047e19ba749b28c0d7869e1213c3bdf1c463627944161d5a8e46346d43f566238927d18df056c5501674a214195e7e292823ce503bab090ece9337490b28baa641e134c0a54588ef68351531f21f7c831bf9688553194", &(0x7f0000000000)="b64d17c9ffb47eb3c1c4a005d70e11358cce", 0x2}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x730000, 0x89e0, 0xfffffffe, &(0x7f0000000380)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x400000a8}, 0x2c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r2, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x730000, 0x89e0, 0xfffffffe, &(0x7f0000000180)) 2018/04/14 15:03:30 executing program 2: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffe) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x6, 0xffffffffffffff9c, 0x1}) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000040)={0x8, 0xe4, 0x3, 0xffffffffffffffff, 0xffffffffffffffff, 0x4}) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000140)='\x00') 2018/04/14 15:03:30 executing program 7: r0 = socket(0x11, 0x100000802, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000180)="b493d8405868004a0916066679e44abb868d1653cd7f743da82f0bcbbe613e3ddfb36d2e49bb7808384d7dc1d9d15aaafc473aa8ba57284a0f98b4de3de1b78f63b64f7a1b26bcd9e9981ea0c08f31842b7a2295ad7521f7270722caf7ee4b4d9289a1c7a2e125dcdcbafa17bdd7cfd9c87cbe18e07c152f7405ddca031d2188fcd9883bb5a7183c5be37525c32753bad8e81dbbaf3acdfafb7a35e43ea8e858927bc455ee3e0b7fef2ca47de5ee6b2b73756e2902ab7548be88ff7d7b3a6186d6322cf0bf60b1ef5820094e4e8373165aad5992997300ab1458ce8d794d243aa3c18ec819c0") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'ifb0\x00', 0x4012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'bond0\x00', 0xe62f9ed9777ed894}) 2018/04/14 15:03:30 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x7c, 0xfffffffffffffecb) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000548000)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000b85fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nl=@proc, 0xc, &(0x7f0000000040), 0x0, &(0x7f00000003c0)=""/36, 0x24}, 0x2000) 2018/04/14 15:03:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x43, &(0x7f0000000340)=""/40, &(0x7f0000001000)=0x28) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x9, {{0xa, 0x4e21, 0x9, @ipv4={[], [0xff, 0xff], @rand_addr=0x9}, 0x2}}}, 0x88) getsockopt$bt_hci(r0, 0x0, 0x3, &(0x7f00000001c0)=""/119, &(0x7f0000000040)=0x77) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x5, &(0x7f0000000000)=[{}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f00000000c0)={r1, 0x8}) r2 = socket(0x5, 0x0, 0x7fffffff) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @loopback=0x7f000001}}, [0x0, 0x0, 0xf745, 0xffff, 0xe474, 0x6, 0x80000001, 0xa1, 0x1, 0x2, 0xfffffffffffffffd, 0xdd4, 0x3, 0x1, 0x4]}, &(0x7f0000000380)=0x100) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000003c0)={r3, 0x9, 0x4, [0xf4ef, 0x3, 0x2, 0x0]}, &(0x7f0000000400)=0x10) 2018/04/14 15:03:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xa00}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:30 executing program 5: r0 = userfaultfd(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x1, 0x0, 0xc}, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc028aa03, &(0x7f0000000240)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x2}) r2 = fcntl$dupfd(r0, 0x0, r1) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f0000000000)={0x10001, 0x6, 0x0, 'queue0\x00', 0x100000001}) [ 222.550859] binder: 16671:16681 IncRefs 0 refcount change on invalid ref 2560 ret -22 2018/04/14 15:03:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001400010027bd700000000000502a0000", @ANYRES32=r1, @ANYBLOB="08000800010000001400010000000000000000000000ffff7f00000114000200fe8000000000000000000000000000aa"], 0x48}, 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x3ff, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x114, 0x70bd25, 0x25dfdbfe, {0x11}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40045}, 0x20008000) 2018/04/14 15:03:30 executing program 6: r0 = open(&(0x7f0000000080)='./file0\x00', 0x200, 0xfffefffffffffffd) ioctl$EVIOCREVOKE(r0, 0x40044591, &(0x7f0000000900)=0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000240)="6e66733400230762e3e4f82fd73ba23111c3204976e99c2af4275efffbd0167af0478f2611efaa3c3fb23b8e6438717fe09ac634593b08e145f0173ca75eea55309b760bbb19c32a167e2bcc72c92aba1ef76da346361702965d5e06a682e2d7331112f3fa0373c4c52c41ebcd88e45d30410bb09dfcf50cb0aea24b502c58db117753e040010fb36265df35b80399", 0x0, &(0x7f0000000040)) r2 = msgget(0x2, 0x200) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000100)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000009c0)={{{@in, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000980)=0xfffffede) ioctl$int_in(r1, 0x5452, &(0x7f0000000800)=0x1) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) pwrite64(r0, &(0x7f0000000840)="b4359e061454f87aa4de5e8df0aa5681ccd659c3d93f378be4906a3b019f1068d07a58e6f27ca75589965a9f1fda0ca83787284890390b09ea420ba7b0fef2e56cc4098784c3b9475da08b6bb87fe74d76cbd030800dd3dc5e81e5490a1b47cf02c1c4b97e19105a21ad943998b154cd198bfdc62d1085d538f4c9a394d635a0edf59c785fa5c453203a67bf664083a4a533", 0x92, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0}, &(0x7f0000000600)=0xc) r8 = getpgrp(0xffffffffffffffff) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000640)={{0x4, r3, r4, r5, r6, 0x10, 0x1}, 0x4, 0x2, 0xe94e, 0x3, 0x800, 0x0, r7, r8}) 2018/04/14 15:03:30 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000b96000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00003cbff4)) 2018/04/14 15:03:30 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="850000001400000025030000000002001500000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x9, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x2, 0x4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0xc0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000040)=0x1c, 0x4) [ 222.602760] binder: 16671:16694 IncRefs 0 refcount change on invalid ref 2560 ret -22 2018/04/14 15:03:30 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x400000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="76d77edc2d9a36bba07709bc54c06a008a031287adc65b617156542457a22fdcf9ef29016dc5"], 0x1, 0x0, &(0x7f0000ed8000)="f5"}) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 2018/04/14 15:03:30 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x60}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:30 executing program 0: r0 = socket$inet6(0xa, 0x80000000000003, 0x9) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xc8, &(0x7f0000000200)={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80}}}, 0x3) r1 = memfd_create(&(0x7f0000000000)='^\x00', 0x1) sendto$packet(r1, &(0x7f0000000040)="a9ee4c8f70e698059f22d64e457ca2c8012b070bd50dd74433a2f54e367a5de96f2bb1a74f68cf7bfa7659c2b2db19cd702b7c01d09c6183fdfc9a6f64f7aca0180aadcb5e4bd20549f2c6753a14d301fa0acd5720f3c7b1e1c286773788f8eafc67fee2b663304439f8619ebac12f765b9a8e17d5d3ac2f59946db22194155d33fcf8c89846620aede42d5daca377dd69364cbe9a32bf450fcc540cffb686ecfd3c86feb2a932313a6804f616dc338c99a65f3df3e165a4f63fd23edd68a8a9a31a03f40507bd5227af8886aae99c4cddba76bd63afd0b1df700c4d15cb1133c90ae46e309fc7869a", 0xe9, 0x80, 0x0, 0x0) [ 222.755815] binder: 16716:16717 unknown command -595667082 [ 222.774345] binder: 16716:16717 ioctl c0306201 20000000 returned -22 [ 222.798276] binder: 16720:16721 IncRefs 0 refcount change on invalid ref 96 ret -22 [ 222.831288] binder: 16716:16729 unknown command -595667082 2018/04/14 15:03:31 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) vmsplice(r0, &(0x7f0000000200)=[{&(0x7f0000000100)="b46b161257211ab0688fbe6aca3cdac0800f148c5c2184bd9796e8f8d01def86166c3fec43f94ef20c054d1295cf78f03023765e03bbcb1108f89d3967b0a2ee479c69bb1a29d7f4581cc1db9d662346e5edf5e43c3e0b37a1b162e6595572cb1f034a8ee545195f2ce5cd1f0bfa6f7b98e0847706a8d91de633804c19e94a2e89af2c4e832cbe45070ca90762406aa8d61f53931b95db3c431147d9780ece3cedd64ab5d698deb065dec8774dfd368b18ac552b6574faa73cc35bbb", 0xbc}, {&(0x7f00000001c0)="fd976d0eb10a1491a03f1dcb361b0281f4ebfdf49590dbbf4fb1a5dfd9d4c4098a5a0d7567", 0x25}], 0x2, 0x1) r2 = shmget(0x0, 0x3000, 0x78000104, &(0x7f0000ffd000/0x3000)=nil) r3 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x4, 0x80000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4010}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, r4, 0x200, 0x70bd2c, 0x25dfdbfc, {0x2}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0xa}}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x800}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7ff}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) shmctl$IPC_RMID(r2, 0x0) r5 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r5, r5, &(0x7f0000000080), 0x3) 2018/04/14 15:03:31 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = epoll_create1(0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000280)='/dev/admmidi#\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x105}) ioctl$DRM_IOCTL_GEM_CLOSE(r2, 0x40086409, &(0x7f0000000300)={r3}) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000dc0000)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000b1eff4)) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f0000000340), &(0x7f0000000440)=0x8) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f00000003c0)) ioctl$EVIOCGBITKEY(r2, 0x80404521, &(0x7f0000000400)=""/49) r6 = accept(0xffffffffffffffff, &(0x7f0000000040)=@generic, &(0x7f00000000c0)=0x80) getsockopt$IP6T_SO_GET_REVISION_MATCH(r6, 0x29, 0x44, &(0x7f0000000100)={'HL\x00'}, &(0x7f0000000140)=0x1e) fstatfs(r5, &(0x7f0000000180)=""/239) setns(r0, 0x8000000) 2018/04/14 15:03:31 executing program 5: r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000001000)={0x14, 0x4, 0x101, 0x25}, 0x10) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x0, r0, 0x1}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x6b, &(0x7f0000000080)=0x2) socket$netlink(0x10, 0x3, 0x1f) 2018/04/14 15:03:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x8, 0x16, @nested={0x4}}]}, 0x2c}, 0x1}, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000000)=0x1) [ 222.847737] binder: 16716:16729 ioctl c0306201 20000000 returned -22 [ 222.854704] binder: 16720:16730 IncRefs 0 refcount change on invalid ref 96 ret -22 2018/04/14 15:03:31 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0xb4a76df85b480e5b) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vhost-vsock\x00', 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = eventfd(0x7fff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = fcntl$getown(0xffffffffffffffff, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000600)=0xe8) r8 = getegid() r9 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000640)={{{@in=@dev, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@broadcast}}, &(0x7f0000000740)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0, 0x0}, &(0x7f00000007c0)=0xc) r12 = socket$bt_cmtp(0x1f, 0x3, 0x5) r13 = socket$bt_cmtp(0x1f, 0x3, 0x5) r14 = socket$bt_bnep(0x1f, 0x3, 0x4) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) r16 = socket$netlink(0x10, 0x3, 0x3) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000ec0)={0xffffffffffffffff}) r18 = syz_open_dev$sndmidi(&(0x7f0000000f00)='/dev/snd/midiC#D#\x00', 0x40, 0x101000) r19 = syz_open_dev$evdev(&(0x7f0000000f40)='/dev/input/event#\x00', 0x3a, 0x2682) r20 = syz_open_dev$evdev(&(0x7f0000000f80)='/dev/input/event#\x00', 0x6, 0x0) r21 = accept4$ipx(0xffffffffffffffff, &(0x7f0000000fc0), &(0x7f0000001000)=0x10, 0x0) r22 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001040)='/dev/cuse\x00', 0x101000, 0x0) r23 = syz_open_dev$usbmon(&(0x7f0000001080)='/dev/usbmon#\x00', 0x54, 0x900) r24 = openat$cuse(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/cuse\x00', 0x40000, 0x0) r25 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001100)={{{@in6=@mcast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001200)=0xe8) lstat(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r0, &(0x7f0000001600)=[{&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="f31388488b66295e1113f2c3fec7b0531a8f49ea21925b857427233ed287c9b600d1cadcf4d9d59d7623846d641bc8e64a7177b91aac740382b1e254e00edf3b253bfda313fa14784a91fb0962e6e043a0511194bb4d33b859b61c9508fe6075df49e70ed690ea0bea0634bfebefff0791162fea8e9ea3826be27acdefe5b02409b834a1039ec3e2fd21e202f6bada37261b97f4a5c3d14f28614a93163a36a64d9d8179b1a74d033be11e051f7d3671d26a1c6fb9b15faaa80f9bcd1d0f2d28d664494bff98228914d789851433f8e33d3f227748186202b26e11c936e4f4ad82e2c0f787c63d165b6c387efabba341f14bb7", 0xf3}, {&(0x7f0000000240)="097ee0de0f62f40b1291efa250efcb2ccfb22ee3c7c2b5c02db038f51f1a931e983e6d91b30840f978259ac24640f1398a62d77feb81e6f0aea097262b4dcbad913a589a73bef4d15bc868fe551f4318667f794d7477578ff4e1e0362f0855c306c2c5590d177240ebdfcb3f074ff34a1f7d77f15217ba4fca2ed6d17ad8ffe4a93d1a657f73e6e080045d3a8e0ef783d501ad705010d879925c8d8d3f04f23b365d09f1ca76ef01ad41c73462a196a74ff6038a906640aaf26ec23ff3fdbe6c920df2f97ab35de28725df15ec6e1174c16fb1d25897217707", 0xd9}, {&(0x7f0000000340)="0590db06afaf69d36885e3d69be0442bac482391a7e8dfe89dab4fc1e1fbfb14a03d0725dd69cf798325506249fdbb5f25589f6a08a1c411b18a7124cac78483b2b2cf9b1e034ae22fd735086ea19fecf0889ed7a9ff6e1e419271193a34367027073d8b86d2a6f023a0b399f5d34fb4a7ce1e3f90015cad82", 0x79}], 0x3, &(0x7f0000000800)=[@rights={0x28, 0x1, 0x1, [r1, r2, r3, r4, r5]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x68, 0x8040}, {&(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000880)="4fbaa6256e3e0a", 0x7}, {&(0x7f0000000980)="0c2702d34f579ef8f82d399f4de28fb7f544d7fcb01843db944d268606272cb4323931dfa4729267f54b87da9175176b46433cc9547938084ae73f66fc17a149b221b7b9cc2b6d0a5ba22b6fe0", 0x4d}, {&(0x7f0000000ac0)="8dc942c8591c684c6c204c578f33f8ef5ae8fbfdcf34408d5fbab85d4a3c6684dd2b13ffe7ef0b02208d525ca7fe2fe2b852e7ffc452c4e8015d5b1fad54991541005f41f7490ee13bbde5636cecc7c7f67bfb063ed80f6e8eeb286ab0561636ddf40f52962bfa59f686e18cca8f5e", 0x6f}], 0x3, &(0x7f0000001300)=[@rights={0x38, 0x1, 0x1, [r12, r13, r14, r15, r16, r17, r18, r19, r20]}, @rights={0x20, 0x1, 0x1, [r21, r22, r23]}, @rights={0x18, 0x1, 0x1, [r24]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x10, 0x1, 0x1}], 0xa0, 0x44000}, {&(0x7f00000013c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001440)="f94482f6590cdd2e223d6c27adbe68aa0ff83a99a0ca4a990d1f93c52e092e34714b7aa84a96254123f29e652131d851f602276592e6fb959a199b89f8fac7ffc5cfb4087e26fffea1d9a0c590b9f155e99657757934f706b9c0955088d6149587f41d9fb5f7529f3a47d8dae8ff1032cd9d2dc329659c938382ee5486c89a0503b008b7dbd8c0e62253f10d32bca28db99b88d51fb100a0c342afed634415c485a10f", 0xa3}, {&(0x7f0000001500)="2de052a9342406d0960df8e8e57e44d74e19bdc4aa16710446106c78b45592c446bdbf209a3669be1f66f4c1b8e7093f83307aead21793bfae4cef86be55c9513303545e67ae6ceb3e75f7c294a42f1da3a62010040a416c78206d41ecd9746219f91f07d73e860c4311564443f6a4ae13d9089b2c990e521d9fe7199dc27d62f9e6b2e67a40df1dbd3c2624", 0x8c}], 0x2, 0x0, 0x0, 0x80}], 0x3, 0x40000) mkdir(&(0x7f000053bff8)='./file0\x00', 0x0) mount(&(0x7f0000000a80)='./file0\x00', &(0x7f00000008c0)='./file0\x00', &(0x7f0000000a40)='sysfs\x00', 0x0, &(0x7f0000cde000)) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r28 = open(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) getdents(r28, &(0x7f0000001ac0)=""/4096, 0xb45) 2018/04/14 15:03:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6800000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:31 executing program 7: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x3, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x20000) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000040)={0x2, r2}) setsockopt$inet_tcp_int(r2, 0x6, 0x0, &(0x7f0000000080)=0x7, 0x4) 2018/04/14 15:03:31 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) pwritev(r0, &(0x7f0000000580)=[{&(0x7f0000000040)="e0438d88c58f7fa623e576d1e250497063c7ce4326b7c328f180e2f54288cdfbb45f27", 0x23}, {&(0x7f0000000080)="669cba225396462b2cec1c3bec7366e45d0c786581db029e451d2526c2229afe4ba311d96f00519176f2848b0f31988bdcb22e1c0c8d3e23812cfbf92ae6f20647e3a2274530a41044a4b00363413d98f751e72f0ffa94a441458b24fa2ae2fb4aaa5e781c4a0348e2d6f8f9bb49e1fc55529044d44133f809e04d59c3917d25357dc27838abecd3734e831ca5ebebd21aaadc0dbf629e828f30e0b186f3defa820c4ed513687c8f50442f49de5a4b288e188d92a0365edb0980fe51bfc70afe5adccfebf85b4771ee2401e0f4e9fcd3a133109fd8083ab4dea8d18c36504ac11773148e44", 0xe5}, {&(0x7f0000000180)="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", 0xfb}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="5213b3f4e4384ad914ca389754b3f73a294a479e615f6ba2e559e44d5e4c2e76ac50acdd23b1baa1c74cac6d891a4beb526e22573b8d3cd86b3e4673401a5c90b5e97b654d15050f9a6774a51f93521000f940e50970ecfac12f854cd1b26987e52ad76d8f5efded249ba7e83108a822b2ea98cc3abc48f01c8bc7e0a0c631994483ec0630022c20c233297b612d2cc756938d65b84672045812bfae1f96d45d0e08d769162fdd1e559dfd0c939b5a621409961b974c962172bdc40e31024a7e81830f9b57b732b03f4a87da8b4fbe84f7", 0xd1}, {&(0x7f00000003c0)="f3b7e5bb246e26bcce8bdb2483c06966d45454d1b9d132f00cf20ec68dc9ffd5", 0x20}, {&(0x7f0000000400)="7525c4f7b2d4d89b132f567f9159950fa2fcdefc90740c7a0550ad54e14494a66b2c28d496d6876c671b73c9798e76e840b9b7ca737172e0fe838c51b5d0ab2fe378c5a021297c588175935c40932438307738ab0c7257121823974494914df2846550d1b1da8933643a4e67afb57b2ab965d64998b5539d1ac5837922d77f6bdca4e09a0721afac6f94bbe397ced0e3ba85575a96dcb93cc3b5d84e190d419fe49767a4b4775d86c8a9f3ad18bcbac42a41120affc08ca0", 0xb8}, {&(0x7f00000004c0)="aeeb0b346e98c02dc10315dd85d3bf0bbb2de58ef43c4c84bb4b983a37a9841aa17e6c772555119508cd4247332b50070cf436b8a344213f81410b6ce3a29758b667a5f48580db1d9304afaa7fd916ff4ef7ea9df760e6e19ba563bc91f176846dc16ae4ac8581494f14efecb4d06b583588bc742f25e9de083a43a99561ecdfa203a5d427ffc01496554621abf73ad07a82b514823f75b5f6", 0x99}], 0x8, 0x0) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) sendmsg(r0, &(0x7f0000001b80)={&(0x7f0000000680)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x0, 0x0, 0x2, {0xa, 0x4e22, 0x1ff, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000000740)="96ae525caafd0e8e7ce1bda5c5b2c8b0853da1471379dbfedb1e5f256a73a7288232583cf7bda86058185ea0829b71eab625989400b98c7976f466bf3e0e0bb45df9723102bb3d1b337813578e053444f60753586972ee933bf405f0d1063c64b83289999bca77048ef04f5da8af2c14e00d4d2ff6123570866fa00b697a287bd17ae5c9465313b9bdc89a795766ccf76439aca9f28ee1183019ac23f80443323109577d77e8f3bd94cf3e57ef8b2fe1b2653210f090b596579e68dd27263556944d26bea2a1c6122359e226a4", 0xcd}, {&(0x7f0000000600)="dea8eb1e8c55c3cd2c3f8cb626be2a263bd5583efc08f71b35f73097ff531772e0bcf5c5e3a8a28cfb2b264059a169", 0x2f}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="dc1207bf001c477b94face8699633c711d11fae646fbe3434e0791cb27c56718ec4c0fc38cb6ce219d041590899016066c300286d00acd9bd03adcfe9de3b105cca1b454602e8559df6e06154e3276b0b3f36091541f6d3db755c8c2109cc050cf75940e067469a356dac6fb20", 0x6d}, {&(0x7f00000018c0)="8aee141d7fe653bddd31917a5c2b78e448bfde2b4e446624dc4764a6c3cb4dbab6cf57315c07e3ea0f56b10dee7172f8233ebc579e5471327389ead97e1529ff80fba759f20bf23e71904dc4d0d322c6a52726038375a7aa27be6ea88b16549b080c7ad3015490f5a1772755dd64a1877f187783be9f9e680475675607aab4c82531f99d2ae2602b38a2e985bba8edb58e212c87218ef6215bcda3b6e8f668fc3dfe2d7068050d0faa344e925b78a96fdb07e41be81358c1", 0xb8}, {&(0x7f0000001980)="cdac9cd965398c8196f13ceaeb742675f57d363b68cdcc94896dc51ad69ee44c83e780b664f2fcdce5cccb8a65c9d7d9edbcb24b24246960680a33ad70cfa4f8c03c80eda6b1a0f5aec96d1a9e35212962fd6eb77a8fd1efb120229df980a27af905be45c059eb301e476cbe115b646662e6e60ca1cd1d", 0x77}, {&(0x7f0000001a00)="d4860966601c16335352b82f97781c400f121ca0088286ad5dda44aeb9d5e1a9c63e2686cb22396ae68cfaf4575e38c860542da38e93b83403820212c7523c888a3449c128c5f998416b4e8ae0a6793fba654ab6d05e19659ff97bd1f8ab4900e9973b754f1d8c766fa87c442a817d70184a918f7202b85c2672e61a7d6db16a42d8b7752359cdf0fcf6e76952a50348b97b43173214a1ebc81c2c4dbc84ec56dfb890d1859962bb0557b252f16c86fcb5c720291e2565c87c457708d2ce0fe3a5cde7d2e15dd2a87455168896427a5b4e502e90b41dab8a8c634555be9eed0572", 0xe1}], 0x7, &(0x7f0000006040)=[{0x108, 0x29, 0xeebf, "37f12c6b9550dd56f7a3a1f7c5258ce572a79b446a3bd26c773518825180100e7229a677a41872def664ef787f67eeb14e168786435e5d4da97d11fc39a8eafe28ac91e363fdb3b3c61105df3c163c6416a4ba527fd6f75ef7cfcfbcc896a96de5921833d17f760787b3dd47ad1e63d0de0fd77d295949f3e3b4237b51f452a2f2f4897ae7e06a504742ca43ea52a880f48ef13cb6317060e73cc6812389e8856b9769ac179a8023ce60976ee96a1c86075819ab1ba77bf7f373d1f473ee7e8a80c219bb092882e877ae4468e012980e1d44bd4285ebc91bb172ad7446d1fc7f4caadaf67c15ab6504edff86639d269643"}, {0xe0, 0x10a, 0xfffffffffffffffb, "7fe24034de415c41990f35c7a2762ff0cc9a15866fb652c8ca4fe1d4c5d7ae0894f4a10b59b1fd0d641c44288f1fc35a3decb2e91b411f99751b9cd9ae5fe30aa0197415b71f69b4bca76dc15abb60f8a1cd28590b20c5a61286ddf7b9710cd15eca6d3483d0d5b515b6e538de4404709cda76777ef4eef8784fe7b2c95a3fe275c0ca5f73e2fab0df00b006a7cd2762dc51339e19e0197a559c204a50dd413622a1231a08d5223180cf6f6574e2ea4f8ed3601272b9b45991721033c28e1cea771562aad7eb510fea"}, {0xb0, 0x10b, 0x0, "bcee6721bc3768d8969ef190f4f26eea5e83b158afd42f443d48f08d978d2be1f83b3f570420fe504a06a85ceb56522b66e5e0118778db04e017b37352b38604ce971496d12dc73272f1cdf92881e23821113c36d67ce6f0b4aa500a4eb7da630385b12698cfeec1eeec9de5354bf07f670d386c6fb04e93c7276512a538c93e0679870d4353748eccacb4e2ba2e789dcf1991fd4d303c626334ee5c13039784"}, {0x1010, 0x118, 0x80a4, "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"}, {0xc0, 0x11a, 0x7f, "8c711db08a851045380f89b0d1e298f03d1a9596a1e9d903c9e6d3f8d0dc9f76df037011c844ccf6d51557dfef45c040e56d4c12165af9e6396e9a42af47d77b32a6f61580dca7fa9fe266bb35ed3dd9eca17d5e802c40a3819fb8ed21303a568e7380d495ae80b5e5d475e66b2b3847a4be0388a87858322e26c2d9c89dcfe4384380ca6339c76131eef30ef506881a211b7e0cb8383011de3c0700ec214dfc3da2dabe4acd9e74ea5632"}, {0xc0, 0x196, 0x3, "12ebc73fd538006148150ee95eb643a61c36d5eb2cdaf6cec58ed69fa13c796cf72eefcfe52f4403d63ef82e1a14166e285a210d3bacf89ccc83c3a5c88ccb63510470be6f07703be5090d37e198aae3c46008a5adf2618f8e9536ee0b719aaf909bd14a74e374e347873dc0a357bcc71add8bc01b3890cbc31c063db16df380e3af4c747be29f9ddffbe40c285912db9a3aadbab10df15242e5d964e697867621fb6d95f6c3a42918dbe981"}, {0x1010, 0x101, 0x5, "8a7644d92dfd2d09a69dbad45a5210133c1de5a629d0ac56bdc434b3deb9e465383550df7ce5ab07e782bf6b3163fea37be9205edca181e20a8c8c655eebfc51c0eb4732d36b133487561e7ec751359d262f11e3484919abe6e4177f5ec03b37d4011a10a7f19f4c7e0736cb58834e1117c9248b832df2110b7e61d05e53216cab33c3ea0b3786edc5ece089e661a068fb7fd8093a2a6f1b42e34aaa91fe9612cef01db8c599ca122310adc8e09cefe50fc03f4b7c6a124a7b81e655a877763ac83f625f2e3ef064a77fef687bdec100952824848d3ed3409038fe19d73937f69a3f8a8e5b3a5c37547660c9b890c9a195c8defdce56f715701c97bb5a0af746c7a53d1a55f57f1761f932b50a5e059fdf6715bab9316d3ed1eb6ab1a970a9f00381dd268c971cbe6c17bd1bed4d532714800ccc1222dcc188c329ba0a14c9b9d86827f94b7e1edf6236cd30e6fea3ea73f0269dc147ebe7ca35d7d4649cc61b0851685988064da2545e3c49ae8582150072d0fe49ea726ab0b7ce97fd47765d061e513fad9eacffca44ae72ae9b5a2159cd80bf28ad114438928b55733c93cf1496660bcc57440c09eef63672d0d4ce132f3832c6aff88156c92ce39dccc9c9dcde86ce211b0b4fc4e7781444785da57fcb16a0585c58057a16a84a8a881a6ef831f4a84732065f0bf489028996a93e66d525949b921cf4e2373ac0d15e3dbc0324567333bd6269af20ac328da57edabaaaecc4571598d6d429140f40cb793d30ab2a32c1f6e2da3152ce1afd1eeb8b8fa061d80b98bf75d048b2f7c8a7ff601866c2f2a677097347fee52428a00a8d5e028103e3cc3f2e38147845628d0c2e61b7ca539aee5192858409312675af0338eef89129345d0a6688111b0392eabb4b51524de3f4f259ec702300fbfbeaf147267d2ee02e81b68c57aa0c5dabec1b0ca0ff532b3be2999b561152a7a8d9b9fe267aae54e5032af0216e54f7ae08a9cf2d40e02465fc76898c958466ecdde193006a09fc142d17cd25b7d66765e408d842b622d8de4a1ef15b9f8eab2af015edd03b2fd3b74e4843569e1a011fa9772f848deb2d66a53f048fff1b5dc1444d7d4270d2de4607ddea967554aa03df471a1d0a1a02487a4056c4928fee01cb0e65542fb87094367313306ba653351485cb1a2fbc1367d013ec31126b8792489428f66491499d8c7a90deba3f2f1fe6d1329b1cd6f862e3a0276ac982a3672deb9577718385072c237def36b3a2d065b3841515842846f2ca2223a3fe6956b9ff3b581e6470c0b57a1d152b2d14c4b5c35a6f20c8acfe0de3ed5987900b01965f0c323ec19b1622acce722b75ef6dc3e20b667f03b5a18757882d6a1cd97ac4091b9f2b89ca97d0ac2e582492ccdc4ae4ffe44017a8a813f85b7c976671c2863ed55802dfd0ea2383b17cb012cb3efa04ac54db078717c35737398c11ead6eebca768b6549a25e7fb0831729de7268a202b031091eee995ccc462abb9cc07a95e1231bd62775b4df556ff0e1c170870c4405afd77eb76f442679c32f53dfd737b5bf1aeca4f2f5cb24b26f2e4c9c54e4bb97f6a974eab073b9a3d1147e4aefaa17c1f6074ec9039b7c93b7a094e1da55d97c0a9327a67e25d754c0933d18d5cf454e6ee201ce8bbc312d51b6ca668b7d266fd4ac4db7933fd79023a53ce1f5213c5db720395eb2c46f8659fe91e172ff717d686d8afeca8a831d8a351ea9e71fcd103f8a93713aceddf9a486dafc435105a6eec0f7ebdf0bc1c52581f8db7ce920a7d122045295f9f4f0589f5125ede93ded5ac2d1ab383bed9c2cf58baa5f8f82a270230ed8a42b479a68e84bff37fbdeae748dbba979c70879db5d98ac5071d21950c0ca61c0062f17c39131eb11082a1c9549641c1793e51f58eb947081e5d947c8ad02e39be379806b73415e674a3ffe9dcdb31f56e61414b424fa50d12cb8e295248dd5688f1d20f92bb4bc3f515bf863a63bc67d1907b5ccb680b1a2c0ab2c67819c7b0dbf58de0f25d68e613280f83a20188ecfca7f52440a3feeffde0c8ca8f936268f3c4dc33416973b5f185afe1b26b66788c54b0c2e842504b03c56e89590ce0db0f2598678b46214f52f612e68721ef2addcf118398b1c469c3706879d25dcf34370ed247806de4427a28022b46bf1f530d4cf9d79694f7a8beeac51c9647443d6052310537bec57e87035faa2ab8d274e1cbe1e3c268fe83fc9b5d157013728a43cbc9ab3082b6d4a9070261adb5b5b9155cde89e3abd6a5f0e5dba4a9248065442abb020859f8410dcbb1708311e8f291f6712517a10a03a31c0bb63d770118f07792b4e82a76302e3ece9fbb413272224d547dc85fc3f52208467ce9b2be095c288f8a78e3707cde6d65af3e6390bbf24392c0d5305adc616f19bd4ef230e49f48cee7090a684c3bb7603362dd3f69a48d01ee7b25186d576ea50f569efca03056902acb3760f6a89a8517bcd474c3398472a29b5dd37d44a6dc0007a40aabeeefa42cef3f1a7c3b2a6eb33eaed60331b1100d9b4e8d36553f04752fdbab4c9905b298c0b5ab269fd5c04cf54634ece5912ad556215d377b5806585362cb7e62c1652a51722d339357094a24efd06347601d21cbbd398467b4851481f2de14596462677ff509b438cebb88d1c3d703231eec8b5ac2fef13a38f2b4a1709b2ba60a9c00a9d79489c08d035392f80e9d897815488e73ef7e4d4fd4dbac615d32d513c98d90e710d377c3d29a132a743848ad1d1d43c0eb8fd973e9ef806c9d4ef28b4949f5ea17cf7f6159f6987fe79f45e1931137ae177b18c9e1b27b4034c85b769c93aac7e90d8316f4df721205cd30acb25c92d7518d015a61fe3183844fb9c76465ff0443e7a553297f0290910652e314e5cfed2e185d04f4fe47a016c9c70ee552770f047ebb0521b6e0955437a049c79adb1100afec0e5e1a58d62143127ef9b61b7871af2d8d3f8e79428da84d7444fedb16dcf0a4fcd0dba7f423077119a89d8faf00b3ad69dfccd4a045eb61523cf8fb769dc89efeeb52cf15013755552424491f4186f49ae21d6d73e57df687ee5f68a75b91241ea2746604825268532445ca4448998650b08190611b728fb39dad38668d01b853677bbf938fb96304af25773c01f95a8be46d01695e2e4564b061ebffeebaeb8a18976e9a98d816d7967c3badde45bae6699cf4adb35615aff465f26dbd0c15ca93dd92311c62f5bf362b3f035330fa660a9f61c13e77924b883a955ae0a457bf1077713275304e21ca1def383a69cfbd3856db860abb57c9fc61788f7d5bed60147755dc35858e317493d13b07a94a71251aeecc995bc784209513eff5b555098e473284ed7c98f2a0343df693181b13af0e8a7df755b9822744ec1ce556f3b2df0ea87fecdff013eafcada79d3d9e5f4ae1980302e7c9802a7a45a757bddffbf2368038f2483f5bb13fd196dbeee82d68c7633768cab38674ef0303c9af4e0c6532746e7674d7f11b1ca2421bc5d074db393e9697b3d84f8f09e8762d3c314d4085de9d940538e16459387f89ae47efdeaa8f7d3722502c2024ef2b2c2c958ec215fe51e0886adf3c844c034035cfe764a6080669651013dd7aeb2b932da3e4568b0cff103102dc947d25ac2a6006b0b6a9f759d1ba12e23201cc07b35233b070b397104e6531f35ca728629c0071e140878a5baa6631408d076b23c80804ab6f579e731b52222ce91f9956d69b097f8890d7c48a405facd76f226b0ef11d0f11f6afa147be639ed59e53f09ba15b1468bfa4fdb78d29b8aec50eae56894bfd7aa3b8ba471565c33645f2b657844b1e8a6c780ee140bc84598d56ae8780ebb8090fbb873fd9e35c23049f03b776192dd839d2b95ad7c713ea1792400ab9c4bcc6ab4f40ceec08fc73d9292afc22d6136badf9c31a8b8c2640cd019311aecdea6344af11d0a0757571ea6937c4b37c451052761ac46f3c078c75ebda04f9883762243997bfcc69c03954b6ed24edb9885157f56b2d5595b33d7f7d136615ea1e4724448f31e892a85e6eafab4d6e389c4d64614a66641525594f14e66eb2ca05bfd2b9a6bd9f25676ccc0abf54c36f0f4bd118dcebae9daa677f7a7afb2e5b1af7fac34cf5d9622acac6a85cd4deaf5566ed7dba5c9e8860ff4d2ed04b8801708cbe9cda8245be9d4b7f011558a0fa7117696f51150e9985594934e86cac8ed966bcf0668a79325db89683eac6a2949ac7948db2dcf85c0ba00f208459aa28f83c81b8bf994beab11098be2f7da9190f9d5eaf5127986d3276b98181e7db1ec949ece5eb0c59e63e661263dd82f9dc35b2c77b17db8327ea6574ed32e713bfe17884c1ed8e9b6158242fb8069fd46e6471a1bbd14b981cf9c922cae429553bf90d2ff48a706536fa0d75ff06c2ae05c8c8d6a27bb18214b2cd4e99dbd8e2fcfbb14cb642d3d14351aaa653551b3e9a2fabc7d9230bcdb203e157f89eecf7a7c59b57d0280eed8a32288c2ba4da02de11c4ee53950707bb942c96ce5bae088f1f09fdfdcb1f8e92e40727afcbd1bd6a42f816194640b3864ca4b7a3ca1e5c4c6ac8b6dc8ba4383b83a5f2a00b83752c166a3d817ba7e9260acdda0292dbe3b1a5917636d4713f9631aaf4ffbc25b4be91b8e17e6f4cc20399771e4715b8c9a693b25519f6668c5ba3786970d80532f9a836c2fac72bc9de40ccbcc0ea5e6db1e6446d4ebaf1bfdf4bee0478a4a80040981b4a3e1bc456af4c6fb66fc3c06490340fc0e189bd539490d3f34cc7060069a6a606f30f15fd8c77c70f0910b58f99690d77e8721c27f7869d36865e8e54280d4e28667ab210d9d0c79680584fa475fd53e55f99ef758deb5898441c8ba680f91d90c3fe7ea4a1c8b1a5a092bac5202535087e847d9ab01a03db421bcae7a4dc846a48642f34b3ec341c0e1e7d9bc22914b1bcd7e6661bf219af76f78d8d6b973ce093c73942e3a2021f6d9c39df9023112d8a76550914f1d17537d7708a3818930e309273f9a0957fd8c44b4427254a5055bb00b50b604f1979349fb6b33abefc21a72e050012b4edad51dc85930c5f65272984415e2696d750a6868df208787ad2202bb34ecb805a0e88d14fd1f97d19d40ad767af07bfe42ee6ec6cd9732e93be1209222a860b49547434a225cab2938cf2ff69fc3bf2892bec8b0991c44b31898fc4f543115cfa8b686d714e36a0920f15f5161368fdff7f9c202dbd08e79e0eb6ab310c6f570e237c6e71c79f8d28121a3363b59eae3eb1ac6341bf8ee9fcd7833007924d7d699cb71afdc7e255293bad1c3573865e928771295c18ca6df1eed4c8a5986afd4a114d63ef355306ef0c09a1b5c4740b2f2ec4489e18f0541264c3917d109e40889fd1e6dfffa9411690da502006dea8bd2fa39508af691d61699bfcb43b580406bc4353fb021d0274d9ad4b674184b8a78eb8d552b1aa779de6a3d16e6769f371d9e2816a3e989aefb0a7926b497f75745acaae860d63b25f9843579a6a487fde2b439eb5126d2584acb579967dcefe74ba2c7a679ccd00758d531ec8473c07af49164bf9bb7709b97f448084d58eff617330116eb2e752ebd02bda4bc55fd7b46e435d84bef217a7809874fec59c424b5aea836eda6d46941c213031f02c66bd47c161f2da289c61e44aa057fe18eab3effb466f25d4307e8fb55f2c0f434ef412e0c1cdd2151e535187c43d3384c2958f2ed9096f2e7197b20b8845578c26b1d0c17e0ebe3d265c90e9402c2e2ba21bcaba9bcd83dc2e"}, {0x1010, 0x113, 0x200, "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"}], 0x3448, 0x10}, 0x11) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000006000)={'vcan0\x00', 0x0}) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000700)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000640)) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f000000afb8)={0x1, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x7ffff, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x10) 2018/04/14 15:03:31 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f000000cfe4)={0xa}, 0x1c) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="280000000000000029000000020000002b07df2fd0846bc0964f4ffde3d917e38200000000000000d61598b74c9904a7a42e4f7eab1d2d588e00c77bc66bf39d1f0dbeb30f37bacb49cdc29ed797e7a6b2cca8012fdb4559a69893d52924e25c4ae6eb81f7518cb6062779d19ab1c6981133c74c96a8eea6c8406f903f79844221253553f41307133f44a99a7aeaff7fa60b454bc0d12ccd39e5a96015d3e04dc4deaf3728b17a89dafc62f172620f584729bd0c52d8c4f10e6713c7eba925a600000000000000"], 0x28}}], 0x2, 0x0) socketpair(0x9, 0x6, 0x6, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f00000001c0)={{0x0, 0xcc7, 0xffff, 0x0, 0x40, 0xeb3}, 0x8001, 0xff, 0x4, 0x2, 0x5, "f253b8d82be0db22f4df6580b79d77ccf3965d17d62f5de00624dbda99a8e61f31838cb90f14fc1892e3914700a3c599ba3a14975dce34d9c5217477c8cef71d123d105b956a44b6e1298e24885be2f92965da683b89a65393b6ce8923d0934525e4f76f990676408cfa1a76bf20fdc5a920614ed532eab414acdef9b0cf87af"}) [ 222.969351] binder: 16750:16751 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 222.991162] netlink: 'syz-executor2': attribute type 21 has an invalid length. 2018/04/14 15:03:31 executing program 1: r0 = socket$inet6_sctp(0xa, 0x7, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0xffffffffffffff02, 0x0, 0x400, 0x4, 0x7fff}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x6}, 0x8) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x801, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x5c9f, 0x4) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = dup(r0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}}}, &(0x7f0000000240)=0xb0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000280)=@assoc_value={r4}, 0x8) [ 223.016119] binder: 16750:16759 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000040)=0xffff, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], 0x1c}, 0x1}, 0x0) socket$pptp(0x18, 0x1, 0x2) 2018/04/14 15:03:31 executing program 7: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=0x0) wait4(r1, &(0x7f0000000180), 0x1000002, &(0x7f00000001c0)) syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x0, 0x881) [ 223.043198] netlink: 'syz-executor2': attribute type 21 has an invalid length. 2018/04/14 15:03:31 executing program 0: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount(&(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000180)='hugetlbfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000300)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = getegid() syz_fuseblk_mount(&(0x7f0000000080)='./file0/file0/file0/file0\x00', &(0x7f0000000200)='./file0/file0/file0\x00', 0xd000, r0, r2, 0x3abd, 0x430, 0x1) syz_fuseblk_mount(&(0x7f0000000140)='./file0/file0/file0\x00', &(0x7f00000001c0)='./file0/file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2018/04/14 15:03:31 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xffffffff00000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 223.129514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. 2018/04/14 15:03:31 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') exit(0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000080)=""/1, 0x1, 0x8000000000000000) 2018/04/14 15:03:31 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x3, 0x8400000000003, 0xffffffff00000005}, 0x3f) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, @loopback}, &(0x7f0000000180)=0x10, 0x800) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000240)={r2, 0x1}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) r3 = socket(0x2, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000380)={'bridge0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="3c939b1fc6ac8b8f43161472242c5ab8cf4cdf2182929667fb1fedcc297ce47112363b0b2ef79cadff4ac0b1de833ca9e082a734d70378bf7c8deae459861301394b1a5932ff63b8c71e161f394a76be07eca324c72e43a3e0f98950a219267ebaee174aa2a65d643c543a0738ec25a89603111beb17fec3a493c1f7d526943bb1fdb4d0735416eff410f3f5f91eb4"]}) [ 223.200365] netlink: 4 bytes leftover after parsing attributes in process `syz-executor5'. [ 223.231229] binder: 16794:16795 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:31 executing program 6: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000000000000000000000000010100000040000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) close(r2) 2018/04/14 15:03:31 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0x43) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x1}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x4e22, @rand_addr=0x396aa24c}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00001edff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000aa8000)="070a0722084fff", 0x7) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) readv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000001180)=""/249, 0xf9}], 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={0x0, 0x800}, &(0x7f0000000400)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={r3, 0x1, 0x8000}, 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)=0x1) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in=@multicast1}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) prctl$getreaper(0x1b, &(0x7f00000004c0)) recvfrom$inet(r2, &(0x7f0000000380)=""/116, 0xffffffffffffff47, 0x20, &(0x7f00000002c0)={0x2, 0x84e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0xc) r4 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) sendto$inet6(r4, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r4, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000330f85849ff64dbad369a38d9a6964886343cf2bd5205154ed85feaa3cc08e4be1a25ae18eabd56"], 0x1}], 0x1, &(0x7f0000414000)}, 0x0) 2018/04/14 15:03:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000040)=""/90, &(0x7f00000000c0)=0x5a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@local={0xfe, 0x80, [], 0xaa}}, 0x20) [ 223.281203] binder: 16794:16803 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_PPC_ALLOCATE_HTAB(r1, 0xc004aea7, &(0x7f0000000080)=0x9a) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x200004b564d03, 0x0, 0x101}]}) 2018/04/14 15:03:32 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f000006bbc5)='/dev/sequencer\x00', 0x40a02, 0x0) write$sndseq(r0, &(0x7f0000577000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @addr={0x4}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x2}, {0x0, 0x4}, @quote={{}, 0x0, &(0x7f0000d09fd0)={0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @queue}}}, {0x8, 0x0, 0x0, 0x0, @time, {}, {}, @addr={0x8}}, {0x0, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result}], 0xc0) ioctl$DRM_IOCTL_AGP_ENABLE(r0, 0x40086432, &(0x7f0000000000)=0xfffffffffffffffe) 2018/04/14 15:03:32 executing program 1: r0 = socket(0x1e, 0x2, 0x0) bind(r0, &(0x7f00008a1f80)=@generic={0x42001e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d64fb8f8401a3ff59829a2b0afe7ce43a5b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31510000500000000000bdb9c8ea31000077aeb81c90001d6f7c980400000000f70dc136cb184a"}, 0x80) clock_gettime(0x0, &(0x7f0000000140)) nanosleep(&(0x7f0000000200)={0x77359400}, &(0x7f00000002c0)) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f00000000c0)=@generic={0x10000000001e, "0100000000001e0000000001e526cc573c5bf86c483724c71e14dd6a739effea1b48006be61ffe06d79f00000000000000076c3f010039d8f986ff03000000000000af50d5fe32c419d67bcbc7e3ad316a198356ed0008341c1fd45624280027800ece70b076cf979ac40000bd767e2e78a1dfd300981a1565b3b16d7436"}, 0x80, &(0x7f0000000740), 0x0, &(0x7f0000000040)}, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) 2018/04/14 15:03:32 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x500000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:32 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000140)={0x20, r2, 0x921, 0x0, 0x0, {0x3}, [{{0x8, 0x1, r3}, {0x4, 0x2}}]}, 0x20}, 0x1}, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000100)=@int=0x8, 0x4) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000180)=0x3) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000001c0)=0x100, 0x4) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', @ifru_data=&(0x7f0000000040)="d548574b2f8c033d46cd9b6ce2881e434132833d293748da73a5f74b2e23caae"}) 2018/04/14 15:03:32 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x8000040000000088) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x7}, 0xfffffffffffffff7) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[]}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000002000)=[{0x10, 0x29}], 0x10}}], 0x2, 0x8000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) 2018/04/14 15:03:32 executing program 2: sendmsg(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000800040002000000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ed75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) r0 = creat(&(0x7f0000000080)='./file0\x00', 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xdd, "a20af3b798c66c530eb27a01f1266c816f8424d76015aa1b9ca7bf4cb281179797042bc9ad9a959dcb2e0955bcaf2f924b019e3c4b8f801ca6d41e55c67bd40bf224263339fc8a9a25efdcb7f8379ce7075fd0f2ed6120b6cae1d7428e414a6d4b44fad6e05af74de86afca2a2b171fc7f6792ed8b0acafa1e7da26600c9092e8bbc4ccd6f405f458173d1b77b5c9bad6eeee3862d34c7b8806b51a23ca8e42143114d232c479ed8e08b47467df86d36b19d2de0a343348467b12be6038e0f4b3324afdb95418c2fca4145daee0a2967f2a528a2cc79d496668dcacdc1"}, &(0x7f00000001c0)=0xe5) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000200)=r1, 0x4) 2018/04/14 15:03:32 executing program 7: setrlimit(0x1, &(0x7f0000011000)) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffa) add_key(&(0x7f00000000c0)='rxrpc_s\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000140)="4c4c51ed", 0x4, r0) request_key(&(0x7f0000000200)='.request_key_auth\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000280)='keyring\x00', r0) add_key(&(0x7f0000001240)='big_key\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a}, &(0x7f00000012c0)="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", 0x4d1, 0xfffffffffffffffc) 2018/04/14 15:03:32 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xc8de, 0x301200) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)=0x0) r2 = getpgrp(r1) r3 = geteuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000080)={0x8, 0x1, r2, 0x60, r3, 0xfffffffffffffffc, 0x1ff, 0x7}) r4 = socket$inet(0x2, 0x3, 0x3) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000000c0)) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000340)=@broute={"62726f7574650200", 0x20, 0x1, 0x148, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000440], 0x0, &(0x7f0000000000), &(0x7f0000000440)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'gre0\x00', 'ip6_vti0\x00', 'syzkaller1\x00', 'ifb0\x00', @random="bd229cceedd0", [], @empty, [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}}]}]}, 0x1c0) [ 224.383608] binder: 16829:16840 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:32 executing program 5: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) io_setup(0x0, &(0x7f0000000000)=0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x80) io_cancel(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x3, 0x4, r1, &(0x7f0000000040)='Z', 0x1, 0x3, 0x0, 0x1, r2}, &(0x7f0000000100)) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f000000d000/0xc000)=nil], &(0x7f0000000180), &(0x7f00000001c0), 0x0) 2018/04/14 15:03:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3cabd3d061d7559fbdedd1927baf34daff00000000fcdbdf251100000018000a00995e07c6bf71fb0a2c0000"], 0x2c}, 0x1}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)) syz_genetlink_get_family_id$fou(&(0x7f00000000c0)='fou\x00') ioctl$TIOCSBRK(r1, 0x5427) 2018/04/14 15:03:32 executing program 0: r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)='Z', 0x1}], 0x1, &(0x7f0000000440)=[{0x10, 0x10000000114, 0x3}], 0x10}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x180) 2018/04/14 15:03:32 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0xffffffffffffff01) r1 = getpid() keyctl$session_to_parent(0x12) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='net/ip_tables_names\x00') writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="813e25914932af55d660b2a4087723eefe3fe9491d5250cb756f2dc097f13680a8c5f2bf42", 0x25}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000300f8ffffff578b00000003d1c3442a711ea378e1104d85ff2edf3e5b2ce8731a5d5c7c4e42b1b785213a41b6cb2d226074dc55064778b8820b95d6c6e0e89a2534781c142d88b5424ec4440a1ec2e2ddc8a8c542b05f706034a27897c83d098d2fb9561d8e6e4836de0508380695b998c9b56da3602d4765b610604b703370af4ba05e944af9fed50f1b6881bccfaa52045baa6ccd4a05a951e43e738d00b8bcbe3946999f5f79570bcee95d78d6a83bc6738edeecea3f6afe9f78f08ce069c8e1b5f9f338bce90e7f9a275f0016fd0b488a18a90c"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r4 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x6, 0x1) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f0000000100)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) ioctl$EVIOCGKEYCODE(r4, 0x80084504, &(0x7f00000002c0)=""/72) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f000031aff8)={r0, r3}) ioctl$sock_bt_hci(r2, 0x400448e6, &(0x7f0000000140)="dd788f50ea44086c11b30dab450ef7ebb5b36ea4251b90d9f862ed8eb5e38ae96fcc2e556d929ecef8b90267a81ec86317df4c46d76c3ff3014644d805fe00bb9cd5e2afaea73afee060332a71478968c175f25ae04afef147f475e27bc185d096201294b56b8b452a45e992e8a4") close(0xffffffffffffffff) [ 224.440453] binder: 16829:16852 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:33 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000c73fa8)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(hmac(sha256-generic))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040), 0x0) sendmmsg$alg(r1, &(0x7f00000007c0), 0x1, 0x8044) accept4(r1, 0x0, &(0x7f00000000c0), 0x0) 2018/04/14 15:03:33 executing program 4: r0 = socket$inet(0x2, 0x1, 0x0) r1 = dup(r0) setsockopt$inet_tcp_int(r1, 0x6, 0x11, &(0x7f00007b5ffc), 0x4) r2 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$reject(0x13, r2, 0xe01, 0x3ff, 0x0) 2018/04/14 15:03:33 executing program 5: msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) perf_event_open(&(0x7f000025c000)={0x2, 0x40e, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 2018/04/14 15:03:33 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x20000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:33 executing program 0: r0 = eventfd2(0x0, 0x0) poll(&(0x7f0000000000)=[{r0}], 0x1, 0xffffffffffff0650) writev(r0, &(0x7f0000001000)=[{&(0x7f0000021000)='u8\x00\x00\x00\x00\x00\x00', 0x8}], 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x40, 0x4000) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000080)={{0x9, 0x6b8a}, 'port0\x00', 0x1, 0x3470733775ac97fd, 0x4, 0x74b, 0x4, 0x1, 0x7, 0x0, 0x6, 0x1f}) 2018/04/14 15:03:33 executing program 2: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e23, 0x5, @loopback={0x0, 0x1}, 0x5}, {0xa, 0x4e23, 0x3ff, @empty, 0xff34}, 0x40, [0x8, 0x0, 0x92c, 0xff, 0x80000001, 0x4, 0x80]}, 0x5c) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xff, 0x2, 0x9}, 0x8) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f00000004c0)=@ethtool_cmd={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56da}}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'ip6_vti0\x00', {0x2, 0x4e23}}) r1 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0x7fff, 0x20000) connect$ax25(r1, &(0x7f0000000140)={0x3, {"665bfbd27604b3"}, 0x8}, 0x10) 2018/04/14 15:03:33 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffd) io_setup(0x8, &(0x7f00000000c0)=0x0) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000180)="64f8d69d19890e16d004b9f30526224733264ad46ced66ea0e590e29c4ede2cb4f5456cd67fc8aa2746fe8805a75a35abb0bb09c8b34b5bb9df55ea20832", 0x3e, r0) r3 = request_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000240)='keyring\x00', r0) keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r2, r3}, &(0x7f00000002c0)=""/248, 0xf8, &(0x7f0000000400)={&(0x7f00000003c0)={'crc32c-generic\x00'}}) io_destroy(r1) keyctl$link(0x16, r0, r0) 2018/04/14 15:03:33 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup2(r2, r1) dup3(r0, r1, 0x0) 2018/04/14 15:03:33 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget(0x0, 0x4, 0x480) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) getresgid(&(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000200)) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000440)={{0x4, r1, r2, r3, r4, 0x100, 0x5}, 0x6, 0x8}) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/rfkill\x00', 0x200, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000500)={0xaa, 0x8}) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x101, 0xfffffffffffffffd, 0x6, 0x1]) r6 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r6, 0xc0184900, &(0x7f00000001c0)={0xc0a3, 0x3}) [ 225.429654] binder: 16879:16881 IncRefs 0 refcount change on invalid ref 536870912 ret -22 2018/04/14 15:03:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2) ioctl(r0, 0x937b, &(0x7f0000000080)="010000000000000018") 2018/04/14 15:03:33 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x84010, r0, 0x0) perf_event_open(&(0x7f0000b5a000)={0x8, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 225.508306] binder: 16879:16900 IncRefs 0 refcount change on invalid ref 536870912 ret -22 2018/04/14 15:03:33 executing program 2: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000140)={0x5c1, {{0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x84) r2 = socket(0x11, 0x2, 0x0) setsockopt(r2, 0x107, 0x1, &(0x7f00004d8ff0)="01000000f6ff060000071a00009139cc", 0x10) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000300)=0x7a8, &(0x7f0000000340)=0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)) close(r2) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x2, 0x2, 0xffff, 0x0, 0x3, 0x12d, {0x0, @in6={{0xa, 0x4e21, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x80000001}}, 0x20, 0x40, 0x8, 0xfffffffffffff800, 0x5}}, &(0x7f0000000040)=0xb0) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, &(0x7f0000000440)=0x4) r4 = syz_open_dev$sg(&(0x7f0000000480)='/dev/sg#\x00', 0x9, 0x301000) ioctl$TCGETA(r4, 0x5405, &(0x7f00000004c0)) getsockopt(r1, 0x4, 0x805a, &(0x7f0000000200)=""/150, &(0x7f00000002c0)=0x96) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0xfffffffffffffffb, 0x0) 2018/04/14 15:03:33 executing program 7: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002b80)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x1ff, 0x1, 0x8, 0x94, 0x1}, &(0x7f0000002c40)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000002c80)={0x0, @in6={{0xa, 0x4e21, 0xfffffffffffffffc, @empty, 0x3}}, 0x5, 0x81, 0xff, 0xc04c}, &(0x7f0000002d40)=0x98) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000002d80)={r2, 0x0, 0x100, 0x1, 0x2, 0x1, 0xc4, 0x8, {r3, @in={{0x2, 0x4e23, @rand_addr=0xffffffff}}, 0x200000000000, 0x100000000, 0x6, 0x4, 0x1}}, &(0x7f0000002e40)=0xb0) sendmmsg$alg(r1, &(0x7f0000002ec0)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="392bb14eff9fdda2c75c37806c77b58324f8f72529bf01d23283e954964fd93eb06ed8f30088d5ef03cf1f9cee96baff64528d23116b99202fea920f2141901c8fd9eaa3c6eed4fa733be6e9cd7b59e5f575978ceb91f6d263a6817b", 0x5c}, {&(0x7f0000000100)="9531a96944d83d462c2f7f03e1a2d0c3f9718f186e0f95a65d77f815100b65c6d4dd9e7b3be12c1266f7b243402c04ae1512bf160a5d40a4ce139812c5c6c2e12d3c57bfb15f3b9a994a21b4cb08b8ba7b9ba82794270db9f221fb7e930b96e1e9aa43c8044af01d994efc9e37dbc74f0280cf6ed47ebc1ea7427c7fde321070f435a74971c50c6dab9b4f7c62008873cf7eed95a6255070bdecd4f3a53d137eb0e20e3d21cc07c92dd76e1648a31fc252030452670c3175c5a1c91a160f698a", 0xc0}], 0x2, 0x0, 0x0, 0x4000}, {0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000200)="5ea33f7a1bdc7bcf5aa5c87cbcedc81fa406bade6efb93125dbfbcabda9a4bac11e9155a917068424d314f7c41c843c3d03d237de7524196260ef258f520ace5b91f701f87e0253d5c88aff2c6db59c41ae9a0bd281057255968918a8c4a601dd0e94c58f696c0e285ba91c5f8a08dda3f8476d556b56111e7ae8a947333b0d2107cea0b4a9637689c62d33fc7988bc6f36a0229803e52555bde8d181825a6", 0x9f}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="9ca38d225a21e8d2ef968afe49f7ec6762cd7c22c0d6bae1a8ce87b00993ad5c3dbe77e6e02a39934c94eb3e25e276233758f2b5517280e1ccbd0501081f4ef60e43cc13798f023ab810cb1361", 0x4d}], 0x3, &(0x7f0000001380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8080}, {0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000013c0)="9d92bdfc9d858e82ca4113eb85a8270784a0474db4bdcc2d1092d79d49c2c16734b0ef2d291c1c14a39710aaa50d06f1e4cb6a7972253ee28921d01f139e8873ce067a3f465c9f3656ee050ddda180ef6ffc24c09ac7d3fe723aeaea879eb57e170134bc4a6528afe7361e4de1d0af61b5c5cfd4a4e785e2beef58fa476bcd35c55c4a5848d1f05a2a337dd9103d1032ef6b5f75b958c79f8a854b6677b06976f6dcf8ec40a37680a666b20507a1307acd09e3d0093c14cc8593493bfa924f0e", 0xc0}, {&(0x7f0000001480)="f6395d275bade27897fe5bac44ade2fa570a0ebdf7a14ea4a573915b6574960317a96507584e14fe875ef1a9924b523f0070d35f6a4d5a5b8e0ed42f14", 0x3d}, {&(0x7f00000014c0)="0c1ef57699a5eb5dc08069e666bcbf0c10cb0de548d36d36a02c044f70ae26399d768f149b9a4a62029707802fe83af981f6735596a77d4bcf8aa74572f7416c406e5e8091fcae9883f8f4e1d86fd2040d9dec40783d5fd96c26b5647f5f5db359243c829aa416d2b99aab2c0a834667dd7c489aeae5d5610a99fd0fcc6d1e8cce06a932426930556b664883f10675d7dceb73bd17524419a972a2c129ab62980687f2b39d790b557dd3f0fcd1eb19c0d63ff58199be9d342ad5767a76ec65a9739bc7c7744c75dabd6cd536a707635edd5aa2f036", 0xd5}, {&(0x7f00000015c0)="303a8fbe6864b49b4d2f77d18643290c0f7a650d4c12dfbe92cee39bf9c1099af6858a0997f953eea443804d0c76ed8da87b4460fd6bba1336ccf886574315c7ab347b6211b4ed6dc89fbe274ba3c0b94e60dabf50e35bed4c1b1399c66d8e509bd483", 0x63}], 0x4, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], 0x170, 0x4}, {0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001800)="6b1ab657f1f063c579a11fbba34f2333742266898729438aa24cece7bd1785eaa6f474431317c10e9a6937863c9354c45767f2f9a41d30cfef84453b31a9cdf1a71c0db3c081758abb74949a2ab740b1d71456286b39edca603c0b344a58f719fab203572a935955c80aca1fbd754b1a6c5256de69e2193e5ca90dbc271658d41ccfa29fcc7483f94abb5e9d6ea4e0eb946413f8b8df973d2d734080aab16d508784b448647030227982197eac77cb7c3aa54778b3a9ab1cf4bac624aa710850d5caa7da2faa8e9e58cea3593831654bddafaace", 0xd4}, {&(0x7f0000001900)="da803cbefd0c76dbd61f0608982d1d93934fdcfed6971d308cc6ede5fbb1d7a4accff68c4a172132cf019b3bc2f1af00dff130100e4f5489c301207efa74eac0d4febe3babb9b128d92dca6e75552dcbaa9096193a798f385be5e711ae887ae0104766dd7fff31710eb6d60c555fc143db571b9344fe8992838c418b78fbffdc950f502803e435ff3ab985144a406c8509db4dfa9ec62b252abc7950f00efa43b729e763e99df218e64c50a7", 0xac}, {&(0x7f00000019c0)="432aec54b02aa4165d146e0532a855869ec71b5df39983124519fbc55982d7caef0fea3da1e472caee1c66ac5b9d4106335bb7a9f0e9a70bd1d2024564460a1cf405c5dcec52087056c829589317e4c239ed71af58de6a8e9f7799bfda8efface93e3f", 0x63}, {&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="d2b050baa7e2955c60b448fa60d2d414df14aa4f73c24b3475297bfca7fcb2029e0c7999855f9605906d81817ff04c277329a1027addb74b093f6795ddb3d49fdb927769a184b12353a3bca0c82050ef9217073e6b141eef01cb5444caeb3acb782237675d7f6d9e", 0x68}, {&(0x7f0000002ac0)="e8d7ee8233476c8218d66f8cd382a09c55f27184c8dc12729131f52188f7084067427284c6d2392103e0", 0x2a}], 0x6, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], 0x318, 0x4004}], 0x4, 0x8000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), 0x3) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x401, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000003380)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x2, @empty, 0xffffffffffffffff}, @in6={0xa, 0x4e24, 0x10001, @mcast2={0xff, 0x2, [], 0x1}, 0x1}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, [], 0xa}, 0xfffffffffffffffc}], 0x74) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000002e80)={r3, 0x0, 0x8, [0x101, 0xdda5, 0x6, 0x7, 0x2, 0xca0e, 0x9, 0xffffffffffffff00]}, &(0x7f0000003300)=0x18) setsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000003340)=@assoc_id=r4, 0x4) 2018/04/14 15:03:33 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x36}, &(0x7f0000000080)) timer_getoverrun(0x0) 2018/04/14 15:03:34 executing program 0: r0 = open$dir(&(0x7f0000000040)='./file0\x00', 0x1fffe, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x5845c1113bdbf005, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) truncate(&(0x7f0000000080)='./file0\x00', 0x400) write(r0, &(0x7f0000001e00)="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", 0xe00) 2018/04/14 15:03:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x9, 0x80) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000040)={@local, @empty, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, 0x9, 0xfffffffffffffff9, 0x9, 0x14ca7847ac8baf75, 0x10000, 0x200000, r1}) keyctl$join(0x1, &(0x7f00000001c0)={0x2e, 0x79, 0x7a, 0x2}) 2018/04/14 15:03:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x1004000000004) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x101000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000080)={@in={{0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}, 0xfffffffffffffffb, 0x0, 0x2, "ddd8fa721943d320d0c226f257531a10ac497c60a6017c38799c1d7af3a74e3106647a74d699fb0c12732997b957744d24dd3230a5af490bce379d3093c287b9e7cc04d8c2b1da32337a510b61f78353"}, 0xd8) ioctl$void(r0, 0xc004587f) socket$netlink(0x10, 0x3, 0xf) writev(r0, &(0x7f0000096000)=[{&(0x7f00005a5000)="580000001400192340a14b80fd0d8c560a0600000000e076000543d8d8fe5800000024ca7f4f643e8900050028635a000510f5100002000000000000001c04ed5dfffff500002f000d000100040408000004ff0000000005", 0x58}], 0x1) 2018/04/14 15:03:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xfdfdffff}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:34 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000588ff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r1, 0x7, &(0x7f0000002000)) unshare(0x10a00000) fcntl$lock(r1, 0x7, &(0x7f0000010000)) dup3(r0, r1, 0x0) 2018/04/14 15:03:34 executing program 6: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0xfffffffffffffffb, 0x2, 0x2, 0x1f, 0x0, 0x7, 0xfffff80000000000, 0x3, 0xffff}) r1 = syz_open_dev$sg(&(0x7f0000970000)='/dev/sg#\x00', 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x8004, 0x4) fallocate(r2, 0x0, 0x4b99, 0x5) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r3, 0x0) fallocate(r2, 0x1, 0x0, 0x4000003) madvise(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x9) sendfile(r3, r2, 0x0, 0xc08f) signalfd4(r1, &(0x7f0000000000)={0x1}, 0x8, 0x800) ioctl(r1, 0x5, &(0x7f0000000300)="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") 2018/04/14 15:03:34 executing program 7: r0 = socket(0x15, 0x80005, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_yield() getsockopt(r0, 0x114, 0x2715, &(0x7f0000af0fe7)=""/13, &(0x7f000033bffc)=0x3e3) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)) 2018/04/14 15:03:34 executing program 1: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) r0 = syz_open_dev$admmidi(&(0x7f0000000200)='/dev/admmidi#\x00', 0x2, 0x100) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x400000, 0x1, 0xeb, 0x101}, 0x10) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000340)={@local, @loopback, @rand_addr}, &(0x7f0000000380)=0xc) inotify_init1(0x80800) ioctl$KVM_GET_MP_STATE(r0, 0x8004ae98, &(0x7f00000001c0)) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="e93f05ad902c73dca7c7e0cc6cd9f47c18000000000000000000000000000000711000000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x810c5701, 0x6f2000, &(0x7f0000000300)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r1, 0x50, &(0x7f0000000240)}, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f00000002c0)=0x7c993f1d, 0x4) [ 226.472432] binder: 16940:16942 IncRefs 0 refcount change on invalid ref -33685505 ret -22 2018/04/14 15:03:34 executing program 1: ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0xaf01, &(0x7f0000307000)=&(0x7f0000989fff)) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af13, &(0x7f0000000040)={0x0, 0x3}) 2018/04/14 15:03:34 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) clock_adjtime(0x7, &(0x7f0000000000)={0x5, 0x80, 0x33364507, 0x9, 0x101, 0x8, 0x4, 0xa4, 0x68, 0x20, 0x4, 0x6, 0x5, 0x2, 0x3, 0x9, 0x9, 0x3, 0x912, 0xfffffffffffffffc, 0xfff, 0x7, 0x9, 0x3, 0x80, 0x1f}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x210000, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) connect$l2tp(r0, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) getpeername(r1, &(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000280)=0xffffffffffffff85) 2018/04/14 15:03:34 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000580)=0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000840)=0x0) lstat(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000940)=0x0, &(0x7f0000000980), &(0x7f00000009c0)) r6 = getpgrp(0x0) r7 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$netlink(r0, &(0x7f0000000b40)={&(0x7f00000002c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)=[{&(0x7f0000000300)={0x118, 0x39, 0x0, 0x70bd28, 0x25dfdbfe, "", [@generic="c3900fbcba124875b2dedd6c6ab217274fce2695acff42e642033159e340eec2b392059a30fb6ecbdab2e49383c39c76800e96a1d24f839d5f9e60ec805504e0e14addf481e8ba510f1ab5", @generic="ee35a02030ff0ac24f835396d91fc70e9ae55086f773ca3e67999a9196dc4ea459ea3d39169ab0304f26dbc6b54d8d0b3131f6517e3b4163d7e166fd080e9406095f1de12932c6385f07bd4728226daada36f7416817276e3c025450832ee53a6e15d17ec5e202324bcf57d43c561abb84c9aa116f4b3fa39c205cd6d63da1eca9eae28db1c94fa6b6a220b0352400dbe9566454e5c49f5b3592663bbf937ff45e3d7d7b255249a09055991e83d5f64a7d", @typed={0xc, 0x8, @u64=0x100000000}]}, 0x118}, {&(0x7f0000000440)={0x108, 0x34, 0x320, 0x70bd28, 0x25dfdbfe, "", [@typed={0x14, 0x2c, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @nested={0xc, 0x8a, [@generic="275c2bc3b035a6"]}, @typed={0x10, 0x41, @str='/dev/autofs\x00'}, @generic="40e3aec622e7f3a9c43e80b54939c9ac978ddce350f2f8694e66bddf02022e8cae9201df97375e3c23219ad444a776836a01c3e4e520c7da2e3229d3a71b434b0025bd0e47441c24cf5f38e2f1ed8897b8e1987f6e1125be5cc7822d55eb0321a43599a74a880ef3857a5b07e46a989f6ac441e1171037b2703c13b1cab4009d82445e91787b5a0d4cc1ffcca699a7e7d3a26b02daa29e7b4f3f98df6814d1fdfc78a1a70ebb03938070f3d97a7e1c570fd1d82005cc32bbb17db9bf5c7fb0aa06f047dfe96a4b8f"]}, 0x108}, {&(0x7f00000005c0)={0x240, 0x3c, 0x10, 0x70bd2a, 0x25dfdbfc, "", [@typed={0x8, 0x63, @pid=r2}, @generic="65a6b2775f29c08af7154cddffaa598846af85825e397b1ec11b31d4fe1bf892641562487bb0ef9bbf35c691e0ba1de16b5810fe70fa67607794625bd4d4bc31b83ba7942a13e20961b0653a25a8bc780f1d558fd5955b1adb6b8ef83351c5ef8f37ecb43c0ceb4fbab7477dab0b0ee2bff6f893539cbb35cb75f5eee2f830be90f6b814b9be7a31798e6f224169a9c2ba4ff32d8ce103804c6c257f85b92a2deb3193dff9afa51acb8e", @generic="d47390a8b007d650d4514cfbd08c49291864ff36d6dcaccaebafe40e2e3ac151fc65c3ec04ff001cd006dcc68581d61335720d0db418c1d55ab1aff0ea717ae03dd4e280bb9d0ac4276d240fdd999605ee26c89be28d80e377adf06b7d9a18260f98027e8c0921783c59f1de0a90097bf54934a4b0402e4980f867d5", @nested={0x14, 0x10, [@generic="087e9021035e1d3e880e2b47c7dd"]}, @typed={0x8, 0x75, @ipv4=@dev={0xac, 0x14, 0x14, 0xc}}, @typed={0xe4, 0x50, @binary="af437f34185716780ae1fd5281a2f79045a5d970b660d499c7320baa3fe6fa72ccc1c2f82620012fbc1563ad532a051aca93d59d2e9724bf3e165fae37fd709cd296626b36798c07c18e93b142a45519630fdc1e1b77b2903d9a3a9f9542d89cf6befe9c0af8f509ebf446589a3cae93c0061a40744c34b0f0c6253f7274c1387975b6b9ff9d9f15646e3f01dbe35ff771dab44ec0a9a8fc1cb2ca8c0ff52f7d6dc2e8d06f08c19f0fcb1e989d2a865e19a11661aad8f34886117149cdd3d88c51c2db0cb9cb7e2ca1d0c875dc99fa5234fec0cef8be483bbfd8736bdfdea2"}]}, 0x240}], 0x3, &(0x7f0000000a80)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}], 0x90, 0x20000000}, 0x20008040) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="34ff9eff0000000000594d3b051316af"], 0x28}, 0x1}, 0x0) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40002, 0x0) sendto$packet(r9, &(0x7f00000000c0)="f890bb58732d974652d6a1df40f2561180922241e086929fac6c3873f8d509e095193abfe94809884c77d2305bb4806d590b8e644e46f9674d015b0f98c9375c9b2e0cc6521adbe81d30d339cffd00328228df02e8284456103e36871ec5ff1a00c7bac25f58d9da3845eeb81382918bececd4dbb268324557c65a29b917658a891e87956d1ef5ea0cdbba1df7eb7269a05b69c0f9e62302baa23e", 0x9b, 0x4000000, &(0x7f00000001c0)={0x11, 0x15, r1, 0x1, 0x9b95, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x80000, 0x0) [ 226.516430] binder: 16940:16953 IncRefs 0 refcount change on invalid ref -33685505 ret -22 2018/04/14 15:03:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) r2 = accept4(r0, &(0x7f0000000240)=@sco, &(0x7f0000000000)=0x80, 0x800) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0x60000000000}, {0xa, 0x4e20, 0xa75, @loopback={0x0, 0x1}, 0x9}, 0x41a, [0x0, 0x90, 0x9, 0x780cc88d, 0x5f22, 0x1, 0x9, 0x6]}, 0x5c) 2018/04/14 15:03:34 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x0, &(0x7f00000000c0)=ANY=[]) llistxattr(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000680)=""/4096, 0x1000) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) mount(&(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='nfsd\x00', 0x1000021, 0x0) lstat(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600)) 2018/04/14 15:03:34 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000780)='/dev/snd/pcmC#D#c\x00', 0x401, 0x10000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0xfff, 0x5, 0x7, 0x3, 0xff, 0x2, 0x0, 0x3, 0x3d4, 0x40, 0x2e7, 0xc4, 0x27, 0x38, 0x1, 0x24, 0x8, 0xff}, [{0x4, 0xc2e, 0x800, 0x6, 0x3, 0x6, 0x1fe, 0x8}, {0x2, 0x10000, 0x0, 0x2, 0x7, 0x812, 0x200, 0x5}], "d49b1f73a86c8507d5c30729d7daaa7b5a97da2b517d3abe94c6127a87353108238f83ee0dc89b611d035a3402bb4522263067b4f106665bd769c0094dff5b4dccd47a3105760104f1", [[], [], [], [], [], []]}, 0x6f9) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000007c0)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)=ANY=[@ANYBLOB="0203000313000000000000080000000005000600000000000a00000000000000000000000000000000000000000046d5430702000000000005000900ff0000000a00000012000000fe8000000000000000000000000004ff00000000001b000002000100000000000000020d0000000005000500000000000a00000001000000ff0200000000000000000000000000010000000000000000"], 0x98}, 0x1}, 0x0) 2018/04/14 15:03:34 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6800}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000ac8ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x6, 0x40000) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in=@local={0xac, 0x14, 0x14, 0xaa}, @in=@broadcast=0xffffffff, 0x4e20, 0xea7, 0x4e20, 0x9, 0xa, 0x0, 0x80, 0x0, 0x0, r2}, {0x4, 0x20, 0x0, 0x7, 0x0, 0x80000000, 0x8001, 0x8}, {0x8, 0xfffffffffffffffd, 0x6, 0xa842}, 0x6, 0x6e6bb5, 0x0, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x21}, 0x4d5}, 0x2, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x3500, 0x7, 0x3, 0x200, 0x2, 0xffffffff, 0x2}}, 0xe8) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) 2018/04/14 15:03:34 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000001480)={{0x4000001ff, 0x20100000800009}, {}, 0x200}) memfd_create(&(0x7f0000000000)='/dev/sequencer2\x00', 0x3) 2018/04/14 15:03:34 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x0, 0x3, 0x10001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0xfc, "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"}, &(0x7f00000001c0)=0x104) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r1, @in6={{0xa, 0x4e24, 0xf3c3, @mcast2={0xff, 0x2, [], 0x1}, 0x175}}, [0x17, 0x2, 0x8, 0xffffffff, 0x4, 0xcc6, 0x800, 0x7ec1, 0x16, 0x5, 0xda8c, 0x6, 0x61e6, 0x8, 0x9]}, &(0x7f0000000300)=0x100) lseek(r0, 0x0, 0x2) r2 = open(&(0x7f0000000040)='./bus\x00', 0x81, 0x0) sendfile(r2, r0, 0x0, 0xd7c3) 2018/04/14 15:03:34 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f0000f86000)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') unlink(&(0x7f0000000100)='./control\x00') clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r2, &(0x7f0000000140)=[{0x0, 0x3, 0x9, 0x100000001, @time={0x0, 0x989680}, {0x4, 0xfffffffffffffe00}, {0xffffffffffffffff, 0x5}, @addr={0xb0e, 0x743}}, {0x6, 0x80, 0xfffffffffffffffd, 0xff, @time, {0xea53, 0x9}, {0x5, 0xffffffff}, @connect={{0x2, 0x800}, {0x101, 0x7}}}, {0x8, 0x100, 0x6, 0x2, @time={0x0, 0x989680}, {0x7, 0xfffffffffffffffb}, {0x9, 0x7}, @result={0x9, 0x8}}, {0x42c9fd5b, 0x9, 0x0, 0x5, @tick=0x8, {0x0, 0x1}, {0x5, 0x8}, @connect={{0xbcd3, 0x6}, {0x101, 0x1}}}, {0x80000000, 0x8000, 0x9, 0x6, @time={r3, r4+30000000}, {0x1, 0x80}, {0x800, 0x7}, @quote={{0x6, 0x7}, 0xe34, &(0x7f0000000080)={0xfffffffffffffffe, 0x4, 0x87f0, 0x2, @tick=0x5, {0x80000000, 0xfffffffffffffff8}, {0x1, 0x9}, @queue={0x2, {0x90, 0x7fffffff}}}}}, {0x8, 0x9, 0x3, 0xb3a0, @time={0x0, 0x1c9c380}, {0x7, 0x8}, {0x100000000, 0x8}, @connect={{0xffffffffffffffe1, 0x5}, {0xff, 0x5}}}, {0x9de1, 0x0, 0xffffffff, 0x8, @tick=0x239, {0x6, 0x1000}, {0x4, 0x6}, @queue={0xa5, {0x3, 0x3}}}, {0x7, 0x39e8, 0x6, 0x1, @time={0x77359400}, {0xd8, 0x5}, {0x8, 0xffff}, @queue={0x1, {0xcff, 0x8}}}], 0x180) close(r1) 2018/04/14 15:03:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x2}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0xa, 0xf}]}, 0x28}, 0x1}, 0x0) r2 = accept4(r0, &(0x7f0000000240)=@sco, &(0x7f0000000000)=0x80, 0x800) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f00000002c0)={{0xa, 0x4e24, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0x60000000000}, {0xa, 0x4e20, 0xa75, @loopback={0x0, 0x1}, 0x9}, 0x41a, [0x0, 0x90, 0x9, 0x780cc88d, 0x5f22, 0x1, 0x9, 0x6]}, 0x5c) [ 226.739988] binder: 16978:16981 IncRefs 0 refcount change on invalid ref 26624 ret -22 2018/04/14 15:03:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') bind$alg(r0, &(0x7f0000466000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r2 = accept4$alg(r0, 0x0, 0x0, 0x80800) ppoll(&(0x7f00000000c0)=[{r1, 0x80}, {r0, 0x4004}, {r1, 0x80}, {r2, 0x8000}, {r2}], 0x5, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f0000000140), 0x8) sendfile(r2, r1, &(0x7f0000807000), 0xffffffff) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) 2018/04/14 15:03:35 executing program 6: syz_emit_ethernet(0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000775ff8)={0x0, 0x2, [0x0, 0xe8b]}) chroot(&(0x7f0000000000)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0xd0) mkdirat(r0, &(0x7f0000000080)='./file0\x00', 0xc2) [ 226.792721] binder: 16978:16996 IncRefs 0 refcount change on invalid ref 26624 ret -22 2018/04/14 15:03:35 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x15, 0x5, 0x0) bind$inet(r0, &(0x7f000001bff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x2) connect$inet(r0, &(0x7f0000024ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg(r0, &(0x7f0000001480)={0x0, 0x11, &(0x7f0000000040)=[{&(0x7f0000000000), 0xffbf}], 0x1, &(0x7f0000000180)}, 0x0) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000080)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f00000001c0), 0x0, &(0x7f0000000400)=""/74, 0x4a}, 0x0) clock_adjtime(0x5, &(0x7f0000000180)={0x100, 0x6, 0x7, 0x9, 0x200, 0x4, 0x36c, 0x1000000000000000, 0x2, 0x6, 0xb98, 0x5, 0x6e, 0x5, 0x0, 0x1ff, 0xf3, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x27abba55, 0x1, 0x3, 0x0, 0x100}) 2018/04/14 15:03:35 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7c7, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f0000000100)={{0x2, 0x0, 0x0, 0x0, "386aea20273dc03c3d18dd0dbd4a0ca15f9f580393cc4ec3b8ee256b9aa630224ba64c6ff43ee01d2996c914"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "eda422cd37591b3a5a7a683380f7e0b9e790c6b72cd0a4f3342f7431c1699a305ca3091bb2320e8df4e298a2cca26637866a68c1426ffbd8a6c7da1d8ea77d9d", &(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x13}) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x80040, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0x81) 2018/04/14 15:03:35 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x48}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000400060008086000511c0ae95c040de529e5025179aa8643ac432a791c73196ae54c0adde4d40d9733e83e689b02473f000000000000008be4d9820155c1550ccd089bed8c220d12a651d8b07e8a812ce243a35f1934f519ddcdaebfbf322dfe2c4650557e52dbc4b50377af6fb72dfd226af5848a5d428b8deb51b7a34d74e660c3007b3bf0d049fe690b1182daf7b72058bb61e9"], 0xe) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fcntl$getown(r1, 0x9) r4 = dup3(r3, r0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="ba2000edbaa000b80000ef660fd7e2660fdf93e18066b9800000c00f326635010000000f30baf80c66b806db838066efbafc0cb8d46aef8134a6f20f0198000066b9800000c00f326635000400000f300f221b", 0x53}], 0x1, 0x0, &(0x7f0000000100), 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="ee00580000000009000000000000000000a4abfc0d038fffffc20fa181b8640b80b3513b5eb451872f3b22b4d1ac433b2f9eb1a4a4dc23fc48c1a993b700a56dbf77feea861b0000000000000000000000"]) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x40000, 0x0) 2018/04/14 15:03:35 executing program 1: r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x1, 0x20000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x100, 0x0) inotify_add_watch(r2, &(0x7f0000000200)='./file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000840)=0x3, 0x362) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10800, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000180)={0x2, &(0x7f00000000c0)=[0x5, 0x9]}) inotify_add_watch(r4, &(0x7f0000000280)='./file0\x00', 0xa200000c) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x7fffffff, 0xcbeb, 0x6, 0x400, 0x6, 0x40, 0x1f}, 0xc) perf_event_open(&(0x7f0000940000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = msgget$private(0x0, 0x0) msgrcv(r5, &(0x7f00000029c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fac400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084d7dddd291effb2f9f4cd7dd494cd8f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002603de0d6a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008b0100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c64557af578e2119407547b13eff763c4ccdf62e77aaa4877badd7697fc86be3a7632cd838c8d342cf287d6fad0aeeaa68ae3146bb5b59e60fb66b41f454043d5761b05232a2aaac50f5177caae475ef90d4a88189ac5af1e04a597196ca7094530dad2ea264b8a3565c565ba5a599e6096a23d2057c37b87758814166f3c07a7b163f6ecb797cd20e213c9782beeb2a97db7d3a"], 0x1, 0x3, 0x0) r6 = epoll_create1(0x0) ppoll(&(0x7f0000005640)=[{r6, 0x41}], 0x1, &(0x7f00000056c0)={0x77359400}, &(0x7f0000005700), 0x8) creat(&(0x7f00000001c0)='./file0\x00', 0x100) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendto(r8, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'ip6_vti0\x00'}}, 0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000a7eff4)) epoll_pwait(r1, &(0x7f0000000300)=[{}, {}, {}, {}, {}], 0x5, 0x8, &(0x7f0000000340)={0x3}, 0x8) epoll_pwait(r6, &(0x7f0000643fb8)=[{}], 0x1, 0xfffffffffffffffb, &(0x7f000006bff8), 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r7, &(0x7f0000e8c000)={0x7}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000240)) accept$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000400)=0x1c) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000002c0)={0x0, 0x80000, r2}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000500)=0x6, 0x8) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000380), &(0x7f00000004c0)=0x40) 2018/04/14 15:03:35 executing program 6: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000000300)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffff}, 0x2}}, 0x20) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1f0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r2, 0x4010641c, &(0x7f0000000280)={r3, &(0x7f0000000180)=""/241}) write$rdma_cm(r0, &(0x7f0000000080)=@bind={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {"b7282277581088e029061a8d63f69dd2"}}}}, 0x90) write$rdma_cm(r0, &(0x7f0000000340)=@connect={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r1}}, 0x120) 2018/04/14 15:03:35 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89fa, &(0x7f0000000180)={"7369743000000300", @ifru_flags}) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$KVM_NMI(r1, 0xae9a) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000080)={'filter\x00', 0x45, "bef6b877dcd9d6d60da154eb488864f2ad2594cf410b62aad74a73c0782de0a36553af9bed4d68ce53912359720fd3fd48f97f25c9455a2fa40b107bcc08384b877036d585"}, &(0x7f0000000100)=0x69) 2018/04/14 15:03:35 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8801, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f00000005c0)="2e360f350f22d2c4e17d28ffc4c12dc6010e8fe900959c8816e014ab0f30b8010000000f01c1ea150000007100ea0f0000005463c4e3f55f90b4000000cb", 0x3e}], 0x1, 0x0, &(0x7f0000000640), 0x0) r3 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e22, 0x9, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0xc7c}, {0xa, 0x4e23, 0x5, @empty, 0x8}, 0x100, [0x9, 0xfffffffffffffe00, 0x800, 0x6, 0x10001, 0x7, 0x8000, 0x9]}, 0x5c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x1000}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000040)) 2018/04/14 15:03:36 executing program 4: r0 = syz_open_dev$evdev(&(0x7f0000d09000)='/dev/input/event#\x00', 0x0, 0x0) epoll_create1(0x0) r1 = dup(r0) ioctl$TIOCSBRK(r1, 0x40044591) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x2, @dev={0xfe, 0x80, [], 0x15}, 0xfffffffffffffff9}}, 0x400, 0x100000001, 0x5824, 0x30080, 0x80000001}, &(0x7f00000000c0)=0x98) setsockopt$inet_sctp_SCTP_AUTH_KEY(r1, 0x84, 0x17, &(0x7f0000000100)={r2, 0x0, 0x1000, "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"}, 0x1008) 2018/04/14 15:03:36 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x10400, &(0x7f00000000c0)="22d41ecaad54bb1abb5c3ff73ba420a7c7d0db6e9be40319f74280c510e9d76189214ead67396d7e48dbc063b1d2d1c86ce57b5d8e6ff70d86e30e126215c49ad7f697c2d18966ef1f093c2fffa701c02e99081c59cee352b93820daeff1e83a947125f563cc00354a") r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) [ 227.801298] binder: 17036:17037 IncRefs 0 refcount change on invalid ref 72 ret -22 [ 227.837805] binder: 17036:17050 IncRefs 0 refcount change on invalid ref 72 ret -22 2018/04/14 15:03:37 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000080)=0x7, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) listen(r0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@remote, @in=@rand_addr}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000380)=0xe8) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x4200, 0x0) accept$inet6(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000240)=0x1c) syz_emit_ethernet(0x230, &(0x7f0000007000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="cf2bb43c40b8", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @multicast1=0xe0000001}, @tcp={{0x0, 0x4e20, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, 0x0) r3 = dup2(r0, r0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@dev, @in=@remote}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000000)=0xe8) 2018/04/14 15:03:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = getpgid(0x0) fcntl$lock(r0, 0x7, &(0x7f0000000040)={0x1, 0x3, 0xee6, 0x1ff, r1}) close(r0) 2018/04/14 15:03:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x48000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:37 executing program 7: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f00000012c0), 0x10, &(0x7f0000001340)={'nouuid,'}) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x41, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x1, 'irlan0\x00', 0x2}, 0x18) 2018/04/14 15:03:37 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)="2e2f6367726f7570000478d081", 0x200002, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='nfsd\x00', 0x10400, &(0x7f00000000c0)="22d41ecaad54bb1abb5c3ff73ba420a7c7d0db6e9be40319f74280c510e9d76189214ead67396d7e48dbc063b1d2d1c86ce57b5d8e6ff70d86e30e126215c49ad7f697c2d18966ef1f093c2fffa701c02e99081c59cee352b93820daeff1e83a947125f563cc00354a") r1 = openat$cgroup_int(r0, &(0x7f0000000240)='rdma.max\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x0) 2018/04/14 15:03:37 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x9, 0x200200) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0x5, 0x697, 0x100000001}) clone(0x0, &(0x7f0000000040), &(0x7f0000bb3000), &(0x7f0000000140), &(0x7f00000000c0)) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x6, &(0x7f0000000640)=0xeb5, 0x4) accept$packet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000440)=0x14) setsockopt$packet_drop_memb(0xffffffffffffffff, 0x107, 0x2, &(0x7f0000000480)={r1, 0x1, 0x6, @random="0c610995e6e6"}, 0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}, 0x0, 0x5}, &(0x7f0000000700)=0x98) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpid() ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000008c0)={'ip6gretap0\x00', &(0x7f0000000840)=@ethtool_perm_addr={0x20, 0x7, "8b4c315b51c833"}}) add_key$user(&(0x7f0000000580)='user\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a}, &(0x7f00000007c0), 0x0, 0xfffffffffffffffc) 2018/04/14 15:03:37 executing program 1: r0 = syz_open_dev$audion(&(0x7f0000000640)='/dev/audio#\x00', 0x7fff, 0x4000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000680)={{{@in=@rand_addr, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000007c0)={'vcan0\x00', r1}) r3 = openat(r0, &(0x7f0000000800)='./file0\x00', 0x400100, 0x8) quotactl(0x2, &(0x7f0000000840)='./file0\x00', r2, &(0x7f0000000880)="e74ec587142f5d38a109d09609896a50df7666d62e8cd76ecac556a391d48f49288eb8ad83a4") ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000008c0)={'syzkaller0\x00', 0x200}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000900)=""/151) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000a40)={0x0, 0xbf09000000000000}, &(0x7f0000000a80)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000ac0)={0x8001, 0x1, 0x2, 0x1ff, r4}, &(0x7f0000000b00)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000b40)={{{@in6=@local, @in6=@loopback}}, {{@in6=@remote}, 0x0, @in=@loopback}}, &(0x7f0000000c40)=0xe8) ioctl$KVM_INTERRUPT(r3, 0x4004ae86, &(0x7f0000000c80)=0xfffffffffffffffa) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000cc0)={r5}, &(0x7f0000000d00)=0x8) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000d40)=0x1, 0x4) r6 = dup2(r3, r0) accept4$unix(r0, &(0x7f0000000d80)=@abs, &(0x7f0000000e00)=0x6e, 0x800) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000e40)={r5, 0x8}, &(0x7f0000000e80)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f0000000ec0)=@assoc_value={r5, 0xffffffffffffff01}, &(0x7f0000000f00)=0x8) getsockopt$inet_dccp_buf(r3, 0x21, 0x2, &(0x7f0000000f40)=""/69, &(0x7f0000000fc0)=0x45) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000001000), &(0x7f0000001040)=0x4) ioctl$TCGETA(r3, 0x5405, &(0x7f0000001080)) r7 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$TIOCGSID(r7, 0x5429, &(0x7f00000010c0)=0x0) ptrace$getregset(0x4204, r8, 0x1, &(0x7f0000001200)={&(0x7f0000001100)=""/255, 0xff}) ioctl$VT_RESIZE(r6, 0x5609, &(0x7f0000001240)={0x0, 0x7, 0x8}) ioctl$TIOCMSET(r3, 0x5418, &(0x7f0000001280)=0x7c728ad0) openat$dir(0xffffffffffffff9c, &(0x7f00000012c0)='./file0\x00', 0x200, 0x40) ioctl$KVM_NMI(r3, 0xae9a) ioctl$DRM_IOCTL_FREE_BUFS(r6, 0x4010641a, &(0x7f0000001340)={0x5, &(0x7f0000001300)=[0x80000, 0x3, 0x1, 0x1, 0x1000]}) ioctl$KVM_NMI(r3, 0xae9a) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x14, 0x2d, 0x4, 0x70bd2b, 0x25dfdbfb, {0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x80) 2018/04/14 15:03:37 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$TUNGETSNDBUF(r1, 0x541b, &(0x7f0000000100)) getpeername$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x1c) r2 = getpid() perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x5, 0x5, 0x10001, 0x101, 0x0, 0x8bb8, 0x38, 0x5, 0x5, 0x7fffffff, 0x5, 0x4a8, 0x0, 0x401, 0x2, 0x6d, 0x1, 0x0, 0x9000, 0x9, 0x40, 0x7, 0x0, 0x48, 0xffffffff, 0x5, 0xf, 0x1, 0x0, 0x10001, 0x5, 0x3, 0x4, 0x5, 0x8, 0x1ff, 0x0, 0x6, 0x1, @perf_config_ext={0x0, 0x9}, 0x10000, 0x9, 0xff, 0x1cb961016a5e5ef1, 0x2, 0x1d, 0xd800000000000}, r2, 0x6, r0, 0xb) 2018/04/14 15:03:37 executing program 6: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup3(r0, r0, 0x80000) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000000)={@loopback, @local, 0x0}, &(0x7f0000000080)=0xc) bind$bt_hci(r1, &(0x7f00000000c0)={0x1f, r2, 0x1}, 0xc) getsockopt$bt_hci(r0, 0x65, 0x4, &(0x7f0000001000)=""/244, &(0x7f0000000040)=0xf4) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) [ 228.975062] binder: 17078:17084 IncRefs 0 refcount change on invalid ref 1207959552 ret -22 2018/04/14 15:03:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = gettid() sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="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"], 0x5a8}, 0x1, 0x0, 0x0, 0x4}, 0x801) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000080)='"', 0x1}], 0x1) 2018/04/14 15:03:37 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc0505510, &(0x7f0000000100)={0x0, 0xffb3}) bind$can_raw(r0, &(0x7f0000003ff0)={0x1d}, 0xf) 2018/04/14 15:03:37 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x100000001, 0xfffffffffffffffe) ppoll(&(0x7f0000000000)=[{r0}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000100), 0x8) [ 229.019388] binder: 17078:17100 IncRefs 0 refcount change on invalid ref 1207959552 ret -22 [ 229.039615] XFS (loop7): Invalid superblock magic number 2018/04/14 15:03:37 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_bt_hci(r0, 0x400448ff, &(0x7f0000000040)="3c02b4f85568bcfe7cd4e2032bfda0937e82ea458e495ba84303f36f239e34f40c8d8823fc97d6d69bda19e7aba924e4e6abc24badfdc94d4a223cd5300f8873dc9cb9b7256a2bdb28214bccbac182067f1c7a510959dd4606cf190017df555e3d93b87f470404e7f0132633bf99fc402c2bd537502100cb6a83ee1397092510a2969d0807e38418efb38afbb2367ffde7ae10e6eb14f2d9c311ae45cf5555c77d522f80470695ebbfd1ceb88c3e03bb9dbb8d8660ae786169eb1e0e64b9e3866c7b563f22bda2c0e7b8146d0faeaf2dd203dc3da211c78e838fda054e57c17b426363600c0bad0ace1a9400828a017068a3") ioctl$sock_bt_hci(r0, 0x800448d4, &(0x7f0000000140)="b3a08a02b0c4af8621683175dc9f1e3eb5766b1332a64fad3fd7a0151108520cfcc0227906d8b8ce1e949b4a1fa654dd42d9d4b14d7de7971ff28704cb06c20dd1e0029ac8099a7eec58339e3255d19083ace62523dcaaf942773f8339af1ef5") ioctl$sock_bt_hci(r0, 0x400448cb, &(0x7f0000000040)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x101000, 0x0) connect$bt_l2cap(r1, &(0x7f0000000200)={0x1f, 0xcfe, {0x8001, 0x1f, 0x80, 0x7, 0x8000, 0x20}, 0x7, 0x3}, 0xe) 2018/04/14 15:03:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x300}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:37 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000389000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) ioctl$KVM_NMI(r0, 0xae9a) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000380)=""/241) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000711000000000000000000000000000009500000000000000471c2b44d8b2db223d30e9216dc006000017255a8979c830cadbb1ecc867a3619ddf4c9710bab0a0f8f0aac4c2092f632fc19db791a6d9d8a5f6a32bb50088ad8f291a03fb173bcf3c12669b0d5cb6faa73b6b5e7f217cdca3eb37da11f495bd480e2dc802869cfb637502fd3ac6725585c811d2e845615c31d1ef4997527eb601b2a5304c519d81636f2a4c1988d21207a6555f877942eb154ef5"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200)=0x9, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socketpair$inet_icmp(0x14ee, 0x705000, 0x400000, &(0x7f0000000480)={0xffffffffffffffff}) fcntl$setflags(r2, 0x2, 0x1) 2018/04/14 15:03:37 executing program 5: socket$netlink(0x10, 0x3, 0x1f) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x2, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r2, 0x4cbc}, 0x8) sendmsg$nl_netfilter(r0, &(0x7f0000065fc8)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000dd0ff0)={&(0x7f0000d3dc98)={0x20, 0x17, 0xa, 0x1, 0x0, 0x0, {}, [@typed={0xc, 0x2, @pid}]}, 0x20}, 0x1}, 0x0) 2018/04/14 15:03:37 executing program 4: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}}) write$sndseq(r1, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) r3 = shmget(0x0, 0x1000, 0x78000000, &(0x7f0000013000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000000)=""/246) fcntl$setstatus(r1, 0x4, 0x2000) dup2(r0, r2) [ 229.170248] XFS (loop7): Invalid superblock magic number [ 229.231290] binder: 17136:17137 IncRefs 0 refcount change on invalid ref 768 ret -22 [ 229.317541] binder: 17136:17152 IncRefs 0 refcount change on invalid ref 768 ret -22 2018/04/14 15:03:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xa00000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:37 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7, 0x4df4c21f68c11efc) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000040)={[], 0x3f, 0x1ff, 0x24, 0x0, 0x2, 0x4000, 0x0, [], 0xa3e0}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'hash\x00', 0x5, 0x0, 'crct10dif-pclmul\x00'}, 0x58) 2018/04/14 15:03:37 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) select(0x40, &(0x7f00000001c0)={0x7b52bfd9}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)) r0 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x2, 0x101) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0xbc, "987342a2de6295b7658c5199b889046270bf31120a215c9c45763806be4ea62343115735ebf2a6a85baa60e69339aba67f649ebce6262eddb1a9a7446e10eb49a6b894065d3016a2f235df9d41356b68e913567b0c65f066623b42fd0405d8adb08677f7703cd50e38a2bee84308423dc9b1579bd0121b3d2704e2f8e44ee3617433e2c2d2fab4ed17943998a3d606f6edb6d968c606380825f22256255b85cde08a423775fd1e912323f6f8aea751fad7b9178df9c8639891f7746b"}, &(0x7f0000000180)=0xc4) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000002c0)=@assoc_id=r1, 0x4) 2018/04/14 15:03:37 executing program 1: r0 = socket(0x1000000010, 0x802, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x1, 0x4) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000040)=0xfffffffffffffffd, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x8}], 0x1c) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80004}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000d24000), 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e24, 0x7, @local={0xfe, 0x80, [], 0xaa}, 0x10000}, @in={0x2, 0x4e20, @multicast1=0xe0000001}], 0x4c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}], 0xffffffffffffff53) sendmsg$nl_route(r0, &(0x7f000022b000)={&(0x7f0000f83000)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000003500)=ANY=[@ANYBLOB="300000001c000100000000000002000000", @ANYRES32=0x0, @ANYBLOB="0034aaaabb000008000100000000b3"], 0x30}, 0x1}, 0x0) 2018/04/14 15:03:37 executing program 6: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'mangle\x00'}, &(0x7f0000000080)=0x54) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @loopback=0x7f000001}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={r1, 0x0, 0x30}, &(0x7f0000000340)=0xc) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000040), 0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="a80000000000000000000000ffffff7f0ff5370152af0824f062dc4f5467a99ff877f43bf75dc6491be48e6e93312be94976e9a492d77d2e533bb09c5a1b5e20a81422352776462b12179c9df69e281ba5c690249e4f30299d2e88b97090e1f5c2ee32710e7a4d17426d2783a2e4d1e49fe9ebb724f6f6b1c3b0f3775c81aaa5a230f8a0e6989b858b2e0e2763985049c2f0f30a238aa435c6ef4514aea09d54330a5a0000000000d8000000000000000000000005000000fcf5d68a4699df7ef38e3898873cf3958e4d04ce19d01e3bc298fc6aa1af382cf30c83c955ac85f3c5ab0e819bb2a1c5145d8fee9136ea099ff2f43f0981304ba63edbf092913485487c2770fcfac2147099e7334cef9b5fcbf53145f9fba19080d22f8ea825c506b36ba9e592b24857b51db52c6c3536b92f0fc041dd69739c978d5c0bc8ea5aa94f4efa5e470003aca3b03ff7d60ba11fad392f711207d4cd0866d84302d1a85b52286ffb9eb58c139536e8a3a3a7699ac65dc74e443c9fc8a7e7d66bde00000010010000000000001b010000d74400008a3f34f58eb4dd3b9b744cb2c26c733e6948260a4e42b905a7400e6eeb73435b4b4b6f47f25cbdc855f1728c17e9ab100ce1e66b8af2522a0e86e095c67928e735f2d1091b86ded59fac980efcb640843795f5168a059c485d3450b324179a10694c4ae3dcfc2c9a78ae70740ca081b050c85e3e6b62a6717f7c427cc406347b2bd8b58de59c86567a8f80f670be88bed5588bf8de036ca6da2f446076f758dbc4df9c2778db42891b9acff3cdce73a84dae61c3bef350764cddfc9a1adc6e2018d7659f6a9c4d32b29cf97dd1b1c39807b162b00d1620687c5ae59844641bf8c07e0c524db4fa1be5535a1e8434c9f798dba9bb4ace82b7b0210000000000001010000000000000290000000400000024ca4f332afc2c7c22a96e0a7c7173e3c7cd0be231764b11a7ce208d1c538c7d4e81946ecc1d43dd040c148ee921db6f0e9622865af6ddabe31cf8df6eff3e53f5e5d80a9597358a8379975dc89d21a9f5001138a1869323f490a75be3b42f35dbaf268a28776b5bb44c75605c015d576e6d8032f289bdc31e14aaf4b5baaa44ae663310493335413f3ba92dcf140a57a91c1e340d936e240e43758ca18ff4944d91db6d0d56125b386cfac1ad8849d261d2865ddd3bbc5fe4505dbc04de38b800b5b2335af87d29a3d8f6cd01b14d5dad1b920d4a2d75b16a17b8e40f88a3112ea63e5b19631dea666a74f2c41e8584c0bdf79a8ccd2eaa0f3c3a60362dce95d8cb0b0f5f2124be23818b5c4fb93d7b9872c4ad7b2b00d81fd2e966e18812939101fc7df4394b181a0da66490eefce7cf76f0900c82a957723bf5b732918b76356c5d71cb9796a552cbf363bd7c2cabdcdff5f0a8a327ac4da5ad92e807d21638aade4cd316d245e56103e6c52bda3a831e682c326886d9472890d1aba771a449cb2b4987e4fc49da08c0bb0197a016cfa1b95e1ed014ca07b89a4ec66de5147230faf3d4b92b7d21c584f9c436840a1f532e23cb42a7c6804f060b2bf9d32daf5eff21d58cac316c84d20d0ccd3d7624635c24b2d63af9eda90c71f9d967db424aa1e987d9ad6b21289f77ba68149bf03113e53548a87e615dc250b7a3baadfc9bff80b5279d2177ddafe2aee58e9253cc1b815c3d1ebed800efac75271edce635c0f76017257daad196816d93eac3a0a82165f94f1ee35c7e289e240efa4e3584700b7660dcc7dca604ec4f0d3a47c003ee1522ec238ad5a352c24690c550762b1320edd41f4a56bcaf29035ceb99e4448d0fc31e27791405ef203951a828bc188c354976468be65cb779f386167f3a6c518640658fdf66d3e82fba3feb96fca7ab4ef654da98449f1662ece717db1484689c7967dc200dc92067aef36c60b946dd569b369d5c13f6af630c8851419b3091f1aa924fcb46167987c7b712ecdd5773a658e817796b883a8785043110f7607eaf7cf6febcaf97b44006aefd612ccb9f203b48a4e0ea5c1f70d800761c8083f8ddbc72878171d59ab4c1e69e8f4805007579da66c196cecdf15dc285ccf779420a24d6c88f9462b6a50910a4196adf033ac8163a844ed171edbdaa93bb0b2d1ffdd9a40aec0416073b191ea21312cc134e3646ab470b61ffa27b840c5dc33ad98f4bedad3f1d3f2290b116ef7d9ae0c181480e364286ba697f0e3539789faca999b7f2cdb8c6db13e90a7efc4ceb98de1c1dd70be1aa5937a6ace7ebc776f19853f21e01283df132fe6abffe5085f3d13bb24badc28211afe592882eef7e227210be2210e584a3c75b0b7d2d9a0cc77918d5a6dc2ad307d17a1f68cde18e96b592766cb31f3205d700f56b18a341f2545368a8741f81349179778bb81cb45aef6a62e30f2430f1674b6aac2e267b7fa4cd6a68a4f40544e2a781ff5cc2f2a42ab34cb4d4546ba340c7cbc49dc8169962cae4d242eab834da700e1dac954b7dc4398371959be21121299177578f560badd52476c682cab3f9b520a8b1f6df2e4d6f8b54048347fb0d75c99a60f393843239a7716b5710b3c090239cda9025bc45bbd066f293c1af598e8e09846ffd0fb81ff994baaa5fcbc863f744c5bd4fdaad00084161e085fd1c7e36713861f38a118528116857e4ec1b355a5659e2941202945adac5c1c87231e9373bb1ea080a57bb8605adf7413b1cbae122fd67075e4dba7d648642fdbc378cba0affc98939e5ace65104f7bf4868c4e70c462d27a98fcdba45c981e8a29b3f6de3ec726292b18ba1003f221bdf5573d3bbedca560c704f5fba33ea0a7fcbaa5e94ec3a19664a829b632e3fdca52bc5cbfcd595299548dec0e28ef1826e74e11f0b7fd960ea9e008227527ff80181f9290793d8134fe86a48acf738576468bb9cbe38f9fce0a4c649f2169b5215ec6a384f66586cd58e5610700100bac759c9a0c8b6446f29f70ed20aeb4064339c163821c48f9c1c0d91c40380bec16707e2829957d8896228e347b4886d41859f980242cffb9ccc195d72d5518696077dcd4c49d3f4c356944ba3911c4c7b31f1401f71b45097b1a30fad54bd74d355242739de6ee9ffe57a6a918946309c3562e374a5d175bb218dd7cae77941e9f146d283e65ccc20f9e5421967084b9398882ec79cd26a94d5a270adb2e5c3c5e33b60f10056fa91d02546f53ce407f2dcf9eb132c757ad0cff8c1ee4e836045b4a52030e39f16887de8b1873402102513e8eb6cd72834334f5400e3914c82715f4ceba6582e0e57b81c53d2eca0fd7c390ceabaf9812a9d2693f07b1d46813f92dcb82fd6177df2ce9f7329525ab934943868e74c5d01c234627a7f67a6cd52855c2d8e90b11b9b4af232088a854b72ba1d278a34903706d7d2b4384c38d0694ffa69326335627fce06c0cfde2d62395697a06a26daf8b0081265b29624defcd5c08049a3e0b1604fd19da367fe1d409bb91b6cff9bbdc3ace683acf369cb2eb9b39855ac06c4ffcda7b5e9333e5e2e0427a128dcc8f1df228d3f1cde29d0bdc581c06a7886db75ec9029755ba927fee29d1c82ee685d58de8aa2ab7b7fe2c32969b3f512f6ffb4b67cdf12f34642a8ad788d2d7711c7bf174ba2f750b6eab3c15255cf594a8bc6e5dbf60123b36862c6d220a79422841bc7077c0d06d7ab7d48e46a7ea6339a91e8a82f54a95c23266a58a7b4046b41123bad6055b843dc28a87557736625bdeb6034e4a2d2e79ecfd37f85352168c56a83b43adeffc3ddafda76b9e6c22d8c18aa9d1ba64fe78ae656ba33b899bca2370e251630d0dee72993203769206a4921a717e4709dd7891199ebf9a20e337dce6de095a02426bf84477d3cb5c4d72520ec902d373560ab51cd51b6db24a7a290182b1a8b3ab9d565abd273ebfbd08c48746e31d1392ba501af05a1311ec91d8c19fb3e7d33d07d7c2309d7fbf0d86843d3491c2cf2ac1b17250ddd59c787b120418d46c78c352f34ef7ffb738a4331c0a559640aff9b4a833bf019f2a2c4df60695588a8e7e6794b9d26c421fd8fb355400efdb8f20ec9877633f797f421046a8aa9977dd709a1d8cc8b888b541bf3befbed349457c869ef1094e22f9c9a590d40611875ef5459fe1bbf26de6330c07d86d787277ffd3f17bbc530b267edcbb2ac9a1938edd0261dc20ee909d017ae70d7814e688b89127c61fb0884c6212d7e8421974c176a290f6dc6798a5329cec7c09fe820266f987aa26f087045fcddfcf2a0c9796f06cafb4b3784191187277197d9faf8b89cf32cfc4c3c9ac5f480945ad920c7f617277ac22f4f4512cf296d5eb69fa67b501119363f75d697ae9b152956f50f95bddad5cbbe62895f8b877fc8f7777a05eb64335b91a8d83c7b23544ee5764334cf590f05fb5a92797d39cbf092cae4520ee55be9baa9b38a5be792dfe3b97837d4d1f3f12a280a8df3d5bae669bc8bc31ab24f5059b9009c1bdb0b099ee4854b427b2b4266643c7927613fe936623b2957b71fd13c66ba01e84b888403e48dff2a7a87fb2643d7e6027fb35adbefc29511f791766ac2ee741129e91e37d706ac68b2bbf2b86f6eaa840d8db368c46933b63afc8ff3fc9bf31993527bfb7ee8e3031f72f05b55cb9dd114889a0e471860faec20b57ff01ed5b3be3696ad0acad6a0c6864d34b65c050e1627ac3e4abd9f7f29c066bbd25e788f9d974ef357c3cc3bd5589772f439aebcce88a6568d2b6f410fa82681998631021ca0aae282b233db500f05cf7ca4a8c8c397c280b6b06ed9d10915a62d785b970a53c72f10fdb5cf8b0864c0b5998bf29ebbdbfc0fab2553ecf700ce83ef923f1416482d3149c0f24ea2ce4ccc4343cddc80646ea8e42195c5b71c5b5806005887cb9471df4a22a2a25546955e6449b53d8c9681bcd69bc9b2f1baf3bd37f9ea6c095df258c7cb37e9c31dfff6160968d024d653cc2fcf1658c250d5e70b0904924deecbdeb3be8cb455bcb5d160ccb3961a290222fee6221ada37210ebdb96884c023b34735e98718af2e9f88c135842495b8e4159554e81c278155b97c7d328d9a49438a6128c88f9687e045258746565e3737147d3264b577c89fe23a358cb9c0286fd0fd31393c5bdfab9baa0d5974b379a4da3b4e26074d5c41694199295d1e70e347acc89554943965eb3f488504680966d58b4ec6e9c147da974c472607c711d10ba4690028b8b56258e37b19bedc0ebfa736342426aa33772409bf67222a65dbb1ddb37aa5cbb376eed1833924785e5e56315808fd8b0fef48e8bf31471d6f50faf4ab6dbca31ce3fd4b2bcea45373197d1ce17e87391dd6ff9232e473dac2bbd817714b419a28b41161326a437b845107080b76ac85922270d249183b1b1e0e90222861aa16017bf8f4bf381cde9b1275dc46e1198e19f18dfdd25f6e42cd8febc1fe06a40fe0f0c364018bbf40030eadbe1862c51f89847c393f1b99d259b520f78152d7a5d31e6b800c4a1453ce708830f71d5af1dacfca715dcc8f0a60836fb0dc15ad5481129e6e50af51095cbba1e62cf156ba4f0bc364cee61c525c602aa2c6241f80333c13450915aead1e9ffc7be679a84f3a4ee989e698ba69be9071db1284342c79af1bccd183fee5aa1c8b20b68583ba71e0ef4a688d8deba76e5c0b01e310624bc588d3da5eec23197efc20489865bd72a0d28f8a3fe5ec81a4633e0f30205586ea1a43600e65d8486b9ff9ac37025ef681ba11baba36d8ed649c2aaaadcbf31af087b98787a4d19ddbe42cebdb536509bfb3f2df2c4279d1f4d941142fa4368d0f079765a384459699bebad856c8f4e4c8fccd6993d9ae0ce2c16b4bccb881d55ae448ecd536c2d47cb4061a9b2c0fc6e2db24e9900a370715a571b80fcc88916290fff5826247ef7619c399f83c2fa93b8f1ca0dd4a9b4de71cc9afbc87dd9a95314bab2544538970de5d077c9be720167649d1c2d6d71dee9c2eb522d488fbd5f9f6e25a4b330d99ccc0021ad2916ee3f1b4f62fa16fc8f2c953b60b19bc205d2037cf6df696527dfaaad2eaa5583ce311d0fae225fdf42523662071501a1fca844ea9491cf3ac28db976235da53cdaaf3daaa8239cbb3fa4853745202b6d4e5533e4ade3294374396f432a839dae363d946ebcfa5132297cf909aa87f6f49070adec08380b5934e11babf9c69c20d8ca23a7cd97d47006eb030061af1f1a9f5292f38ad0e5d0013ebcce1f7524ba4452d2e6127f155d1659edc68c5b12e8abfd79b5c056ea64a7cf2eb52d19ee67a1e5f635f63c42fd6da3817ca3e081d206da090a7601d4ea9faa6352c74db106117ce706744f79d09a9685fafde216f068b968393e516a548a51f944b0f14ae58c54657c37265acb77c4aa8d5af6e54a40c5141644738fe2a69d9f5440cc569c8e4c1ee1decbf52f77d1fc1cef16bd89550281be5a990449df1a009dfc9c08a6909546ae663b2db841d04ee1c97615403e877c55da868e4e73e1bffd9f80c7496c42fbbcbd8cada02934f98d8430a859f6c36b4a4d7f2bf921eb81728ff65f20f1c97941ea570015af68c20ebdff2f0ac27cf0348e1b2c6b2a0685d680878e8736306e3e96e85fcc29c3e957aaceb6d3c2bffb5b505f98e30b59189b8bb2bbbed3db1b6c89f7e3f9b23be071bf7082bf681b6c507e3a85bc89595106e9332ece51c3b0924800f29316a66f101e5f5b16b465fbb469e07"], 0x12a0}}], 0x36c, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0xa81, @mcast1={0xff, 0x1, [], 0x1}, 0x2}}, 0xff, 0x81, 0x3, 0x101, 0x5}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000001c0)={r2, 0x4, 0x9, [0x9, 0x10001, 0x81, 0x200, 0xffffffffffff8001, 0x6, 0x3, 0x2, 0x2]}, 0x1a) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000380)={0x5, {{0xa, 0x4e23, 0x3ff, @dev={0xfe, 0x80, [], 0xa}}}}, 0x88) 2018/04/14 15:03:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)={0xb, 0x40, 0xa9, 0xa37, 0x1, 0x1}, 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000001000000850000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000008c0)='/dev/autofs\x00', 0x141800, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f00000002c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000580)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000740)={0x68, 0x0, &(0x7f00000005c0)=[@acquire={0x40046305, 0x1}, @transaction_sg={0x40486311, {{0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x48, &(0x7f00000003c0)=[@flat={0x776a2a85, 0x10b, r3, 0x3}, @fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r0, 0x0, 0x2}], &(0x7f0000000440)=[0x0, 0x38, 0x30, 0x40, 0x18, 0xb86561711cbfe154, 0x28, 0x18, 0x48]}, 0x7}}, @acquire_done={0x40106309, r4, 0x1}], 0xd0, 0x0, &(0x7f0000000640)="5bbb559a421aa6d31bc243dcb80f2e3da2d3851374d5a81dfe9b4e1c388275bfc3c3dd7404424138be52a5ec99caccb36517083b6cc7b8b6b3fb6774966ca7d58ddfb08aefe493154f31d1b30ef2d52d6ad942736e88ae391e4fe302a08b886bea0b9f35f50ee831a793a100a41774e9b24d3b54173344ddc3c4e9506707975f7940376fd2352e2a2f7c4ce093706758bd6a007ccbbbf0c45a5fff57f51e49b9a419d9348ad6b771f775552e61bab0a1c6bce0d8b7be7801146a860a450f4499bdb473f870f728a3feb3fd14d987733f"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000040)=@raw=[@map={0x18, 0x2, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x36}], &(0x7f0000000140)='GPL\x00', 0x41, 0xffc4, &(0x7f00000004c0)=""/167}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x0, 0xe, 0x3b, &(0x7f00000009c0)="c9530000008000001ecf3e1b2f80", &(0x7f0000000940)=""/59}, 0x28) 2018/04/14 15:03:37 executing program 5: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r1, 0x3040}], 0x1, 0x0) 2018/04/14 15:03:37 executing program 7: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_dccp_int(r1, 0x21, 0x1a, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) fcntl$dupfd(r1, 0x0, r1) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@sack_info={0x0, 0x4, 0x1}, 0xc) [ 229.441372] netlink: 12 bytes leftover after parsing attributes in process `syz-executor1'. 2018/04/14 15:03:37 executing program 6: ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000000)={0x7, 0x8, [0x0, 0x0]}) 2018/04/14 15:03:37 executing program 2: r0 = accept4$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000180), 0x80000) write$binfmt_misc(r0, &(0x7f0000000240)={'syz1', "0d35c912e129f5aa0d64587536ff0a196f477402ae0cae45582d6330029db9aba46fc7cccb09da7a75352307302a74424ca47dc443547c5c88e95413b1fdb404edbba999e662042c8ad547fe6354519ccf0616e9fe72e76f02637a31885a382991f56eb23e7e0b65ed29629c"}, 0x70) r1 = memfd_create(&(0x7f0000000000)='md5sum^md5sumem0)th0md5sum::\x00', 0x2000000000000006) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000080)={r2, 0x2}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000000c0)) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_crypto(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=@delrng={0x10, 0x14, 0xc09}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:37 executing program 5: mkdir(&(0x7f00005b2000)='./file0\x00', 0x0) mount(&(0x7f0000212ff8)='./file1\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='ceph\x00', 0xfffffffffffffffc, &(0x7f0000000140)) r0 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x6, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x8082) r2 = syz_open_dev$loop(&(0x7f00000005c0)='/dev/loop#\x00', 0xfffffffffffffffe, 0x0) r3 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0x10, 0x800) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0xb0, r4, 0x428, 0x70bd2d, 0x25dfdbfe, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x42}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x100000001}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback={0x0, 0x1}}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x82a}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2b}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r5 = socket$rds(0x15, 0x5, 0x0) r6 = socket$bt_cmtp(0x1f, 0x3, 0x5) clock_gettime(0x0, &(0x7f0000000340)={0x0, 0x0}) ppoll(&(0x7f0000000300)=[{r0, 0x1}, {r1, 0x1000}, {r2, 0x40}, {r3, 0x3200}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x100}, {r5, 0x90}, {r6, 0x8500}], 0x8, &(0x7f0000000380)={r7, r8+10000000}, &(0x7f00000003c0)={0x77}, 0x8) chroot(&(0x7f0000000040)='0,file:\x00') lstat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)) [ 229.485110] binder: 17177:17178 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:37 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0xccb}, 0x4) bind$inet6(r0, &(0x7f00001c1000)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000400), 0x4) sendto$inet6(r0, &(0x7f00009f1000)='G', 0x1, 0x0, &(0x7f0000108fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0xd2, [], 0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}], &(0x7f0000000080)=""/210}, &(0x7f0000000200)=0x78) writev(r0, &(0x7f0000001600)=[{&(0x7f0000003640)="db", 0x1}], 0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x40, 0x4000) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000280)={{0x7c, @dev={0xac, 0x14, 0x14, 0x1f}, 0x4e24, 0x1, 'wlc\x00', 0x8, 0x43d585a0, 0x14}, {@multicast2=0xe0000002, 0x4e21, 0x2, 0x6, 0x20, 0x8}}, 0x44) 2018/04/14 15:03:37 executing program 0: r0 = socket$inet(0x2, 0x3, 0x2000000088) setsockopt$inet_buf(r0, 0x0, 0x20, &(0x7f0000000140)="da42577513a956736ff43af3", 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x3e, @broadcast=0xffffffff, 0x4e24, 0x2, 'wrr\x00', 0x8, 0x2, 0x63}, {@rand_addr=0x5, 0x4e23, 0x1, 0x5, 0xf2, 0x3}}, 0x44) 2018/04/14 15:03:37 executing program 1: syz_emit_ethernet(0x36, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa], 0xffffffffffffffff}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1=0xe0000001}, @tcp={{0x0, 0x0, 0x42424242, 0x42424242, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000000)={0x0, 0x3, [0x0, 0xfffffffffffffffd]}) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [{[{0x9100, 0x7, 0x40, 0x1}], {0x8100, 0x7f, 0x6, 0x3}}], {@canfd={0xd, {{0x1, 0x3, 0x4d2, 0x790e}, 0x2a, 0x2, 0x0, 0x0, "c9bd79fb66ea2d73f3cd082ade44b3678f477747bdb8e3ff352d43af89babae8ec885dca3bd78308d0077902c9936e453f887fe21c2a42c497a70ab1d0862a65"}}}}, &(0x7f0000000100)={0x1, 0x1, [0x1d0, 0x6bf, 0x6b7, 0x6c]}) 2018/04/14 15:03:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fafff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x48}]}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) [ 229.547070] binder: 17177:17183 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:37 executing program 6: mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1001, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000040)={&(0x7f0000151000/0x3000)=nil, 0x3000}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000001000/0x2000)=nil, 0x2000}) [ 229.602817] IPVS: set_ctl: invalid protocol: 62 255.255.255.255:20004 wrr [ 229.635736] sctp: [Deprecated]: syz-executor7 (pid 17196) Use of int in max_burst socket option deprecated. [ 229.635736] Use struct sctp_assoc_value instead 2018/04/14 15:03:37 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x60000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:37 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) close(r0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, &(0x7f0000c97ff8)) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f2147660f7fd466b92f0200000f32ba610066b80000008066ef3e660f3a0e663e9f0f0865660f71f1c60f01df670fae43fa65646765660f15e3", 0x3a}], 0x1, 0x0, &(0x7f0000000140), 0x0) 2018/04/14 15:03:37 executing program 2: r0 = shmget$private(0x0, 0x3000, 0x24a, &(0x7f0000ffc000/0x3000)=nil) shmctl$IPC_INFO(r0, 0x3, &(0x7f0000000000)=""/11) syz_emit_ethernet(0x2a, &(0x7f00006ba000)={@link_local={0x1, 0x80, 0xc2}, @random="e2701bb60589", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x6c, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}}}, &(0x7f0000ea3000)={0x0, 0x4}) [ 229.664297] IPVS: set_ctl: invalid protocol: 62 255.255.255.255:20004 wrr 2018/04/14 15:03:37 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x100000001) getsockname(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000080)=0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x10000, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f0000000100)) 2018/04/14 15:03:37 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000759000)='uid_map\x00') r1 = syz_open_procfs(0x0, &(0x7f0000c2d000)='oom_score\x00') ioctl$DRM_IOCTL_FREE_BUFS(r1, 0x4010641a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[0x5c7f]}) sendfile(r0, r1, &(0x7f0000929000), 0xff) 2018/04/14 15:03:38 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x2, 0x0) futex(&(0x7f00000016c0)=0x2, 0x4, 0x1, &(0x7f0000001700), &(0x7f0000001740), 0x0) r1 = request_key(&(0x7f0000001580)='pkcs7_test\x00', &(0x7f00000015c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001600)='keyring\x00', 0x0) close(r0) r2 = add_key$keyring(&(0x7f0000001400)='keyring\x00', &(0x7f0000001800)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r1) keyctl$clear(0x7, r2) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000001200)) ioctl$TIOCSBRK(r0, 0x40044590) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x6, r0, 0x1}) ioctl$GIO_UNISCRNMAP(0xffffffffffffffff, 0x4b69, &(0x7f0000000200)=""/4096) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000001900)={0x0}) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f00000013c0)={'gretap0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xc}}}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000001780)={r4, 0x2}) fstat(0xffffffffffffffff, &(0x7f0000001240)) r5 = gettid() capget(&(0x7f00000014c0)={0x20071026, r5}, &(0x7f00000017c0)={0x5, 0x5, 0x4, 0x9, 0x4, 0x7f}) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000001480)={0xb, 0x8, 0x7}, 0xc) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r3) epoll_wait(r3, &(0x7f0000001540)=[{}], 0x1, 0x9) socketpair$inet(0x2, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_buf(r7, 0x0, 0x21, &(0x7f00000012c0)="e81392d30512f562c5eaf0fb42f9a14c681fdc531929362c2b72afc64e0dfda1a6364698bee65cd4a235f8c0ed7fc181dcf0fa0c70eb7a9fe240ec912218d18ec7317221a245cbc82634996e800ed66f893e0d78542bbf6621112296a15f5be8a5802c7316ac8e5f706c2492971070d871e70c06f6a1dea5e82f0c6682be19c379393552df27d3b6885e5b8d8f22cd22cf69d9a09660f25cee8197991525defc8ddcaa2db026e234b23a751df1bc34d75d6f88da6abcc06615ff69f74f36", 0xbe) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000140)={r8, 0x2}, &(0x7f0000000180)=0x8) r9 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000001640)={0x4, 0x70, 0x7, 0x7, 0x4, 0x3ff, 0x0, 0x3, 0x2000, 0x2, 0x62, 0xfffffffffffff801, 0x1ff, 0x20, 0x400, 0x20, 0x800, 0x2, 0x8, 0x8, 0x7, 0x80, 0x1ff, 0x1, 0x101, 0x8, 0x101, 0x0, 0xfffffffffffffff9, 0x9, 0x80, 0x81, 0x101, 0x4, 0x2, 0x4, 0xa, 0x6, 0x0, 0x2, 0x1, @perf_bp={&(0x7f0000001380), 0xf}, 0x7124, 0x3, 0x1, 0x7, 0xffffffff, 0x3, 0x8}, r9, 0x10, r3, 0x2) ioctl$PPPIOCSMRU(r3, 0x40047452, &(0x7f00000001c0)=0x20d2) [ 229.764319] binder: 17211:17214 IncRefs 0 refcount change on invalid ref 1610612736 ret -22 2018/04/14 15:03:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000f75fc8)={0x0, 0x0, &(0x7f0000805000), 0x0, &(0x7f00002e7000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x1, &(0x7f0000f7e000)=0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) io_submit(r2, 0x200001bc, &(0x7f0000738000)=[&(0x7f0000f73fc0)={0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, r1, &(0x7f0000000000)="16", 0x1, 0x0, 0x0, 0x0, r3}]) 2018/04/14 15:03:38 executing program 5: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f00000002c0)=ANY=[@ANYBLOB="b5"]) r1 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x5, 0x70, 0x1, 0x2d, 0x7000000, 0x8, 0x0, 0x2, 0x0, 0x2, 0xe4, 0x5, 0x3, 0x1, 0xd388, 0x1, 0x80000001, 0x8, 0x0, 0x101, 0x6, 0x7, 0x3ff, 0xffff, 0x1, 0xffffffff, 0x9, 0x8, 0x4, 0x81, 0x1, 0x60e3f0db, 0x2, 0x9, 0x7, 0xd96b, 0x6, 0x7, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000000), 0x8}, 0x20002, 0x1, 0x9a, 0x2, 0x0, 0xfff, 0x7}, r1, 0x3, r0, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) syz_open_dev$urandom(&(0x7f0000000080)='/dev/urandom\x00', 0x0, 0x8000) [ 229.848631] sctp: [Deprecated]: syz-executor7 (pid 17196) Use of int in max_burst socket option deprecated. [ 229.848631] Use struct sctp_assoc_value instead [ 229.863391] binder: 17211:17227 IncRefs 0 refcount change on invalid ref 1610612736 ret -22 2018/04/14 15:03:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x400000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/37) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, 0xffffffffffffffff, 0x3f) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000024dd2ead6bd8ff"], 0x1}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x81, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x24, 0xfff, 0x9, 0x2, 0x2, &(0x7f0000000000)='dummy0\x00', 0x0, 0x3, 0x17e8}) io_setup(0xffffffffffffffc1, &(0x7f0000000540)=0x0) io_cancel(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0xffffffffffff0001, 0xffffffffffffffff, &(0x7f0000000580)="bbc736d42a7146ffd6013dad6eb5a3c26fa7447eda9dc2e5adb27ff9452a620a05dc61ea30741d040aa6b78048c7a60c9e71393c04f3381c3192f0c87cb59f0b099f0574c1bfa7c6ed8df8bb201bd5bbe0b323f05956521553544665eb1f4d4b6b19b0bc3c2ff74789eb89832976e645d8597cefac9c24a3da8b82c3d66a16370907fe03fef0fa520d984b3f23e40ce7c12a98d2444fb303337921eef55965489f0cbef6f8e1b89f6cff", 0xaa, 0x5f7daf49, 0x0, 0x958f628912e0fdd4, r1}, &(0x7f0000000680)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000006c0)=""/24, &(0x7f0000f08ffc)=0x18) munlockall() ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000740)={0x7ff, 0xfffffffffffeffff, 0xc000000000000000, {0x0, 0x989680}, 0xa91, 0x1000}) r3 = syz_open_dev$sndseq(&(0x7f00006fcff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00', 0x7fffffff}) syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000e94ffc)) r5 = dup3(r4, r4, 0x80000) r6 = dup(r4) r7 = shmget$private(0x0, 0x2000, 0x502, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000880)=""/131) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000002c0)=""/56) select(0x40, &(0x7f00000000c0)={0x400, 0x8000, 0x9, 0x9256, 0x61e1, 0x1ff, 0x7, 0x7}, &(0x7f0000000200)={0x4, 0x4000800000000, 0x3ff, 0x7, 0x0, 0x1, 0x806}, &(0x7f0000000240)={0xf0, 0x59cc, 0x4, 0x3, 0x10001, 0x2, 0x3f, 0x3ff}, &(0x7f0000000280)={0x0, 0x2710}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000700)=0x2) ioctl$TIOCSBRK(r6, 0x40044591) dup2(r6, r3) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='#security\x00', &(0x7f0000000340)='/dev/snd/seq\x00', &(0x7f0000000380)='IPVS\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='md5sum[\x00', &(0x7f0000000440)="5ee000", &(0x7f0000000480)='dummy0\x00', &(0x7f00000004c0)='dummy0\x00']) 2018/04/14 15:03:38 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x1) bind$inet6(r0, &(0x7f0000f61fe4)={0xa, 0x4e20}, 0x1c) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x13) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xf8, r2, 0x104, 0x401, 0x25dfdbfb, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x58, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3ff}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x54}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xe80}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x97}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xff}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x23}}]}]}, 0xf8}, 0x1}, 0x8800) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0xffffffffffffff66) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000f67fe4)={0xa, 0x4e20}, 0x1c) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r4, 0x4010641a, &(0x7f00000000c0)={0x3, &(0x7f0000000080)=[0xfffffffffffffffc, 0x7ff, 0x7]}) 2018/04/14 15:03:38 executing program 6: syz_mount_image$msdos(&(0x7f0000000280)='msdos\x00', &(0x7f00000000c0)='./file0\x00', 0xe800, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="80"]) getxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="73656375726974792e616666730053d8fb9ab2409875f2dbd4b7da48d4d08b4ab07499feb5e59a0424"], &(0x7f0000000ac0)=""/4096, 0x1000) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x40) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x800, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000002c0)=0x4, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000300)=0x101, 0x4) lgetxattr(&(0x7f0000000480)='./file0/file1\x00', &(0x7f0000000440)=@known='com.apple.FinderInfo\x00', &(0x7f00000004c0)=""/214, 0xd6) mount(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)='affs\x00', 0x3500a5, &(0x7f0000000ac0)) syz_fuseblk_mount(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x5, 0x32241) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000040)=0x81, 0x4) [ 230.032880] FAT-fs (loop6): Unrecognized mount option "€" or missing value 2018/04/14 15:03:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x8000000000000802, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000080)={&(0x7f0000000100)=@in6={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x9}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000d40)="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", 0x57d}], 0x1}, 0x8000) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000d00)=0x4, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f00009f0ffc), 0x4) 2018/04/14 15:03:38 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x7, 0x200080) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc\x00', 0x80, 0x0) r2 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}}}, &(0x7f0000000240)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000002c0)=0xc) socketpair(0x5, 0x80e, 0x800, &(0x7f0000000300)={0xffffffffffffffff}) sendmsg$nl_generic(r0, &(0x7f0000002600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100020}, 0xc, &(0x7f00000025c0)={&(0x7f0000000340)={0x2244, 0x3c, 0x800, 0x70bd25, 0x25dfdbfd, {0x20}, [@nested={0xc, 0x6b, [@typed={0x8, 0x40, @fd=r1}]}, @typed={0x8, 0x4a, @pid=r2}, @nested={0x2060, 0x8b, [@generic="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", @generic="eaa5b0bed537ecdba3c4015d6a42dbcc5eceb5f5c11cd7eb0a186f1b429c9e546abf462e5c4d9ab4ca52f7a036adbea0819db84686f0aa19ed038785f6df05944a36dab40c04dd133720da6fec952d34443d83ea2a7455ffc77c050defdc645b786ce6bb4a9df2f8f8e7e7944f307219589d4a4e74cc21486ba778eef0ccd7bbfad8e70cd4cb14a8680c576204cb436705ef9bc462bef63f1ccd770b5e99e70986e84da043b00b00aa170f0a9dda4a8417c82ed1c622463923f46012c2d6eac2de050556983bfee39c09f8d11df955ef0b762d987bb647f73e095678403a5e2608f766947fac72386737ba23a989a5034a471d0bfbf79242a2cb7029db38ba0acb77819606fdb9879cd906b376f9e98ea2aa86900c2646aef726ebc83582961c9e1fa75dfd2f0c16d572ce1a1e981678999eb30615db7ff05e59fbb499178ce263a9cfcabd1d15bbfd2360a2346a32a2756e20edd26bd11f7d2c6e150af7b8b52d91c5d6e5d1e2e10f1de772715cff15f63265b7478357ec3ba9700f8b8c3defb36988253f7f759b80844523883213cdb3d8c159a47dde3c72ccc3f4be8c36f7a2b51f9004c7c9756dc22b62d90bd92b9f459aa6c595e5224883fcc1ae8ec662a2259f2223f4a99bf07f0c1cd7eff9290d219cc4e5fbeff862bb75d9d4ba1472708d35854602c621c9b05014704ef33a6f2263a2808fce52a6f3397002d017b8a80b85902a6c391456c3b87c8ae3a9a2fbabf6833e227d85a922ced10dc6e1e7395dfb94bc2b48e7429cc552107f22f87d1db7b80e695399e8dec18af8c5108ebfe38b93359acffe443c40872f902556eaa9878365d4b391c6ba412c7bb3241c48262df524be4675e37f8ad957e6c41684e38786f2bcbcedf97f38290e10b169d43d60c104e137223e3249a7bc4a2dbe8d6cb00e16ea99639f07093b038dc75e038e8ccd5d8190165d4d3bb08aebc17b3526a0490459c691f272cf1a3f3e6752988600e443b78edd0930184cf120a81e00ec7314ef453c1443696dfce8aeaaf302f52d718ff9a45704b91d7aa417221a610c5197433d41e3ef41bbaead57577922bdc2a6528b90786ab5fdd64a4c552f80d7dc4bb370a55c09b6d67a5374a587a801028fbe3c06198ea2f3ecca63b6ec5e66f5764a032386f19914068d6ea52af0e3b2376481a2bad0a2026b139ec85bd5ddef878bc7dc71cab4661bc0e99bf0cd6c408d801e5b506acd6db8256541c7c7ceb6391b6b6c3e9bcf47bf5bed0362362c4084b6ffd39260c89957c225884a078844769c83d2967b3ae7e3bf482c91685c366e2c2ba69687ffaa3da635303dcc237b5e382fa10e43cc6346a742a1ee0dfbfc851be73ad6aed9e541773e535d84fd3d47679ba3c9877a3fa3d92f0f5b878811b39365e0bc98888cf62efc7b5eccc34ed1ee6e361724c8aedb06db0fc5cf809c565e0db3afa51aa395b98783f7bebd63883b38add8fc6776ab6410aef7541ffa003f5c0c96db15d3ad6a4c9eb3a844c5e78bae3568d5047bc7a6ded5267a93eb3c781125ec3641ae855580a9154d538532c633d448ad0913043b2b5771665b6d19f3c4dc32358231f0fe698c979cc4f07faffea40572389e7b7f074c7b24c26272656453afdb6121583e7ee68080ede44eed0a98bb712152921cd3b4482d921c79106c8216d2bbc11674e49e173aefe09b42dfbd6c51c92b25f0cb527863f9199f1d7fa4848dcda5ba2d6b5925d29482ef41d8d43455e702f35128a8289be5bf42299ebde2fcd122fbee06ee9dc83897289d2dc97fc4a1c48f83f55a7fec5891ac537f8493645f7838c7c75644ec6fcaa1af249ea5227534e2d420d91c7ebfa1a63fc916b70814b468cc0c2eafe4c834e9457c704f004912bb5c143fa0a8d5b655e12f053921f27e1fdfc9f93733cc2a2f7abaf4152df2f05bdcacfaccd20ff9d8be57ac3efdabe05d51915ad84843a720899920e6e80bfd8464a4f034989e53aebcb51733a8662569de35f3aae21938ad7689eb4449f068afc7e4a8d764332549d090c4695e748c6631e52e8a261c1aa741ecde4cca39d782000fd56c837a7c60ba9e30273abe82518a329219471933350b89be4053d58d01a830ce8f52121838ee156b35fcee3ec519da72afb1df5c5bc6fb35381de3b4e1441a9756f9fea6c35444c4507f6edf6ac5b43327a367b7cadcf48dc75fc7a6207b68b6633fe9f4e688eafa4d7f07b6ac21287e5e1abc070941e3939d3148b88d97dc68b637f67bc74f253908d88d3f40b7d8730b64f7a7a5c317462902d0ce85fbef8ec8b8d022893d2d69992fd188aae260a4b989359735106c2fa8a67357456e0088aff84243e67d952ffbfcbbb967d0035798795d86de5df11ded37232ecb48b45c6e3dce56b1be9c762185f775bd2f70faf52aea65ec7ca4d872737178c892885694e593350d6c1e1e13cffc29d6eb8ca7723073f92b5f5fa4a360d8390158d7aeb6dca98c99995e399aa2752ecc7f8fb14f7d3661064386d0dc564f815b98ce23a042cd596cc8491108f4dff929c6e232d145d99ae9a311b11519ab94d035172d9621bd07d44a80791b940582d38bd48d88f8c1d836be5d1f4f3482fb08d4c9501a44d9fe30a8ffc68f6e5444a693857930efcf1e19f518a5fdaa9d1dc33612585f64f5a4fa2447abab897a08954c52337a388271d1aedbd38c0e64b45dcbbc7c22782bdcd7ff262338bd5adc23519daf6c782c2c8963ede530450e77167c10a3006e2fb3670e622a3fdfb6430d9541eb8f3a68fdd06bb2b1a4147652526a2a3dcc0524c2244329e2d51d53cfc95aec609ed88cb4bfa68c05071fcc808e7bdbc03f108422b6e077924d09864118364c8190d01557032284a2828a0a24f5b128661682a280319608ef2e50e3b6b240c65849bd5c759b59a695dc41cc61f9389b4fb54cc23a5488d338ebd49cfc1f03c73174b054f2125e08c0ccf022072b045a63df9b10fac64b29921b3e734714e3477902faa035c52bdd37e373233588c12adc732f9692725eba68246c8a07e2776939fcc61cc080efb20f0b732f9a84fd03b673632d68fabca9295293c510d5854a1b96de7f341eba92c4558176e77400ba54e763f3f47baf9cf6bdbd844f2feeef1c08f815d5777f558c2d0fae3b3efc230aa3605cf23bfed54ce1759d2035b20ee3c6029d59d39072d1884974983dc9e29c59e11c733255d68801c3d9335091d274399d97637fa7fe64c97137518acc92babf5e27c615a098a62879ffc75466ab1e9000e88efdd56e7a63a0c9ac483b965b3eddf36ae1b978ba64d86aa24c86e00d802946ee99b42d7699c40e9d55f6b17e0d1e3dee8c7097a262421eee86bab6a9e016fc163e4d1c06e96bbfcedfe207e8bbcf530dfd0e3de52cc26c4cfb6bf3fc224cc97f36830fcf82d0005a3df9a5005ab9cef10a0068cda410f50326588b8cae353c632758dbf95ed48ecee59fd664606fddb0dc1d802233a9c51d7bfa7aeb43b6810de9935499a15bda488641474e81fe9c10f9be2a0116a718448891309e4226d12ea017d2615b452afaebf22e315cf1de7559fab3ab8fe32698eadb794f14850da5d7203a07cd103aefaf6135d3e26950fe71e2d23d437fb445e7cbb822f4285cf832c8513cbb9ecc51317ea37724b5c30cd226b84498b66f9306359c3533cb92b2116ebe80da3158f91d28461f1e044bfccf10467a801f0626d3a177414f2375401111131a2c6d66149faf20cc2c83972eac463d4b57cd21720ea53b50a51845ee67a4a41926f823668597bba949e4871e0709bcfba41ecc205d052b19b0aface04f12c135bec617210881bc6b27be3003af50ebf737d11ca3b12c18d85e01a4a2dcb954639556df4edea6d6ed1bd949f36ba4fc79062b63bcc0ef7a43159dbe1d00acce357445429c418b47a3026f8fcceb494025f52155007f350dc40fdb26fd30ecbe092c05ca9a98a43060b2087988547316f8c4525f69de9f7d3dcbf83ec77ec76eff4df2bbf3410ad55c82511a97f6081432b258be010340626a7ac20f969c45f8418e0d4ead5de9d1f5164f3ec407e8f6c043b364a98af09c80bcb568cba3cd7410ebb77190f3665b37a076e98ae0a9b73b932c34bb7a4acdb1cd141294031bc0a0eb207969ada500792e988226a8e05e09f2919b6fed65a43bd290d320d2348056bfb2bc21160e843937ed9d3851e7b52477ddb59edbbe2b9d8224d56e50cc57d462f7a0fb86b914d4a7b20ea1b11a9e802602a3dab9d2a3f83ae4597f777a737f490686a0b665f0d4fce38fc81d687a72456a4969f4cd18f5d93ed3b625c6429efa83ef3a9f559a6d34ed8c021ab00ef1b3f1224694139073163415631ca90db8539f9ae5aa25edfe3b68093786a8c884a76536438472a817825480baaec9697078dc53aaf33271be5c5937689050f08824b5a63888d638e67a23f516e442efc4d07ea2140abfc37fe90db4daad760bb8909ffc585bac89505ffc6e1c5332e673d95f7e663a1ec2f2669021e4bbbb6059565ab4809e49da3444c14a93946660383a4a8ab9983385c3401e8da23119af0075c6d98fc28e50d35cac2eae4a6401e291def1544dfb8b5721195282b48e17aea2846aafa1c109b9eceda076465633c57949692971757cecddc10361893376189d1627e3a6e27fa183a9c3dfdbdf9e38385d8b52eab1383fb30941830710be7a701627a167b82df86ed89068bb6f14a448924001ec6b00ab4d5f278107182213e4b65b5ad52568039cf98509e454dd3ccae90178cecb16aa8712216b04eeee5e91cdddd2e001f6819a825667544f591c8dee503fddb836ebeff4ac4989fb3ab41730e880b387fc8f7827d532a11c7558aa4b933e6331080ca179936524676499cb986082a79c883cb47526bd29b3fdef67a5071169703ff0848386527c8b26a4eb9ff414a935b34279a8ea3170a52a9ab8e756cdf61ec5f04946370f58029f950fc6996b9f1bad586c33ad569e752e02ce1bee1754a13b38526f134956a55f255614b9568e16b04e7db0e1d5960a8936cb59373df22a1bb78e20e215c690041515eefb6711164eba648877924f5ee521721011ad5a7c8cd5aa7d7a41825af03ba7eb6df9d48f633a90a7df9efc7b986c1a6a5712c0c5f965e62bc2a3725ec723a71453f645e6c0efe95ac94632478de8e281087c287a6e2a6f2684701863400c0eb035e5526e2c4d1f0558c8f396b48e53b11693a5a18638f7815f5cda69a11cbee18e18b10c488a602134422e8ed8dd761e4354b5185be495ebdeb70e1a3b21a50dde90e7a257b91479996b946b50f7238eb3fed46db59c4f2d8298a77b5eba3ab540b179806e25ecb8628a413f7579f48e2cd38a620d13e98d176912fece855d839c8d612fd67ffa9d03a8afb7dd9970e0cd518a13daf16d0b5212ef450bfffca4e9facb42fe7764bdce2c79c87395f3064249639c6d6fd4b60a2b20660c87a5dcbfb26f643578c24bf4c097b62069841014df6e507c41fb930868d272933682414efdf43f667c0faa0a9d821096008133663ea77e2674f82addd056f0c1fdff092270345673dd03ff8f40df2d07899e4fb22150521a7aac47865fe116aa9845ae0cebb80ea422317d8a43b1b8a66c06c05a5de4c7b7d09d818c39311ced69ab53f12355ab9af566ec5232066737c910f54cbc491e8e47aec0c32366cf1f67270b0e6786d1fd2dc4256024b41cd40906cdf4a3e3828c109f801d87f2a6d841125510d370129fc189104b411c0fee352b649405fda01f5a03", @generic, @typed={0x8, 0x18, @ipv4=@loopback=0x7f000001}, @generic="9a573cc2b819dfc3e65272e019913348bd9bcc272e195d825c8d72e26410f5daa3820ca8a14e69dba393f41454aa9d88e8d6944a65f7dc767e3e67a3f51f9ef9f1dd699e735ba85e8fba7e41280ff6f59df1bf"]}, @nested={0xe8, 0x58, [@typed={0xc, 0x5b, @u64=0x5}, @typed={0x18, 0x7e, @binary="9bcf68ae750c4886b0b48daa218ce682db79"}, @generic="9cc1cc", @typed={0x8, 0x1e, @uid=r3}, @generic="d01a9dc4d6091ceb5c6a954774467a45da9e2b756bae4c0689b6ba1b5e72193e9fb4080c09f5af23813a8d563993ea95e6a5af2b0ced31d3c34b16cb834f6055a9c5eccbf735ad67c7595b583094420af57ca7555a33d49deb84ea84ce7e58ec63c9e43cdaa5801df0e43e16d319792604ec6187b620001f260d66a39352108861fc447224df67bbeb1fa770d4c65e3f2055432b2a9725eb7e440143914d574b8ff2b7cf110c0444f058e47e5aa40379b54a83"]}, @typed={0x8, 0xa, @uid=r4}, @nested={0xcc, 0x35, [@generic="10cdc326e1223aef694f3ed9c9bb39ecbf89ebb7d62cf5893e29f5b8f56faf0506529ab60c182e83355792a20d38785d81e7985e1e6b1aafcb08361faf42bb04da0d24057010a2da09ac2b3b989cd013952c662bf145ef18f5d3666bcc64b3a321262a57c3ac2e3b723a6632f334c33f5344f2cb6c67fca96fbe0df46804342ea25179ff7187c15d21009acec19221408a8fc63e9a369c08f497c052540aebf6896653e99ae26a9ecae041a5001320dae76dcae76eed97", @typed={0x8, 0x42, @fd=r5}, @typed={0x8, 0x5, @ipv4=@multicast2=0xe0000002}]}]}, 0x2244}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r6, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x9}, 0x14}, 0x1}, 0x0) 2018/04/14 15:03:38 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) socket$key(0xf, 0x3, 0x2) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x0) sendto(r1, &(0x7f0000000180)="f7776a259dd15ea8ee69cb06ed0462ad7d80e5a997631cb1bad722712cf9ae", 0x1f, 0x0, &(0x7f00000001c0)=@l2={0x1f}, 0x80) 2018/04/14 15:03:38 executing program 1: r0 = socket$inet6(0xa, 0x400000000001, 0x0) r1 = dup(r0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000f98000), 0xfffffffffffffff3, 0x2000000c, &(0x7f00004a5fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) dup(r1) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000572ffc)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000000)={0x3}, 0x1) 2018/04/14 15:03:38 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x5000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:38 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x400000, 0x0) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000200)=""/37) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x8010, 0xffffffffffffffff, 0x3f) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="000024dd2ead6bd8ff"], 0x1}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x81, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x24, 0xfff, 0x9, 0x2, 0x2, &(0x7f0000000000)='dummy0\x00', 0x0, 0x3, 0x17e8}) io_setup(0xffffffffffffffc1, &(0x7f0000000540)=0x0) io_cancel(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0xffffffffffff0001, 0xffffffffffffffff, &(0x7f0000000580)="bbc736d42a7146ffd6013dad6eb5a3c26fa7447eda9dc2e5adb27ff9452a620a05dc61ea30741d040aa6b78048c7a60c9e71393c04f3381c3192f0c87cb59f0b099f0574c1bfa7c6ed8df8bb201bd5bbe0b323f05956521553544665eb1f4d4b6b19b0bc3c2ff74789eb89832976e645d8597cefac9c24a3da8b82c3d66a16370907fe03fef0fa520d984b3f23e40ce7c12a98d2444fb303337921eef55965489f0cbef6f8e1b89f6cff", 0xaa, 0x5f7daf49, 0x0, 0x958f628912e0fdd4, r1}, &(0x7f0000000680)) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x482, &(0x7f00000006c0)=""/24, &(0x7f0000f08ffc)=0x18) munlockall() ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000040)) perf_event_open(&(0x7f0000348f88)={0x0, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000740)={0x7ff, 0xfffffffffffeffff, 0xc000000000000000, {0x0, 0x989680}, 0xa91, 0x1000}) r3 = syz_open_dev$sndseq(&(0x7f00006fcff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00', 0x7fffffff}) syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r4 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x0) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$EVIOCGRAB(r4, 0x40044590, &(0x7f0000e94ffc)) r5 = dup3(r4, r4, 0x80000) r6 = dup(r4) r7 = shmget$private(0x0, 0x2000, 0x502, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_STAT(r7, 0xd, &(0x7f0000000880)=""/131) ioctl$EVIOCGABS2F(r5, 0x8018456f, &(0x7f00000002c0)=""/56) select(0x40, &(0x7f00000000c0)={0x400, 0x8000, 0x9, 0x9256, 0x61e1, 0x1ff, 0x7, 0x7}, &(0x7f0000000200)={0x4, 0x4000800000000, 0x3ff, 0x7, 0x0, 0x1, 0x806}, &(0x7f0000000240)={0xf0, 0x59cc, 0x4, 0x3, 0x10001, 0x2, 0x3f, 0x3ff}, &(0x7f0000000280)={0x0, 0x2710}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000700)=0x2) ioctl$TIOCSBRK(r6, 0x40044591) dup2(r6, r3) execve(&(0x7f00000002c0)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000300)='#security\x00', &(0x7f0000000340)='/dev/snd/seq\x00', &(0x7f0000000380)='IPVS\x00'], &(0x7f0000000500)=[&(0x7f0000000400)='md5sum[\x00', &(0x7f0000000440)="5ee000", &(0x7f0000000480)='dummy0\x00', &(0x7f00000004c0)='dummy0\x00']) 2018/04/14 15:03:38 executing program 6: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @time=@time={0x77359400}}], 0x227) munmap(&(0x7f0000012000/0x2000)=nil, 0x2000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000000)={0x0, 0x24, [0x20, 0x3, 0x7ff, 0xfff, 0x0, 0xd2, 0x1, 0x378d, 0xff]}) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0xffffffffffff562c, 0x9, [0x7, 0x40, 0x0, 0x80000001, 0x4, 0x8001, 0x9, 0x0, 0x3]}, &(0x7f0000000080)=0x1a) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x7fff, 0x30, 0x1, 0xffffffffffff2329}, &(0x7f0000000100)=0x18) dup2(r0, r1) 2018/04/14 15:03:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00001c5d9f)={0x6, 0x4, 0x87, 0x1}, 0x2c) r1 = memfd_create(&(0x7f0000000000)='\x00', 0x2) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000280), &(0x7f0000000040)=""/93}, 0x18) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000400)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x9, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@generic={0x9, 0x9, 0x7fffffff}, @alu={0x7, 0x461, 0xd, 0x2, 0xa}, @exit={0x95}], {0x95}}, &(0x7f00000001c0)='GPL\x00', 0xffffffff, 0xa, &(0x7f0000000200)=""/10, 0x41100, 0x1, [], r2}, 0x48) [ 230.212224] binder: 17268:17269 IncRefs 0 refcount change on invalid ref 83886080 ret -22 [ 230.239925] device bridge_slave_1 left promiscuous mode [ 230.245548] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.288854] binder: 17268:17282 IncRefs 0 refcount change on invalid ref 83886080 ret -22 [ 230.301073] device bridge_slave_0 left promiscuous mode [ 230.306640] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.441061] team0 (unregistering): Port device team_slave_1 removed [ 230.460714] team0 (unregistering): Port device team_slave_0 removed [ 230.484331] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 230.508994] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 230.559219] bond0 (unregistering): Released all slaves [ 231.684916] IPVS: ftp: loaded support on port[0] = 21 [ 231.996452] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.002836] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.010491] device bridge_slave_0 entered promiscuous mode [ 232.034599] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.040961] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.047933] device bridge_slave_1 entered promiscuous mode [ 232.069822] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 232.092864] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 232.153405] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 232.178217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 232.273310] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 232.280420] team0: Port device team_slave_0 added [ 232.302375] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 232.309441] team0: Port device team_slave_1 added [ 232.332172] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 232.355586] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 232.378705] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 232.385703] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 232.393944] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 232.411730] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 232.418796] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 232.427103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 232.625056] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.631464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 232.638128] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.644482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 232.651655] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 233.121200] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 233.373048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.443040] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 233.514394] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 233.520542] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 233.527899] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 233.598249] 8021q: adding VLAN 0 to HW filter on device team0 2018/04/14 15:03:42 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000024000)={0x10}, 0xc, &(0x7f0000023ff0)={&(0x7f0000010ec4)={0x1c, 0x27, 0xaff, 0x0, 0x0, {0x2}, [@nested={0x8, 0x1, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x1000000) 2018/04/14 15:03:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x700}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:42 executing program 0: r0 = syz_open_dev$random(&(0x7f00000003c0)='/dev/random\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000060c000)='oom_score_adj\x00') poll(&(0x7f0000001700)=[{r0, 0x8000}, {r1}, {r0, 0x74540d6048fd1bf8}], 0x1, 0xd725) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000000c0)=0x0) ioctl$VT_RELDISP(r1, 0x5605) read(r0, &(0x7f0000001640)=""/107, 0x6b) r3 = syz_open_dev$adsp(&(0x7f0000001740)='/dev/adsp#\x00', 0x0, 0x1) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000300)=0x8, &(0x7f0000000340)=0x4) r4 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x0, 0x0, 0xff, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000400)={0x0, 0xe303}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000001540)={r5, 0x50, "3d3ada579f346d1825e78d9564c9452d9f950f4a15091199489a4ee18ca6abdf08f3633911cea4c88ec6a858391b41aa180cab69b66e5de9dd244286cf1e59db1c225e5e121d185aba14227e18635777"}, &(0x7f0000000480)=0x58) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000016c0)=ANY=[@ANYBLOB="fe211b38f9a5767e000600000000000000"], &(0x7f00000015c0)=0x1) setsockopt$inet6_int(r4, 0x29, 0x21, &(0x7f000089b000)=0x3, 0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000001500)={0x1, 0x2, 0x9, 0x8, 0x46a7}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f000000cfe4)={0xa, 0x0, 0x807}, 0x1c) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x2, [], 0x1}}, &(0x7f0000000040)=0x20) accept4$inet6(r1, 0x0, &(0x7f0000001600), 0x80801) r6 = fcntl$getown(r4, 0x9) r7 = syz_open_procfs(r2, &(0x7f0000000100)="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") lookup_dcookie(0x4242de7a, &(0x7f00000004c0)=""/4096, 0x1000) ioctl$RNDZAPENTCNT(r7, 0x5204, &(0x7f0000000380)=0x5) ioctl$TIOCLINUX6(r3, 0x541c, &(0x7f0000001780)={0x6, 0x6}) sched_setaffinity(r6, 0x8, &(0x7f00000014c0)=0xff) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f00000017c0)) sendto$llc(r8, &(0x7f0000000000), 0x0, 0x0, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0xfffffffffffffffc, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) fcntl$setstatus(r8, 0x4, 0x40800) connect$llc(r8, &(0x7f0000000100)={0x1a, 0x323, 0x1, 0x8, 0x81, 0x1, @random="b11552fdb9b5"}, 0x10) recvfrom$llc(r8, &(0x7f0000000000)=""/119, 0x77, 0x2000, &(0x7f0000000080)={0x1a, 0x0, 0x9, 0xe6, 0x4, 0x2, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/04/14 15:03:42 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r0, r0, &(0x7f00000000c0), 0x1) fchmodat(r0, &(0x7f0000000100)='./file0\x00', 0x82) r1 = msgget(0x1, 0x80) msgrcv(r1, &(0x7f0000000140)={0x0, ""/154}, 0xa2, 0x0, 0x1000) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000200)={0x6}, 0x4) getdents64(r0, &(0x7f0000000240)=""/4096, 0x1000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000001240)=0x3, 0x4) syz_mount_image$reiserfs(&(0x7f0000001280)='reiserfs\x00', &(0x7f00000012c0)='./file0\x00', 0x6, 0x4, &(0x7f0000001580)=[{&(0x7f0000001300)="171f8734665bc076c915918b10c69d2efe584abec70b004b451fdeb217df7ef011a4dc5541e44f29b740e3f3db0937367b2f923708aad081449909e4377023072610377d8eb26ed420e2736c17c34891dd497d6a2f1535d99c86652df1b305e4e90f7d4e7a6db27d0534281b5bf5a4d719c24c1bcefb3aa70a6fce137a137bdbc9296469bde4378e45fc51e7499d0619e115b60c58605f2ae80a206fed74509759cb03995537e9db65b61517a7530bb3a3c8542546c045ddbb68fb62bb5692d76e641c8dfaefe64935010923589d32e903c47a6d58ad00c276a66b5b2643fb16cf0d44429ce761f38902ba19e4b0e8812b2b57ffad", 0xf5, 0x3}, {&(0x7f0000001400)="cf17e94d5dc139922dc262464e9898a01973aeba65371fbc64c8a21e788797d9b76d32008c974d9623888244ed0bcf0a968944d5072e3b9a944bb194552f09da99fff438bb6cd3c1354541232e032c316803a28ad3d22e46562dd06e72ae2e0678dc2866229a8975b902cce6486ec8ec901e37a31d", 0x75, 0x987}, {&(0x7f0000001480)="2b5e80de0724df4953287e0f03bf79fa4f619980e10f254a883758d2c119653197755058d15e643be1af85cdeb829fb577d05e092310598bf18b56ee6023df65cc09ffb28abea97d8409f9265ae01fc52932e2d0a9ede8788c0b354139d48cf0565edb323dd1e0d8b6c1829bef5300ed6aeb8a5189c9292ee578f75df9f52ba5d7c5d249f1d394e66d3300717029af39481444abce58915341ccde80b987", 0x9e, 0x2}, {&(0x7f0000001540)="7e4ac4f585d0f990c4ba86c38d79f189ecdd225295e83af42eb4fb1732fceb6dfe6bbd6ed60402", 0x27, 0x1}], 0x2000000, &(0x7f0000001600)={[{@balloc_hashed_reloc='block-allocator=hashed_relocation', 0x2c}, {@resize={'resize', 0x3d, [0x36, 0x37, 0x36, 0x34, 0x35]}, 0x2c}, {@commit={'commit', 0x3d, [0x78, 0x36, 0x37, 0x0, 0x30, 0x37, 0x31, 0x2d, 0x78, 0x79]}, 0x2c}, {@data_ordered='data=ordered', 0x2c}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001680)={0x8000, 0x800e, 0x1, 0x2, 0x0}, &(0x7f00000016c0)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001700)={0x7fffffff, 0xfffffffffffffff9, 0x4, 0x80, 0xd4, 0x20, 0x1, 0x8, r2}, &(0x7f0000001740)=0x20) r4 = syz_open_dev$dmmidi(&(0x7f0000001780)='/dev/dmmidi#\x00', 0x80, 0x400840) getsockname$inet6(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000001800)=0x1c) sendmmsg$alg(r0, &(0x7f0000001d00)=[{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000001840)="e1bbee6d2554a4775d3a9279c0b74ee51834aacf9a3ea6c7f570cec7cd6603bdc0ffe205685a674e8870f328a79087312c2ee8a0358403ad3097d8852255213efed24ce19c568096e9c5d6b1e9162b518d8b84b387ac60c43ec2", 0x5a}, {&(0x7f00000018c0)="e5a5c8be23a938ffcc77c1cfc1afbf2b4fd066cfce61f726493f06eeb21108d0bf09f023fc72e2044846a457f05c4a5d6862bf38e2711b1e2ec2d1aa73d011d0724d0e8830456c383b9477bc647bd9329579b344674e1ce0b47ac4fcc623724fab814b32e613aac3fab52de1b5def25ae6e5f77c54720ec66d1935aa2b9448afdbb4dafb3bf02dbd8f0570cf3f4936c88b33def9b1fd929779d79d9195a5149005659acfb4db6ce3fb0ffbad1480886d2e51263a26ebbaa0f7e4fe22fb6734", 0xbf}, {&(0x7f0000001980)="a1d6130e4a177a7988271e5401a61000a2f3f4131fda14423a3b3f0549f38f18fa91759b18b9392afeae3192a98e367e1781c715c3a496d370eb66041cc6472213c66599a2cf3081e03db3050ba00f786d65be7dd075607d163cb65491a94fef0957295d48528012276158849a4bfcff73050856f95d4f02b303122df45ff246e836d4ed7f0f7a2131c8010b6f53704a98d817a6bc632993d3376a16c7288b21ddb13b8420655b5a0bde3fe10e5f3753c3aeb37e61171b60226aef97c796c0c5efbe8dfd73ab99dcacb94486b7c5728f60b8ed", 0xd3}, {&(0x7f0000001a80)="8a3761783ba552450e4109216c269db58aa738db144b4ae284af93c983c1e9599d7df3030964b653874c0e0c7a3ac90e51aff658bb6aed9b402919d58c65a74bf80dc6fe4039fc4acac089c8bd7b3651c7534d98ee30cec863d68a32369b8374f1b8dc4b21a3641177bd7d54716382", 0x6f}], 0x4, &(0x7f0000001b40)=[@iv={0x90, 0x117, 0x2, 0x78, "e748a1969686ff70f8de9943726a6f27a73324d4d26e767c2a26bd5fd5ddbae464c42648ba50e0773a835845e8880515d492ef5c1f6e5221b203dba2dafaa6824aecd704a549097239c4607132962781f506c39a2e39161257fcc0dfbb2fa154a2f81ad6f3785b87ad7f9c7c46af9a60fa9051e9df1f4143"}, @iv={0x40, 0x117, 0x2, 0x25, "60665f61047a5a4ce125ff228427a1fe1892da5cae562c15978837bf9de9e8326ca8c5ccd8"}, @iv={0x38, 0x117, 0x2, 0x21, "2b78a4bbbc66d374ba953f21fdd7da6fbd322f31dffc6ad4931d983320e4bf43a9"}, @assoc={0x18, 0x117, 0x4, 0xffffffffffff44b5}, @op={0x18, 0x117, 0x3, 0x76e98eff7ab61981}, @op={0x18, 0x117, 0x3}, @iv={0x70, 0x117, 0x2, 0x56, "d409871237ce7f83321356f367c16e79c9e8402beb2a83d5e359683b2401ea76ef58edc8d8f83623ec7ea60fa48e984f3da429aee99be3afd6506a28d6840729b1beebf39646fb35cae5d21169703e4598741718f524"}], 0x1c0, 0x11}], 0x1, 0x4000000) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f0000002d40)={0x5, 0x1000, &(0x7f0000001d40)="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"}) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000002d80)={'veth1_to_team\x00', {0x2, 0x4e24, @multicast2=0xe0000002}}) fcntl$getownex(r4, 0x10, &(0x7f0000002dc0)={0x0, 0x0}) ptrace$setsig(0x4203, r5, 0x5, &(0x7f0000002e00)={0x2d, 0x5, 0xf4, 0x92}) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000002e40)=0x300000000, 0x4) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0xa, 0x6, 0x14, "5849558fdcec473bb202505a410678a6ded81a4510af5ea16c29db9694b164ad29e1e724f38e4e22d943b8c517eb54a4265021e6bf6fb05796c11246d9562b5e", "4cbe9590ca9f7cfad643e65233e2ebd5586116941e4d5fe62e1c0df7278e58bd7852a5d231bca6ae21863cfa09ebfa8384d85647fb78d21cbf84f390375b793f", "54e492753f73c722ee886ede3150b84df1f11814f2c75dbfbfd06bd674ff0d52", [0x9, 0x7]}) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000002f80)={0x0, 0x2, 0x6}) msgsnd(r1, &(0x7f0000002fc0)={0x3}, 0x8, 0x0) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003000)='/proc/self/net/pfkey\x00', 0x80000, 0x0) write$tun(r6, &(0x7f0000003040)={@pi={0x0, 0x88ed}, @void, @x25={0x1, 0x8630, 0xff, "7addda9de052b233037c50b05b4b49cf57ed92f27157b43b660da85b3c2d19f3ce3e29dbfb34db441e16faf628d48713cb59341d47942129ff09a65e0754f7a388be0b6afcd7fc01fc0fe4d02ed6214bb823f7f8b3dc650c1eeb554aee34ed55b598f61f142249e795d0e5ef420aba8a54c2a6de08cec1f89261b7a0d6"}}, 0x84) clock_gettime(0x0, &(0x7f0000003140)={0x0, 0x0}) ppoll(&(0x7f0000003100)=[{r4, 0x400}, {r4, 0x20}], 0x2, &(0x7f0000003180)={r7, r8+10000000}, &(0x7f00000031c0)={0xfaa}, 0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000003200)={{0x1, 0x1, 0x0, 0x3ff, "0d4bb67a25d3b4b0368765f4276190b226e77cd802a2c30ec406cccb9d67711b75b38f59fb3c5254324ff3a1", 0x7}, 0x8, [0xbf8b, 0x20, 0x10001, 0x81, 0x7, 0xffff, 0xadd, 0x2, 0x1, 0x771, 0x1, 0x8, 0xffffffff, 0x9, 0x9, 0x7fffffff, 0x2, 0x0, 0x3, 0x7fff, 0x5, 0x9, 0xffffffffffffffff, 0x2, 0x5, 0x2, 0x38, 0xffffffffffff0000, 0x73, 0x80, 0x18, 0x3, 0xffffffffffffff3d, 0xba, 0x0, 0x80000001, 0x101, 0x1, 0x4, 0x1f, 0xffff, 0x3f, 0x42c, 0x6, 0x2, 0x1, 0x80000000, 0x5, 0xa83c00, 0xff, 0x2, 0x214, 0x9, 0x7ff, 0x100, 0x9, 0x4, 0x2, 0x4, 0x0, 0x3, 0xfffffffffffffeff, 0x3, 0x80, 0x62, 0x4, 0x8, 0x8001, 0x1, 0x80000001, 0x2, 0x0, 0x2, 0x2, 0x80000000, 0x2, 0x1, 0x600000000000, 0x1, 0x3, 0xffffffff, 0x1, 0xffffffff, 0xea, 0x40, 0xfffffffffffffff7, 0x6, 0x100000001, 0x1, 0xb2d0, 0x7, 0x0, 0x0, 0x5, 0x9, 0xfffffffffffffffa, 0x159c, 0xc8e, 0x4, 0xfffffffffffffffc, 0x6, 0x3dde, 0x1ff, 0x2, 0xfffffffffffffff9, 0x8, 0xff, 0x2, 0xcca, 0x2, 0x38d, 0x3, 0xf86d, 0x9, 0x7, 0x5, 0x6, 0x5, 0x0, 0x3, 0x2, 0x5, 0xfc33, 0x2, 0x0, 0x100000001, 0x9], {0x0, 0x1c9c380}}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000003700)={0x23, 0x8, 0x1, 0x100000000, 0x0, 0xa3d0, 0x6, 0x3, r3}, 0x20) dup(r0) 2018/04/14 15:03:42 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x7e4da74e925e84fb, 0xf) r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(r0, &(0x7f0000c89000)=[{{0x77359400}, 0x1, 0x4f, 0x400000002}], 0x339) 2018/04/14 15:03:42 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000fb1fee)='/dev/input/event#\x00', 0x20, 0x0) perf_event_open(&(0x7f0000223000)={0x2, 0x78, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000240)=""/17) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) memfd_create(&(0x7f0000000080)='/dev/vga_arbiter\x00', 0x2) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) 2018/04/14 15:03:42 executing program 2: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, &(0x7f0000000140)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x2}, 0x20) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x10000, 0x4) 2018/04/14 15:03:42 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000b3d000)={0x0, 0x0, &(0x7f000093b000), 0x0, &(0x7f00006b0000)}, 0x0) sendmsg$alg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000340)}, 0x8000) socket$alg(0x26, 0x5, 0x0) [ 234.069260] binder: 17556:17564 IncRefs 0 refcount change on invalid ref 1792 ret -22 [ 234.092158] REISERFS warning (device loop5): super-6508 reiserfs_parse_options: bad value x67 for -ocommit [ 234.092158] 2018/04/14 15:03:42 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x17, 0x7, 0x2) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000040)=0x40, &(0x7f0000000080)=0x1) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r2, 0x8008700b, &(0x7f0000000000)={0x7fffffff}) ioctl$KDSKBLED(r2, 0x4b65, 0x3ff) fcntl$setpipe(r0, 0x407, 0x1f) 2018/04/14 15:03:42 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00003f6651)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000080)={@my=0x0}) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000040)={0x0, r1, 0x1}) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f00000000c0)={0xbe5, 0x6, 0x8, 0x0, 0x0, [], [], [], 0x7c4d, 0x8}) 2018/04/14 15:03:42 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000d11000)=0x3fb, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) listen(r1, 0x404) listen(r1, 0x0) 2018/04/14 15:03:42 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x801, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x2000) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x10001, @remote={0xfe, 0x80, [], 0xbb}, 0x5}}, 0x72, 0x8, 0xb633, "0fac76ea3837165881ff6ba598e4c4a9f05211822d7676f056745f0bec0eabe6a82977cd51cdf2f16b305097f252cc80250f85598eac357d786c976cdc9dbb41c5dca857d820bcecb26d61eeb013142d"}, 0xd8) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="7d29579327dbd95adf4117fadaa63df6", 0x10) setsockopt$inet_int(r1, 0x0, 0x0, &(0x7f0000000080)=0x80000000, 0x4) connect$nfc_raw(r0, &(0x7f00000000c0)={0x27, 0x1, 0x0, 0x7}, 0x10) r3 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x5, 0x40000) ioctl$VT_DISALLOCATE(r3, 0x5608) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000140)="0800101f000000020005c85979c979ff", 0x10) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f00000001c0)=""/91) eventfd(0x0) [ 234.117337] binder: 17556:17575 IncRefs 0 refcount change on invalid ref 1792 ret -22 2018/04/14 15:03:42 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00001e0ffc)=0x3ff, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x9e}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x400, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x101, @loopback={0x0, 0x1}}, 0x1c) 2018/04/14 15:03:42 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4800000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:42 executing program 4: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = open(&(0x7f000080dff6)='./control\x00', 0x0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f2147660f7fd466b92f0200000f32ba610066b80000008066ef3e660f3a0e663e9f0f0865660f71f1c60f01df670fae43fa65646765660f15e3", 0x3a}], 0x1, 0xfffffffffffffffe, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) dup2(r2, r3) [ 234.314203] binder: 17599:17601 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 234.346910] binder: 17599:17605 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 234.984265] REISERFS warning (device loop5): super-6508 reiserfs_parse_options: bad value x67 for -ocommit [ 234.984265] 2018/04/14 15:03:43 executing program 7: r0 = socket$unix(0x1, 0x1, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socketpair(0xd, 0x0, 0x0, &(0x7f00000001c0)) bind$unix(r1, &(0x7f0000003000)=@file={0x1, './file0\x00'}, 0xa) listen(r1, 0x0) connect$unix(r0, &(0x7f0000053000)=@file={0x1, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000006000)=@file={0x1, './file0\x00'}, 0xa) dup3(r0, r1, 0x0) 2018/04/14 15:03:43 executing program 1: pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4800) ioctl$sock_netrom_TIOCOUTQ(r0, 0x5411, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3, 0x8, 0x5}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x56afedc5fc20f5f4, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3, 0x400, 0xfffffffffffffffa, 0x3}]}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000080), &(0x7f0000000300), 0x2}, 0x20) 2018/04/14 15:03:43 executing program 4: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x9) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[0x100]}) 2018/04/14 15:03:43 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(r1, 0x0) ioprio_get$uid(0x3, r1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x8, {0x2, 0x4e21, @rand_addr=0x5}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, {0x2, 0x4e24, @rand_addr=0x2}, 0x91, 0xd3dd, 0x4, 0x401, 0x101, &(0x7f0000000000)='veth0\x00', 0x2, 0xfffffffffffffe00, 0x1ff}) 2018/04/14 15:03:43 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xa000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x80000000000020, 0x5, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000040)) close(r1) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r2, &(0x7f0000001480)=[{&(0x7f00000000c0)=""/4096, 0x1000}, {&(0x7f00000010c0)=""/215, 0xd7}, {&(0x7f00000011c0)=""/102, 0x66}, {&(0x7f0000001240)=""/58, 0x3a}, {&(0x7f0000001280)=""/136, 0x88}, {&(0x7f0000001340)=""/80, 0x50}, {&(0x7f00000013c0)=""/162, 0xa2}], 0x7, &(0x7f0000001580)=[{&(0x7f0000001500)=""/84, 0x54}], 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001600)='gre0\x00') 2018/04/14 15:03:43 executing program 2: perf_event_open(&(0x7f00000003c0)={0x2, 0x43b, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000029ff6)='./control\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000ad4000)='./control\x00', 0xa4000960) clock_getres(0x5, &(0x7f0000000040)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./control\x00', 0x341, 0x40) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f00000000c0)={0x8, {{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) readv(r0, &(0x7f00009a4000)=[{&(0x7f000022c000)=""/32, 0x20}], 0x1) syz_mount_image$gfs2(&(0x7f0000000180)='gfs2\x00', &(0x7f00000001c0)='./file0\x00', 0x2, 0xa, &(0x7f0000002740)=[{&(0x7f0000000200)="659a7f25bee993bc074ad9314e192052008f051dfd2f8776f3a13c4be29d957476ae7329459b2de74fbb0d66c8701b9f6c9ea93cab38b9666f3e6dbf58bea93ae67a43d2d70ace37ac59fbb96a478a4ec06186ab1f993b13a762f2900360d81b6e9df56b4291f5a93ea5f41cfb0b45c51fe0b0ad1e89a79efacc67bf19ec94ba4661c6d9d28e98de793851ba27cddd1fb5ae948661c2419cedd76b470982a8cae2dd", 0xa2, 0x100000000}, {&(0x7f00000002c0)="3f08b442b169470c07dd70a5536682a9a6ad0423e957a183d54b3a7bd5962a698dd5f81b7f2a56c7675bab7d5ec1f9a865b1f80d05aa3e3931c781367b9e1f1d94ed57c92dbf66beb0f21f685666885e7ede7a78d9ea7351b71fe877ff8c265afbd45f33b1", 0x65}, {&(0x7f0000000440)="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", 0x1000, 0x1}, {&(0x7f0000001440)="e90c07472a85a93efbccd9f626d6fd09bc845997d499f8a321b955374219a86af96cfc9aac810217b6bc55d78e42a4b1cff02e5f8eeb0ce091eb86d683b0ca49d82a4603c83c216ca55ac427d7c78e3b00373307f6f577eecda0aa1011c6a22a5a7d961bcb5d11da347ec59a34676c002ad1129074bbc4db6ea68021ec3ef585b9b6aff2f70599393d7f080c55627e120bbf6e9a24dfc63add1f0069e8303d13d5b8d519164e84156f79c295cf0b854bc6de7c8f00e5a2159b3290d215d3208d89c61ec420393a2e635713464a40c0279e9964487f82e9a238de7b121d523519c37ec6dfe105493d", 0xe8, 0xfffffffffffffffe}, {&(0x7f0000001540)="67a2de6327e16a507587188040ccad1c87267cc418e2fdcdc43e7b6a093ab3dced8648db4f7913f1a502f190bdb02ac8b3ae31a850006680933e0e634908fbcf725750a89e870e958faed6fbbb080633de1cded23bec0ddee5eccc57bf8bbabefded0303964ea9c18653174b1aef7bd7d453bae6b53b9b749d1fc3730064e7d57cab330de96e05571f6c853e951675b5a6b0bf303db533", 0x97, 0xff}, {&(0x7f0000001600)="2e0fb894ab6abf5e3cacea415bd82afc29ae373f1f284f0ac086005dfccd48ae568dcc178f5427de724c1b51f8dd0a6bbd2ff21d511c861ecd619f9914c016c25b1102c481904df71431063db5a47c2ab184e0285daade137c4fb3e43ff3cd023b3d5e5fd3e50ad14cb075c7450d352d18c1d8e1246d5336a1a0f7e815db0840f3eb7eaff344e78648693ff0e88865a92f0be30942c8adf4f3a55b215513da8a1909d134fd272792", 0xa8, 0x4}, {&(0x7f00000016c0)="fa9e16cf94b694e1212c088629e383c01bbfc56e2a1af7fd978ddc9ed1b784ae27f3a2a70af44b2e1cf7e7bc522d0d72f0ec849459ad51ba4f343f955674fab5190d51cee9a8ceb96a711c0edcc15cccd8ba268596df1fbf28c214060f3ac347898df1063aff9774a6e1cae107ae6933a0b9382ae56b47161ec6f98d27ab6d0d93ebd9b00b63325ab239b9a7cae1eb2c45766be70104adc6d74afa3b071fbb01fe0c4715c8b2b67995e73052b10f490a06fb3cbd444ec28189a44e5a6eb34e27240a1510f63479e9338fe7bc2a385c1518bb78de9f55712453f54c3dd388ba2aae29ce7cb29d74137e22b5abc0523632c925d0cea44852c14a96972c84d73372660fa3dd879814df2d71cfd11a4653fad49206b8adf7de764b71a28f9fa9234f6e3846eceaee32dafb65521a1a3bc0be6104e129f0e543c4420d9ceaaee2ebbe9cb9a032c501fe5221d0c77ea3babd02b0e87fa91e914755c70001cae4d77d65d30b994364691a0bcc07a700d367fa4e02478bde0a3e96e51d67671ef853c958ae788d8ce5cb2183b2926418509aabd2f4696884e3184ca15f0958262c087601a2fa1c1ba7324263fa4d6eae28cbf87ea92c1c00a9741c76d7d2941a940ce8730730a974fc6377118b492b4fb76a8096d57a98e2288588a0c8a6db020d22156680d6ea6bfbf171f7432156ecd6e749d1ec093bd040342dc20b9253bbe876f7b35c7aaab0f602f230d5c7e54a10c3ca0074a24d023d5a7d1fb1792145985f538927ec53df9ad26531aced129a78b4852c906123c59bde331a6143ce910b02c42567910fc53232aef1b935b3f70b03f6c548b6c27267c32826e5c689b71583a0b8a1c7b81360b3726881cf872aae689899259879c45e5b67b299a9a579b757152141a5ef95d3556db2dc0424b94c06c5b945330ce63a378670b8f127ba8d4b4fc5df4637512cb1d1b6127b1735e789d44ebcc980b3fac7f16a250e537ee9ec13820c9b33560040e8c257a2b49bc9fe3f882c3f5a8fdf447a96d884d752fa25781482af2ba3455bdf3ad9814da5e4f94f5adcebbeec70a8b748413d5d5e0b92e947dd341e0382f7adc3a93be504ca3281feaf9837eeffb9837cd5242253fd5feaef0b8ab34336b644b0ae99354b7df5756c44a0caf3340bf6b826f92ae52332de33555eddd56310f1b13c16ee8fe442358d4a3860b40d84f3f987506137ce3e765dd4ec94490a7ba35697b498a3fd697d754ba77f660b3e29beda245f27d4d1b806d16c8464b390366218ebc3c0b47816772523cfdf7a1719afc079eed29c37c46272e565d2e73889a7417f6fcb754b4d00ae5ff056e2740799b71446fc0c65eea85a550ce41c15d2be71cd0f27e6e33a16c9977a3d959626052abec0acee9257ee01b9cc3f5a01c82c283c9d27eca6f76c7eea330fbc91fc3f4432a779ae5afbf255f907661eb20cb295afec852a04119374f934c8789f6d85963e567a11b2a6882e590d345277cb0fc50073d9bd7ef5c06aa46cdbc8bf560c56899c436e925bf5422f0cc6e4a5023ada7de501cc6c03cb3d902f1e0991d2fd4390d1d705dbf69208f5e956b600b5c8c16d9a72fa993febff21eed1a3879a55cfb9f9310351f3a5629e861a38706fd6abecbed7dc59fe4868f4312042e6ab97a5e67dcfc3799d7d0935e801122908d2e47371fad692fc0d193557cd96105f6f6eca37854e1504efc76672500955dc89693e3ff464a5fe1341d41a6a4084c86b671746c77ffc057cbbb92d4d920248030a4e780db3b44c9c210ea00676e172801e50f72b723c6bd7b3b63b60c18e480fbb5b678f0383a9b7bbd6ac022d101d31c1e92ed6713e861e2fa85034096061c4274ad92078513bd2c889e8ec79cc0da3949d536eff3693786f9648b136a8f9308ea42f803dbeed38e1011b7d6e9bee437837dcf193b6b4e1ff5c94b115b7547b3929959c0986d9a52b40e3e8103a7d8aece3c198d1e5894a75b3652488e83849ee0505772678bd37462d91ba252f2996cfd6d1e20aba8d53a746ca95303497e8ad94766111f806e8b669eaf5860522902245ab40394cf0d1f9ad7e61483966f623066e35efcc8b4f9647cd7d8e3313b6adc86513c61dabd07fc538cdfb76e6e0572bd7fb3f95732b9f8a99a764acb1097cf92114447816bf8286e0873e0089b3008e1b6c76c03c1936a30c1ed4c827ff23015873f5f12b030dc7bbc91700ce8effd01114b9ac5450b5a9e5e6cb2f668c82e8f7c8b3d03f3c8c94c943ee41f936df32c44014f7a21162a3a5044333e73d62361edddb38b04331e96739307b4e83f364bd06f5a44a29db33240c50823debb98fa3a74fb00f08fe38753660db49438a60bd7f17c7a5f3efe28e2ee3def58fd28a49740a826e006653f3756027690314b5d79e4e0d86cae4d664d4260231db797f6b7c3d078a0ede9fc0a0f63ccee4febdb7a6d97837eff3e77f22e9e38f36b01d387286e272eded1d6106edfe0abfa26ca0416cc46613c5b1e67bb3a70d8cc7d4fb9a74dd137d60878cabd16d7e957cedf4f7a7408530f4d95476989e6ff77d37146a827bb00480a9f41674b151913e62f6bd19f4046cd82732fb4de06b36a646989010be290f0ae2f778e8133271dafbf5aa7cff6c604a2d9b402460c21886d75d377c7fcf56c79e0466928b42a299c9c5216084f06b19ddeb95494dad0f6d213b2f457cc279d12b682d6db247643593af1cf88a83d891e625ee036d7edde0decebcb5aa3f15893794c5d6dd0f8333010a8632f7ba500182d062114e6be13af0a66b5403ef852679887a8c7b7e6b040f1b750317adb64ec188d0db73c6bbc7bf56888b62c3ada2580c070b212c7d3cb5945eea4319b91a7fd886351794da95744eaafcf9180d5a904617b04a8fbb203d350d937bc5c9e64a7d13b1f4fda1db282d2d4497127edd733b9cb0ff9493feec6c03370dca464b4d26824a8868ff5aa376bddac4c4843210f42e7233c1c3627e41d72584e9c89aa38a5c249a1daf6bfc0f3a2293bfefe72bb5da40ad13c2a7a243d4f8b99905fad4bdd92fba8a66a4f23dbb128b88fd33d4a7039518dcacdf7f35f4db99cd7823b612335dd43eca4d2d5c63ec38c70f6d5a291330fca35e10a41ee3b458bca2b82f3bd7f8be1b71b951dfe6bfe33beb3969bb01dd5fd25e46f8f79c109f2ccab94b85d9fcc96638faa8b66a25121fabeec3f8e8ab24b6511c843f6d4f3056b28f3186f0e600b1ff0885299ee15943800c0ef538ae9f1aa98f6d129db883c4fce4be646c1ae225083a8cb973151e89a368a6eb734f80d8fb5f92ce07a57c8705665c9525803f3545b1375ef3e6a9fbb864ad53148154470b6bfae5e28141d88a35198ca8d580c088975e19b6b438014a50274f5cc9a32f999d5ff4b67ba8c3b4c83ba24d78b0a591fabb0cc64fa8bd19aeeeeb328a804bc8c99aaf56af17f8612566d0f4e3014f82f2770f46b304a9d75b1a2ffa47904619c542d7d8625998123d089a4e73f3152a356ddc9b6383af8441bc95cd623b61b53a7f733f6aaf4e54c924ff054e8a6f3f8081273c19d219fdf62278f38b442e9ccbaac5aff4a8ebb19213b2fb562a02962feb41f4188f46e0e924f75dcdf584e401130c5c969ba94502dd7007861981559a36d867a0a808ea756c38f0e7984d2a175502bc8ac2d4d865f077c6e7163c9fbbb51b596a6929295e7264a046acbd72fa45954936006216373c34892b152edd7fbaa5e2dc9a4e321a7c303df2643be1c6cc6bac317a02e895cd3a0150c6440ac2ca8c384e8d26a12704d8534d0d44a47d67bf43d419ef0966d57135baf27fa56c3f578a1b749c2a721a944228a5c4b200344f35ca9dcd437be6765394643fb115d47cfa6c22487f3df2e2dbfc86b5bccc7941d554fc89a958ff96c487eda205a7773b85caf3ad82297028941e2b364fbeb67602d6e64b3cb40856d6c8ca0e7bc9270db1e7bcb8580bbc26e3f7fa88123b4ecef54dd431ff0f25fbf01be9673e36e0f9cb3fd187e2afbede4e675877c84e91d3e806cd72c235fb4535ba4ed148d2cdc028cfaa6dc39c5dd923eb9e675824fa236b8ac01cb95be5634aa1f7abc5f824e476a27a806f242c75e22846bfbe4b91585d65a09732f17ee84a1f186d756d804080cbbb1d6a8f80418a8228c2a49d90d232b5d5938cfebd2958938352f5dbdb5aa5edcfd153b6bae9f28a01fdeba05222d9cbf3fed243fec26ac2e82e5b101aeb036ecbe71d6bcb423ff6c4fedc100a8bf7a230d611bbe03f5a8ba118b077d83f917d1216379844312045d3b56ba056ceeb9dc254d2e8fa640c966dad29c6cefc2a077fbda757e3039d660ee4d3bea100700b7fcef560a60a9ad60d24bd8018e93179fc5873bba5f35e2b7c9ea2bea91f647b8e265007afc42dd8d698f74975ceecbb1fca69e4aeefd17ae8ea9df2977db5d1ba5b00d64e592f4dee35974365ef3bfad0a106de5242304025dcacd904807a124bc0834d9434fbfba99c59f423f8f9056e8b0c9f2a6fd0e36d4284cb703dca439f94835b064729a0bfc77d5ab9e93c9cdffef1ff625e700550f54c3a712491a550e50990ea431508b8df7ca64534fe741a26194e743bb4cffdc9f4287bc61c7e70b47deba5cd92063bcfc0a79d42d985c9d2fd1693338c67cf459517361c13aa6d1b7c0d0a79eb13c57822abf8e0e95f39edc7ec7d3c8db15a20ae5e1603c6c7d5c3398dcd379802a5c0faa83b9c6d9254ff0ce8428106218bc9f036c2ed3e2e02a5b172526a7b4bce824519f92fea58281050c13044e2580f2557adc078a4d2075c7f713a85b89c8863b3c500496471891267bcfd31512ad50070e5125b3c102ccfb02bd9425e1aa763138cd2d0c04c992e70412be29b547371eaeac70cffc67830c108e460291eb5b515528b980d74b16330e1352932c70717ec787d2574fdb8985ad662adff68b016ed711fe8c70c26c0093605cc6c5cc7762a0efea39a9e0b4d189737be5bcc3c73377568fc92d89bdb43fd2d304fbbc9df6d5179cff8ae1856d0bb40ecc60fb9c5217172dc0ae27cc1d237f6fc04ed10b01974cdd2acdd5e0b31c5aee7ff75dfb630c8491a7192aff22e04d00d2d5c0182d10434333e9e6865baed279d0da7393c41c976536b5044393ef5a372af4e003a229ce8e4ccacadfaf84a263cda500639ec25aaea7f2490aeb36275d8ebc7805c2154c67155e4407f730dc698075e4e938189cf43d438689f8b551f376edab84921bcac364b4e72ea361f0559bb72ec6bbb60b9b3c71e91e11570f8b6da110852a8adcf4069c8d0b13a7f3a657720fc9f5b5167b920459ebf76ac1993ed24455df0f2f299fa13cdaa0d9e6a01c815f9206b4e06f7a9092918ec420707a2c80fc13ea7b3333f326c1f37494556d00e834739273bb66cd7ad0a553319b0f1170506ff929603825ac78551bc7a0c05bccc8d565ea9cb46c603775aa50163b6fd3ed4deac8f6598e2462cded4d16314692cc2296e470db80870667c4e20b404ddedcf5378e689fed86bc147486f8f8574c722e51b7dd143069a74e67687b3ee3470b497022970b254e7c93b819a0ddb90877a045cf03303a9e34c67b58fccb993273fca43760d72d6de1912ddbf9a823c5dfe631aec968e735fc2ac6664e8b1ca9743187cd85e86cf7b105350f5b0526275bc17a9f734b1f3da376d37b18b8f4d216d846dada3c94d144feb50ef77ad958858eac2c3b2e594413dec398106563b87e40b325a05bd2239eb20d1a33126577e2413ca3fc0a8f0959c00", 0x1000, 0x9}, {&(0x7f0000000340)="6fbfb74cafb3247008e0b8e11819a22ef3771e7a5d10a91ad1bb5789e669cd33f79b5502436a", 0x26, 0x8}, {&(0x7f00000026c0)="5d2ff371754a47a8213e33bd8a2a0b04211edd489913a33e3fbcd15e4121bc3ae7c4bea20e40c654f16c7a993ef93e45737c9625e096b2ed29aea212cb39955d8629ceeaa07de01c9a03614716ce0c8fc76adc13587f38902fd26c0f9e398f539c74f3cf", 0x64, 0x401}, {&(0x7f0000000380)="1d0fb6506fe98377809a4bffb9433b6e", 0x10, 0x4}], 0x2008, &(0x7f0000002840)={[{@noacl='noacl', 0x2c}, {@nodiscard='nodiscard', 0x2c}, {@quota_off='quota=off', 0x2c}, {@quota='quota', 0x2c}, {@quota_quantum={'quota_quantum', 0x3d, [0x31, 0x37, 0x37, 0x3f, 0x34, 0x3f, 0x38, 0x0]}, 0x2c}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000e21ff6)='./control\x00', 0x0, 0x0) 2018/04/14 15:03:43 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000131fee)='/dev/input/event#\x00', 0x0, 0x0) ioctl(r0, 0x180004522, &(0x7f0000000000)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="58fb68a3a64867ff911c26a903733a4d3613a502a868609c9e650fa0d2741a0cb027d212b313d56de5219a4b3e33e0572c3e26207fefbaa989c47b714f1a408336e7ae80f15c9efa195572fa8d8576c064088c893ea1e8bfdb50aa8e1d362aac3290c97809aff02a81f7ec809a831be30a7cb0c098be1ba88e4d02e155", 0x7d}, {&(0x7f00000000c0)="02c8eddc7af20c457ab35249ebc98323e47b3648b1a89d7ce06031208123216f036110c68f118e907f1badf9f5ce8d06b3e543b9c64140ca50daf94beb53680819554d6e19bc74a5eadcc887fa864ed5cee84d3980e86db3d59613445d24dcfd98e78601c14310a13e3e82d8ac5161d54a9fa40092a89912f211144f4277c29fca6bf7b93b36", 0x86}, {&(0x7f0000000180)="fe4f6141ff90167fbf5965dabe7bb60c697fe39411a2a69fb8539f56036c20ea4859a1b047eedaaefa5a5168fabbd76cc9830e1b7560078416eed0f02487464a2a229750276c30971f44c0d755d12e967951b98ae013b26d0456c8d2d2b6", 0x5e}, {&(0x7f0000000200)}, {&(0x7f0000000240)="f159bb2765d0798ebe36", 0xa}, {&(0x7f0000000280)="12a2546393c59149284ac33b4498f16ab0cbc61144bb5fcb33f9c988970b35550e2ea4d9c6706145839845629499a029ea7039caf45784990f93c44e201bba85c9f710b1186559bb4a8bbba2cfb115ca7f5eb5090b1973", 0x57}, {&(0x7f0000000300)="db282af73d8d1978fa0847521df33c0d88b93cdecbf3cb64c6edac5b56b94be8a29680a6c3619ac0c39367aeec42f22425e1364ca6b99216849916183b4b1649b074805dcbcbcf7b063648b51505a2cc1e60aed682a8f36f2b88a093bf8204e136b6f394eedd36e1a032ac55cff1fd3b531e605db29cf736fbca9963a2f9b9d6b371d6efc102c14537f37a4088c9db59adf01bac637d9d382e289578638d534e00a318fbcb7b3a177ad55c19922c30427181a060d1ea882d808876fedf04c4297f7602626418e0255a548a8db60b7a0bb62fb03718fd91f40848f9", 0xdb}, {&(0x7f0000000400)="fde7bc43fc4eee1dd84111aa4c89758274bac3bcc5551899256976f379089e99ffddd62e953852904ad4e528ec020bed6f470adda31506712f995ff2ad5b903de77760f203ef849074914845261ecddc7adbbaec03a74736d4ef2b3fde4061a4bacff8d80b24ef12e7fa5d665f9261038eb41f6306c1ef76873f7566e3fecfaf9c54789a06aee8576b15a644c19be4f0e35e027a1d3cf45632eed71fdeb484022153d286f3c260ef5b360a280cdee8a619bc59a11f698f2bf72120448755bb40", 0xc0}, {&(0x7f00000004c0)="5b180655f66bdf33aaa2ad0b2a890633f30754436eff379b245fd4770c608006de3cccd2095b8cc1f4f7049792733f0c49406e47f286eb5e2a507cecdbb5223b112bfbef878de92b286d5a01842cd4b054c199c420c0d3b67909b43de331aada8b3d4a838b8cf1380ccb560cce2fe228279969d9d044fafb9fac3a31be6ab9a241d3663b213cc73ec803cb74cbf2836a0fa654988925b95e0182101b755175896e7f3a24c301bb9de73bf1f6a6bb5f055ab47bdbd505dc6758136f6babd4886a90478dfdff7c90ff3a7dad351cc2eca9dd32d7e57adc22d0db93f11cf29d3c", 0xdf}], 0x9, &(0x7f0000000680)=[@iv={0x1018, 0x117, 0x2, 0x1000, "ff56f1f2b16b868da1c6f54579b3bc3f681a8271baa33e241a34bd636dcd227c355bfb7328568d3c6bc1e3e4febcc6ddd89e5e4e5e324240caac8ee76aa9fae9314c36183b560c2a46fe5ebc5afd9d2984a653c2bdbe9067398c2d16bfba175e09f54831961ecabc74a4917be80247a753052a22595002d365118022b0f7d9958f9bfbeb314e66cdd00f61ec4c0cdeab5475151eb8944155ecd2f30ca89d9bcc3ee9252055f437c8e7c9e5c55870839d531ecebb4710fd1734c8d93fae0bf443b56267cb084e0b859eea0c394534d452bde86b329060438f90a5983533f0ecce6b20d9c29045167a581a1c9247335d946e2f16f0f2e8d83d72033a4d9be0225b75ee6d6b1602b1bef96c79f7b9044042fad3451c3290abe8315b96ee1e84d8ab515015e0d71935a028a9e8dcc6738f12f3bc9a70d90b555cec07165b7f046aae3444b304931fce2631ae0a916187e6ef3f633a0e371a0b902c675130424dbffe19dfdc5deaca9d790e534886b7de23a78a011668761d7386fd8c84ec94ef583d133238d5c4075c2d5d6b45742a053a4894c736204a05c6722e5115402918dee707e1370915bc2cd3c82bde3c4c16e58e532a475070d1e0127d0904f7f153600b2a3d4af628a212824408792e0048d014048918e0d4bc8ceeb648c5987690b860dfae2078fde76d11be72cdbfce9dcabd12661b786fca76d4e512bd5d66ad6e7fd0356ddff4be5ca330f56e49f3f079ab812f4c6eed261d27106ff5e876f3280344b6702d58238751a39061f0a29960aeb12eb76df34685e175b113782354718e8f84bcd4ee8740721fd8b1f38e56eae48a57148f98843cc0c46e7b0b2a5d4ce5453056ec79bea7ac5621adcae4fe8c28199b51970029efb8adcbb6b653d95b580285743ebf0459de47e07182a85acc31db72819707074727d9eb52b01d25ee6c94cbdf7277562f0c718c0d6f3dc741638e5aa3f5c8a5246560f5429ef76375ee839b5bdd6e3b8e54b70e84edf938fbb310555fa3472b757893c42b2a25dadd60b0ff74492f3a8a5cfe183511a4553c0dd5f4cdd80d3f3d59e4b27e755d6a6908a63787706ca6935d9ecad715ceea4bc29d9ff1b5f0f1d6906c09351d55e7332f0ee8fa54bdf9acbb121da93b1c4a46e6ecafe8018e9bb217f73cc595e18f67cbce8af147b309c1defc91435bac80e8e0bda575afbcc6c4b27659254cd4b0b25fd2f8c22a914a42362c3e65340f6b9f46b88b4d897c25a6d808ec0fcc4fbcaade782e7b28b136c9186196a87d2ae2ec4f159df64e4a156046e65e3cf087130901758f7714b7d52e79d6e47cb43803142dd0cfd9168c83e75c74c3bd4fbdfdc55b436ab78ebf661e33b9a87bf97d1b0bffef9a04d2fbe2c18be13bfb18dc51760fe6492a24aaa458d2e3d938562f60227227e720bf4ff5adb9ad14585e29833c43ee0dfee29539120585c2efcb8c43f9bd32ee87f7414db91167a2c1c8692ef576ffe896195702731a99e537356525fc38b826c8cf1149e76204d8b520cbd4ab26950c28e6e9fbad7189c5fc9432ac4d7a32e90360122adea6f0b9efaa091b00b9152b84696d186af4a8e4a3183d4d5c338e1e66af50af7253a52226dc28386fe3fc29b8a5ad04774a686addb266af6a5b0d309c6f6f36183ec9750fcbd19b707bd4d271e4d58a87801e9751ca4771f79458891f1098f396f3e751efa61184e95a5e27bb53d5342f3e7d228da14d4a25dff69401b8b7ae1eccff6f5fcfd3d8730d8564d9c4d655c1096b52bea473a883528267e0322bf2cc31bd3689567b1dcdb63d065997167f021f45ba8396266be7cb9d9102c688b99e72fbc760e62f01327c588eccf633d0a17020ec90bb0165e206cc5e8bde44cc7a07dfc50f5d104285ac372d70f70a9ba5e67a39e9597508e1801b62e5352526559123083b5aff9cb4f3b2b9596f07a6887c71c7cfbd9454dd9e5807e0745b44a9d7fedd02f900717c6a1b897323a8fc6b84704f5d42276f1f5b93e52b4641601b6e872effbf41ce7b38e5fe774f78301414d00dd0bb4cb97b2e2049812eab993dfeda44e4267af9d1ca8c1ab4b05adb2ac2314d86ff12b1caa2e6abb038787b0d382b8defdd5ef8299e0d72bcb2ef81c68062a7ed89b1bf2889aa7bb223d9379ba768a74345b77da9f8e1f97b9708596ca2153aebc25a8f4b9e85171de61afedb76e2030a4193ecc72a355520c22da7ed571b77c1dd013a0121165d61c7d8f55b82ac1b056c0d7775c84ff78236829d9f5ee1181b3fbe32b5ad9457edc0ecb85453fad39813ddb24bcf8e1a457b6e382cdb5412d3c89df859e7e23ab19bbdc0b7ef1f339038ec8acbdc86ee203877cf5f43bd3613671efda93591e358846d905f705c256f2917d295b568bbcb1542efd1a53383c3316b8f48ae21e85e8a7957d704cec0b7d9d74c739159a5b3ef47168ee5e37e5d2174d62c5fe8f3ca0460cc2ed0e55729ae378195c7cb9e515d3cefc675a3093f558dc95336ceaae12ce907c08ff57173be24223afd5b1c6087ad61b8ba3eb9728ab7ae1202810109148b9e4c54f405e1fd4643eaa9c5416af21a4a3c589970a5588bb9cbbdbe370dd8704b73ecc77a4695b675478686ef22381c99fec7d56abf791590c9f72f3029ae294ece5d946b6f965c8be8f3b3edef033feed79a0d7e69be7fc47de96191e0cd340dab28a3b5f903c9cf74b276ae30e46b5e31d7dbafee919ece91973b11cc6505f2d73e08cd9323aaa4aae16301db62201276daaa467fe432f953b1174df1f13b9881f4ae6fddc2ce2083fb677b58653001d348cc9d7e4b2eb5eacc983a1a0e34f1ed8dc3e5775d93f14148e85c177301cb519e1f439a501d57dc28acf7e592bd585e4da4a2c881240902393446f95a5cfd1c919cc62dc078a0515b47dd4b0b21eb6092fe22e0ec8388799e1c35b164efb5617da17a04f3ae10e5d0557579e36e278367e6884e0350b458d9307beafc5937cbd594b404f854dffff2013812fc6fb840666f18b076f6bf88abf1aac8320795f1e497802dc926a7296e0ad1d309011a65b99d18bffdaa46eeb33f81530e752265c79f6493fb3dcbf18b10d77509dac6e1def3e11bfb091397e08fbe484f02a451b857230c52565f513e3950c1c71a746571ae42595c977dc9e1cb5dc860296874d50782377bba2807653519161626e8f1f27b5cd66ad6fa9271bbb97392dd9334abc3d74c955a3c26d22b41e08403613badc48e6db223b30c45e4780c28828ffd92d167d434106cb7242293d073b13302ea5154a0040deb31aa01facd9221afd143105b4454c3b0e86292e73a12301d8546d5cb293c7444d7b16fa6d3b6d2349d267026dedbcda4ea268312a7d3041ac6c1470773281b8fdc5b0e62bfc05e27727e20e1a2682508c10aacfbbe53d054e9e5ea787d730d1051efaf75c3ee543e73ff2942704ab67604adea4d59c459e80e2c42e6f949708551777b320f92a3d88eb649b35a318bd30bc611b96c719ed101e524c6ba69de3e52052b285401b6f20e73ef1701d92014672b73ac2bfd6dd490178a0085014a2fda7d1366fe817458c0cda169ee74396792cd83881e7885b4d23d7856fbf63a041e89d407a400977a3be5f443739fab76652393d66948c10383ac01af29a25493681f9f7bf90175857cce87cfa0cebaf8b8cae51c0901840f3d942887b9d74504f8d0beaa5a3cdd81bca58a6f1b4693516d84a95539910e318242c839a702e4cfde1f6d7d6d04d120ac638775c7ebc86ceb2438596de0abbeba70a100cd26f09fa7de405e5fae0931d28a5fee6c2c84f2e0a76429593115d7a559877746c0ff0e4f3428d549b3fb25bea2e146df4e29707853af8d2e7f4be33ffdcef92951f0137efc71d9eb74068fb69965528fe01008ad5dd6ff32551b1babac8cae14ac1f0fc7a6acc7baa020d29c2f7c1efbc3cc3bbbeb558870d8485636b3aebd65f788d048218ccbd7201cd66d296185a851568c4257da96cebf75fdebe9284ea00b1d745831815c3693b035d88b2e382ae4ca5cf99e38b59120ea6677f72a5e3a76c94c69738358aee794b8ba006c751d13136cd724129f2e5e9d192f8034f7223ffa9f9751fdb57dbb200cc353a99c6db86f9cf300b33ef11f38d30afdb72779d4d7fa17ec1e06ec8f907c01cacce55591d6d9013ac57b7090cc8f78a755882ae1705ca4504e38df2c66b3fd167f66531365ea35d347d0a94ecec2e706aa546efade06cb86b56f4e8da7bd6260de71624f5ab21e2bf7302cbcc9f074a011e2c59df162f75dd39aed86938e1ad5eefcf8cb2324bdb2f3068b14892effde1676676c491db3361d651b13b1d70c7f6609eff0ca939759daf93c75f21ebb91f01bee8690a9926e802e9785b18471da012a27c11f84a0cbddac59a367404c638bb3397414a5da0c0437370678aa33196118d274dd5b1aecfba2d0339b67f53357676c581831f6ab2bb6a0c5d8d9fe23c4a796cdb560c32a2866fd3ebfa4b8c402d33fc24cd7bb927cad3f66a4b4a192cd57f634cd8fc5fc082807709ecd112a5285bc9a95cfa9bfe420b74e118834021771cfbe32dde04da587c9ee5de8f5c650276838e24309a250b4d57a6e7a266f7b71403766c92a04e02350f94b612e0461ac9853ee02915e8a57de36ed9b7ad48f7e0f4a90d2095b862ccb035e39e7a24d34bdf8da7259e6883dba873a47d1e124f6c591dcc17163c44ce466f7f1d4db79905ae004498f0932c66e4305a8b721e380fcfe8e3e07696db283b2a15c30fd8916d747d0e72b4c92984d7a760370c981877606b0cf902f95750f805cae5ee2d7c6105b45267da6b7d3c2ed09099057b8ffb9c3e45b89d041fa7515c2c4c3277264b3b3420d9144865efaad74972fe6fd2cb80a1e4575f4480ecd29cd1cacccf008cec08036024855b70f9c2959ce7da07099d0066df3bc5e137e5567410968f939b0ca5dca2fde032243e9fb203b9f63bde0d8d4d544bde041d30d4e7978dd96f54617327db6490acdb2e1764d2cfae9b63e6f2cf03c57d9fae7abc56643d05dba5f7fa634225893665831b75b506709a14722e20f45a0b6318c8849214d7b3693f0a397a84827d312da8b245a51b34ddbe0b493227587395f8237337a49c904a91ded61869bda035b391741bc321ff982e1fa6b8d991f531eacd6a876e2873fe9f4c0246405ae94b088c157692ec5ebc7b7daeedc7f58a0f449b50bc59b8172a6864a6c77c909fed87f2699339fc4519925d237e2d96ef1e00261eec1fbbb9a37a1ccb0f8517a2b7f1445d401360ee5c37dac1b9a22feea26ebab031f8d25e50dc8b202fc181f72fed9572e6665cd109007662a20f457450061028db3e53e73a2802cb08f68c06a20a878c2f00c46358d2914a6f87abf71123d51af87787f80a650d33ed6af21779149f933fa695b422d78925c8782c7e05d55b51aac21a08e72d92965ebb296558cacfa036f90c8ed76cb576dc2ad284a230c25ed525eb360e52ecfb72480ffdf189670d3ae4ed84713f3adbf6be12107cf5e9751295f8054b67abc6cc473225d0ea5e71d7a57067d047ad08195c7c9fb79177fb22b44a75646a7bb247ee5b21e0e374e5dc2e77e016ea5158873e037bb828b2183ca3128db28e1f6b9632f6b073e5a78655e8a7d42113d529c4128e7ef3bff71f433e30ed5f51fc2d29941dad2ad13f4b4947646259fd0ad0d8bcc5919e7149c1bf18dd732c3434973bb657ab53faed59abc9ae26b2bad9e722684b0cf384a75956fbcfd4e044da94aa940cf"}, @op={0x18, 0x117, 0x3, 0x1}], 0x1030, 0x1}, {0x0, 0x0, &(0x7f0000001700)=[{&(0x7f00000016c0)="920e34f6e6b03a3d636394f3f7d65c8b6585ea234650d6564c855e6f4aadffa9a992d8299afb747b4d27bd348dfed5230bb8", 0x32}], 0x1, &(0x7f0000001740)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x80, 0x117, 0x2, 0x69, "9e545abff37b5afac6c35bd7177fac93a6929ae2e1c375885f0015f3a19068219bd85ccbb2652a53e996ee096bf68d996da81279c9bd9adcd5053bd904df928336fb3add99061f12a1466ac8a78ceb281e5c079b234ee392f59accddb5e92aaabd224d8453828289b4"}, @op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}], 0xc8}, {0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001840)="9778fc56da23f8cfd58cd00d9f51f1e1ce1b621fba4f15e9ecabe93c24d795cb32990eaed0bbb6df7157967b2c4c2a565ab8a19d96967834190df85e97c4a0af30e37e1e76cb7ea2c1cbb069436da82bf6612cb28638a3eb26b7cc78535951040d0d4d1416a00b74f39c5922f650e2aa864b26d303bb94bf28de9bfa3d676a14b280a15deb81c183b5e74833f64fe37dca334db40aeb99ceedba7293306f15f3eb43c0f7564072c1da0b39ef2264a9a3d2dd151ac215411fdafac53e48", 0xbd}], 0x1, &(0x7f0000001940)=[@assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x18, 0x117, 0x2, 0x3, "65c515"}, @assoc={0x18, 0x117, 0x4, 0x72}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0x20, 0x117, 0x2, 0x6, "b25f5e99e538"}, @assoc={0x18, 0x117, 0x4, 0x87f}, @iv={0x30, 0x117, 0x2, 0x1b, "727d4555b2f18cebf53c353ee125798f11f875df902f9b327d464e"}, @iv={0xf8, 0x117, 0x2, 0xe2, "0752f77e6bec36aff8af821fca4e157d47f58b850410ef066ac0e2a1ce165892c171b0040f504dbdba917901e49108524e50df5bb83195b43006fc2114bb46575f949fc0ab90eb305572515ada5397e08e820285487ad90956e047fd7ec88af665da0420b36aec22a96906a4773d3837e5cdde5cca98e93521c1909e9d00ead57d0e20c118394cfcf636cca87e1087039093dd371f5afe799af8320f0488e86411b3c5c37e49e9d2f4fb34b9a307b5d2e1957a87e993c7192deb710e9aa08e24a7c5e8f11021e351fb5815abc1f21890639a39e0dfe704c36b6e0ddc7f21ddcc0cc6"}], 0x1c0, 0x24000004}, {0x0, 0x0, &(0x7f0000001b00), 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000001b40)="aefd35f3cdb5b307808d85a456d9ba8145427723c9c9271da49e73d3e8d177f5811cb41948c13cead1b461b14d8510b8258e91a416b1367133676e8df735b4995d94fee7a146e78a9746632b8f4e2b9fd2a461de42e5aab71f4fe2ea7bf217b816368f7d4309e7872f964a29afdf68ed2dd4f46617963c28112f5ce66b74733289b199ebe503fad07925bd84e995ceb3121a08b325518ad2b85709d3b70de23414d2c171491dca1b6c024a4b3fdc376dd401856216bc2a", 0xb7}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)="fb2a40b4dc650c16c78b5737e60b9b3f2d97a30ff4d8e55d3270dfeded31a605cdc27e2a1fe52d5205c3a185aee7d9d72e77d961c459ea1d5ea91b52787559a6aa6ddc4f603d35bbcda5d86cf25a28a3599e1eb381d912a7d9c6abcacec995cfa57f509ff8c9c28b31dacaadc17c3ed257d74d968cc9a80ebbd730bd2f79096ca129ff8cc217842877dcbfc2508a4be7418d1301d00bdad9549a93d2d37fd37ca10db4c8bab1cb1a416f7181dd35659d45b95ef96aaf95a27bb4f201970a4f61983f2d265d79b2d804561d00fd0ab3fe733efd35e4", 0xd5}], 0x3, &(0x7f0000008100)=ANY=[@ANYBLOB="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"], 0x2a0}, {0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000002040)="941f851bfb1f56dcb80d2aaeaa12fcd0158233af78dc187f4cbace09a9c3a36d533610", 0x23}, {&(0x7f0000002080)="f5ad29", 0x3}], 0x2, &(0x7f0000002100)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x98, 0x117, 0x2, 0x7e, "f67e46b09b761850df06b35cdc0cf134502fb9a3a9874a6768167e977653d73943451947dd37bd0165ac484239c8f5cffac038f6521409ca1530b0c9384692734bbc097f12a0e5895375091b5948cb9a63beb830a75797402830404593c4f72c1e05a916d590dacfbc7cee5d8e4b8816e3a733d7fb380ddf50b0121a3d4a"}, @iv={0x60, 0x117, 0x2, 0x4a, "5e8ae9960385d8bf1356e656543d37980df108c8cf9b255a6654c75dbe97e41292c858d27c493c28765a62f6f232a1cf8b1f18b89d05bfb0bb742b8b5b3d179fde9b1d7fa0bba3356ff4"}], 0x128, 0x44000}, {0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002240)="85de84c7aa8bdf20b7265bac65468c21bafc7bee0ed2a50b73235d3a8f4676eed45992e53bfb405e915656b2a122c97b827370b670c13f5316c74c7041040dae9a2b21dac63b1df6902f2778f2e36e7f9fef9593a2561da20cccdbcc182eeb38b0d95719336496cd76970c759c67997814ad160856df352442", 0x79}, {&(0x7f00000022c0)="f7575b01edd003c003374aafb90bbd2c00bc27e009c6c835bb", 0x19}, {&(0x7f0000002300)="bfa9896ace94fd4730fefd45160b4d74412a6dd854f7bc13f6dbb573f213f4b5985789d444d17c9c5dfa56f9a2049e67692f32eb141a19cf5dfad847bff88f468eeea5a0d93f176d82d976ace1b8117c8563b83af95874051da984f0e6f7992cca494135e8a0e3098d3d5efb11d47c3a8409ce219de18adbb244a690f967d0db9cf134c9ac3eac5cb05b7802859faef16734d691f782b63e5ee58f781b0700cf4d157af53e865d9846e33a8243f811386ff7ad222b9b7252d8ba6cb74eb6fa4c571815e70be0861c9118929cc0aa16d506967f254b2787e73794fc5446ab4f445a99c323c05bc450b4ffeba22ff33d1266d7f40a7398edd5a2b188461c11e33dfd0b9517af6050ece084b34e139c236e1f571fdc4107d7426177dc34031770f9bc846436ce23f17c4cec2eca7dbc2925666190cf66b81c38a6dd0cf6de2b58137185887bb7ae7ed7888ea130dfff21c086d4816997065d1d1798ae0687b0758d6ae2f204c2103c1c38f5a5bcfdc547493ee4878c0e8aea429376d46181ea938f906a5f235fd57997cdbb0d762c1fc23730644ff26090503e24092df44bc1c8244bc92bc8c49851425d779e2d7edab7bb4479a1d53356253c346363db3ee62e802de3b4de5690afe4cb5e98f07ff841da6c0e3f71947126123e4b150e8bce7dbce179b9dd60db6efdd50bee8e3982a690a2ebf019d5627d8dcb36725b589fb47d667d9e417bb49cfa843cdca921e34c00338e3abd90a143be6c807448e1b5f341112c23fba95936c27b1151344d377b06c7321b70ac6b8a8bf5609a44d2d49c5f49a9cdaac6be141e2676e1cdfa157507cd7c42b47b73d55fe14e57d7eb36a0e1690f3e4ffd954e8d1c15dec411d524b7b8d8bb47fb7e2333f8ed6997d0f27bdfa1c8b8cb5d8b27483de96f76661f51fcbfc356743d78a5d792a502cc6ebc665025d505293177fed2189bb60fac5c3e4d8804032421389d6febe26884241706810485ae8976175fb379925e75afba21b28afb0552bfe06c622972ee925850d3decca0d8ecaf40ced76eb64e9aad39bfe4f1b70ab15f1719cde3658409953952f4a51de12f9f32fbc37006b9b65469d82374149fcadced0675b5f0f32a601b2fa3194975469e16bed5d7ff1c34f3f88bf9d790526f2230406d57776598df9d7bd6a08b55dccc70bb3e8ae103c93710e703363eb34042b493b6d0aebdfddedd5372136394f215cb60b6e3949c6b730fa5c03889ec7f57d4d8af05f849e2dc82cfe13b1c0e896aedfb702026b7e654f918e14131981f847ac4cd2549e04ea1bf33c281473e0d23bc502d6534d6e1cb8f7cec24a63e9c2f8f95156bc7a23ebf22eaa92f7a08c5355e55d665919f654a6c6145668b11bd14615af3294df4df5f434ab11cea1e65273978391d36e81bb21b8703431b93387cff7ff3e19cab9a5c755d0bae1c80ce49b1597644819202e44df4966d47f21585c56f2f26d4e2f79d82ea050729f2f65b8bd1d2d44ee17223a2f59cb258ba09b8c529fc20ed0da70271b46c72916eb24a902d167945059e1a862d1ec291a42b3f49fd8775fd3c5b68ec8d4d80d57f2ef4dfaf17f2ac58dfe02bde86004e202593598acc3657dd7e216751b6ec5c8495d98d9753c1562d971958899713578dbaf5f578f0d1ba6b8abaf159628a0edc5ede9899ea440617da6416c6003fc4fcb981f91b317bbc0bc1186c70e5fc62f63c327d1db12a4a8bb313e4d9a281ebc1044458924dc4ce296f58c54c020d1f576f483ba997dd99c35bffb0400974735e5cdecc100ade200256d7186cacd94844c5b07bd2978e98ab58f79ac2e50fb241a207e7214559ac06b719ebcff91c1cd0692ce578e8c2854991b2be3475000d7bb2d6c7edfa44c3e13ac3f781c13d8a44694a879d98b26f87bbe1c255a5247d42ceca635d117bfd4f9bd86c7ad33ba4c0445e3a0c6d8d2eb390c54010026220a05b1cfb556508e6d7b9fa10cff7d07695be3c512e61cc538bd076ac6028473ecba7c51afaeecb26ee0c35952e29226933592ab13403d1d483a39ba1f490a03d4f1e13714e69980204f5b8b789d963d4b61185e1affec518277fd0bd2da96fe9e24d100a2d22aa742c6836e3c514be8f752cf13fc8b2737cb47d6970a68e34a53fdbea0c08cee1bde7641a3273c251b38081182efa753eb502cee65305915318e5735545903e5e30d66b7ae143f260187776005cbe86d6f81250247b3035852ed9e4ca86d9a235b665a8d5fc6f51601e72a3eb4e000b312cde93554afbc4dcd0c3c169ca7a7e345d09e4303ece04c1a54c8c8024daa2930eff34e8cc03e81a2eb9460acd69334270265013b045172c5416fbe7eecd29b3ea59fb5bf0ac81508a804d83664d4f4ed9fb8e422b19d3bab5f11638f3307434d1c5099263b3f1bbc69473a22738a9000e30eb8f28ef74661f6c43fec2894116f1e1e421963e8a2884f94a6a0faee656a39648e622731905f47ebbdaa85eee79d70c46c0bf7ad96b4c496a216a309a6cdf066f6fc2d2309d11041d7383f74dd5f8984c7be032b3864d6c017a335f753249761b3a563901f4495417f172f7bb88eae4ea505383c5de211cbccf93a9825400676a15717e3e54dc9d2120731eb63bf91164591506e4c4bf7a5070fb59df2b3383b5abc1f7d40d2196743c3b620816e0b5007ff323ddb603475474a169334e99c6191fb8c61f04eb97e62b83b52bb88b01d80e47264624a807edc3d4e912ec94241cf2dcb1e90c95f4cbd520fe00bed694dc5197d03e50fc83bb7a9605ab71836c9d760d36ee957b0bf2adaf95c6d8b39ff62c9f2b5194067b893f53289228edaadbf5f08e0e01bd42369b99717a3ae2740df5474aba58d19b44d5d5962a1468e341dbefe99c439fa5741b556d026ef083a1116353736dec2f178ec2ed904fd9ee500304ba96883d5ff2e32a32258e5ac947d867ffa8ead69765221e95a12fb5531acd15684254534d0dfb98451dfe097dd1dbbbffb2e394b8882e2842ff74235e2b97cdd757984441937e6a7197942e016909b0534aecf295ebbacd79c039ed4b30e1c2e683f62e7948b13228402c60e9ea9450ed4b4eddd0616c0425ebe21e34d7d57e988665964bf23cc3df1a3fcb277a67eda18ebad0575d954f9f335ec8bbc51a1f9c92e49d8803df553898ba71b7556a79f5511c4fc115c016e2d736ff03b2a672b758a6ab0262770d7ddb7c82e805cba172df98810bc69ce9e8c0543570b6380f1a04704ae8d3370649cbfbda7176a48fe0a463d712489b54ff6d109edb13ca00d7b993da302eda1804038131be0fe7418fe21a8188ca01921188c824a2af694c81059c6992720d810d0f783bfc13d947efd48e9ebe6f782b32b2fd0579ed93aeeb9cc3e8b12c0c267618f70d6fda0cc9815ea50546bcc6dee0a3e10a493cc042b24794410a875eb18802ab1dd79b846587c4a512ea49db5bb47d4093cbff5c128e4228ecfff0d48abb61e5f4828eecdb635d45e0e7bcee95a20b4dc380d33b5ec1aeaf50449498f758b61314c83ab93efd52962bf1fca549898632808ad70d3099fa3db335ed9875429b6338d712f9ccb8db00ad98c537601f6a70a09fdbe27d8a7e748c4de0e79ae9a796e912c24e084d6b01f30562693cb2bb4e6878e884db7d761f6ecac0f7301bd820af9408b3f6526cbf0f636f8202aa2cf12b0db300754f90a05db82364720d4b6a3c3198f6b407dad638ad6848a4ab21785c7dd702c2e432733412dac5e52da0a280a78a50e7215989f3ff40eff9b6c6f2e55d73dec760099c05f72ae6f9046efdaa5221a4bfeb9d1d2ba62ca5f452b8b7fe38a4b1eca7dc18f320e5e12178b386be64a6ba5bc572d6e0742d19178a30854320195bc333fba2867366265f2c37394f2c89838ea8aea1443cfe6112b891a35e44aafca0c2f3800f74a22fcd8ab5e71c6a1f27fb7ce8d70d14a2f2be6125b9970fac9192531e724ca0d488177b5f35981a06c8830c444ecceae23087cd486f51af2de2ea9b310889f7e5b7a1d56c2c06bee3627a2d99c5e1848ad7da0852d724623b7a6a4ef818c271db7cffde27afda31d9557254e811ab24540d4c326181dbf269a710b97724be0ce56e926fa7fce9d32267e366470a867cad2ec4533e3f7e93728a28a0b534b922da58f3fd37f7b0f544b46da97a8b24d0f8bcf781cd92a059bc6e25c48706b09eb4aeb204cbf4b31211eba1c0367ad662981114d376b9ffabf855a6f8895a880d81548f2f813df51d2ce3dc22d900e8423a4506030d42838beccc36d63cefabcc9aafea1464af7afac90f846567066b5950fde44acb48b31bc632b63ea4d4d7fee92dae2046193c25fc88f4ef99fe5a088f692b23c822b66b56648a32bb95926082da883de05c388b686be03c315dfa869d2f412807ecb7ddcc13fc746a4dfbce1c0019756b8aae375c0833464fa6b087a93c9c694fc74eb51356dff1c9755f8b0ceff6f4c94b939e4172f57cba6b2a217521204dbe0f74d257fde45986b6d44674de4a9c74eed3864669dc945fc49829a4dd0320ee630464f5ba04fe4ad84347346bc943ec09c438507076009bc0b418e6595ad47c27718b14d4cfd3346b8db0287d3eb575f66189fcdf7700827d5ac8fc7b0a5521679b68fcf344e5bedff7122933497500b894a42facb7d3f36896d8718f02a2cb62e71eacb5b7617d5b26513b717697d189ad5ad622f829148448051700b7dea58a395681bfbcf0912071c02eee96625d184f40efe50d39d300d191c294921ae13fa1e288092ed4bd41d29cb56ab9f6102357d605c78fe44c78629ec0db623e2f039a5bc8ee5b51b99b478510c0b7fc9fe7e2547d9762243f955f41bb93bc3f631bfac0802b0e2784446310d917f68c7ac4ce5834d12b7e1f683a5f1d4ee79c7398500f00b1b7d5ad223673a6a3bb2acfc894ddba670eed0ff5fc9754819e2bc4c8fc2de06129ee255acc998678c801d165fb93f2f83b17ddbbe83bdfecd07df4f48ad31424802c353b9f3421ef78424dd25ce01d6a9dbe70e2aff0cf21b51608a112501355713fdaa3074b862493cd967f75f90a4d76eedc54bebe624f45ec51d135a6af7d1b82839c91ca59a730391c9ba7663a5ee295f17a63ac0535f1a4a4e0a33c0c25bb4a287fcc6c40aca8f7ca5b3a6af20d6e96da299a229a99b5843fc33e1e08bc0533b823774ccb6ffba8586b2996e3bddef55013a3d6ee3be4801e555339b908ca1ebad2f6e21c44d19d9b9ca7632c60683f857ecb003f1a40fd7831a29a6b304696cb1a36576037c4532722d0ac1734f7077c5da9dfaf420d0af21e7da8349a58d8626e8108864b75677658663da0d6dde4594f7b41bba6c6861146385291d752c2cdb2015c1a2a88446bc87ad13cf1b9e0f0cd644412251066a55137529a2168e796b429e35b9865a120ccd962c189550cff8ebbeda4e1f90ff5080b8aced921aa5a6905e63ca104bae3b25a3186267e9dffde658d4563fd51a0b804a4597e44a074e88d8cdf4eabf25c3985d2e8c3f9afb3bf573efb434f745ab27ae620aa6eecf1007ad5941131860eec1d144000e51ab801288f4c834da13391c2aa569fad7015c2d3d2c5859e41986d95421ec6419e1f8b63b876af5fb2dd3d7e2f6c5a352681581b806bf8105121cf07a761fb14920e2eb9f732c276f456c17d989b7385b0a2c3e2baa0673eadf2d572fb4096be986ec2b03d9c438ad9827019e669aefe6228bd5f5559b233404bdf9e6c24bc55712a07121fab01c6fcddbbd77b82f4c66602", 0x1000}, {&(0x7f0000003300)="0be7ce4fe02f3a2ff1baa90f78dd934b7e64f9c32a6a1dfabac3eb777a67cb2842666ce2ca75f09cfe8209f0ff6542a4e5d20d1ef8af6e866f550653b3d99f12", 0x40}], 0x4, &(0x7f0000003380)=[@op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0x7ff}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xd0, 0x117, 0x2, 0xba, "0ade638e10e6f4cfab843396984b41b0bfdc25d9fd83574393cd925c8368b74acb82367cbc6a3cdaf7fc0938359eeb786ed908b72943213caaa268da116a1decf8a4641fa6290e17a8713ddbf00f4f1c7ab51a207c4f145fee1063672fcdb6857a84662d6bcf607f5761567a68d5c44699d1f684e75d03450e2b040ab5796b64a4cc816de126752ad44547d1ee83e0f3be9e6f9ab0ab71ed790a9d6a52218c615e72577054ed1eae68eeaf79fb43c4ab06f04ef5d942feace363"}, @assoc={0x18, 0x117, 0x4, 0x7252061}, @iv={0x50, 0x117, 0x2, 0x3a, "82d05b9a91a1cfd1cae20de3e92df3f311ad432ed5d4cbbeb1679fbe0f5b5289c0293fc2600fe644803ee325ac8e244c9c5a50324377dfd469ac"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x1e0, 0x4001}, {0x0, 0x0, &(0x7f0000004a40)=[{&(0x7f0000003580)="eeff59795e54", 0x6}, {&(0x7f00000035c0)="b44696fc7d2994e136b27519f410f982461cd811e634ce5d22407f517b4dd8aa8778054d28b3a9867ca60e9266628ac429752af4e7b39300db88fec81bacc8e210c9f20fc64ca78a3c32742e114882e8cedf15c708b4ce9e60222aae0103eb7d9798195e5794c580cb98882df245a9d405cf1c1b7be020be64f459419f7cf770dbfc74299780ebd17b7994db05b1fd614f45589035ce64abae9b470461342a9e06a665a7588da3cb1770a824f949acf034989b381655b3e4ab9bb7c4498f03f88f2a3866961c6d3ed3af1a67ea2b46f5c5c4874bc0d558304598a4c1b72775e86bc149cbf3fb6e5387cb4b0adc52efbd67b4", 0xf2}, {&(0x7f00000036c0)="2fb93da0a37a2894369af8cecd8a510e1ba22813f68afddc834f53a735592c69099c22434fbc21cb2047c3d32259a356ce8c7ff15bba628d49b9025ace61d5b3e28d673df4063e36ec6935dd7e34548e82f89987cf870c315eb4f70992d0a617e9c4cfffcecfff068a94b139", 0x6c}, {&(0x7f0000003740)="614b44c41e0b79581f33e636a2d6f60671211680d7e7bc753bf10803b0c7c0fd74813a210a2ed60c65971c908c478c56b28f4a14d0ff306989f842357fb3e7cacabfbea09dc42b06fc9d7eca0aeee5a0785c2c3feaa611259cac2eafc31755d9641da6f77c280e7fe0fe963813e4ec4dc8a70146c8df2b4cb9b7d23d4cd2562436debb15c376deae86533bb26a399472b297c1cc3d6c006a2ed6", 0x9a}, {&(0x7f0000003800)="c4d61b0387f54690f3c071fe15b936066bc2b0db6e3a3b0f9639c139b8d3b04e0d050ed4183bc55b26e36d8e7f82da068c4311057e4fe4f3d91c4cabeda504298d6b07d696cbc71913e6abc55261b4536c98ec26e314eb21fe888729016b", 0x5e}, {&(0x7f0000003880)="a7ab4f29cc24417da605b143e9f3168417f8560aab47801222404bf8aa9a81bee1294ffb549ad5bf06548dcb08a15392c8da3cebf15b35ce22e5b7d4d48043e4729d117f6679dbf19e0c32a5989b41c51d4e92fc91d2748c3ffde756b4fea06947a286feffcff0f2c0b53f9a538ff2d884c8e772f4e0fec6b6e01c68c0807b8ea8efe060766027ec174358c028bf69cf9f9c18afb56bad20c0721225b2e888", 0x9f}, {&(0x7f0000003940)="71e0fa1a0a24649855dda98e2820ca4ff96fb73c9d4af9759e5b28c35e4939fffbece8420456a94d6ae8dba1a3fef644d3c9961fd8111d8b6b7b115036a94feff7055ad1724b524760e897b6c9f8f4e6f5", 0x51}, {&(0x7f00000039c0)="42c58405bab761d35a89fbac2239223e35ffb71434f413840584bada47dc057b92d5c063c1f5c2d30f093bda573951fa607a", 0x32}, {&(0x7f0000003a00)}, {&(0x7f0000003a40)="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", 0x1000}], 0xa}, {0x0, 0x0, &(0x7f0000007d40)=[{&(0x7f0000004b00)="01567b0650959087655302ba4282e32242e0f034a832b9e3d7c4431fc6a6d8819dd443e2e7a66d41dbcdaea3ae7bf17ad3f1577f9701c288c47687dbc55ec6a843542c1c174463f8e5a6d25df5cfe9b786cedf18865d790691284651804b5da5b4d7e6749b4b6bb3293ecbb6675adc37d627c1a7da3055dc47753e52c64e8c41bbcc07adbe36cc52e58dc1ebc0079bce67882b4c27ef9cddf8b3176a9e720b6949e6f46d8202ee9462a4811541c135824605ea07ad52107fe6a6ff", 0xbb}, {&(0x7f0000004bc0)="3cc0b6b24bff76374e43fe9fd4bc04a8b78c102dc1979f518b9cf77c52e4338a901b986c8ce9a85e8624c0e221af8f09ee7919ed62f811d01419c248035fb1fc0023c0d4c02d1781f9c5e0fa2707027d538b7cd2f176ca9c2ae138276249a9302731c95a326b7bf17ffc64c7587988f11c4c0ea31a5c211dbd03c47376d68ced901bb758329d8c54deb6fc51e4051dd724d36311c3496b67044a759b5e81ee20a4b74967ac61496338ff2b6417f7142e0a791d6657573d16ae9fce4ebe2ad5dd6b8fb9838ca0ab344907c158dc81af0997079f77a72764ceeaf17fc7c4b4", 0xde}, {&(0x7f0000004cc0)="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", 0x1000}, {&(0x7f0000005cc0)="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", 0x1000}, {&(0x7f0000006cc0)="ee9fa92d5c3de26f89f6b18280b6bd37e73b12ccc1d45eeb3a0c948b768f6cd4db1bd1c84955f7f7129a6005cb8452cdfa28e59ae42a2da68648ad2013f5137e52a27cbdfc9510b8ba8f94eed5e6d5bffd189b4290f8ac81818784c3c1d8394f8d3d6f8818c8eb389a8791203432c2aa0b56f4e1a049268dd033a002fdf0f2bfb024c51f04157f3ac8a99ee27e141b369f3f07df1c1d85e51b790f81a61c56fb462d530b3a211dc0464b00031b9caf072b0f04d5741de8cfb5a61261f7130ce9a295fe13f219e3d00eb5a96bcf2af649b47d6d3bc35c6362e64bec45cdb3ac58aed60fd763ecb8fd42230a7557434ddbf5cadfa559c02a3e87823a8054e407a9f604e77b128c111369cebc2ef4a40eeb478e5ad31de027a420c8def18c111be6d5e58acbc3e98b75bcf44c899446e2d2790475eceed272f80a6f2289bc5dfdee9124d593ccf841a3e47540b5c47251dc7825ab66beaff1bb409439e49653c4bd09b9a063fa1c029b818310fc122891a7131ffd15133e29eb9bcbf3edeeaee7fc9ebd5e4bda18554bbf79bdb40e744b84afdc77cea8ffc2d14d78cf5431376ab0662ed29693f592e5238144b261a4b1fa0aacf36f2a384c1bd96aeefb4b4f90b95c0709d0f59c70f861cc6543814821bad24b7ed6ebf6f1ad56375bb9ce1318427ad2b80a68a0e358e9605ad732aba3aebc8e6b486e6487e947b1941fd7f5196a7163297ebce22caa72f8a6ea2d87831fbd46037c84298a02b43e6fe929483f343f26ddc645959ecd5572348a851ac8e4805b8e45e61c0ac3a21ad12634afe95d50700ab53a6ce8214dfbcb748534aef85a99008bad2dff71e281541b85d72f407c225207a4a11f7ab2f116ba9b538aacf91c86613759083ca7150f868b7ffd6dc3e5e8466a0a353b85fcd0bf72417be1248357427507bedb946c9ad0aa22f29e262c9a7364b8b87c60e266a43b06f767c90270628f4076146ca745068a9af33e387a350b371570e7a36b8a232e0df99b1050e9aa1a1c29402c02cf62337307d2de986b83ec6b30ba56f519d9cdea49b78181b1d527ee85fed2f8e100f489a7e9dc1099a56a8b25cd3448b5afbb86fc447976399e9ba4b1e25184599dfd3a7025b4bb59f59668fa99b75daa3f141f91f3b1ad62a022a9f7841942b7013e317277bb9033f1319e194ce6ac8f2869818bde282f15637565aa6fa3877b20588ddea5fd41141218be4168409eb048bf94c276ced7f66fe7cc453f4391e2a2ccb63a609183e84a4ac3cfc431f39fa3cd6d52767138d1d619dd0240aaa8858c1d6f2f0c05fa17243bb7aba351d5225f42fcfe6bc3d19359235574f9119ac6fdf700c4012169656a7f91dbf8987ca4582e1c42075e358f484960000cb2975879d1150998596e9bc3c26f68e9bae9b6ded77ff8b7af56671483af3c7e3325494a11389ab0e6541845cabad4a88017aa43a5a583b296cf7fc3deb6a7ff37234300fe4b3f594c83462e3a0c9d13afb6c7dbe51ff44371339244ec871550d0131779522c620cc66ab7cb410601e1e57319eaade1e02f0626d8a255b88760fe7acb661e82ecfd4251aed146a2101c674972a9a7dbac9bec00be983ca3c1f5a7af88d991fec8029dab9d3c0585999ab2771b68bd959bbbbb1fc8ce66558771de0219d453b6cba2e67ced0c4201fe4f3b761d0bc1cc678aa50685c4523b288d24a6f1a736713c7b8d15d937fa42d027ea2754625081acbd1ea7ca9dc487ce820ea7032fd72b8a05ed467bfa527f9c86088356caba4df72e1bb1b111ca814bfd5555ba6100ca1d1ee34acacbcc3c2c9d6099c98551089f63b256b6a78541ce4050c51d35de99e4bb2ccbdbb7d94f9d4a6ac246720df8e74fa9352d614b634dc9157e19fb4fedf1d2dbdcb67eb01c416c45eaece5649ce3e48d773fdfb9c604d4d9c7740e7354cbbc409fcc422e7b85bba8b32986ec1bc766737bef4a76f88461a1c1e770e41701605745f65400363c795352ef9df923f279afff4cc0e5fc0ab2dc6a795a9a2f0d574bef11f96d7fa16d1d6e2b8355df95f3d2fce06272ed71a2d7b79675989f7165cbba199e8394a4692cd4eeb03bf8e80a528385c1033f8213b8cdca21188be13e4106f11560934c0075ad4bd19d2aa2fb3ebf1d95d854bf472f8d10743aea59fc2833d6ecc875249cd377b4fc5dff35e0f077a3ed2141353d372796c185150ac1cd18c13639603a66bdf41d4c5121a143f1bc132517da5b50e1c23b1888179041be45f8f0d0b34d07b3cc5df07a47a4a12943f13a2dec9a75918f35fe1dfe4cc938a5bc0a998d6e84eb840a19b4f706618cbf63abf9d57abddfecb328d22c7413e9baaa2956130b3417699dcc8fd85b7293e98ae3db16870c8c6bcc41c95c2fb8e367ca8dc6e7ddef25f654263b7a5f137d249167b2f5e09fe8e8d4490642dcd84581ce2605820ad9ec4a613d51443b5d658952554144894b19b5ae80af04fb85b6f0c08a479dda358bd43687b6b4469d5e0ad5586ae7042b028f819e8869cd89782ccc6097d7a4fbbd4c99d140a274ff03aef82928f1034943c41fea6e997ac2f6caaf9d30f16820658c89e74232d3286997b585be08e2480ec124f578db278e8a6db666a4b36163d3388df6657f46acf36f56c3711cb1a25d6d2e5dba976688ebf30ebe765a89fb0e5b148607bd62ff20ef4c424b68cebf4908bae9b298b2332c67763dfa9620e47f255fc120ba7c1d49161bf68da3dd21b23064edb981ab374f4a683bff1d82cdf7795130ddad40bc3023468354cbbbb7b69904c77b06379fb34a67bfe237b08953126fc164cda84f5434cb441e89e4ab9ad3ba465553a593a35cde538c7dbddd9e0852a8a3a27eab8403b1a587524fb79f052ed0b7c30b928d6f0442d70c5521992d13d77e1e5da085588f3e4d08797bb353c23171b10740b91c4c7bbdcc5a301e32755be357a4cd467c8bb2ddb30520ee30ada2722470152e5aad16180a0858f55993c21f1ad7654ea7028fba64fa90f1e3acc7e0bf7c6ee0ca5c1f3996b9841a116a8b5df07857ff8ee030ffab97c023a51c9a9c117e2f18e22585a285cf8cb466540c0a54dca4f0408d8e1855e602a7ba3ee7d9b1fb3b624106eba9daab90ee1021df355e23d47a418496279a92135c2c776e2f2a777861ed2de011c34fa63cc1b3b9bf8267c35f17f560955cf49075073a42eed9e1910afe5e22582abefc14389f4a1eb0c6387c2e3fb969148a49486a491c04d25b62124f91778d654175adf32b694b17d689b61ed6b637b7ac3d0a6e77191a5af6a221547f94c157e165c615911475ad0f6dca0c718ebf471773e5ccb22460dfdc5bbd0706d350b8e891f424b76356b9c2ce1f04b317fe1c350be877f81b2beda34f921a0799665f5fb8dd8ab5ec6955bf7f1dd8f384113cdffc483afcd825d8b26e21ae2c112168ccfd4dad8d5fcc6f3ae7c7ce67e48d85cddd4dd85bcce831e26611a6a6314279b9ba3a34b0a3661f5eefabb90578085b7d08fd1c6ddc769be70ec789fffaf0b196a16f71b37f2c912a9868ae2f7948df8299aef6aa665272b5942bd654eff7b54173b5d5c95bfc6bf62aa825f4ecc5364c702d792559cccae71683e5693fd7ebe181c2999b27ca448f8b8559d2e543481df80eb2bba77082b78ad31eddb8eee841ff4f7930dce6c2aa4ad7ec999e1ea6037c39805be6671a40b3c9a85ffe0b7d24b67c387555c7de8a615f6eac8e259f6f879623f46f27614c4f3d24478a24543ecf39fb4f763a888d29a8215854a1dfdb120c9fbb269e7195789b6a53b0516b6dfd2ebd96e02fcaa5f9eaad610ac42689ba2dfa4f00843c84694274e580ee96ddc337e09a7be7bf97300d133561963d0aaa9de6fc9163e28e3eb907d83e0ec1df981a67a8cbcceff2e69da8b9fea68772b9478b0c4f91abc1427a8d34d2fe176c36000302b5ba2e16a5d4b8646c45deb7e82df4bca20df8a6596cae119ec771c63a804e595ab8ef9e6157077b91da6afe3eae3a08ca5241bdf179b23ae4a893ee59bac26b7a29d74616a1c97f7214e278b7068abb1eb5c853b449350ef2c9dca218b4d9cb79962d53bde20962c81295c66d21c655792822409db0f0e639f366141c7bc28c4087feea036e13da7e42d092483db01569d1312aae7e28b51aac8345a1289db331d3aede60850df813f868df52cae0e2f6bf0c266200f180b1c3acb87edee55ea6ba470aa46df58ce49c24a1c63b30fcc5688b0f294b15ac9cc0f5f5e73552d366e62262ac16ac8cea7beebd28d31640cea37f5d1495cabada667285bf67d4ebd8bfcb938810e171c257ccf5b90f5cd0eae79d94274c7beaa6e6ff98f11dde9823c26be75112712719fa4479c457ee2bd0f69ffe66ea56026b42700c6db061b9355c7cd9259fa92b82c42b2c9d506528bdedde6c71ecf5b9762856562e8cd0e5b889acf3fbd93e21d428154dcf91da3398447e43d6a24c493ab3f4178907bdee1fbeb8aec5f783d62982105f23cf3669fcc23e88be214bcbc96783cfe1c26d8dfc2b7b7c019a17c6d3c0af007f2283831b4c1462a808e40c04901d1f5c8b3f36a9d44a6d85d0ad7fa55132344ea1d3548608069648c8b480b038dbf3dac28aa7364ef6b5b84aa36a4e7b9c080187f17972d77c9bfd166a5ddd55e8ebebe569f77098487847c1f7d57e01ef2db2b9b7d56f154334d6fdf661605835902d9aa9d7b7aa7ecea23a82dc80e4f0a935d8196ffb0650a9a159ebaf35dad9dd942bffbaf7bfe9869c0fa354a9f3b42a53f9bcb14be01ebf54b3d47b2a9a30622da0531ae3eb0384412a5162fe54df3e84234972f3b030055faaebdde846ee50ce1eeb34eb88e2df9ade1ddd23a4b232c6c4108840607ca9277831677fbc706a1ae53bb192d408552987a0bee0ace03ad66c7d8c42c47f30c537a90990b062c7b458eefd1a48a0d144b16bac1e99578a4022e0b95fcc15e81e75b7e7730c654faf102d13dc84f309055ba333c380ca23308bd7f3786779a433e000be16d1c13d309e3b234c20b5dc200b0f7d5546353bb5ccc860b77cbeab793942a8982bb96d0b97185e8fb720e8a1cb89dafe85fafbcb5d966f4043b9a819b7e61e9d76d9d8df88ac7f561d68fcc04de6d52b239801b0aa6ccd5d761cfd1b66c97ebb1c78739228e595701673a7d0352596d2f78fea7189713e0180802ad1bc15f848fdecd15c63bb6c345e988118d1d204d72dc0b2a7bd49bb2a8a8649caf0e0881f93b020e2277e45e4bd3aa249d0a4b42caae90ebb7f0ef89e71407a411f4017e636020ec7a6523616eeb77b0904597e31a5fd32598f8b8641988b777390fba56013b1e192fd10ff77177adbdfa14ce069846c891ee6792ad61a0cb12a50266c9a4650ace59e18d31ff4e37b3f4aa7d47ec6d14060b322566f61825ee50417130e726691c6f503713501ea447c27b8e7faca5f080fdfeb9e66954d68b0564c3912d978d4bd5604cdbd36f872f2bd21359a397edb5fd0011e57d2b866132aaac42b130f84e71aa2dc66a6ef64bf123b4880ab492a2d49fd54aab44a49a4c69785ee0888bc841a6028e8804e2264549896dc39a722aa76d2b673850839db048008dfb10b54dea777417a131022596e458a7cd4be031a9fd8c925037d8e551d4bce4e5c0c16ae0e9af1e4a2f581a593823f6bc6758731101945e746f41726f4e241c420f6cb5144c3760e24782655906d1e49124577a5a2855160f4c1a1531109cb9ddaee866f59980cfedf6f3639cb0f07187b812618632a5b979f24a9b2", 0x1000}, {&(0x7f0000007cc0)="3784e18d86994eb03c9f1032c61050b136ad66fda7b4a7ae623e4aea08b9330e2bf4601a0e183cf3c822599f52c454890fb9ddfda960954a7d3536db2b52f37b38075c76af7a9bf34d3e0dafd87222a8000b614e", 0x54}], 0x6, &(0x7f0000007dc0)=[@iv={0x70, 0x117, 0x2, 0x59, "592451699d02bbd3733a1954c145a78c0bcb9cec152da1950be803541a1a89a16ca22868d94b72360cb51186aa56f529d4dc81c987c1daac2c77b2bcff4a74d4b797112c8923ec01a6f547502cff3449df99aa4dc47ab41ec6"}], 0x70, 0x4008000}], 0x9, 0x8000) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000008040)={0x0, 0x63ce, 0x2, 0x5ec, 0x68d, 0x6, 0x0, 0x1, {0x0, @in={{0x2, 0x4e24, @rand_addr=0x2}}, 0x9, 0x5, 0xfffffffffffffeff, 0x9, 0xff0000000000}}, &(0x7f0000000200)=0xb0) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001b00)={0x10001, 0x5, 0x203, 0x8001, 0x7, 0xed8, 0x5, 0xfff, r2}, 0x20) [ 235.424730] binder: 17631:17634 IncRefs 0 refcount change on invalid ref 167772160 ret -22 2018/04/14 15:03:43 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x10000, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="7614eac9b38a1d59543f2099770053e81de283cccde248eba8b8fff0c38037ba6b27d12d29c8ae0ee61cf9258769f149bf3cd36eb0b3c8a18f6fa5c168ae4e9133cce0c05531e1ec020c1f0072bf6cda7deb78ba106b9f385762c167925b714fdfb55e4451c91fab09b11afca76592e43f3e961cfc960eb29cedae99e177b06ad7edf2e42126c49ddd9bce56fe4706", 0x8f, 0x8001}], 0x80001, &(0x7f00000001c0)={[{@discard='discard', 0x2c}, {@nfs='nfs', 0x2c}, {@umask={'umask', 0x3d, [0x32, 0x34, 0x34, 0x33, 0x35, 0x35, 0x34, 0x37]}, 0x2c}, {@uid={'uid', 0x3d, [0x32, 0x31, 0x31, 0x37, 0x36, 0x32, 0x37, 0x35, 0x32, 0x33]}, 0x2c}, {@sys_immutable='sys_immutable', 0x2c}]}) 2018/04/14 15:03:43 executing program 0: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x801, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "6cb782e4ad88b89d1fd309169f44812107130ee55db70510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39806e4ac714b7ecefa8a934a"}, 0xffffffffffffff2c) getsockopt$sock_buf(r0, 0x1, 0x1c, &(0x7f0000000080)=""/87, &(0x7f0000000100)=0x57) 2018/04/14 15:03:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000007bc0)='/dev/rtc\x00', 0x801, 0x0) accept$alg(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000288fa8)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) sendmmsg(r1, &(0x7f0000007800)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000080)="9e2c9ca4af8a891f45c4dde80252dfe25d7879992e762c2d6e862edb54229969480f2eb4268a757ea8bfff4b12b23c6b9291ae11b91037f3dbc9a5cd514d3ad7aa59a83ad6475ad85abfa32f88b442287447d434c9dda9a361ececccf1c407f65ec2d31fefcaa1bdbbbc9715c8d4c887b23576366c417d03cface06a135d6030ca80f6bad5f253bd303eaa4dc9ac0e70fec3f0b41ab5722703dcce470bd866f67b9bb71d0a88eab48448c5e7ee0fbb577a9f6ac8adf61f825955b4e7d8a1662f1fe3351c1c36fb65cf64d728ce751d481a58c9b159db4cb81bb709bba73d1f0b2b7f353376f40d5a", 0xe8}, {&(0x7f0000000180)="ea561c3f450df2d88e73185abb539f4516eee6e4cb46061b38f647328df672f5240c2ababada1d7dc9ddd91bf372329c3fea4ef3b9411d9f767e9e0724dcb4e67d9f18", 0x43}, {&(0x7f0000000200)="d20c06f772bc69c83f30ff5bd05d2ef06370758a935f9c71ac27be8b77c7063a516ce3f24c11dc3e478e34286935c0bd68", 0x31}, {&(0x7f0000000240)="9efa904eaa892ea32461c90f552a1a55bb82c641c57876d24a90dd2b6d5a7e27a026fb29d89bc0aa979f0bca8ed3158df62b992dfb4b4d834e827c71b46df34887bbfe9fddb8b0400c6e0d94006c84f5b452b324dca01c10ba03ea9e28ab30faea37a57035df799ef1c8d7c97e5687e8cefd02ea387bc4dd44a298efc3d0f28204a244c3fbdb90526e50fb2dbc119ee2c67335e02945", 0x96}, {&(0x7f0000000300)="b8c8a461fc5f16cefd773b2f0fbd10b8d4ae8fdd267a255c438c36138eae2bbd6104720e48c10a154ca0c721777969e322206d14a7ff7192c6c468b5ca11", 0x3e}, {&(0x7f0000000340)="0f173cca71a979ebe5a68790a46f9938bf12bef28c6457f8abd0d7af55d2ca", 0x1f}, {&(0x7f0000000380)="2f8fafeed87d0887a1d69bfb830c6c1d2bbc14a31be09430cc71bc7c19105d7f788463799d3a4909e20c3bc06d37751e5d421997ffec2d395937321db3656577e8ec46a2382dbec8cd72f306550bf0b2d637bf9a28b4c87d5198a8433ea49d0cfd32158b5e2f5714a41c54e1985cb32582d7b225dbe0a73057792374058c5a08052538fa48d77da3a4f056a769ba6f2a0e4ea660c293e3371e58b6ebfeb85f9a7929622438ad5600d0fb2094ad8df425a6d860b976fe81", 0xb7}, {&(0x7f0000000440)="6e5ab16912c5a0ad50f50c455e5b7960c232795d1203e630798f57631ad3c6a57b14d99331729ec95d8c1fd27fa7c53cb8750f9f557c752b5781d86482075efe0142e444b4b027a5f68a38928090eff30364a5c8c8eee3e1ea49890b5546e661bcca0e2e1f4b566b1f7555c1bb5713ced4959930ff8efc97a1b53585a431bbc54bd47af06d93457b8b327d077476c198f5a8de4571f0dd3eee26980f1b1f0bdaa9b03b9489335ae797f427", 0xab}], 0x8, &(0x7f0000000580)=[{0x100, 0x11f, 0x3, "dadae6e2cd576ba64403ad440ca40381cd2b8051bf34af23fa14d0b40b0fd6cea83cd2eba1f4ec08f1a7800214530a1b9e36be366f9b3fc4cea70e29cea82d62a8b3f5d8c0b1bd47f71044000be970e9b83c1ca33a2b07048e7876ce4c932e2c587c4bfaae3e3b57a67e203d6049e61f760b6976f06ae69fc399f71a9ebeb5451afb1de2bb3edd0d441a8d53e1ef337f7f9a2d11fff5fd885eb6821d045defc31c26079113d1852af356f0330a9421a2e7ad8234437711426cc380c675c753821b7b839ea62a4f0fa53862135fae718ad84256f04313292ca5046e1797d400204798484b7ba81c29206c"}, {0x88, 0x10f, 0x2, "a5344700a65f17fc3a0f074aef1f33c91c5c42ce6241843a87267aefbdcce616a64f05cd8903871d4444f8d13cda045e9e05249a270be65b72ec39ce9f9b1a30d841ace59edf28661a2bc81c876d37de017414394cc201bc9988fd004207c508d7711d65e3cacfc36adcec90a140315f90a9c6860f"}, {0xe0, 0x29, 0x7, "48d2f26468ad6565f4258000f32c1d3ecec25475a8c98019edfb1b524b14b616161bb290493203b31c7a47c9df70ca2bedf4de7a11ba9d36aeac8e6262b86824de5980ef25d56b5b6de647962567e84862c25cc875eaaf0bc94fa099f46e18bfd4f1933efca7c43bfdba3b77e1b6cf88da853b35f7c450d19c8ea6aa1764ef134afcee134397000b0bb577e8545cfd057dab83d3549357127e8c52fbca5f5dbef3c9634c5cd1cbfae3396f0ccbacaa8218bb9097bd9813058fba9a4bb86f92d5d0ad3ce477157765f90df3810858d979"}], 0x268, 0x20008800}, 0xa6cb}, {{&(0x7f0000000800)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x0, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000880)="d968bc80edf2b90ea23374e750709f0ce6f739d40b0fcb54fc0531f0b46c98272717cac4", 0x24}, {&(0x7f00000008c0)="bc690ceedb634e912914f81d86303ac8280647912f0a81154816ad7df821918f11e46fd908be2a7d7be97bab46907c44ddf4b1d9b2c6ae14ae4902e4ed5e4f3a8814dcb7acd11b09ebdec8509b2aaa61366ab5eb84303280230754b9930499db81161adc0fbf996e8b56fb3fc00b09f743ab88b1effbe596ff1a934502194e4c7ad94192708e9c6b77035cf7991e7d5585edd909ffa4c1e93d1773a7516f4bd8b62a1d1c28e501a035e353d60c", 0xad}, {&(0x7f0000000980)="ac19bbeeeb00b36d713f5782b12d951ad93b125f29d65342b91fbc5c57b0772ff9b5c13394f6dafc66c83004bc58c8e01d48622b6089435f80f5677f4c54f54f8c8dd43e7b7521cdef4fc873002202f0937c0332fe794629002e99e4c1a0c8c5c3b48171e360f9c8315bf9d763fa72c1db085a66d83af591911ffcc61e941c32635f59b7623d706c90e3700ffbab3abd9a82acb6054f5a8f2e", 0x99}, {&(0x7f0000000a40)="451e36387205519e2f8e47f5031fbd07590f197a9a758c235f946696ebd0b7d2b3e21cf5bd020060709bcb359504c9f83c42d5e573f23fa66de47964e695a1c96a33def687670b4fcad4d06c3561a674bd986e7ad54dde5f72153ef76812bbdaa61a5168d33bec01270b2f6c7d01ac4199cbbe616597b1966771bf5446c584bee4d5acf8f477982edbc27532250db302f6cc637b23da7ccd7cc32cb4", 0x9c}], 0x4, &(0x7f0000000b40)=[{0x20, 0x84, 0x100000001, "67440158d7e6ef7472ce5d4d2905d3"}, {0xf8, 0x0, 0x3, "00d10c1ecf28897e4372d0246223fe23e101dcb1a0e0a22847123cbd7218d30da772dae020a8cade859d93df11b5f964839f810eec71028d2b4a8de10b9cc96748d0b74989ef7fb1e8f603c7285655b410e3b7e62f6f5d8d0bf295872d33b625e0405443c37bd4b58e9fe7ac34e6644fac04ad85cee76f397859f6b311ee45a483d3522a51e6f1801faa287994dea4ad57922e31107ce80677a6ec7520406fc459c319db0bb7944bf74570788b190f933a1eeb44555206dd36cbc9da0858a78059d7c858a9423a48576ca4ea46df1803e6eefb456f50d9c14c50119e9c1110f98feae1d1a9"}, {0x110, 0x10b, 0x3ff, "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"}, {0xe8, 0x0, 0xffffffffffff8000, "00588bcefa51a5e18fd5f0c61c64a4ca474ecf540584e1e1ffbbfd4c657df4a41b37ff4bcd230b8a637e88be4a2888bcc23d46164cb9507c0a5233ded762d3941e0fde8ebb9776a8c6eb41923b6f6820d4fac3eda71417c617146f615b65434e26f2f7b8109b95699073500b65f0fc528227f5e51c17318a495b3dda28522ac22ddfb533b18bfa3322d816fb674a8463422fc595302165d72383e7b5ca1c05cad12360e9461107071adc2db085edd24262adfce534a79b7634a3df3db669e3f4d63ee94d79c03217210b3ce4a5c8993a65"}], 0x310}, 0xfffffffffffffff7}, {{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000000e80)="fb9f1f72bce9a519bda96a9ca18ad0cfc9ea35e71831bca1de100f87df39c593557d2ea6b2b5d6286c82e5cbe7445431b085eb5c1a671e08193d", 0x3a}, {&(0x7f0000000ec0)="e2dccdfde82d7fd2a0f54faedd4c3a8a41f545a3d221dfeafa4f0232bc1f50fab458490a9a392659d34e3fa5379b2226d1a90a5a405071", 0x37}, {&(0x7f0000000f00)="efdecac9eb5f9765fb76cb89b50aad8f34896d237c202dfc082d01b9bbf58f8deb6fcca6877cc272fb0360fca48696a1a84aba754707f0ab6f73fa4961cd49d1fc449922def2", 0x46}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="ad3f9e1343b03285b626271705d9d58841633a1438bf9b121b97ac98ef265259394b95483bc5de5dd13421dd6fd6988cb6bcd5a5f5890856f829a1d33195be54119ad5deabcacda07b904f9415fb42179004c69de1a271a5a9e63d7abcd3e2bdb468a0a04f2bd5fc2228eb4866132d21713b605f6102823d896b2a83bbf553a7907a0166", 0x84}], 0x5, &(0x7f00000020c0), 0x0, 0x40800}, 0x6}, {{&(0x7f0000002100)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21}, 0x3, 0x4, 0x3, 0x1}}, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002180)="085e467946a076bf5dc1a87a5fec6906d14f9d8947bd4bcb169efafb", 0x1c}], 0x1, &(0x7f0000002200)=[{0x98, 0x29, 0x7, "fa2a43c39a8932a82243ab6d3197330ecbd01fada2d26fc3080b8bd3168f92ce56ba375629d0fd6bf9695d97833f627b250950fc31079243a643a7b1b206263145a7ce693adb9aedae20cf9c5ee15b6ba4ce747e334873d7428b45dbdab8a21eb8fe70ebf1dac22619d5b546e8ded3485f7f15c0b5362bc56af0f0a91d203192490dc2ea2c94"}, {0xa0, 0x115, 0xffffffff80000001, "d22ffae7d79bbd48e1f3cbe12b474ba94f7ee4de181c7304b0a622407733a2119ed59a21ff5b10b41f93bd65bc29a2ba656ef9dc52f7d88b578c6d1298da9320fa27921ee98d8653014a1ea7c91309d8504bc30d7a1cc617ea5e153ccbef99ba23d16bdc7ab1cfec2da56909165e413887d6028ad79771b68051de7d46a0cfc9d5a837347e9814b268b7aa18f7"}, {0xb0, 0x0, 0x8, "2575b0d6011ca43a8ee5cb738d63f39c6912ddb92a788605ddfc556f6d462b4ace1cdcb9f01bf428ea1dc6a623417988fdcd2b0e2c7801753421e4dbd9f0b5f06b71321de5d0696a5c8d7d562dfb8ed34314056c8c12e673c3c5f33aed52ed82f5ca7ea56294cc5d4682863eb0886fe02ae0d11bbd5d74151d3b6c2f002f08b50b93e06daa88b6d13dd4b1a5760e80eb4e08c304b7bd1656df6dde3f50"}, {0x70, 0x11d, 0x2, "0a442b0a17df1acdb3ac6d1441d6b33829bef6f74abb0a31f4998023bc5a0729750c5a8ed42e37fdd8bb6a91ee903d31d440fcc651e7ddcfa5f947e707e6c40d77dd1dbccafee1980974813896ecbb35b27c4f40c3e624fce952"}, {0xf8, 0x11d, 0x3a1e, "9ebc514cc17a66e20945b7dd9335433af3599a04f58f2500d98c5a1438756d758100c040eb4538ec85a7f84f458524f52e655e1df7492023d7f4549ee2fb41c38200c4ec3b8ba0c0865e7ac12664eb6ac65468e8b21c376ff4cd857e93959433a8d0a5d6a83c9bc7805d202c5ea93f7d88c12c86622be9935184df0743ba4d91e64c828c628626bc2eaf74cb90e3353136e7964d173d2b1694a40a04bb1a613d8f2d28ca6dcfee4437d91dcd5f1ad44c76307ff30eb829c6fceef0de2256c779d58d4b04e7a153d2c48b3e6ced4aaa0188618dd266c4e043731596e75043ee84c58d04"}], 0x350, 0x48000}, 0xc0}, {{&(0x7f0000002580)=@nl=@kern={0x10, 0x0, 0x0, 0x80200000}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002600)="e25fac74aa4feb9d03d8c567aac56d4b99278c5aaf29cefdd28d17b0142106dab0945745042f6898c2a31b53d05d88af8ee5eccfe624f5d3de3d878c1402c22ddf2dcddd99d75ee51077142f42483ab11535527f20b7745801e191751a858bf9ebddb5c3cefd48807ee16eb8fa34c5643bccaade63b10f61c1c0cbd126b98d278062a5e6a60da897eea587d7600b782c5dcfbd3326bec3043153f5cce3b43984dd6f5964", 0xa4}, {&(0x7f00000026c0)="37a373a9348a00f109ce915cf13d102cbc3490bd97cb1671ca7589a63d4044b51d91eedc6824d564322cef20e6d7625b5a4237d3bbb8de28846a024dedd898b3c48d194ae8bca34d21b2", 0x4a}, {&(0x7f0000002740)="58e4b4fa7bfcb1c6781e1aacf4e663f6b3eaa966917542c4ff68f10c4da4ee9d69de6844cf0e595ee0eedcb71ffb20c75f8a326b945feb63cb4984541dcc2c987126ebfe764fa0a86829cbae7b45798cc684d95ba52e6acbf9bd3e915102f0c651c9c7ecbc90e06318014b421e55c4531f6563bf73c5a5c25bf75823cb43d67f13f8fdc157e285747093b9d4c0207973421754e5b1cfa1ad0603beab618676c6e8cadcd47207b4e5eea7fa38ffcdcb3fcbfef7a8be88f06dde958c6913b44603", 0xc0}], 0x3, &(0x7f0000002840)=[{0x60, 0x11b, 0x800, "25f28570b8fd620b38f9329297ceeba1e84f7cbdcc764a18500851b827e9123332da336949a7ddcf995ae2740cd8f9369230220acf9a5bda318714d338f12cb621dbb9224328a4c61f96676351"}, {0x90, 0x187, 0x1, "282eedfb3e8211f431583ed11b1340ff34c0a1425e680d120a8cbbcd22315227ab8cf86ab4b47cdb5faab08b7b9b65b8cff1a7fa92de968280a93a5d947a99934713eb3634629d3bfc19b389c068a5cac3c6b88eb87d51aece8f31bc4653bd7270185ffe7cd72dc4172866591a86a0c841f141834e056543283c4ab890"}, {0x28, 0x11f, 0x4b, "31ef35e914021ebfecb56b01c06981e3f81b1862fe"}, {0x70, 0x19d, 0x8, "f7035537801abf23d70a20eb20be4f4d47cff58a656364efa027685c305346e2f06500f12c4dd931c4663e97ae91b56890f7576d42730e050ebb8805dc078288a85febe5df78b8615debacd82ec70fb7f003553c54b184eed17552"}, {0xe0, 0x108, 0xe47, "f9de5c450b44ab55e6abbd5148e66c1a0ecbf9aeabd1740c618f5a26ad3d421483d37be58e5e8991802be63ab0a05979028454609025d1cc7ba441e8c2e31e4994a77ae6b4ae7fdcdbe03a2391a8aa1e07f7c5362b2a144954af169fb5fac3efca93ef6d86fddbcbea1c84e178225c07e678ac5783c907040e6c6e5ecb9be697cb61730e8bae68218322ab2930a782c5783c1ce75c387da5f4c5639afaf292f18e979560dfd26e9d0f573be850bc6c29dac8cb4da635163512accafd6c184add4822a05bfd1f86aeef5ca9b0b53e47"}, {0x1010, 0x115, 0x4741, "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"}], 0x1278, 0x81}, 0xfffffffffffffe01}, {{&(0x7f0000003ac0)=@ax25={0x3, {"0deb18b27ea4cc"}, 0x6}, 0x80, &(0x7f0000003c40)=[{&(0x7f0000003b40)="f0122093cf0158f796b3e2a06c1e0feef6b22529031546ffdf899ac516c3ea49ef6fa4c0815a57ca52a593fe00965df3378a73786ccfe5d897223ee286747077b66e295e779b295cc66ea57aa8dca10b1328cd4d6653972dbc78054a65a71b14bc79022bcb9a4e099376499d19adb83862d6b9e87475613521cffa830f80237184337388f910c2e66bfed5250d23fea98b470d204d70fa7200c6fed1f335c5d39c5f1ec62e5585c4191f1d8d1d9c90c652797d5186a92cc91197ba9f1897e3ed2419bf8331f6d23498d459d177a7cffb049b6ca5f2ae640bee35", 0xda}], 0x1, &(0x7f0000003c80)=[{0xe8, 0x117, 0x0, "eafb4d85f96adeb567e1000684bb902fd2f7b8ff69c2befda97654e65da02e5a0e40e47a4000e8f68672056a54ee7ef65fefa572d97fb9cb7106c971da32b43d4f47ab7adfe1878b78a8ee47c0df39d033609a28e884442892ecb68a0bbb1a0afa91431b07f1887ef606479493602359765a0da67c039ccbd93b52aaae10f5579026721635e4fd736e5816151b38c5ec1871185fc002795ea7aef25aa20b416096edbf5ffa73407e55880d209afff4afe8de7638f78cb510d332f98cf9d50100c1eee186d2593adf368cbf558d72e804643ec7cf"}, {0xb0, 0x117, 0x8, "a6814179364ca65b4543a0e2d2dce7a932db0bebaff61ef7e5439d12a8d620c36fc16553f72205abe13814d3514ada90a0cd198d00e91a692cda3885809d9f7e17e64e631e2c8c8573693b08bad4c159dcaabd358d10742f082795ad46a53c651632fb889b5580d356ef6755570618a3856b2d01a1c2f22fb886e7a722653717f32e9a59492096d0d897f7d4cc899e5da1f3903eb15cd0f659b4262f24"}, {0xe0, 0x119, 0xbdc1, "d8130a9d9005fcb0fbfac05db74886b9dcb91f43e3c3bef3bf0310bc9be67ccd1b7811466f85e19dddf9b5efcd3f7b4af9768fd845a4e4dd723491b1df46225a473c5498eeaa5a8b1cbfe2fa4b493858b83d83526ed23d1909aa1ce284e193e43b9a69deafc06da10450f959bd2a8eb9cc99f395c352a70700190fad9fa93ff264eb83a248208a6d935889bdf5a20bffff4328d70ef3b0be5a362990af6ce2aa2cbe2eac67b016d18567fb011ab09e33ed6dff8d08592e367c34dd5d0c79ca74cc875caab02a9b43d88140581f43de52"}], 0x278, 0x40000}, 0x8001}, {{&(0x7f0000003f00)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x7a, 0x0, "87c423623b4b47331c8f1358e1ca4042e8e1c1a33a0c3785156252490ae5dd388773694bff0865f3adec80dd0bac4238e795fc7225f138e72672a28a8a8cd3", 0x34}, 0x80, &(0x7f0000005500)=[{&(0x7f0000003f80)="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", 0x1000}, {&(0x7f0000004f80)="4aa5accd0f6d342bc3fd6ad868a0c19cde92e299770e1ec81b2e5445", 0x1c}, {&(0x7f0000004fc0)="ae77991dd3f1fcf56932fe17ec26b5a64095cb5bd37a758ed24c2bab785af942a204c923a929474a37f43e0addbce1dc7f2a6dece33bab40afba2525e94cfad0d48c0c5c24e58948d4460359a5fa27f70d7ef3942cbffa740987b8afd2b6274cbfcbe5d242ac78d8d329cf0c66e5eabedca5318ee161b63ae9bcb7616e4e605ef44faf1ebd3c7c0ba3f5070ea39507ac7c502f16780a2734a85054f1555628ab0a0a18f4bc8dec63d02daccb47f7c31ce2bd75cc11f49e09a0528d5ea33c1085ccd7f2df0c323859f0bfe7ab82c5f762ae4386e6f1068101d6794344065cc152ae0ac12f437ef529e8e953bb5a0c8af57c37d42a17f973", 0xf7}, {&(0x7f00000050c0)="4691dbac1a1ee24007adbe262cc394dece42e799b4a505d85054b5ae1b25582dd5358bbfd09eb162c91953d45e2ad5261145c5c5c049f11a586b1c9d734bc5f9d5d8ed545f545c6748d10106e893bd054366e98b13879ae5f4a4a0118950d30687dd38098e25cfbc6674e9c9a75e133e135af7aa2e3612845899977e49dbee44e713c81041c10f469089cf0969fd21b9df4d75729135bf72c16fba9d5645cd6700", 0xa1}, {&(0x7f0000005180)="85e888f220f55e21817eff4ba1e6b94322d7f34e5e8a29c9a00aa6682232f3f16bbd4cf8a684829b4dc1de9c82", 0x2d}, {&(0x7f00000051c0)="6126ee8de1d7b51ec975207a90622777a3cc8e45ee38e157e37d39deae98aeaa0ba8fb3b28e5049faea0dfc88482f505b6bf2abb822782aa4ce0c429f40c2fa5d9b2e02321a15bfe6b9ba51b8f44e38ad0ee9a5a19826612aca54f1b70cbfd27abda7f0defda8aabf6977307b3513883aa929d62e60e64fe18eaace17ff0bcd242c6bc0016f946dab39a7ef6b1862071bb2f6f0b36117f1178920e7eb906049fc95ebe34656587c147633e3530606abed251a371d9164e7c43c0c69313e283f2f1", 0xc1}, {&(0x7f00000052c0)="1d4139b37d6d0ab4aaacdcdf0537c16c61094c7f1e949f269e1a146a5a5928acdf957013898ae07cf308d259958cfa4923b219445d6b7518e37a91f13f59d7557b299ed81264fc03fbc759390b30af864d813187d4dc06f22c1e866a351a38d43ac23f68f7cfeda46d87feed9f0061d0a64533fdf95b3c8d4398b22ec04dad82469d409d4fbb407ececa47998d4916c265f0f9943a0b9ed4ff0c4e2c8e0d95e6fd085d094c03b32651f2ea0e412d089bd2bbfa9cbaef758c9df09da4f3deb61c93de1ee28f15125d5483c682987e5de49f401ea60401df5d13d580c8070a6fd474e3866534bf93b866ac8e3b905e9afd7096", 0xf2}, {&(0x7f00000053c0)="db96a58d145c41a53084929a958b31826b19b70b8c8ce8ba714651da4e84890bb483569e72aff043c9914a490747fdf0202f1df0f9a5a1f1a363e74e7c9cfce4fc52313e90321c2d513fba315ba80bb3dcdbb451062762a5ba509a9865c2ba27a71bcefa25b5a7a6af7ec2e446c042a04171324cbf931f3a97bb03c1c65bb7", 0x7f}, {&(0x7f0000005440)="794eedef0f6db830c1d7541f05d05cc69966e3f566cba6202c0afa7bec21c3389c7c1f1a517409fab338a4a43da6175db02c19646133c5cf5b9bdad535e9b4ecc93d91d4e9a09419ea2943c4b7bf994a5bcf3d111fe5a25ab208719fbb61c82e6fda3c5260b26c5c4a5e8006409c1d11a0a6fbec58b80b98f6a5caeef7499812d90fae2831a9b6e76a", 0x89}], 0x9, 0x0, 0x0, 0x4040001}, 0x6}, {{&(0x7f00000055c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x0, 0xff, "00557f18c60e69b23e9ba9ffaa41bb02221cb4e124be2c6091676ff09ddbffa3e32c0a72f687f69ca24864e9ab55963f42b8da9f763795b2d078a70194acdd", 0x39}, 0x80, &(0x7f0000005c00)=[{&(0x7f0000005640)="7993c068e357376e40286af642f5c26903442b0bfb07384a2dc73cb1495d86570b00f782862319c5342735a078e6748b803aa93a8525d5c47af364a25937ebcb69e0082fd69c149de184da6eab19d3d63f957bbad089f7b4b8f586e812d6c44ea6ef08354f0fe058b0846feea80699fa3fb5720cc471ffd4d728b075a5073b8446182ddca2d24b00969cc6ff60a11340eae4f005af62e8e7dbcbebffa79dde0a88a407dfb4d49f868044adb31b1c52ffe1395a1ba2920fedcf659ead1622d0c0d76c6ecc7539057efbcefc6aa447383b3b9f560092b2e4610054d2eea5c3b096cd5f913d78b73cf461a1aea82ed54da31c9be819903c64aa2bbbeb504227", 0xfe}, {&(0x7f0000005740)="5d3e28baf26ceb825f9052d2927708c6a2dd7b0fe57f531c6a9359a9867412efba42ff5c66a312ec26097b8db871c02c125b9b8fe748dd416c4ff52fc62d8e1b3bfefc8e80", 0x45}, {&(0x7f00000057c0)="7606ec26b162ed56256325e3c9f53153b2275bd2c75eba868b07016dd0dad559537b515b69dd78a26a6ed2f902b03c31a3914d008e09fa7aa3f5f3ed16b0021717328755c9da073b0054a1b307b1d8bc00ed5fd958d44a41a85ad50d33ca67228131379a2910c682", 0x68}, {&(0x7f0000005840)="3bad797f6f3567b4ef1ee9057bcebe5b2c98db22e32e2cff700c9a9a6fdadb58cd1238bb6c829e91d4deab93d6f1ee22a57dfdedddd4bfd6735e7f2f0b5875e6908187bf1ca86c8fb6684734ab1e08a1539f3a0ad807c8697abe38a03af7f843553e7d390b", 0x65}, {&(0x7f00000058c0)="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", 0xfa}, {&(0x7f00000059c0)="cc19c6d72d0727d45a70face65b122b4b63f8a2dc9e87c7336b4cd5ce9d7a4924aa728a4651ab9ca85c80ddf4d819b9fe3a3cefb3b916cda99404538b1ab6b2e90ce", 0x42}, {&(0x7f0000005a40)="d0c26f62956d0d1e792166dc8d6895e45afdba176e20fd8ead3433734673490a28343ad789cf11deccd090730ce9ff47909645bc168790e20806f53cc9030a6db4c1f7b3a60398c1fada2dadb8a5fccd7e31488d9c57ea36cbc426c7baf8789df956902c3ef7322983aaa56ab31714962cd322fd25a13f83fb69702138b9035a32ecb2e7c26a436b0161e4e95f6339ea8daa78bfb9ddd548c3a78e5b8dc8075b7814afa8898e4f72b1e04675958257f6e725eb82cc9f8e7a1dc666f0a690c65718cf2670ff3144072ddad79125fb46c6473aa1c143354c539c77eadd2139dd1b02a794104a27a3ef0267", 0xea}, {&(0x7f0000005b40)="6f1e67ff17c499e8d5dd3ef370ce085abb8c0f5eb2a3d8a086b848e68c50e5760798979a648efa0f9d8c665074b89e9fe7c06381f629eb36a9906a7e32adccf63aea8491d54df5534e9bbd003cf2fcf74ca683e20b3c5a375e339d5334a6595fc38718e18cd42fcd7b673e916de4fbaac03e6ea7b6032960c48927a45a598a46f45a8c522f4a6b4d4d6281035c8f137c7dd3", 0x92}], 0x8, &(0x7f0000005c80)=[{0x1010, 0x118, 0x100000000, "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"}], 0x1010, 0x10}, 0x8001}, {{&(0x7f0000006cc0)=@nfc_llcp={0x27, 0x1, 0x0, 0x7, 0xffffffffffffff80, 0xd3, "2686d0020b8bf4df33ece3804dc94b89d2a3c22a2e44313b760b53149509f738bfd1e031641d862b7e3990966d87ee417aa2557332731aa9344c7df66db5d8", 0xb}, 0x80, &(0x7f0000007040)=[{&(0x7f0000006d40)="116e2d3fad4496ac7af238f91cc541f24fef2c45bdb1b34358385e015c005d6f2343c45068b2427852a78a82e6b3274abd000783a8d8", 0x36}, {&(0x7f0000006d80)="5bd4bdd04b25103a2cbbd8a2f6bd0b6d8dfb2e33125b1f423388c3d4248fb43339949cae07feba8e048f4c445535860142c3cf388181adab732b1d1a7d94b026d386b0558f6d5d0caac5d469226be234540f99a8a49e35c8628c00ca978625a5edd3300552207d4caa2860a43c6ab0dc2afa5e4b483d027eb2891cc0357bf58c2f07", 0x82}, {&(0x7f0000006e40)="2c1d8884614b4bee0b6a2df9c200d0f5570367719d304ee33a855d2814e3d6359ad0bbbe491ad24c4837d16f62bac15f02c67587e58f517ca5bf6d6cc92fd823efa03437e408f02627fe2d423ceb30819e49350f0d106b47d9070a36a89fd174dc02b44408c1f2353cdcccf0d54068761ae2666578a28c90aa091532e38cbae210eb07034853ef", 0x87}, {&(0x7f0000006f00)="ae97a5bd42592410a520121a739e9078e9d6d49ea67fdccab4397296a6fff1d83cfa5171eea55db92534df3d429c70772546238eb10604b05158e0cdac52c9bb4fa802745000bb03ae9ef5ca339a8eefe8e1bdfadf4a008fb9bc34d5405992adbf7f477450197471641b680ab50fc3d5a759a60bbe872fb5126112fff5ad2f297d01e8f58889edaf9054eedd2f0065c733f5e6", 0x93}, {&(0x7f0000006fc0)="f37138ac68ed707d4171c6d19501b6bb2d728f9f9b901806d9d8231b4131aa7bb62b0f08d4debf23aa3b1a7e1a9a8b32be7cb582b91694c82aa34dadcf2f4dc7df0fb58b2cb65dd65bf51a7cc93564edd10deb", 0x53}], 0x5, &(0x7f00000070c0)=[{0x88, 0x10f, 0xfffffffffffff800, "fdd2ff91ce0a4c5f886556a664165d68fd71fd2c881cbc52453fe7d7a13bdadb318048b34bd40e9550c6d79f9ca10ca78862c2ecbda38b7f528ad0f0025d1795582202930422b99d99ca1834ecb7d79c16e1d530fba148d203d732204be113e9cab0a2d5904cfa556fb828125d5baefcefbd99"}, {0x88, 0x13a, 0x1, "2cf31ff756fa64f85ba99c69dbf709b163bdd53e1d0f2bc3d9a4d56ea6de185b0d9dfeb3b19822d1a96749f527fb98106d75cb797047d8f7eb7683d5e7c180930deb46b879ab1643d4f76c2b08c6ff6912878668dbe4e0b7100a49a21ebaeb993d061b62dfb6350e7aa692301dbd36121cfd"}, {0x50, 0x1, 0xe8, "226cdea7a69ee3ac5d0162c67d20b81652c95a6adc598c247b368e78b928b73d7a95044a944d056124538749fe8f306f6876eb70eae941ec8f8c53"}], 0x160, 0x4000}, 0x7fff}, {{&(0x7f0000007240)=@nfc_llcp={0x27, 0x0, 0x2, 0x3, 0x8, 0x8, "dae469d1e9c3a939ee9046315731f00125033d4f324e7922cff3153805dd1195219296bd8becba1cb364a7826eb847a60b306294c671893f7e374e70e0a75b", 0x27}, 0x80, &(0x7f0000007400)=[{&(0x7f00000072c0)="dc19256e62e1c6f90267314d40870ab266612940288b51cca24a0bd303f5987733ebd4ef5b32e5ae75f6fcc83d80bd9d7a022bb3387b12cb25867b150a0d5eb9f800d22b0b697cee2ce44a62457d68036035e5238ef5e27a096e48281d806710795c9945adb20b7a37bfa5", 0x6b}, {&(0x7f0000007340)="811ca4f7279b6f4261d12e489b7c365f96b5a813445a75ba2f18be6129153005710056794b57107f1d02182747bf9de1aa091c14a92bc2a53763f41e2bc00280ed37586ed04859863b5f58c14f0c8c7d9d8a6dc051d6cce910a240bd4ce295590680fc7f2d771ed3920bcc32a64cf09b075c0f7395cbb5d4a7eab91d8355827a2f773a6e", 0x84}], 0x2, &(0x7f0000007440)=[{0x108, 0x84, 0x6, "99e92b26d9494f825c977ef71f245fb28d88144d6fb44b45ba43f5b0c3b30907dd8c825f211f893c9e833a4dbb5fe41f5125578b300ffcd311ce5ed8ce6c4df72c35dc6639e4de22bde9dfcfa163a48b40cee7038e66a7b144677719eddf95e2851626d04d565de1bb9e63584683de9000156bde934e445ac641bff7c1f03851d2c75513102330616eab7358b5b077601717a6bff2b5621460546d1fd9c309cb6513eba7e8a9691446923affe20ef379335b21aefa2ce44e2e84de0a9301d81e03e2b3b47827e69a23e1a53cb24e7388c20b164496778f5162ee5b378ec3ae06e8e0507f8bb09de094be03f5b67492db7deee6a14d"}, {0x78, 0x111, 0x6, "d84dac15a0f38f01307ba26a914de9f9ddc533a72017a7ffce4ac7345659dc88f6497536c102ddb6e5a276ab451bb401033c5657af515337578f1aaf195ce0521c6f0b0c410befd7926a8c5875690830011468b6755b9e8854bec919f3235a22f58a57bb3ac41c"}, {0x30, 0x1, 0x6, "2dd66a90c98d317797856d0d6b05a25156e285998c9ec9673d9f8dabef35ee"}, {0x90, 0x8c, 0x200, "7799df30c6826e76d09ec0c5e06e7edc42990324264e49ce174cdccecdf80a290d436d2b3611f99b6b9a0b9372920039fe16c939be5d9f1f87aadb149629fcf50feed82e85d31e77b32988f0ed49807aadbc60a3f3b378e937c9cbe3c01cfe96d62a3c75127385870afa4b7926d34e94671b682969593ae36d0fc4d75ab7b602"}, {0x28, 0x0, 0x8, "e0697eccb85b6a7513a6be1e4f4ff633402f54d4b8"}, {0x58, 0x11, 0x7, "b36622e61eec2c36046836e035d5979f8347b049236f17375c3473973b269afd93dd4fa4ee0bb15648111248bad582136b08a97868f98f4e89bb242d8a270b62ecf0eb"}, {0x78, 0x10e, 0x5, "8770a807dd24bdaec63a4f6eeb83bea23bb4e5abadf69eb5f45d9453bd5018fc83bc075055795e05687625d5f5f630799907ac65709e65a33aaf89966e8153c64cbb37276579ffe94fee38d3c031bf06028a9025f43397cd0c7604d4704ec59f4f8f9ceac5"}, {0x78, 0x11f, 0xfffffffffffffffe, "91207234f707af3896b93930ef45cfa736052730c754572c9efa1d40476d3bed97e636ab727e985c3e75a1107f48657902ab58f8cf2ea6b7a103d654c507309f75bff0cd35697639772eec54dc708c2a55b48614351d9f3341d19eb88281ac3f77d7b17a"}], 0x3b0}, 0x100}], 0xa, 0x20000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000282fef)="1e336500ff4ad5e700000022000000ec", 0x10) writev(r0, &(0x7f0000007e40)=[{&(0x7f0000007c80)}, {&(0x7f0000007cc0)="092df665d2fe12ba64f86bc059832be0879daba7b8b827dfb06eee3f2c0230bc7c03e46f41e8e13b4241999ac3c88e56436833db9de78cc29873faccd46f73a84a16a426e39ec019a28b9c", 0x4b}, {&(0x7f0000007d40)="50a9537401a6ca083df1676841a2b1e934004d64b3a3ffc862f79724a02dace884b1074ea9fa0711bd641a4e3caf0c315514451b4615f3cf641858ff14031b2a94", 0x41}, {&(0x7f0000007dc0)="c147acb98d5241ec169d3a341640f2b20b666f18cf0a30ca3525620e3080d24e59e3704e199600fcf9323704586723db57edc7143d4db17970ad8332bb096fbf5828641075227fcb3592fd0c69c193eb599d0077b2d25e2c19aa8b", 0x5b}], 0x4) accept$alg(r1, 0x0, 0x0) accept4$netrom(r0, &(0x7f0000007c00), &(0x7f0000007c40)=0x10, 0x80800) r2 = syz_open_dev$sndpcmc(&(0x7f00000020c0)='/dev/snd/pcmC#D#c\x00', 0x1, 0x800) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000007ac0)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000007b80)={&(0x7f0000007a80)={0x10, 0x0, 0x0, 0x14000}, 0xc, &(0x7f0000007b40)={&(0x7f0000007b00)={0x1c, r3, 0x0, 0x70bd2a, 0x25dfdbff, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x885}, 0x8000) sendmmsg(0xffffffffffffffff, &(0x7f000000a800)=[{{&(0x7f0000000000)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x80, &(0x7f0000001540), 0x0, &(0x7f00000015c0)}}], 0x1, 0x0) [ 235.479645] binder: 17631:17648 IncRefs 0 refcount change on invalid ref 167772160 ret -22 2018/04/14 15:03:43 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') openat(r0, &(0x7f0000000080)='./file0\x00', 0x101000, 0x20) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x1}) exit(0x2) write$vnet(r0, &(0x7f00000001c0)={0x1, {&(0x7f0000000140)=""/47, 0x2f, &(0x7f0000000180)=""/12, 0x2}}, 0x68) 2018/04/14 15:03:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000187ff4)={0x10, 0x34000}, 0xc, &(0x7f00000b4ff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="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", @ANYRES32], 0x20}, 0x1}, 0x0) 2018/04/14 15:03:44 executing program 0: mkdir(&(0x7f0000000040)='./file0/file0\x00', 0x20) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x3, &(0x7f0000003a00)=@framed={{0x18}, [], {0x95}}, &(0x7f0000003b40)='syzkaller\x00', 0x7, 0xce, &(0x7f0000003a40)=""/251}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0/file0\x00', r0}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2018/04/14 15:03:44 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xf4050000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:44 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x10000, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="7614eac9b38a1d59543f2099770053e81de283cccde248eba8b8fff0c38037ba6b27d12d29c8ae0ee61cf9258769f149bf3cd36eb0b3c8a18f6fa5c168ae4e9133cce0c05531e1ec020c1f0072bf6cda7deb78ba106b9f385762c167925b714fdfb55e4451c91fab09b11afca76592e43f3e961cfc960eb29cedae99e177b06ad7edf2e42126c49ddd9bce56fe4706", 0x8f, 0x8001}], 0x80001, &(0x7f00000001c0)={[{@discard='discard', 0x2c}, {@nfs='nfs', 0x2c}, {@umask={'umask', 0x3d, [0x32, 0x34, 0x34, 0x33, 0x35, 0x35, 0x34, 0x37]}, 0x2c}, {@uid={'uid', 0x3d, [0x32, 0x31, 0x31, 0x37, 0x36, 0x32, 0x37, 0x35, 0x32, 0x33]}, 0x2c}, {@sys_immutable='sys_immutable', 0x2c}]}) 2018/04/14 15:03:44 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000016ffc)=0xfffff7fffffffffd, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000015000)=0x1004, 0x4) r2 = syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x8001, 0x20000) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) bind$inet(r0, &(0x7f0000008ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000000)={0x0, @multicast1, @multicast1}, &(0x7f0000000080)=0xc) listen(r1, 0x0) 2018/04/14 15:03:44 executing program 5: r0 = msgget$private(0x0, 0x80) msgsnd(r0, &(0x7f0000000180)={0x3}, 0x8, 0x0) 2018/04/14 15:03:44 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1a000, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000080)=0x9) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0x9201, 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f00000000c0)=0x5) 2018/04/14 15:03:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffff9}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000356000)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x100000003, 0x4) accept$ax25(r0, &(0x7f0000000240), &(0x7f0000000280)=0x10) getpeername(r0, &(0x7f0000000040)=@un=@abs, &(0x7f00000000c0)=0x80) sendmsg$netrom(r0, &(0x7f00000001c0)={&(0x7f0000000100)=@full={{0x3, {"fd1ccf2df5ad91"}, 0x140a5b1}, [{"a30fa2bc786d3a"}, {"631738a8a3e676"}, {"f153f2efed2ccb"}, {"e8f491cff92831"}, {"a2912ad659b0af"}, {"198d791616d1dc"}, {"d7725bdf472c05"}, {"699ffe91ffe60d"}]}, 0x48, &(0x7f0000000680)=[{&(0x7f0000000180)="b29949c96e6abff305510fb31914c5", 0xf}, {&(0x7f00000002c0)="707475944d5e0666fc3f9a20cedc41330283fc09b121effb92051955b71ae221ddeadd413ebe52a2e254326b3b979f30e4192e2b8c930ff4ea1b1f00fcc2bc4c957f2ffc53b911213adfce29c7cd6b5e2d8579cd6740f887b0411a36060fa7", 0x5f}, {&(0x7f0000000340)="84fc96887afd02132e9c9517a127c78af4b3200144a80a0255793d988c70724373a756e40e813ce5f6c6c4018e067b12aeb7a6ebb71adf95a92131fb8fa5fb9c3258150df0af75c0859164d14dd4153e3cc963dc31b38c240c794fdd608349c2252611531cf1aa7ae8475282083f09e138169bb83cec95f0104f381b030307eb7305597dace5a0056f4adc716cc55f29", 0x90}, {&(0x7f0000000400)="6b678c1387a52f89277d56ddd5047ea54c26781768539c473d3bce6c004dcba7c849817888ee5e74a37f9d349104029facef60c466fd614d97f04cdf5877d906882758501c5bac7857c03448fc70f5b9b3470fdb4e9f8a2e1b0cededf13aaaea71d977f1b91350fbdae4d06a79b2fc21b2", 0x71}, {&(0x7f0000000480)="09dd1abf04b1ff5acfc0d87660531d4fb5dccd7aa87bb1f8c8449cceeb6ab84a232fdf9b1bcc07cd56e87ea736db6fcf2804f616cead53e3d0addd77c0c85b2098f7fb5b57bfd81955ac4eda14b3214bf4ab875320aa5db8c18469cf25e2da3944d561a1cff2e15729151325525e2f47b836e109f4a48864c37264d3dd56dc6c70937fade14d54ea31f9b57d634a28196ba5782545ed023a10d501e6c1dfa6bf426debbc6731ca63cced7c1c70f93e16654434919413252f5f3cf976fc4fedb22409b2c4b82552395b2eaa927bb5c3c13cdad0cb38c0f3cf930c5e144c69f1c757e11b41b94d06", 0xe7}, {&(0x7f0000000580)="e246396324733b142c5d52a343e1ac4d5d66b03f37d0e0ddedf9ae70c9b726046dfcaf05d3d3a9e39ce33314bccbe27bacaab5b79e1170f29731ffe5e4135028ad5dcaf978fdc83f0e4aff9c188ec31aeb68ada4899580f063e4c53f967bbe42fd325645270954a8483815915dce8043e6304b709c2e1e4d07d923e8384b847f4b791cef27268243472adbdf677f51c96d88bb7b376cb0839e2ca7cef5338ee0d6211c79c90ef64b063da1dfdddcfae6ce2c0e92713ad78e2b2a0989163bd7504e12cb499d11594b6679640b44914eac8e13a22dc31630c1df2d7be3161b653941740f11b48cda", 0xe7}], 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1238, 0x40}, 0x44005) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0xffffffff}, 0x7) 2018/04/14 15:03:44 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x101280) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f0000000440)={0x6, 0x101, 0x6, 0x3, 0x84b4}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000340)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000000040)="0401000000190998b009cb396da10000009054b932ce5b73832fdbaf6e22d8707324ed7508d79233fbe8e1fd24deabff42c6584662447eda2db2e72e977e149442627a0492f0425669acea5c826b5581e396e18192c77b0cc001def7437a509af949a5f1658baaa86c245cac7ce773c0bffc61f0e500518edab882bde219d98a85596af607ebfad07ffb42e61159d175bb0fcdfeb909dc244cebe87333a58c7eb3f6666cfd8546edb7bb9515f8ce2846318ddb8b5c9ea84b2fe1b366a8971bab02de75eb75db63b4a4428577cd52b73388b5c01e", 0xd4, 0x0, &(0x7f0000005fe4)={0xa, 0x800000894f, 0x4, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}, 0x1c) r2 = add_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)="ea981a7781c027706cf452e4e7b4f94ccf3d5e001ee56ab87570dd53286f265952fc62ed9e45a24cab4c9469005f169906253fb4af1dfd7ae853aa53f4d46f62d52fa12582c14e59aa166adbb3753a6c2cffc9c4a2a1d7cad74b3300ebfa734a4b3049247c3f407e33f0b2196c703bf8148467a3c94c0d46b57d4a8e26ea9f6fa331969e3cc7c646483742d38bec5a44577a62c223e1f0ca94bac97957657f45d6e4b0a65c9b171c42bfddaf54cd94869173a86c9b86923319ac6be1b9b00dd60471ff4dc3f302111ef5fb3edb04d3008a", 0xfc8b, 0xfffffffffffffffe) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000480)={0x574, 0x200}) keyctl$read(0xb, r2, &(0x7f0000000380)=""/109, 0x6d) r3 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x11) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000140)=0x1f, &(0x7f0000000180)=0x4) [ 236.637905] binder: 17681:17682 IncRefs 0 refcount change on invalid ref -200998912 ret -22 2018/04/14 15:03:44 executing program 7: r0 = socket$inet6(0xa, 0x80003, 0xef) read(r0, &(0x7f0000004f45)=""/187, 0xbb) accept$netrom(r0, &(0x7f0000000000)=@full, &(0x7f00000000c0)=0x48) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080), 0x8) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000013ffc)=0x2, 0x1b2) sendto$inet6(r0, &(0x7f0000001ffe), 0x0, 0x0, &(0x7f0000003000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2018/04/14 15:03:44 executing program 5: bind$inet(0xffffffffffffffff, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000ac0)=0x1, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000280)=@rc, 0x80, &(0x7f0000000940), 0x0, &(0x7f0000000480)=""/228, 0xe4}, 0x43) [ 236.695428] binder: 17681:17701 IncRefs 0 refcount change on invalid ref -200998912 ret -22 2018/04/14 15:03:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_eeprom={0x43}}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x8000, 0x0) 2018/04/14 15:03:44 executing program 2: socketpair(0x3, 0x804, 0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000280)=0x4, 0x4) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in=@multicast1, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000001b40)={0x5, 0x401, 0x80}) write$binfmt_elf32(r1, &(0x7f0000001c80)=ANY=[@ANYBLOB="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"], 0xffffff60) connect$can_bcm(r0, &(0x7f0000000240)={0x1d, r2}, 0x10) pipe(&(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) rt_sigprocmask(0x0, &(0x7f0000834000)={0x10000007fffffff}, &(0x7f00000c1000), 0x8) pipe(&(0x7f0000041000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getdents64(r5, &(0x7f0000000000)=""/190, 0xbe) dup2(r4, r3) fallocate(r5, 0x1, 0xffffffffffff8000, 0x40) writev(r6, &(0x7f000000b000)=[{&(0x7f0000001b80)="2c1ffaf7274ba5f524be5a4826bb44ddb215c4c27c8f5c2e479789e1258551b1cd9cb3f3fc313e390e7018d7f14d0efe940da9ea9c8568ca6e187e292978acbf33fe5a0dc4a5dd6ff6ac18616fb45378", 0x50}], 0x1000000000000135) tee(r5, r4, 0x5, 0x0) mknodat(r5, &(0x7f0000001c00)='./file0\x00', 0x1000, 0x7fffffff) 2018/04/14 15:03:44 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x10000, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="7614eac9b38a1d59543f2099770053e81de283cccde248eba8b8fff0c38037ba6b27d12d29c8ae0ee61cf9258769f149bf3cd36eb0b3c8a18f6fa5c168ae4e9133cce0c05531e1ec020c1f0072bf6cda7deb78ba106b9f385762c167925b714fdfb55e4451c91fab09b11afca76592e43f3e961cfc960eb29cedae99e177b06ad7edf2e42126c49ddd9bce56fe4706", 0x8f, 0x8001}], 0x80001, &(0x7f00000001c0)={[{@discard='discard', 0x2c}, {@nfs='nfs', 0x2c}, {@umask={'umask', 0x3d, [0x32, 0x34, 0x34, 0x33, 0x35, 0x35, 0x34, 0x37]}, 0x2c}, {@uid={'uid', 0x3d, [0x32, 0x31, 0x31, 0x37, 0x36, 0x32, 0x37, 0x35, 0x32, 0x33]}, 0x2c}, {@sys_immutable='sys_immutable', 0x2c}]}) 2018/04/14 15:03:44 executing program 0: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x457c, 0xd00) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000040)={0x7, 0x2, 'client0\x00', 0x0, "db7a0212b8c7b15c", "70fd4dc878ed0d6e8c29eb28bec61392819e97b8a06f37d972c1ff45d9b84ebc", 0x5, 0x8}) ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{}, {}]}) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f0000000140)={0x4, 0x80, [{0x15, 0x0, 0x9d}, {0x5, 0x0, 0x3}, {0x6, 0x0, 0x1}, {0x5, 0x0, 0xe4c}]}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000300)={r1, @local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x1}, 0xc) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000340)={0x0}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000380)={0x5, 0x81, 0x7, 'queue0\x00', 0xe4}) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000440)={0x7fff, 0x1000, "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"}) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000001480)=0x7fffffff, 0x4) syz_open_dev$random(&(0x7f00000014c0)='/dev/random\x00', 0x0, 0x101000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001500)={0x1, 0x2, 0x8000, 0x4c4, 0x0}, &(0x7f0000001540)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001580)={0x0, 0x2, 0x8, 0x9, r3}, 0x10) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f00000015c0)={0xfffffffeffffffff, 0x7, 0x10000, 0x1}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001600)='/dev/loop-control\x00', 0x80200, 0x0) fchmodat(r0, &(0x7f0000001640)='./file0\x00', 0x40) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000001680), 0x10) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000016c0), &(0x7f0000001700)=0x4) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000001740)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000017c0)='veno\x00', 0x5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000001800)={0xba, 0x5, 0x1, 0x4, r3}, &(0x7f0000001840)=0x10) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000001880)={0x3, 0x1, 0x1, 0x2400000000, 0x1}, 0xc) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000018c0), &(0x7f0000001900)=0x4) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001940)={0x0}, &(0x7f0000001980)=0xc) ioprio_get$pid(0x1, r4) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000019c0)={0x8, {{0xa, 0x4e21, 0x81, @mcast1={0xff, 0x1, [], 0x1}, 0x1}}}, 0x88) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000001a80)={r3, 0x2a, "b43c7739f9969bbccc5ae57d67c47f63241dc7ddba10e5e129fcc43f6e19df9a3d2126de47f326191390"}, &(0x7f0000001ac0)=0x32) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000001b00)={0xfffffffffffffff7, 0x247a, 0xe27b, 'queue0\x00', 0x80}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000001bc0)={r2}) 2018/04/14 15:03:44 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)='cpuacct.usage\x00', 0x2, 0x0) r2 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x72f6, 0x8000) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={0x0, r2, 0x3, 0x1}, 0x2) readv(r1, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/191, 0xbf}], 0x1) 2018/04/14 15:03:45 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000c0afff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) prctl$setname(0xf, &(0x7f0000000140)='\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x3ff, 0x8001, 0x7fffffff, 0x80000001, 0x0, 0x80000001, 0x10, 0xc, 0x6, 0x7, 0x8, 0xfffffffffffffffe, 0x7, 0x5, 0x1, 0x9, 0x0, 0x0, 0xfffffffffffffffd, 0x1ff, 0x494d0c8e, 0x0, 0x2, 0x19d4, 0x0, 0x0, 0x3ff, 0x2, 0x1, 0x7f, 0x6fa, 0xe18, 0x7, 0x7f, 0x0, 0x0, 0x0, 0x5, 0x7, @perf_bp, 0x2010, 0x0, 0x0, 0x4, 0x3, 0xc2, 0xffffffff}, r1, 0x4, r0, 0x0) mremap(&(0x7f000053b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00000cc000/0x4000)=nil) mremap(&(0x7f00000cc000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000053b000/0x3000)=nil) getpgid(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ax25_buf(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000180)="810cd3ec1c01ccf64d5cf0b793fec71267cd9a6417f86c6463fd194cab41e81643464a857f9bbb330070c952c418a8d9d103af7a7a99698a1971ecbfcdf138170f83a61a42bffd266d4482dd56ff5e0ff8ed444381298e9051af3be14c0f4b5d2793dcb605f540f4c9bd28ba047e94f2bf4dbf22757796c121e04421ab43ccf0f007881d9ef63a8b930fe8528bfbbb9d1d271ac739f0a71cf0406f2de8152da818f5951402afbd3bf140e921f7754a08745eff37382af04caeef532e619099250fff6c47ad4af4fc0be41e0110e4131b3a715d", 0xd3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000600)={0x7, r0, 0x1}) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000640)='teql0\x00', 0x10) clone(0x40100000, &(0x7f0000000280)="d37c49fb34f42a88792d5742ac82923e4ad8945b3608ac8122dba509edfa7b8fa883576e2ef923c08b68ef8108db479e9a609e827e6d351b3ed6c87c694cd5a88dde784cdb39f70bc1e9e09f7e64a26923cb718918a8f6eb56930442302a0f4621fadfa9b2c56fe9f7d199a76d0117b28f48afa5bf3690b757939d2751dea09b4a0cbec828c7f6a6e0b52590e42fcff414147688e719adf0c69ef13465b0d2d0994d2048712a9614d810690428f6d712a9f43f1f9515e3e30021e4d2549e5108bed36c846dfe765fe9556799e247530b8fdf8f7813ca2b6c618a84a18a8562a1e11ff712dbae42514b8575617168ef", &(0x7f0000000380), &(0x7f0000000540), &(0x7f0000000580)) openat$dir(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x80, 0x4) madvise(&(0x7f000022d000/0x2000)=nil, 0x2000, 0x6d) openat$dir(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x10200, 0x19) write$vnet(0xffffffffffffffff, &(0x7f00000004c0)={0x1, {&(0x7f00000003c0)=""/3, 0x3, &(0x7f0000000400)=""/177}}, 0x68) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000700)={&(0x7f00000006c0)='./file0\x00', 0x0, 0x18}, 0x10) ioctl$VT_RELDISP(r2, 0x5605) 2018/04/14 15:03:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x3000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:45 executing program 1: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) ioprio_set$pid(0x2, r1, 0x3100000000000) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) [ 236.928528] binder: 17732:17733 IncRefs 0 refcount change on invalid ref 50331648 ret -22 [ 237.003467] binder: 17732:17742 IncRefs 0 refcount change on invalid ref 50331648 ret -22 [ 237.019936] IPVS: ftp: loaded support on port[0] = 21 [ 237.076702] IPVS: ftp: loaded support on port[0] = 21 2018/04/14 15:03:45 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) syz_mount_image$msdos(&(0x7f0000000040)='msdos\x00', &(0x7f0000000080)='./file0\x00', 0x10000, 0x1, &(0x7f0000000180)=[{&(0x7f00000000c0)="7614eac9b38a1d59543f2099770053e81de283cccde248eba8b8fff0c38037ba6b27d12d29c8ae0ee61cf9258769f149bf3cd36eb0b3c8a18f6fa5c168ae4e9133cce0c05531e1ec020c1f0072bf6cda7deb78ba106b9f385762c167925b714fdfb55e4451c91fab09b11afca76592e43f3e961cfc960eb29cedae99e177b06ad7edf2e42126c49ddd9bce56fe4706", 0x8f, 0x8001}], 0x80001, &(0x7f00000001c0)={[{@discard='discard', 0x2c}, {@nfs='nfs', 0x2c}, {@umask={'umask', 0x3d, [0x32, 0x34, 0x34, 0x33, 0x35, 0x35, 0x34, 0x37]}, 0x2c}, {@uid={'uid', 0x3d, [0x32, 0x31, 0x31, 0x37, 0x36, 0x32, 0x37, 0x35, 0x32, 0x33]}, 0x2c}, {@sys_immutable='sys_immutable', 0x2c}]}) 2018/04/14 15:03:45 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0xfffffffffffffffc, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000a16ff8)='./file0\x00', &(0x7f0000df2ffd)='\x00v\t', 0x0, &(0x7f0000a06000)) 2018/04/14 15:03:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x8, 0x9, 0x4, 'queue0\x00', 0x3}) syz_fuseblk_mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000) 2018/04/14 15:03:45 executing program 2: mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0xfffffffffffffffe, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000009c0)='cgroup.events\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000a00)={&(0x7f0000005000/0x4000)=nil, 0x4000}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x53822525, 0x12000) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x8a0, 0x2a0, 0x678, 0x678, 0x678, 0x510, 0x7d0, 0x7d0, 0x7d0, 0x7d0, 0x7d0, 0x6, &(0x7f0000000040), {[{{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @empty, [0xff0000ff, 0xffffff00, 0xff000000, 0xffffff00], [0xffffffff, 0x0, 0x0, 0xffffffff], 'eql\x00', 'bridge0\x00', {0xff}, {0xff}, 0x6, 0x10000, 0x7, 0x24}, 0x0, 0x140, 0x188, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x8, 0x2, 0x1, [0x80000000, 0x7fff, 0x9, 0x4, 0x5, 0xffffffff, 0x200, 0x4, 0xffffffff, 0x8, 0x8, 0x0, 0x20, 0x0, 0x3, 0x10000], 0xa}}, @common=@srh={0x30, 'srh\x00', 0x0, {0xff, 0x200, 0x8, 0xffffffff, 0x0, 0x610, 0x100}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, [], 0xe}, @ipv4=@rand_addr=0x6, 0x24, 0x24, 0x200}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [0xff, 0xff, 0xff0000ff], [0xffffffff, 0xffffffff, 0xffffff00, 0xffffff00], 'ip6gretap0\x00', 'ip6tnl0\x00', {}, {0xff}, 0x3a, 0x3ff, 0x0, 0x54}, 0x0, 0xf0, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x4}}}, {{@ipv6={@loopback={0x0, 0x1}, @empty, [0xffffffff, 0xff0000ff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'team0\x00', 'veth1_to_bond\x00', {}, {}, 0x21, 0x8, 0x1, 0x42}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@rt={0x138, 'rt\x00', 0x0, {0x1, 0x7, 0x2c, 0x2, 0x39, 0x4, [@local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, @mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1e}}, @mcast2={0xff, 0x2, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, @loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @remote={0xfe, 0x80, [], 0xbb}, @local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}], 0x4}}, @common=@mh={0x28, 'mh\x00', 0x0, {0x8, 0x80}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast=0xffffffff, @ipv4=@multicast1=0xe0000001, 0x31, 0x17, 0x37a}}}, {{@uncond, 0x0, 0x120, 0x168, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}, @common=@ah={0x30, 'ah\x00', 0x0, {0x4d6, 0x4d5, 0x5, 0x1, 0x1}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4, 0x10, 0x1, 0x3}}}, {{@ipv6={@empty, @mcast1={0xff, 0x1, [], 0x1}, [0x0, 0x0, 0xff000000, 0xff000000], [0xffffffff, 0xffffffff, 0xffffffff], 'syzkaller1\x00', 'bond_slave_0\x00', {0xff}, {0xff}, 0x3f, 0x7, 0x7, 0xc}, 0x0, 0x110, 0x158, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x6b2, 0x1, 0x1, [0x8, 0x1f, 0x581, 0x8000, 0x6, 0x8000, 0x3f, 0xfffffffffffffffc, 0x40, 0x4, 0x8, 0xffffffff, 0x80000000, 0x100000001, 0x400, 0x8], 0x7}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote={0xfe, 0x80, [], 0xbb}, @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, 0x1d, 0x2a, 0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x900) mremap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000009000/0x4000)=nil) 2018/04/14 15:03:45 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:45 executing program 1: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f801", 0x17}], 0x10, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f00000005c0)='./file0/file0\x00', 0x3fffa, 0x0) r1 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, r1, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x800) 2018/04/14 15:03:45 executing program 7: syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000180)='./file0\x00', 0x2, 0x0, &(0x7f0000000080), 0x20000, &(0x7f0000000240)=ANY=[]) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000440)='./file0/file0\x00', 0x3fffa, 0x0) fstatfs(r0, &(0x7f00000001c0)=""/216) 2018/04/14 15:03:45 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) [ 237.656841] binder: 17760:17763 IncRefs 0 refcount change on invalid ref 33554432 ret -22 2018/04/14 15:03:45 executing program 0: bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000005, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x8940, 0xfffffffe, &(0x7f0000000180)) 2018/04/14 15:03:45 executing program 4: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000100)={0x8, 0x9, 0x4, 'queue0\x00', 0x3}) syz_fuseblk_mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000) 2018/04/14 15:03:45 executing program 5: syz_mount_image$vfat(&(0x7f0000000040)='vfat\x00', &(0x7f0000000000)='./file0\x00', 0xe005, 0x2cb, &(0x7f00000002c0)=[{&(0x7f0000000080)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000180)=ANY=[]) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = memfd_create(&(0x7f0000000180)='vfat\x00', 0x0) r2 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000001900)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@dev}}, &(0x7f0000001a00)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0, 0x0}, &(0x7f0000001a80)=0xc) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001ac0)=0x0) fstat(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001c40)={0x0}, &(0x7f0000001c80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001cc0)={0x0, 0x0}, &(0x7f0000001d00)=0xc) getgroups(0x4, &(0x7f0000001d40)=[0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) r12 = fcntl$getown(r0, 0x9) lstat(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003100)='./file1\x00', &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r15 = getpgid(0x0) lstat(&(0x7f00000031c0)='./file0\x00', &(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000003280)=[0xffffffffffffffff]) r18 = getpgrp(0x0) r19 = geteuid() r20 = getegid() r21 = fcntl$getown(r0, 0x9) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000003740)={{{@in=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000003a80)=0xe8) stat(&(0x7f0000003880)='./file0\x00', &(0x7f00000038c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000003980)=[{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000300)="e270f980d0cce22b6b333e84188284e0351d746daddd4d0c985dd17eae40ec15f24b88e8606ae09654fcceed74145d704af457750a2f2701e15bdccf1d8776b7ebd6983036f42335160856d6e715ce6a1983b964ef2922b80b2960ff2a80ac67173dcbc7a7182a7ca085e54e1a4f97e67ab39032afa03d7bd07f7f1d74b0035024b1742e535b4ee80098a5a96c43c3fcb54d6bf0df54a1c32aad668044629f9ce97e4143ca3c4a17c18ce98d", 0xac}, {&(0x7f00000003c0)="8aa722de01c0353f0edc38e74897d1b94b78b9d32e7ce00817fe822ed19444f838d494514a9e3fe8427110ac5720ddf437e8f580e639245d741e64d33074b4ce37e83f4b50d8bac4e68cddf2ba761286002bae1746c4fc690ef3aba33f08c624fff3e7077f35e1697ba27dac47d777e77de55ab80affe4f9690735484a9790e99c7222bc80e623d9121e83a7364713f108e8eb4aad51868db830b07555e9f6e4fa6182accf57ab9c255ceb3bd003b7a1da97c102c9b82833d19d0ed04c5593abb89a", 0xc2}, {&(0x7f0000000240)="2f1ac777e52dcd7bf99f970646aa4540cd2685e3fa74c688934fad2655fee8dd5ff3b755845c18d69d517b17d7b0becea9", 0x31}, {&(0x7f00000004c0)="6af3394526837aaf150b3cda234c01bd6f20f426ac2f7fed3bb6c3565ed018d42440d2576bdfb2be8135d15dda85120cf7eda7cf540b353aa8fa26dafe171f729a69d8fcfab7636c15ceb436a7fddb5b0684ae8ea35fe2c10421102493fba830575767b9ed6daaf154fb18b42b27800b5e7a39810f5612661d9daca0b9df034b2f958bbff943b9e5b28606de1592dc8d20aad55511e9", 0x96}, {&(0x7f0000000580)="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", 0x1000}], 0x1000000000000056, 0x0, 0x0, 0x40000}, {&(0x7f0000001600)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001880)=[{&(0x7f0000001680)="9772c143467590d7c9aa556b1be0689670228aa3b8ef224ec133e2989501ca80137f47c0f8dd4c010300c527c47455b15ee57868d49afe620891ae18c4c604b65298909fcabd6df3fa1a29a3e94c8202f4d0b8", 0x53}, {&(0x7f0000000280)="ceeccaa5f7d71d59872a80b764c968843df6c3c3c315c00a926ee3fd", 0x1c}, {&(0x7f0000001700)="d4e0966221bf2e128f3cc695535d2cace7caf772e439a1673f43f7ea9bba9f141c2878f89695b8163b0b8b733a14cfaab462483f100bc11d060b428747a40129eaf76fe6ee92afece8e2025cce9ff82676340c3097744e739f9af487fffe9a6da1aa829f19384aae78835b38524338a0b3fbabe52c49a4fcae70af92a17f3639effc3bb32958ace79146da5acafcc371094a4587a9f60c58b833e4d9473afd8232441dcc0ce4c213b4eba1818dd7d7af1bbd7dc13d6d58a0c0bb6421579e", 0xbe}, {&(0x7f00000017c0)="e4ae54abc524e99c588fd80a4a8de48895f4a94b5f157711ba17dc7b6331cf6857764eccb956a1b795d87c2e04bf431ae58732282caad1b5bf558b5fb8f697186882216eb69b19187858", 0x4a}, {&(0x7f0000001840)="7002407158c1696676d32179ae4e93afaf17aa7f5b", 0x15}], 0x5, &(0x7f0000001d80)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x30, 0x1, 0x1, [r0, r0, r5, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xa8, 0x8080}, {&(0x7f0000001e40)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003000)=[{&(0x7f0000001ec0)="eac33ca7d472aaca3d265b749f362f943d003b3af1dcefc9282856e1b355ee220fd1a32ffcef3bc0c3715adf0324065c1f7c67f3c00536f0c6e99d79733013d5f313aecd06269663ab0c", 0x4a}, {&(0x7f0000001f40)="41129f274ae7d2d4a981e95f8c6a4bc11f0c73373d571046ce2372b76041dcecae9c73557aa845f3bfcc6e0881393d75524a0248a7494a18bf1116035163c6e7c80baa85ec0f53778341fb93d4aca80790ab3ff79dfd56dd4379c17c0467f29ede6c985b8d2e4db08c521e546c4db9d218bd9bd56a8b657634840e12b29602df5b12d555cab89e94a7f0b4d42e62883bc36562d0131cd2a42367b319733f8796b502695c9f84746db7d5fd968e022bd97041eb667895173c4bb25ab158d005e55bd7719eb78b6dbe46edabf578b6aab6adf17a6834f0fbe71f1e2594c6d699057354d5245cfecddfe32547e8a754b83539cd21c9cd28c6ad7a69fc42497e1c8153bb6a11572558cc99130b58765ff874f7cfe976d665a44f96e6ee42ff4d25afe277ab3a82210565f294475c54b8d0b4f6f92a57de109def3e1fe1e61a3c5119f0b67bd2b0ffbf98e57868b7bae63c4215cdcbee9fd296859fafebcd489401346748a2d70f0680774bf914db957cc0deb34f6ed8cce6efb61703263fcd1a9b4d81c8d54555c6dd84921dabceef4cdc0a941046528b734f14ea42ed4323aec8b3c45638f7a2b46989a2dd575a017faf0f3170d0c3c8baafa5ccdd30ba149b8596171aff8e01f757b710bcfdb17040417c01108c0e14d33ac7dd6304d2722806d403ad5ae1d890d4528f77745e101a0453caceca6ea15acfb54acac861307f682b80a81f40adfd43e292dc4e2dae3a52f4f5570554d493cd2c3f44dd487ed1d497aa2763267612a0962c85b0166b552fd905d099ba0b255102542e540acdae98d4d9fd5549d446035ef5750fa7cfb7b6c449048b6fe55fccc6bf7bdc13c38d5c7e54b5f415d572a73f06890e783794552140da80df2e204d4e9abeb1751c72696e7b27a5e88112d9af83850ca8790b8fed9784107c8e9fde9c95a821fc32b533a5163e953362deead356e6d5c1f0ccb6585f044ed6f5f891ad0263595cc1f41e8d7bc9cb5ef1156a3cf7eb329d07ce6d9d54b2ef6a19676e8b3b1eceb047721f9c8ed66656c6b267e1b792373334fb64ca39667d6efeab35f8ba4290e89d97b0ba55332a6af316c8868b486057635c58d86d6c0f97d5c4398e94ed8da7fdb320adcb66f6bce042521419eb3956fe28878189248f981772f9c0b4511976ec045ba32edbf5f6b9d90434289b16fc5f85e3d2a2fac622729bf37ec8f1b85926eb39097fb415e3953d2c65dacad35273bb01544d3d2bcb7b7ac23e26f4cc0ec55d443898ec140201348540e2e21a052eed275f67a57f83f81f0218ce646b27e4ca2580a41256c17c4e38c415fd60dce36ff74972e22c3506f9638a8341b31e56f1001ea001db5ddd7570dda6173eefd981d2d2dde9a29844e1cc82401d2b00b8a31bef6529f74530f7eb01a9e7edbdfd237cb3add529f1ca16c75224a5d65be2fcae2820725e20226834d7d5119d91674ca6e12a26f7f224a2bb9464bb0274f2e8f270f26cfa118f2d7c494a929efde73e3021be57750a901b0930771ebdac7e05fd8b2ee4066829ebc4883728b02a90f1572571f9499751888f4ffff0fc477bc7b1647bc13a731fb57d865a171e669478e02f618409ea77626a6baab81352244753ac7bb164a2dd1b10eec4d60b3764f537490932a620285237da6e37ece8b3c7c1005cbcee53cafc7df78dde0c3bdf9b8f6e8530823c204814f73ff111236940ed4bfe67f702a8ad386a1492b9ebb2ac1241f820e00a7e2bc40a9b588c5a6142ef4df982d123aa1e904f074cc5a40b4891b27375a686e40e9381a9cae41f7331c893f243088bcfb4ea1d39fa66c62798540d2c6e495319b415373a2f6d5e8586da21abf685e9088edeb38096590a4260854722e2d61479fdb9b8681942e56f06dbbff824ae3cbdf7fcc1c2af51f1a7e3cf36f1ac5204135ee47ecbc7114dc140acad599b633cad190f1a975f4760a3d49f1ed08a59103859441173e8be1c1ab426ab965741e92cca778356e40e117aabc8dcd00b497b14d7dbc540de4cf83bbf986525fe2860fa2d875f7584334b6d979964fa23df61eebd7a46e84638322619a40e239a1317794cadefc1134484df6b953b892a33727d6aeb5f5fe0a07f48f6e4ab2d0d22e23e046ba7ecb65dbb4888a157f37806ca42ac365fb47374aa6f30c935c5c93722d41cd2a97f0aa7c88e6a7a3b751f790e84333f6d5eec19bdb727b6f40f08cc26c98991bc4e791e46e05858b70a4d8ecacad5101ed1ab9711ae5d4feb701a27060b64fe629f55d74009ecba899422167852844a2066980a34ed560bf0a950cd756c4835b990685979996722d7d4518e87df69ae74d59ad33a489644928bcb9ce83db5a38ea411e6a55a4ad6e5030b62d10436faeea213908d177837f7c1d7747367d96013eef008dcea93e5095e6e967ae9897c864f72cbaf131efc15263497ff166b43d55d07adccab064806932c858b7ae4b857a7d46568cb331711eceecd118e8d59b0356a1804747f40edddd32e4b3475ded9ded99e11820a88fd13e2ccd0c7c0a4c43ec1ae5445fe9f4e654705586ae913129b902d11087cb679a36d2121bcbd9d530018d7cb69ca68af15ef124b528d942c14dbd48088d0a6523adc7139e85b24186b9750a3593f0fc36117a00b159fe6a82d84754a71d280accc9dade52d3da1831bcd5e31cd4264385ff2a3e629817f70e8fec7dfff7489cdcd593a9716bd1d2e0b2fa5169acedd677462e015e5f66d0ca8e7f756ac360acf09b1471fc901f7bc9ef4053870e6af29a413dc88d14b582cdbff3dc91d96413fa5c2ab4393f8a314e697d26f84b23dcca07f44d0585a7db7bd1b23c780d1b2de5ed516b155f1670f3bb5e6e014940fe81c366ae2e969529a8e826354c40ce565ec06332878bcd5545e12250ba81b6e8221f243ba8e41068c0b76f4d56eea0dc3e9795e7fa418d8d525df150d7c9eb740a4d6e09e8ca81cfd34a09720c24d7695bd37d25050bd3581e371961c082a2799cb41a7b4e61fbbd98ce041c0d32274d58d983a7528e84966b2d44c04b5ec0df6cb45ac32196dab0070348a1659843773402c196c70bb3dcee90644a737582c941b5c23056c27dceedaa2405373eab94d829b68eb7ae4580d617f27004366bf9ff1202a99a414225e55a828f38f7cd75879728948d00605e8943478d7313f6d159134498bad426c79aebad11b05c944c8983c678185fce921c8a4c17e1257b6b5eac0a71be74fe00a23cc42fd584b8bd1c091a9d1bb497d418a965e4de7aa1644d482801cb1f44324c72ac2382aa53195b6b8f15a26d2176393b8429fdcb6f0a1ef6e04d8635d707faa8b47e14094afa42e71e76e2ce65852674ca50b9f033b5369eb8206c62e97135a8182182691283b7b97126f748ae4f99b3b3487bf7371da1c93f0a45f3cfbe4f7e0e555806b65b164ed6768f0b7c0ab184700f3e1c2334c6352776cfa04e852a9be86cd78deaa66718d960c61914048852a459a9383ad1a6522a77e8b608c8691d7c998d2c4138c3c9f0558d745973d2bb4daf535f3b4364b1d58b3ca5077ede65b14774bba0d3b6ecbcb6048ca7077a854d06ce9e230b92a78514d78f3089109bffb6eb41c26c06731e0701cdf0c7efe2805b2e4077430e49c197a1d14765840c85f7ce428e9bb0680c61415550929bc999946eb6771d114fb884ab4a389d57fb77fc3718e954f7605205acacb6cac35916c5c75507dccdb9854d0d87f80e6d4cba06a188469285a9d13fbc39b83f526808d2b349513492dbe52a0b17a17ef708f11a371cc365a537b1295bd371121c30cee62f338ac0a87448cf3110cb4f54baf67c2415758f08435a3c7292f85cbc33fdb8ff79f7776a819417d2b1c6acc28c7ea19bd07583ab29f98cf67d4c63f5adedb7e84e0badfd1e8d11fc582450772b6ca34796d67f5626589c96e081e61f42b034bd0784f299892d1378725b84b1ae9a74456a22fb2549364cc31d100691130c03ed474bb18e091cb84843f3d6127261b942ebc60eea26ee4e98122fc0a8db89f90bc523e7aef500b745682ceb7e38db59e0f30300a0d7b7d0e469ec552794135921a27437f101d2108a9aad59079778ec5a701213d5d846a0f1a55c00a7c331888142ec93eabdbbac5f006c04a1fe8b9b7d0652aca011f187873c8deaba8b22eed5a626e26c9585476f22eb7bcac0bed2ef7a2dcda7b6fb2b9d9695f1c41f1bb07c67dabc1db073c6af6c143e04c465801201fdaf20dba88b608101605085d4ea98d2ee275cda244f70b62b9be1f40335beaea911fcd3951c1d7862d5d4f72aaacf6adb9ca48dad184cd575ac71f7bf87c297bdfc0b72e9e32c8c76d3e755f833ac803bd94d5fc12f02dbe579240dbc89202e800f8b7e6e9a2ca1c7d6915021c5188e3f3ab0bfb22af3af90fe366a130eb4bca8dac46bab0543fc7f9770cb3f99e8040e95a825fc8f5014e30ce1174afeaaf41e8aab1f08e3de7b629d3b87e2a73cd1c3106d976ff872390ae00d2dcb0fdb1feeacfbe72efd01af92f7ce4b82fa41f42363fc6896acd1cfc9d5d6228769f7befb1e42be9b21e425fdaec4d1967627f746eb873cf408b39595033e7e25bd38c30a5055fef02ff0679b66960d9728d97346808b15f5b39301f0086941900bf76c48936f0e038012f1d847dca0da3279396f41963592c62ce8b7b780db735eb034e9e3d00eca2fbb353221e07fa0bf01ba1f187d9f8acca4f3293960560794042213d6f346ecb79c4f4fdb2711b594d73bdc7d2e08906af240f24ef20e03795beefd9561095c490b8585a040e6aed00649af4253e18f2377af7121460b3f85041b0f33deee72bfac602b842ffd2b3845e6a5ac83c7c75137d251851fad41359302d0bd475be6081aa209b3bb9726d6c4fef79d91fcae64652e9b1120a99573fd4504c44ba4397b06ce24e179e98ba91c7bf6fc1024df25cc917ef5464dcde0f64a1b1cc3cdddf5be0f964cc67006a6f01556e50e119b5f205c6c3d652199142f2c2ff6a28cad8ce020ecba838c3065a21e4ea528e44562a30e6da3089b83c9ac970717088161306cb2da8bd6ac8befb69af107a453c5698bcf7346e655ffc2b10f693ff4162aeb4da65389cf3530a066f25960b127865d7dc7eb21df3a477443804dc940b314bdd35516d7361ca8c2e4278b92130e21992e713207a7f07e6167b435aab54dd4bbafee7368873e3eec053fe45c83a00d758b81d94f91dc865b66c5f6311af261e3f2ffa8f2d5416269b3d23d916cf976e9a7aba0302dce95eb836dc9cc094cf1f250e4c61bdc60437d77fbdaacfa3833899ff9db1608b4e8269d2af6a20b2908ad912f3eba8d28f50ab2c95a78b423c6503ec8efa37a917fe1c6deb242dc2d0e9d0eb3543a88f82beb1852901c5f49297f4cb9f6c2ed0af63824ad2c9163c4163988a0bd3274af11abc0e3828e440c9a14c601b61909fc59c4b2c0eb57069473b5c1273619548d7ed946079ff455f9c9bdfd4daebcdb5f41280cbf95b86eb4a7a95f560fb7c2b96cc0bdb2d1e40ee38931969b0ca7a2a96b6907de1b6b90dd3ddcde60a3127758af702b86cca34a301a79aed927d3be8ed2431e1916d7936057a9c4cb6d005157715d8733332439bb5d5434f53e9af0e8bace58a1679eaab942826f3d5be116cc9e9c2532b02dad88607991d2060c171be54798772fb99b6ce7efe9bb8dfb0323fd2e1d42c78a69d27a307ff2a45e57ce6e980d937691d49a3bd0f2488cab4aa16834d0be7c544f7a9173cb99c484d41e6c19201d26dbc", 0x1000}, {&(0x7f0000002f40)="4304d71ab60bc68a402a41ba94cb632e9d2db07a5f380428007f5dc00465c220248246c5e8c9910a349da09a5e96891e394123d649b4afd91adf565fe3280f376b9deea0822491bb4e3465b54beacb4275aa7cd09185346831957c4c9da756013f5f47126d3543e9921f408d5bfbf6646b99c41a79968772b607f94b6b0c9652b581ff262e718ff2f49456", 0x8b}], 0x3, &(0x7f00000032c0)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0xc8, 0x4000}, {&(0x7f00000033c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003700)=[{&(0x7f0000003440)="8aa79d09cfba2aa7a75a1417ce25881a590e5279be4150aca11140412543a1887b425949f412da", 0x27}, {&(0x7f0000003480)="465cee08b0209c2232c754d42d14054b47a12724111040fc91e08f26a289c5c7216773ee2577677ed9366d8b9f095725d7baa62c363d5bce52d3f43d99072ecb882b2fdbffb54ff7db764f243fcea531de70f74e9f7ba9a20dfadf34be2df5fdc44232c17e0c25afc16e75061681f991caa932318a5bebf3e365a273bf8db1fe88ca6b31d3b7167bfe5a7698977bfb90b6760900fcba6038f1e1302c37d013fe457da9920c1a6b3bc5c9105598d1d0e27a595fbe2e98fe8f91c1ca91603ae545723b142a73ecec35c7738e706871747bd9dda1feb626eb3e6725", 0xda}, {&(0x7f0000003580)="0c3c1d9cf9cddcde300d8739f77187cc22e62c8280e11bb0ec46e9dccacda7f245b34b4558e0be40c0fb8039ad812c2bc83f5352786dfff608da65829e18b0d5ad647e2295ea5f364899dbf4a7a864dc328a4f09bfca7eb0a8c2bfb5bfc0f8008c7177142e63feab0350f46695dd131f7f539bf92fb6c85c8b791487fc0477ce8100d30af3fe95", 0x87}, {&(0x7f0000003640)="64647234182f7dd5598c8b87e37c74e45456d95e9b88545d766421a00214d01f2ade0f859fb4d6d874d99ccaca3f15ada3499baf678b0c14e319a2e6b8b568480e28957bdb744f6cc52b0ef4a9e94357269302c33780184fe43ddd79cc0ee1be54c7701e84b65ee7d8d765360e186b4472c0b0e0542fdd4db839b2f0c070ab9473ed36b702df97e55074c868bef3ec17445cc652", 0x94}], 0x4, &(0x7f0000003940)=[@cred={0x20, 0x1, 0x2, r18, r19, r20}, @cred={0x20, 0x1, 0x2, r21, r22, r23}], 0x40, 0x10}], 0x4, 0x800) getsockname(r0, &(0x7f00000000c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f0000000140)=0x80) 2018/04/14 15:03:45 executing program 1: syz_read_part_table(0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="0200eeffffff01000000ff07000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000055aa4546492050415254000001005c", 0x4d, 0x1c0}, {&(0x7f0000000000), 0x0, 0xfc100}]) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x3}, 0x1c) 2018/04/14 15:03:45 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 237.757394] binder: 17760:17774 IncRefs 0 refcount change on invalid ref 33554432 ret -22 2018/04/14 15:03:46 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f0000000000), 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x101000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000140)={0xfffffffffffffffc, 0x200000, 0x6, {}, 0x41bd, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f00000000c0)={{0x0, 0x4}, {0x4, 0x400}, 0x0, 0x7, 0x3}) ioctl$KIOCSOUND(r1, 0x4b2f, 0x9) syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0xffff, 0x10d803) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)) 2018/04/14 15:03:46 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) ioctl$TCSBRK(r0, 0x5409, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x800) ioctl$KVM_S390_UCAS_MAP(r1, 0x4018ae50, &(0x7f0000000140)={0x7fffffff, 0x3, 0x260}) 2018/04/14 15:03:46 executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000)=0xfffffffffffffff8, 0x4) close(r0) r1 = accept4(r0, &(0x7f00000012c0)=@pppoe={0x0, 0x0, {0x0, @link_local}}, &(0x7f0000001340)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000013c0)={0x0, 0x3c, &(0x7f0000001380)=[@in6={0xa, 0x4e23, 0x20, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @in={0x2, 0x4e22}, @in={0x2, 0x4e21, @loopback=0x7f000001}]}, &(0x7f0000001400)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000001440)={r2, 0x2}, 0x8) socket$alg(0x26, 0x5, 0x0) 2018/04/14 15:03:46 executing program 6: sendmsg$key(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:46 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4c00}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 238.058573] binder: 17810:17811 IncRefs 0 refcount change on invalid ref 19456 ret -22 [ 238.105373] binder: 17810:17813 IncRefs 0 refcount change on invalid ref 19456 ret -22 2018/04/14 15:03:47 executing program 4: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$int_in(r0, 0x40a0000080044dff, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x94, "3c35dd1b04580cd24ad14bde5e989c71c0bef1b7ab076a709e8d7969e0f8bb4b885b34867ebc3a982bd0b4141ff79cf3d0c6d577d4aaacd617da30cdfac562c86e7f6c5cfdbf20bb05a1b611acf366675b2ef7edb095f0087ca354385b7fcdc7f515e49c703cafd65e55ebc72ca25ba3927a7f060806f43a681d41bcf26f3bac4f404512ac5084f158e80ef1809ef9c0c630ae6e"}, &(0x7f0000000000)=0x9c) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={r1, 0x9, 0x6, 0x10001}, &(0x7f00000001c0)=0x10) 2018/04/14 15:03:47 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) set_mempolicy(0x2, &(0x7f0000000140)=0x80000000000001, 0x3fa) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x4, 0x111000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x35}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24}}, 0x7ff, 0x7, 0x400000000000, 0x0, 0x20}, &(0x7f00000002c0)=0x98) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x6, 0x7, 0x4, 0xb9d3, 0x9, 0x7fff}, 0x3}, 0xa) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f00000000c0)={0x0, 0x3ff, 0x7, 0x1, &(0x7f0000ffc000/0x1000)=nil, 0x3f}) ioctl(r0, 0x4, &(0x7f0000000300)="60bc836ead2c9193cf") 2018/04/14 15:03:47 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000000000000000cd2f3c19c6899834000000"], &(0x7f0000000080)='GPL\x00', 0x10000001, 0xb2, &(0x7f0000000200)=""/178}, 0x48) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0x200002, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={r1, r0, 0x0, 0x2}, 0x10) 2018/04/14 15:03:47 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x8, 0x80) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)={&(0x7f0000000140)='./file0\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1fc, &(0x7f0000000500)=ANY=[@ANYBLOB="850000000d000000257a00000000000095000000000000009761f5fa5b9cc8523d2b762161e6ca05627b4bc853d9385d4e4294181f44a734d00d2a95756e758a7d1cea9d547604db629036a26b3b4bdb2b26fb4697d7b3307670"], &(0x7f0000000300)='GPL\x00', 0x5, 0xc3, &(0x7f0000000380)=""/195}, 0xfe09) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x6}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r1, 0x2}, &(0x7f00000002c0)=0x8) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) 2018/04/14 15:03:47 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) r1 = open(&(0x7f0000000000)='./control\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x7, 0x800, 0x3, {}, {}, {0x3, 0x4, 0xffffffff, 0x1}, 0x1, @canfd={{0x3, 0x8000, 0x100000000, 0xc05f}, 0x37, 0x1, 0x0, 0x0, "a53fcafd9b2411ff8bcbdbb914f713dd0655e4f2b1368f5b10337d62c3f051276a674f7cd55570383d969948750886abfe993da948abd6c0f875ec99d66030a2"}}, 0x80}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) rmdir(&(0x7f0000000040)='./control\x00') ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f00000001c0)={0x1, 0x0, 0x10001, 0xffffffff7fffffff}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000200)={0x800, r2}) 2018/04/14 15:03:47 executing program 7: r0 = socket$inet6(0xa, 0x80a, 0x8b) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x1f, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000080)={r1, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}}, &(0x7f0000000140)=0x84) sendmsg$inet_sctp(r0, &(0x7f0000a29000)={&(0x7f00005dafe4)=@in6={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000fc8000)}, 0x0) 2018/04/14 15:03:47 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x289a010000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:47 executing program 1: r0 = socket(0xa, 0x2, 0x0) flock(0xffffffffffffffff, 0x6) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f00000009c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x21100000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="010e28bd7000fedbdf250f0000000800060403000000680001000800050001000000080021000a00000008000b007369700008000b00736970000c000700100000002800000008582f000a00000404000700200000000300000008"], 0x1}, 0x1, 0x0, 0x0, 0x50}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000008c0)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x100000002}, 0x1c) getsockname$packet(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000600)=0xba) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000640)={@empty, 0x0, r1}) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000400), 0x3ba) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000540)=""/99, &(0x7f0000000780)=0x63) ioctl$DRM_IOCTL_AGP_RELEASE(0xffffffffffffffff, 0x6431) fchdir(0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @loopback=0x7f000001}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000680)={r1, 0x1, 0x6, @random="523f469e1f92"}, 0x10) fallocate(0xffffffffffffffff, 0x1, 0x0, 0x20004d2d) sendto$inet6(r0, &(0x7f0000000240)="6a14", 0x2, 0x40000, &(0x7f0000000280)={0xa, 0x4e23, 0x3, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x9}, 0x1c) getpeername$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000800)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000000)={{{@in=@multicast2, @in6=@dev}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @remote}}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000180)={@local={0xfe, 0x80, [], 0xaa}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, @local={0xfe, 0x80, [], 0xaa}, 0x0, 0x80000000, 0x0, 0x500, 0x10001}) 2018/04/14 15:03:47 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:47 executing program 4: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x4, 0x0) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000000140)=0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000358fe0)={r3}) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000040)={r3, 0x0, 0x1}) [ 239.230276] binder: 17819:17820 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 239.267853] binder: 17819:17842 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:47 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x42000000000484, &(0x7f0000000080)=""/24, &(0x7f0000d0cffc)=0xfcc1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xb81, 0x509400) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000040)=0x2, 0x4) 2018/04/14 15:03:47 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) close(r0) mount(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xc, 0x2, &(0x7f0000000240)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x11d, &(0x7f0000000500)=""/251}, 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0/file0\x00', r0}, 0x10) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x2002, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000180)={0x0, 0x326}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000002c0)={0x8, 0x6, 0x8, 0xffffffff, 0xffff, 0x7fffffff, 0x6, 0x2, r2}, &(0x7f0000000300)=0x20) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 2018/04/14 15:03:47 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x1f) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)="390000001300090065000000000000007f008040040000004600010700000014190004000400000003f5000000000000000000000000000000", 0x39}], 0x1) 2018/04/14 15:03:47 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000f09fe4)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x7}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000bef000)={0x1, 0x3, &(0x7f00009ff000)=@framed={{0x18}, [], {0x95}}, &(0x7f0000849000)='syzkaller\x00', 0x4, 0xb7, &(0x7f000079d000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000954ff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r2}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) r4 = dup2(r0, r0) ioctl$sock_inet_SIOCRTMSG(r4, 0x890d, &(0x7f0000000080)={0x6, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e21, @loopback=0x7f000001}, 0x33, 0x9, 0x101, 0x7fffffff, 0x9, &(0x7f0000000040)='vcan0\x00', 0x4, 0x5, 0xfffffffffffffff8}) r5 = dup3(r2, r3, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f00007d5000)={r3}) 2018/04/14 15:03:47 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x74}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:47 executing program 6 (fault-call:1 fault-nth:0): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 239.493628] FAULT_INJECTION: forcing a failure. [ 239.493628] name failslab, interval 1, probability 0, space 0, times 0 [ 239.504957] CPU: 1 PID: 17876 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 239.511803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 239.521153] Call Trace: [ 239.523731] dump_stack+0x1b9/0x294 [ 239.527347] ? dump_stack_print_info.cold.2+0x52/0x52 [ 239.532522] ? perf_trace_lock_acquire+0xe3/0x980 [ 239.537361] should_fail.cold.4+0xa/0x1a [ 239.541406] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 239.546494] ? perf_trace_lock+0xd6/0x900 [ 239.550623] ? perf_trace_lock_acquire+0xe3/0x980 [ 239.555454] ? zap_class+0x720/0x720 [ 239.559157] ? find_held_lock+0x36/0x1c0 [ 239.563222] ? check_same_owner+0x320/0x320 [ 239.567535] ? rcu_note_context_switch+0x710/0x710 [ 239.572455] __should_failslab+0x124/0x180 [ 239.576675] should_failslab+0x9/0x14 [ 239.580461] kmem_cache_alloc_node+0x272/0x780 [ 239.585036] ? __check_object_size+0x95/0x5d9 [ 239.589522] __alloc_skb+0x111/0x780 [ 239.593227] ? skb_scrub_packet+0x580/0x580 [ 239.597540] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.603065] ? _copy_from_user+0xdf/0x150 [ 239.607197] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 239.612206] ? rw_copy_check_uvector+0x2d3/0x3a0 [ 239.616954] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.622475] ? import_iovec+0x24b/0x420 [ 239.626434] ? dup_iter+0x270/0x270 [ 239.630053] pfkey_sendmsg+0x250/0x1050 [ 239.634014] ? _copy_from_user+0xdf/0x150 [ 239.638158] ? pfkey_spdget+0xb10/0xb10 [ 239.642122] ? security_socket_sendmsg+0x94/0xc0 [ 239.646866] ? pfkey_spdget+0xb10/0xb10 [ 239.650829] sock_sendmsg+0xd5/0x120 [ 239.654537] ___sys_sendmsg+0x805/0x940 [ 239.658501] ? copy_msghdr_from_user+0x560/0x560 [ 239.663251] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 239.668775] ? proc_fail_nth_write+0x96/0x1f0 [ 239.673259] ? __fget_light+0x2ef/0x430 [ 239.677220] ? fget_raw+0x20/0x20 [ 239.680655] ? find_held_lock+0x36/0x1c0 [ 239.684704] ? kasan_check_write+0x14/0x20 [ 239.688925] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 239.693842] ? wait_for_completion+0x870/0x870 [ 239.698414] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 239.703934] ? sockfd_lookup_light+0xc5/0x160 [ 239.708415] __sys_sendmsg+0x115/0x270 [ 239.712288] ? SyS_shutdown+0x30/0x30 [ 239.716073] ? __sb_end_write+0xac/0xe0 [ 239.720037] ? fput+0x130/0x1a0 [ 239.723304] ? ksys_write+0x1a6/0x250 [ 239.727096] ? ksys_ioctl+0x81/0xd0 [ 239.730710] SyS_sendmsg+0x29/0x30 [ 239.734233] ? __sys_sendmsg+0x270/0x270 [ 239.738282] do_syscall_64+0x29e/0x9d0 [ 239.742153] ? vmalloc_sync_all+0x30/0x30 [ 239.746287] ? _raw_spin_unlock_irq+0x27/0x70 [ 239.750765] ? finish_task_switch+0x1ca/0x810 [ 239.755245] ? syscall_return_slowpath+0x5c0/0x5c0 [ 239.760162] ? syscall_return_slowpath+0x30f/0x5c0 [ 239.765078] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 239.770428] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 239.775261] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 239.780431] RIP: 0033:0x455319 [ 239.783603] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.791294] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 239.798550] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 239.805804] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 239.813055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 239.820307] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000000 [ 239.831947] binder: 17871:17874 IncRefs 0 refcount change on invalid ref 116 ret -22 [ 239.852899] binder: 17871:17877 IncRefs 0 refcount change on invalid ref 116 ret -22 2018/04/14 15:03:48 executing program 1: getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000200)=""/250, 0xfa) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f00000000c0)="b82283392dc50ff1fb635a5849d2f5916ae2fdc24e95e12aa8daccf7393e72be9cc66f"}, 0x10) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x1000000000000004, 0x202}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800220000000000000000000000000095000000000000000000000a000000000000000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r0, 0x50, &(0x7f00000000c0)}, 0x10) socketpair$inet_icmp(0x13, 0x40045730, 0x6f2000, &(0x7f0000000180)) 2018/04/14 15:03:48 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb05") preadv(r0, &(0x7f00000023c0)=[{&(0x7f0000000080)=""/4096, 0x1000}], 0x1385, 0x0) 2018/04/14 15:03:48 executing program 7: r0 = socket(0x11, 0x4000000000080003, 0x0) sendmmsg(r0, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x80, &(0x7f0000000f80), 0x386, &(0x7f0000000000)}, 0x4}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1000}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x100000000, 0x7fffffff, 0x100, 0x1, 0x1}, 0x98) ioctl$TIOCSTI(r0, 0x5412, 0x7) connect(r0, &(0x7f0000000100)=@ethernet={0x7}, 0x80) 2018/04/14 15:03:48 executing program 0: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000280)={0x8, 0x736, 0x8, 0x8, 0x401}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/ipv6_route\x00') ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x2}) sendfile(r1, r2, &(0x7f0000000040), 0x800000000fffc) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000004680)=0x0) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001b00)=0x0) r8 = getuid() r9 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001cc0)={0x0}, &(0x7f0000001d00)=0xc) r11 = getuid() stat(&(0x7f0000001d40)='./file0\x00', &(0x7f0000001d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000001e00)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000001e40)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast2}}, &(0x7f0000001f40)=0xe8) lstat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000002040)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002080)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@loopback}}, &(0x7f0000002180)=0xe8) stat(&(0x7f00000021c0)='./file0\x00', &(0x7f0000002200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000002280)={0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000022c0)={0x0, 0x0}, &(0x7f0000002300)=0xc) r21 = getegid() r22 = getpgid(0x0) r23 = geteuid() getresgid(&(0x7f00000026c0), &(0x7f0000002700)=0x0, &(0x7f0000002740)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000002780)=0x0) r26 = getuid() lstat(&(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002880)=0x0) lstat(&(0x7f00000028c0)='./file0\x00', &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002980)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0]) r31 = getpid() lstat(&(0x7f00000029c0)='./file0\x00', &(0x7f0000002a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0, 0x0}, &(0x7f0000002ac0)=0xc) r34 = getpgid(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000003100)={{{@in6=@dev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000003200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003240)={0x0, 0x0, 0x0}, &(0x7f0000003280)=0xc) r37 = getpgid(0x0) r38 = getuid() getresgid(&(0x7f00000032c0), &(0x7f0000003300)=0x0, &(0x7f0000003340)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000003380)=0x0) stat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003480)={0x0, 0x0, 0x0}, &(0x7f00000034c0)=0xc) r43 = gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000003500)={0x0, 0x0}, &(0x7f0000003540)=0xc) fstat(r0, &(0x7f0000003580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000003600)=0x0) stat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000003700)='./file0\x00', &(0x7f0000003740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r49 = syz_open_pts(r1, 0x400002) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000037c0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000003800)={{{@in6=@ipv4={[], [], @multicast1}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast2}}, &(0x7f0000003900)=0xe8) fstat(r0, &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r53 = getpid() r54 = geteuid() r55 = getgid() ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000003dc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000003e00)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@dev}}, &(0x7f0000003f00)=0xe8) r58 = getegid() r59 = getpid() getresuid(&(0x7f0000004280), &(0x7f00000042c0)=0x0, &(0x7f0000004300)) getgroups(0xa, &(0x7f0000004340)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) sendmmsg$unix(r0, &(0x7f00000043c0)=[{&(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)}, {&(0x7f00000003c0)="0435ffa1d035668be945dc45bcf18c5d62753aa99a3e8623c394fb91f411cad188e486bfdd49ae5f82096e2bf96a8efea0bd906b1e2a972561efdc63462351d134e4e5e27093f240d45ad1f9bfcc929febc2d977d60ccd83da6ac31d23", 0x5d}], 0x2, 0x0, 0x0, 0x4004000}, {&(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000500)="2bc9d8cb9fc565ab2997346d1f6fe1019167478e7b56cd056b9e787ee9894e5f09251af152a054230c7411a9df2d421fc9c33d69c26a0a1d00903765f4614a4afb28725b6fa1e283f4c7e085d31e00d3bab6366288f83bac619c9937b7178cd92517c6364020bdebe573231a543d2f4bee010bb2082e67176de8579a2ef0c845eff84405c36a9c0fe76b4e2ed9dc12f3fa539f5793d9c727037759df78cf8ac1f9f59157ebd52022b9c738d93d10f7ae821a6423f982f06bd42fe9d8d2f02c5d87ee6d679ada22b235feaa952a876be977c1be6837fd0cd3003649dbcc96bfea8edc98bf47bf6202cd0ee86944b0bc622f6138ceeb", 0xf5}], 0x1, &(0x7f0000000800)=[@cred={0x20, 0x1, 0x2, r4, r5, r6}, @rights={0x30, 0x1, 0x1, [r0, r2, r0, r0, r1, r0, r1]}], 0x50, 0x8000}, {&(0x7f0000000880)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000000900)="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", 0x1000}, {&(0x7f0000001900)="ad525b1bd077dc9cdf7820cf354dfa07ddb865fb8cbd8a73e1e5a6ea8274b6570c1694ae9dc4812ba5e8f65f9450203d59d221020dc1055f41ea7aabcd8453595893fc219c0a5c5f944075", 0x4b}, {&(0x7f0000001980)="396b136927ed8e4935508033467a47705d04f8dab40b5787cb4c2d0540664c1ee841dabe7526509875d4ea4108f7935d0d67900178908b07a2f4665d150397069e33a1fabd862bec36c0242468aec304ee02833769838840daba48f328e46b04cc1ac7324e702f2dcac9f706e3b698e13bdb365a39c5f58738b50cae10862cb95b5f54ee96439276d5e0ef07e9391a51a33ae9fcb5b8a1377da2d22ecc46b68943c367f40816b4bc8fca9b260559cc92107d33248059f20f02f3fa46f748bee2bb2a4cd2914a7f1f1459d4008f6b0aad8a27cb8c67d851ed26493ed8e5793f32780f671d28b41316b89c53bb", 0xec}, {&(0x7f0000001a80)="9867a041502ab976dc06e9d3baabd055d87e947c631fc7", 0x17}], 0x4, &(0x7f0000001b40)=[@rights={0x20, 0x1, 0x1, [r0, r2, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r2, r1, r1]}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x80, 0x40}, {&(0x7f0000001bc0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000001c40)}], 0x1, &(0x7f0000002340)=[@rights={0x20, 0x1, 0x1, [r1, r1, r0, r2]}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x20, 0x1, 0x1, [r2, r1, r2, r0]}, @rights={0x18, 0x1, 0x1, [r2]}, @rights={0x20, 0x1, 0x1, [r1, r2, r1, r0]}, @rights={0x20, 0x1, 0x1, [r2, r2, r1]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @cred={0x20, 0x1, 0x2, r19, r20, r21}, @rights={0x28, 0x1, 0x1, [r0, r2, r2, r1, r1]}], 0x140, 0x40001}, {&(0x7f0000002480)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002680)=[{&(0x7f0000002500)="6a084204a3340a1b0d3bcc7aa2084e23fa36ca380fd7274e40c40b8301e1b9a69494ca9e09d47f4bf51aaf85525b1ac69b285d119b7bd8a272d5a1171182d8cc275abe6706a9f31895e698df5c5740e85f7213d49f53e573acbf44dd56e6eecefa5b96e0f8650c09114a99", 0x6b}, {&(0x7f0000002580)="d4767638037771b7d515ee914f040eb3235aa99635c91f2a8ac1120f6f1557b31aaa11cf23839cd351fbf8cbb993667de785b2c2871e1ed3f9fbf5d09f28f913a9ef4c063576afe1cde0becdf93373d35747726b488cb8e360441eadb0fc5e593135e0ff265b11d726f3bcddd726499d33935730c8ac75c28eaa70e8a8c71d620b923b74b337fd99937cb0d159bff9a7b2ba00fa02e3f1f32ca6cc43dc7f2c82d2a2b5bd572e8b427c19845a3fb4dce2c031023710ee668bcbb83fe7a8644cd32c9b30839a7e9e59b5a4d5", 0xcb}], 0x2, &(0x7f0000002b00)=[@cred={0x20, 0x1, 0x2, r22, r23, r24}, @rights={0x20, 0x1, 0x1, [r0, r0, r2, r0]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r0, r1, r2, r2]}, @cred={0x20, 0x1, 0x2, r25, r26, r27}, @rights={0x38, 0x1, 0x1, [r1, r2, r0, r0, r0, r0, r2, r0, r1]}, @cred={0x20, 0x1, 0x2, r28, r29, r30}, @cred={0x20, 0x1, 0x2, r31, r32, r33}], 0x108, 0x40}, {&(0x7f0000002c40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000003080)=[{&(0x7f0000002cc0)="34bc87e5d828a9d68b8cb6d2f63d4cd9c00525664cb4acaa3091922c5c26b2b8a36866e075f267233b3d1fe237560ba3e7cdf586d84b5eb6af3f648d39cb23c0c91bd8f2ce8f549eed07e77dfce4ab5bec0a8c5de65a3b19825c5d94a52e469796d9e73dd4d39c650e9f0eb84e651d3b4576da3a9184ae7d820b0aa2320ffdf415a573e3c995f8865ce92b27ffdbdae285ffd4f8555f9f975fe3c7f015c2e7c0e16e1ce5ca2fe9227980086c2b342427545d5b99448ba2cef48ca369ae8da82ef088321c34a6cf6e708fed99f53ec4c4ba", 0xd1}, {&(0x7f0000002dc0)="28b5bf7f6b9e59c6cee9787cd25abc1f5a5993f94af8483b0c7e850bdfe45061178f0bc206928974c9a2779788f79707870098c1c1352276f11e6924ad9001b6ba58ab7ff049f6d4438ada9e90f86eb521c5a6e5e18a2fb8ee3e334ca67480408d2a1325fb7b6b05cb58fae5b514d075bda33a56f0f223f39c", 0x79}, {&(0x7f0000002e40)="5fa0709b7598eb76410f9ee70acb6fef1051282fe70c89682ddece3fb38b20e7ab601cf1189b1ab693cd6845affd1eda31d57a2c1f3f8665b149ad05a689408bc4a1c93918230eb1071c9f41c6e3bcfa8fb57ade2ee8f9927791ecb0845202a23db36c52c74d78e11a8efb67965eb23f2b5a3d836cde6608671945cb1fa9922356588824cb75b9a13c1e723a7d2df8ff2251c31296c74674523bd8d106810db6415509a7a6f2ec3b231be0519fd1dec066bc7b39b796d37030534f6557090cc45d0e7079e5e182f89218ac57a6fde0cd36eb", 0xd2}, {&(0x7f0000002f40)="a9c21669a042814fc022359c224b403d709500648d5ef913116aa7221fd14ef8a9ce68aaf3ece826f0a96ae5fbac1d72d6fad4762472316c927cf357a4935cf8804dc0954dcd9b55ba0109bbc9d1564d9633c035135d70616c0fb2d39f4ec983d18e8d81dacf0a8728e7542a7d18a270b2f78be51c60891293df54644c8ebda22ce7b26350f42487bfc3c767557cc0063c144335abf9ed49452981483ad48d548f9c201547282d091fe4c4cf7b71d018bdfe631585", 0xb5}, {&(0x7f0000003000)="506e52b88f186bfdfb08940ab22798079d627d08d2e2a850970bec26e60cb11fa0c21c44f5", 0x25}, {&(0x7f0000003040)="c3268c7021d65d9d9ce8becb0503e8ba1ad6d3fc22753e24dff3cf0697b5f34d96a2", 0x22}], 0x6, &(0x7f00000039c0)=[@cred={0x20, 0x1, 0x2, r34, r35, r36}, @cred={0x20, 0x1, 0x2, r37, r38, r39}, @rights={0x20, 0x1, 0x1, [r1, r0, r2, r1]}, @cred={0x20, 0x1, 0x2, r40, r41, r42}, @cred={0x20, 0x1, 0x2, r43, r44, r45}, @cred={0x20, 0x1, 0x2, r46, r47, r48}, @rights={0x28, 0x1, 0x1, [r2, r49, r1, r2, r0]}, @cred={0x20, 0x1, 0x2, r50, r51, r52}, @rights={0x38, 0x1, 0x1, [r0, r1, r2, r1, r2, r0, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, r53, r54, r55}], 0x160, 0x4}, {&(0x7f0000003b40)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003d80)=[{&(0x7f0000003bc0)="ad11a2c92b61dd087925ae5183044d158ed74606fe50556f7d3dda46e3a9097e00eccd66fc587e10dd6c29057cce26ade4b23ca43e7e1c02dbea3ed6c9429a8207e58492cee1fef28cfeafa26fc0670411b19e92f6cd62d0c80c77d778a695a0657c2bb8bd67dde6fc04bf1202cc5654077a16f9a275564861b6a980fbadaac10e4396305be97caa10cb42dbd4fc90ce84daa6b08738b07b72da97337d2b2c83ec3797c45b683c0e476650e7e3298074e84582ab2e122a0bee84d1fdd17a9606f34e99924886cd144963c393c439299764", 0xd1}, {&(0x7f0000003cc0)="cd740df95635380427951a9964916224170b4086a22e3ffb85184f8a73b4d45e5154f1425a0a777af62200e25c79769fa3d0bc7e0647ed0ec73e0ae085f14dd3be0d20d900cca0b21f725962eab17795120c023910895310d76859e72e5ef3bbd4feb24bcca78001428dcf3529567fa3d9e0e3110d472cc89d585f17da1e4e032e2e80507cfaeb9578cb696fedaa46d12d82a9cf65f3781db0b1a3581c16c26cbfd9bfd5d02a21", 0xa7}], 0x2, &(0x7f0000003f40)=[@rights={0x18, 0x1, 0x1, [r2]}, @cred={0x20, 0x1, 0x2, r56, r57, r58}], 0x38, 0x90}, {&(0x7f0000003f80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004000)="9548cef75f94a619c5ff8ef865f4a05de216e73421bfe95bc5ed84e323a1c845213f4bc0f0768a10354da3d105170ddea1b7501cdb28ae7a49fd49d36e6963d600e57c401e973fe92daebd6280ad0d2fd22224ff2196913c34d0aa3647f7be1b6945da8dc66e1246dc81d9e89540987d8fc9bd745714b771aebebbefe5be061d3e5f5f4e10094adcf2e86c1f5e901dfeecbfc73f099850fd51400e667c478d753eda67102244", 0xa6}, {&(0x7f00000040c0)="2d31c4ebc0182e900b89c9a1a83c197d187efdc4f04dd07ed8184ca3cdbf0159bb225908e429691758d0b23c53267b64cc46e96427541646fbbc56751c4a32c514be3b260911aabd0bf5c13b99bfa95f1e7e25def940201f56567ad2c053633a6ad10efeeab44980847b45d3b672967370", 0x71}, {&(0x7f0000004140)="090f5e9615b42a", 0x7}, {&(0x7f0000004180)="dea2ba970686fcc77a54fdb2c1cb4f1702cc4b87a003d27e78b69e458f1d292ab30fa5daa7cce9816b33c5cc130f2de290057b696aa19603e52cdb205add11a9d11f670cd33bc3f8d0da4044e87d8e3e5159324c7074e51b8f63b5a576e5fef5797faad20b134f1e14fdc947a3e18e9f4996219967659d407eb0e50f4146ca3eb9ffba51e0adb985061f184af34421551fea82f651b22212be7f254e69", 0x9d}], 0x4, &(0x7f0000004380)=[@cred={0x20, 0x1, 0x2, r59, r60, r61}], 0x20, 0x20000050}], 0x8, 0x4000000) ioctl$int_in(r0, 0x5421, &(0x7f00000002c0)) sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="8b000000", @ANYRES16=r3, @ANYBLOB="080427bd7000fbdbdf2506000000600002000800080005000000080007000700000008000300000000000800090004000000080009000400000014000100ffffffff000000000000000000000000080002004e220000080007001700000008000500080000000800050004000000"], 0x74}, 0x1}, 0x4000000) 2018/04/14 15:03:48 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xffffff7f00000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:48 executing program 4: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x3ab5fb2b537aefe3, &(0x7f00000000c0)=0x9, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x0, &(0x7f0000000000), 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000), 0x0, r3}) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, r3, 0x4}) 2018/04/14 15:03:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0xe, 0x80000, 0xffff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, [], 0x12}}}, 0x8, 0x7}, &(0x7f0000000100)=0x90) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r1, &(0x7f0000000180)="1bb9cd4b8a97d0eac535a12a70b7ed8f6cf69d25956401aa71ec2fa8de62097c8f8927ba8c379bdc930744642f55a8269b8544580f7befcffa802c02ec7b21a482a0ed0635aba38461b58e6fd56055eda1f906c9211d049815936c18c96cc600e7198d9d04beaef6885f656a79a0439d004efc6546054e6ac1b89756ac5bb8c4d9df2211e8fe95d6dc1c5d526f070c39ea4b77bf3057789be4c89cda24280b5e86e2287cf9d79fe6bb1a7f2e2ea351db63e85cb816d6a64b8d00c2b81115e43e807908cb", &(0x7f0000000280)=""/65}, 0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x0, 0x0, 0x4, 0x3, r2}, 0x10) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f000075b000)=@ipv6_newroute={0x2c, 0x18, 0x301, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x4}, @RTA_ENCAP={0x8, 0x16, @nested={0x4, 0x1}}]}, 0x2c}, 0x1}, 0x0) 2018/04/14 15:03:48 executing program 6 (fault-call:1 fault-nth:1): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 240.469751] syz-executor5 (17867) used greatest stack depth: 14088 bytes left [ 240.522928] FAULT_INJECTION: forcing a failure. [ 240.522928] name failslab, interval 1, probability 0, space 0, times 0 [ 240.534233] CPU: 0 PID: 17897 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 240.541076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 240.550423] Call Trace: [ 240.553017] dump_stack+0x1b9/0x294 [ 240.556646] ? dump_stack_print_info.cold.2+0x52/0x52 [ 240.558260] binder: 17893:17895 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 240.561836] ? is_bpf_text_address+0xd7/0x170 [ 240.561855] ? kernel_text_address+0x79/0xf0 [ 240.561874] ? __unwind_start+0x166/0x330 [ 240.561895] should_fail.cold.4+0xa/0x1a [ 240.561909] ? __save_stack_trace+0x7e/0xd0 [ 240.561928] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 240.596044] ? save_stack+0xa9/0xd0 [ 240.599657] ? save_stack+0x43/0xd0 [ 240.603264] ? kasan_kmalloc+0xc4/0xe0 [ 240.607133] ? kasan_slab_alloc+0x12/0x20 [ 240.611264] ? find_held_lock+0x36/0x1c0 [ 240.615325] ? check_same_owner+0x320/0x320 [ 240.619631] ? rcu_note_context_switch+0x710/0x710 [ 240.624550] __should_failslab+0x124/0x180 [ 240.628771] should_failslab+0x9/0x14 [ 240.632553] kmem_cache_alloc_node_trace+0x26f/0x770 [ 240.637647] __kmalloc_node_track_caller+0x33/0x70 [ 240.642562] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 240.647300] __alloc_skb+0x14d/0x780 [ 240.651001] ? skb_scrub_packet+0x580/0x580 [ 240.655312] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.660830] ? _copy_from_user+0xdf/0x150 [ 240.664965] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 240.669963] ? rw_copy_check_uvector+0x2d3/0x3a0 [ 240.674707] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.680223] ? import_iovec+0x24b/0x420 [ 240.684181] ? dup_iter+0x270/0x270 [ 240.687794] pfkey_sendmsg+0x250/0x1050 [ 240.691757] ? _copy_from_user+0xdf/0x150 [ 240.695895] ? pfkey_spdget+0xb10/0xb10 [ 240.699856] ? security_socket_sendmsg+0x94/0xc0 [ 240.704594] ? pfkey_spdget+0xb10/0xb10 [ 240.708553] sock_sendmsg+0xd5/0x120 [ 240.712251] ___sys_sendmsg+0x805/0x940 [ 240.716211] ? copy_msghdr_from_user+0x560/0x560 [ 240.720959] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 240.726478] ? proc_fail_nth_write+0x96/0x1f0 [ 240.730958] ? __fget_light+0x2ef/0x430 [ 240.734914] ? fget_raw+0x20/0x20 [ 240.738352] ? find_held_lock+0x36/0x1c0 [ 240.742395] ? kasan_check_write+0x14/0x20 [ 240.746613] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 240.751528] ? wait_for_completion+0x870/0x870 [ 240.756103] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 240.761621] ? sockfd_lookup_light+0xc5/0x160 [ 240.766098] __sys_sendmsg+0x115/0x270 [ 240.769969] ? SyS_shutdown+0x30/0x30 [ 240.773749] ? __sb_end_write+0xac/0xe0 [ 240.777707] ? fput+0x130/0x1a0 [ 240.780973] ? ksys_write+0x1a6/0x250 [ 240.784763] ? ksys_ioctl+0x81/0xd0 [ 240.788375] SyS_sendmsg+0x29/0x30 [ 240.791896] ? __sys_sendmsg+0x270/0x270 [ 240.795946] do_syscall_64+0x29e/0x9d0 [ 240.799815] ? vmalloc_sync_all+0x30/0x30 [ 240.803944] ? _raw_spin_unlock_irq+0x27/0x70 [ 240.808421] ? finish_task_switch+0x1ca/0x810 [ 240.812899] ? syscall_return_slowpath+0x5c0/0x5c0 [ 240.817816] ? syscall_return_slowpath+0x30f/0x5c0 [ 240.822729] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 240.828080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 240.832906] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 240.838079] RIP: 0033:0x455319 [ 240.841250] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 240.848945] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 240.856196] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 240.863447] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 240.870697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 240.877947] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000001 2018/04/14 15:03:49 executing program 1: ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={'gre0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x20000000000001cf, &(0x7f00000000c0)}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) r0 = socket(0x1e, 0x2000000000000005, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000002800)={"6272696467653000000000000000a300", &(0x7f0000000000)=ANY=[]}) socket$inet6(0xa, 0x80000, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0xfcaa, @dev={0xfe, 0x80, [], 0x15}}, 0x1c) [ 240.915705] binder: 17893:17904 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 240.936708] netlink: 'syz-executor5': attribute type 21 has an invalid length. [ 240.944339] netlink: 'syz-executor5': attribute type 1 has an invalid length. 2018/04/14 15:03:49 executing program 6 (fault-call:1 fault-nth:2): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:49 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x18000, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) ppoll(&(0x7f0000000080)=[{r0}], 0x200000000000013a, &(0x7f00000000c0)={r1, r2+30000000}, &(0x7f0000000100), 0x8) 2018/04/14 15:03:49 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000240)=@ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x0, 0x9}]}) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000140)=""/171) socket$inet6(0xa, 0xa, 0x8) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000040)=0x7) sysinfo(&(0x7f0000000340)=""/238) 2018/04/14 15:03:49 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000180)='/dev/snd/midiC#D#\x00', 0xffffffffffffffe1, 0x6d9b4ba4772f553c) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in=@local, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f00000002c0)=0xe8) ioctl$TUNSETOWNER(r1, 0x400454cc, r2) r3 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000980)={0x3000, &(0x7f0000000940), 0x8, r1, 0x4}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000880)={@ethernet={0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, {&(0x7f0000000740)=""/223, 0xdf}, &(0x7f0000000840), 0x50}, 0xa0) set_tid_address(&(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000080)={0x0, @tick=0x401}) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000140)=0x7ff) recvmsg$kcm(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/222, 0xde}, {&(0x7f0000000400)=""/44, 0x2c}, {&(0x7f0000000440)=""/75, 0x4b}, {&(0x7f00000004c0)=""/15, 0xf}, {&(0x7f0000000500)=""/49, 0x31}, {&(0x7f0000000540)=""/134, 0x86}], 0x6, &(0x7f0000000680)=""/112, 0x70, 0x96}, 0x40) 2018/04/14 15:03:49 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x4000, 0x0) linkat(r0, &(0x7f0000000040)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x1400) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000240)={r3, &(0x7f00000002c0)=""/129}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000140)) ioctl$sock_bt_bnep_BNEPCONNDEL(r0, 0x400442c9, &(0x7f0000000380)={0x8, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) sendmsg$nl_route(r2, &(0x7f0000000000)={&(0x7f0000000280)={0x10}, 0x7, &(0x7f0000029000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001800190d00000000000000000a00040000000000000000000800150000000004"], 0x24}, 0x1, 0x0, 0x0, 0x83}, 0x0) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000180)={0x8, 0xffffffff, 0x6, 0x2, 0xfffffffffffffffe, 0x2}) 2018/04/14 15:03:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x26012, r1, 0x0) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x8000, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0x402000, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r5 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x1}}, 0x2e) readlinkat(r3, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=""/116, 0x74) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f0000003000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x1, 0x15}}, 0x2e) socket$l2tp(0x18, 0x1, 0x1) fsync(0xffffffffffffffff) seccomp(0x1, 0x0, &(0x7f0000000480)={0x3, &(0x7f0000000440)=[{0x3f, 0xffff, 0x2, 0x100000000}, {0x0, 0x7, 0x5, 0x80000000}, {0x8, 0x9, 0x7, 0xfff}]}) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) r7 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r7, &(0x7f00000002bb)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @broadcast=0xffffffff}, 0x1}}, 0x26) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) 2018/04/14 15:03:49 executing program 1: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xb, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5662}, [], {0x95}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x43, &(0x7f00000000c0)=""/67, 0x41100, 0x1}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000000)={0x18, 0x2e, 0x821, 0x0, 0x0, {0x1}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/04/14 15:03:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x400000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 241.096516] openvswitch: netlink: Flow key attr not present in new flow. [ 241.122896] FAULT_INJECTION: forcing a failure. [ 241.122896] name failslab, interval 1, probability 0, space 0, times 0 [ 241.124632] binder: 17929:17931 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 241.134257] CPU: 1 PID: 17934 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 241.148727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.158613] Call Trace: [ 241.158636] dump_stack+0x1b9/0x294 [ 241.158655] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.158672] ? perf_trace_lock_acquire+0xe3/0x980 [ 241.158687] ? rcu_is_watching+0x85/0x140 [ 241.158721] should_fail.cold.4+0xa/0x1a [ 241.158742] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.158763] ? lock_acquire+0x1dc/0x520 [ 241.158779] ? graph_lock+0x170/0x170 [ 241.158801] ? find_held_lock+0x36/0x1c0 [ 241.158821] ? __lock_is_held+0xb5/0x140 [ 241.158852] ? check_same_owner+0x320/0x320 [ 241.158864] ? perf_trace_lock+0x900/0x900 [ 241.158882] ? rcu_note_context_switch+0x710/0x710 [ 241.158905] __should_failslab+0x124/0x180 [ 241.158924] should_failslab+0x9/0x14 [ 241.158940] kmem_cache_alloc+0x2af/0x760 [ 241.158965] skb_clone+0x1ed/0x4f0 [ 241.158982] ? skb_split+0x11d0/0x11d0 [ 241.159004] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 241.159020] ? iov_iter_advance+0x2e4/0x14c0 [ 241.159048] pfkey_process+0xb9/0x8a0 [ 241.159064] ? iov_iter_npages+0xe60/0xe60 [ 241.159082] ? pfkey_send_new_mapping+0x1260/0x1260 [ 241.159095] ? copyin+0xb7/0x100 [ 241.159116] ? _copy_from_iter_full+0x2b0/0xd10 [ 241.159134] ? usercopy_warn+0x120/0x120 [ 241.159153] ? iov_iter_advance+0x14c0/0x14c0 [ 241.159180] pfkey_sendmsg+0x5f4/0x1050 [ 241.159200] ? _copy_from_user+0xdf/0x150 [ 241.284149] ? pfkey_spdget+0xb10/0xb10 [ 241.288113] ? security_socket_sendmsg+0x94/0xc0 [ 241.292852] ? pfkey_spdget+0xb10/0xb10 [ 241.296812] sock_sendmsg+0xd5/0x120 [ 241.300512] ___sys_sendmsg+0x805/0x940 [ 241.304477] ? copy_msghdr_from_user+0x560/0x560 [ 241.309226] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 241.314747] ? proc_fail_nth_write+0x96/0x1f0 [ 241.319231] ? __fget_light+0x2ef/0x430 [ 241.323190] ? fget_raw+0x20/0x20 [ 241.326624] ? find_held_lock+0x36/0x1c0 [ 241.330673] ? kasan_check_write+0x14/0x20 [ 241.334894] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 241.339811] ? wait_for_completion+0x870/0x870 [ 241.344385] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 241.349905] ? sockfd_lookup_light+0xc5/0x160 [ 241.354389] __sys_sendmsg+0x115/0x270 [ 241.358261] ? SyS_shutdown+0x30/0x30 [ 241.362046] ? __sb_end_write+0xac/0xe0 [ 241.366009] ? fput+0x130/0x1a0 [ 241.369282] ? ksys_write+0x1a6/0x250 [ 241.373076] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 241.377903] ? ksys_ioctl+0x81/0xd0 [ 241.381775] SyS_sendmsg+0x29/0x30 [ 241.385297] ? __sys_sendmsg+0x270/0x270 [ 241.389342] do_syscall_64+0x29e/0x9d0 [ 241.393212] ? vmalloc_sync_all+0x30/0x30 [ 241.397342] ? _raw_spin_unlock_irq+0x27/0x70 [ 241.401824] ? finish_task_switch+0x1ca/0x810 [ 241.406306] ? syscall_return_slowpath+0x5c0/0x5c0 [ 241.411219] ? syscall_return_slowpath+0x30f/0x5c0 [ 241.416138] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 241.421490] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 241.426321] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 241.431491] RIP: 0033:0x455319 [ 241.434664] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.442356] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 241.449611] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 241.456863] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 241.464115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 241.471385] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000002 2018/04/14 15:03:49 executing program 1: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x20, 0x10000) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) pipe(&(0x7f0000043000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00004d5000)=[{&(0x7f0000000000)="af", 0x1}], 0x1, 0x0) close(r2) memfd_create(&(0x7f0000000040)='{\\\\\x00', 0x0) close(r1) 2018/04/14 15:03:49 executing program 7: r0 = gettid() ioprio_set$pid(0x4, r0, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x7ff, 0x200000003) 2018/04/14 15:03:49 executing program 0: r0 = socket$inet(0x2, 0x800000800001, 0xffff) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080), 0x4) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140), 0xfffffffffffffdc3) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000040)=0x986, 0xff0d) bind$inet(r0, &(0x7f000012e000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) connect$ax25(r1, &(0x7f00000001c0)={0x3, {"27759956045ed5"}, 0x100}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0xc1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000140)={r2, 0x8}, &(0x7f0000000180)=0xc) 2018/04/14 15:03:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) dup2(0xffffffffffffffff, 0xffffffffffffffff) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000480)={{}, 'port0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f00000001c0)={{0x3}, 'port1\x00', 0x84, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x200f}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) [ 241.519756] binder: 17929:17941 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:49 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000265ff7)='/dev/sg#\x00', 0x0, 0x2) ioctl(r0, 0x227b, &(0x7f0000d27862)="ff") setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000040)={{0x0, @remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x3, 'wrr\x00', 0x0, 0xb2b1, 0x55}, {@remote={0xac, 0x14, 0x14, 0xbb}, 0x4e20, 0x10000, 0x8, 0x7, 0x73}}, 0x44) read(r0, &(0x7f0000000440)=""/90, 0x21) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x10000, 0x2}) write$fuse(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="3a80500000000000f4b9d0b3b7159e740000070000001a00000000000000000000000000004000000000"], 0x2a) 2018/04/14 15:03:49 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4c00000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:49 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000040), 0x400000085, 0x0, &(0x7f0000004000)={0x77359400}, &(0x7f0000000000)=0xffffffffffffffff, 0x402ffffffd) ioctl$VT_GETSTATE(r0, 0x5603, &(0x7f00000000c0)={0x5, 0x7687, 0x2}) r1 = dup3(r0, r0, 0x80000) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f0000000080)) 2018/04/14 15:03:49 executing program 7: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x114) r1 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x7fff, 0x20000) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000100)=r1) r2 = syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syz+aller0\x00', 0x2001}) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000140)) 2018/04/14 15:03:49 executing program 6 (fault-call:1 fault-nth:3): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:49 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000015c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001e40)=@create_id={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000001e00), 0x106, 0x6}}, 0x20) write$rdma_cm(r0, &(0x7f0000002a80)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002a40)={0xffffffff}}}, 0x20) write$rdma_cm(r0, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="3e000901"], 0xfffffffffffffee8) write$rdma_cm(r0, &(0x7f0000000e00)=@resolve_ip={0x3, 0x40, 0xfa00, {{0xa}, {0xa, 0x0, 0x0, @loopback={0x88c1000000000000, 0x1}}}}, 0x48) r2 = semget(0x3, 0x7, 0x80) semctl$SEM_STAT(r2, 0x2, 0x12, &(0x7f0000000040)=""/29) 2018/04/14 15:03:49 executing program 5: r0 = socket(0x2, 0x805, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000080)=0x30f, 0x4) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x20000) bind$inet(r0, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/04/14 15:03:49 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) r2 = open(&(0x7f0000000000)='./file0\x00', 0x200000, 0x102) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0x5) listen(r1, 0x3) sendto$inet(r0, &(0x7f0000a28fff), 0x0, 0x20008045, &(0x7f00005efff0)={0x2, 0x4e22, @loopback=0x7f000001}, 0x10) close(r1) [ 241.721169] binder: 17969:17972 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 241.729986] binder: 17969:17974 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 241.782707] FAULT_INJECTION: forcing a failure. [ 241.782707] name failslab, interval 1, probability 0, space 0, times 0 [ 241.794354] CPU: 0 PID: 17983 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 241.801198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 241.810551] Call Trace: [ 241.813150] dump_stack+0x1b9/0x294 [ 241.816787] ? dump_stack_print_info.cold.2+0x52/0x52 [ 241.821982] ? zap_class+0x720/0x720 [ 241.825708] should_fail.cold.4+0xa/0x1a [ 241.829778] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 241.834900] ? debug_check_no_locks_freed+0x310/0x310 [ 241.840087] ? __lock_acquire+0x7f5/0x5140 [ 241.844313] ? lock_downgrade+0x8e0/0x8e0 [ 241.848456] ? debug_check_no_locks_freed+0x310/0x310 [ 241.853632] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 241.858809] ? graph_lock+0x170/0x170 [ 241.862605] __should_failslab+0x124/0x180 [ 241.866826] should_failslab+0x9/0x14 [ 241.870613] kmem_cache_alloc_node+0x56/0x780 [ 241.875107] __alloc_skb+0x111/0x780 [ 241.878808] ? skb_scrub_packet+0x580/0x580 [ 241.883118] ? check_same_owner+0x320/0x320 [ 241.887428] ? rcu_note_context_switch+0x710/0x710 [ 241.892347] ? __might_sleep+0x95/0x190 [ 241.896308] ? kasan_check_write+0x14/0x20 [ 241.900531] ? __mutex_lock+0x7d9/0x17f0 [ 241.904576] ? perf_trace_lock+0xd6/0x900 [ 241.908709] ? pfkey_do_dump+0x76/0x450 [ 241.912674] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 241.917857] __pfkey_xfrm_state2msg+0x3db/0x3960 [ 241.922595] ? lock_acquire+0x1dc/0x520 [ 241.926556] ? xfrm_state_walk+0x190/0xd90 [ 241.930784] dump_sa+0x189/0x640 [ 241.934140] ? pfkey_send_notify+0x1200/0x1200 [ 241.938710] ? kasan_check_write+0x14/0x20 [ 241.942933] ? do_raw_spin_lock+0xc1/0x200 [ 241.947156] ? pfkey_dump_sa_done+0x50/0x50 [ 241.951466] xfrm_state_walk+0x623/0xd90 [ 241.955517] ? pfkey_send_notify+0x1200/0x1200 [ 241.960087] ? xfrm_audit_state_notfound_simple+0x100/0x100 [ 241.965783] ? kfree_skb+0x1a2/0x560 [ 241.969484] ? pfkey_broadcast+0x602/0x900 [ 241.973710] ? rcu_is_watching+0x85/0x140 [ 241.977847] ? kasan_check_write+0x14/0x20 [ 241.982067] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 241.986987] ? wait_for_completion+0x870/0x870 [ 241.991556] ? pfkey_broadcast+0x607/0x900 [ 241.995780] ? pfkey_dump_sa_done+0x50/0x50 [ 242.000087] pfkey_dump_sa+0x42/0x50 [ 242.003785] pfkey_do_dump+0xac/0x450 [ 242.007570] ? xfrm_state_walk_init+0x6b/0x200 [ 242.012136] ? dump_sa+0x640/0x640 [ 242.015659] ? skb_split+0x11d0/0x11d0 [ 242.019538] pfkey_dump+0x564/0x6d0 [ 242.023153] ? pfkey_spddump+0x210/0x210 [ 242.027202] pfkey_process+0x7cc/0x8a0 [ 242.031078] ? iov_iter_npages+0xe60/0xe60 [ 242.035298] ? pfkey_send_new_mapping+0x1260/0x1260 [ 242.040328] pfkey_sendmsg+0x5f4/0x1050 [ 242.044284] ? _copy_from_user+0xdf/0x150 [ 242.048423] ? pfkey_spdget+0xb10/0xb10 [ 242.052387] ? security_socket_sendmsg+0x94/0xc0 [ 242.057128] ? pfkey_spdget+0xb10/0xb10 [ 242.061090] sock_sendmsg+0xd5/0x120 [ 242.064788] ___sys_sendmsg+0x805/0x940 [ 242.068757] ? copy_msghdr_from_user+0x560/0x560 [ 242.073505] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 242.079033] ? proc_fail_nth_write+0x96/0x1f0 [ 242.083515] ? __fget_light+0x2ef/0x430 [ 242.087474] ? fget_raw+0x20/0x20 [ 242.090909] ? find_held_lock+0x36/0x1c0 [ 242.094957] ? kasan_check_write+0x14/0x20 [ 242.099178] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 242.104095] ? wait_for_completion+0x870/0x870 [ 242.108670] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.114190] ? sockfd_lookup_light+0xc5/0x160 [ 242.118674] __sys_sendmsg+0x115/0x270 [ 242.122546] ? SyS_shutdown+0x30/0x30 [ 242.126331] ? __sb_end_write+0xac/0xe0 [ 242.130291] ? fput+0x130/0x1a0 [ 242.133557] ? ksys_write+0x1a6/0x250 [ 242.137351] ? ksys_ioctl+0x81/0xd0 [ 242.140966] SyS_sendmsg+0x29/0x30 [ 242.144491] ? __sys_sendmsg+0x270/0x270 [ 242.148539] do_syscall_64+0x29e/0x9d0 [ 242.152410] ? vmalloc_sync_all+0x30/0x30 [ 242.156543] ? _raw_spin_unlock_irq+0x27/0x70 [ 242.161028] ? finish_task_switch+0x1ca/0x810 [ 242.165511] ? syscall_return_slowpath+0x5c0/0x5c0 [ 242.170426] ? syscall_return_slowpath+0x30f/0x5c0 [ 242.175343] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 242.180697] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.185528] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.190700] RIP: 0033:0x455319 [ 242.193871] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.201565] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 242.208819] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 242.216072] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 242.223324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 242.230575] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000003 2018/04/14 15:03:50 executing program 1: r0 = socket(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="2600000080000010"]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0xf71ad73, @local={0xfe, 0x80, [], 0xaa}, 0x1}}, 0x8001}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140)=r1, 0x4) 2018/04/14 15:03:50 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x7400000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:50 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000423ff8)='pagemap\x00') fcntl$setlease(r0, 0x400, 0x1) readahead(r0, 0x91, 0x8) fcntl$setlease(r0, 0x400, 0x1) 2018/04/14 15:03:50 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x20400, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)={[{0x2f, 'rdma', 0x20}, {0x2b, 'pids', 0x20}, {0x2d, 'pids', 0x20}, {0x2b, 'cpu', 0x20}]}, 0x17) memfd_create(&(0x7f0000000140)="70726f63ae6d696d655f74797065776c616e316e6f64657600", 0x2) 2018/04/14 15:03:50 executing program 0: mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246) r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x8, 0x200040) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000040)=0xffffffff, 0x4) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f00000000c0)=@req={0x28, &(0x7f0000000080)={'bond_slave_1\x00', @ifru_flags=0x4000}}) 2018/04/14 15:03:50 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, {0x62c0, 0xba52, 0x6, 0x3f8, 0x0, 0xfffffffffffffffd}}, 0xffffffffffffff93) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002980)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000516000)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000000)={[], 0xff}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f000074af90)) listen(0xffffffffffffffff, 0x80000001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x7bb7}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x41a, 0xfffffffffffffffa}, &(0x7f00000001c0)=0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002280)={&(0x7f00000009c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="200306000500000008000600050000000800050002000000080006009b3c845f00000000000000000000000000001c467c911a265c9f34047393f9e2ace81e26114b53e714ee4c3551c69f39b82dcbc6acf7e961ddec0af483ce7527fa3d6387782f6dbe5b7e8d1ea5143501cf422bf173188b696a2aac1c1faecc7fc07085c62e3e46060d4197a7cb99b4e331785a5aae45360ac67b905ee73a44ee67f1eb26"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r5, 0x4) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="03000000"], 0x1}, 0x1, 0x0, 0x0, 0x20040801}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x31, 0x0, 0x8000, 0x10000, 0x8000, 0x0, 0xffffffff}, &(0x7f0000000240)=0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x818d, 0x82e, 0x1000}, @map={0x18, 0x1, 0x1}, @alu={0x7, 0x4, 0x1, 0x0, 0x1, 0x138}, @ldst={0x0, 0x2, 0x6, 0x7, 0xb, 0x8, 0x4}, @exit={0x95}], &(0x7f00000006c0)='GPL\x00', 0xfffffffffffffff9, 0x98, &(0x7f0000000700)=""/152, 0x41f00, 0x1}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000840)=r8, 0x4) writev(r7, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d76a81014aed182f30284470080ffe00600000000000000a2bc5603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$DRM_IOCTL_CONTROL(r8, 0x40086414, &(0x7f0000002180)={0x1, 0xb40}) ioctl$sock_netdev_private(r2, 0x0, &(0x7f0000000280)="58388e43f2d10d649f0d5b185c241ebdec1bec36a2a74799bdcb561ccf45bdd0485b14427c0e1813fdd99f1f891262df71ce709447ad4d6589c1702f242fca638093623bfb22dc59255c84b7b2732906fd01eabe1ab64e7f35103964b11c90ab6ebcdbb1ab764481a0d90ff452089a0fff039c36533a0b9cf5996d3ef39c7de0bfd81ac6897c7ca4387873f6acfa908c79f335d2153489d9894ef591ea4896db697e739bb0edc59cdf6d07379d56e724bc9bdf53dcf63760777a5acca65a334497987c485ff564c081c200d46b5857c222c0f0e9bd0b9999b7aae07b5823668fff79e680c748b0eb7534422498ca9a") ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000003c0)={'bpq0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'bond0\x00', 0xa00}) 2018/04/14 15:03:50 executing program 6 (fault-call:1 fault-nth:4): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:50 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102d}, 0x2c) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x6, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="1800006110000000000000800000000000000095000000000000003f233c9f00000000000000c000"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0xe, 0xb6, &(0x7f00000000c0)="43d0ee41511b72b5f93d5a4ea569", &(0x7f0000000200)=""/182}, 0x28) [ 242.592398] binder: 18003:18006 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 242.596406] FAULT_INJECTION: forcing a failure. [ 242.596406] name failslab, interval 1, probability 0, space 0, times 0 [ 242.611425] CPU: 0 PID: 18011 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 242.618266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.626462] binder: 18003:18015 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 242.627614] Call Trace: [ 242.627636] dump_stack+0x1b9/0x294 [ 242.627657] ? dump_stack_print_info.cold.2+0x52/0x52 [ 242.627676] ? is_bpf_text_address+0xd7/0x170 [ 242.627696] ? kernel_text_address+0x79/0xf0 [ 242.641453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 242.641578] ? __unwind_start+0x166/0x330 [ 242.668094] should_fail.cold.4+0xa/0x1a [ 242.672141] ? __save_stack_trace+0x7e/0xd0 [ 242.676447] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.681539] ? save_stack+0xa9/0xd0 [ 242.685157] ? save_stack+0x43/0xd0 [ 242.688785] ? kasan_kmalloc+0xc4/0xe0 [ 242.692653] ? kasan_slab_alloc+0x12/0x20 [ 242.696786] ? kmem_cache_alloc_node+0x144/0x780 [ 242.701522] ? __alloc_skb+0x111/0x780 [ 242.705392] ? __pfkey_xfrm_state2msg+0x3db/0x3960 [ 242.710303] ? dump_sa+0x189/0x640 [ 242.713829] ? xfrm_state_walk+0x623/0xd90 [ 242.718045] ? pfkey_dump_sa+0x42/0x50 [ 242.721917] ? pfkey_do_dump+0xac/0x450 [ 242.725876] ? pfkey_dump+0x564/0x6d0 [ 242.729656] ? pfkey_process+0x7cc/0x8a0 [ 242.733698] ? pfkey_sendmsg+0x5f4/0x1050 [ 242.737828] ? sock_sendmsg+0xd5/0x120 [ 242.741696] ? ___sys_sendmsg+0x805/0x940 [ 242.745823] ? __sys_sendmsg+0x115/0x270 [ 242.749866] ? SyS_sendmsg+0x29/0x30 [ 242.753562] ? do_syscall_64+0x29e/0x9d0 [ 242.757607] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 242.762954] ? debug_check_no_locks_freed+0x310/0x310 [ 242.768127] ? print_usage_bug+0xc0/0xc0 [ 242.772171] ? graph_lock+0x170/0x170 [ 242.775965] __should_failslab+0x124/0x180 [ 242.780184] should_failslab+0x9/0x14 [ 242.783966] kmem_cache_alloc_node_trace+0x5a/0x770 [ 242.788972] __kmalloc_node_track_caller+0x33/0x70 [ 242.793886] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 242.798625] __alloc_skb+0x14d/0x780 [ 242.802323] ? skb_scrub_packet+0x580/0x580 [ 242.806626] ? check_same_owner+0x320/0x320 [ 242.810932] ? rcu_note_context_switch+0x710/0x710 [ 242.815845] ? __might_sleep+0x95/0x190 [ 242.819804] ? kasan_check_write+0x14/0x20 [ 242.824032] ? __mutex_lock+0x7d9/0x17f0 [ 242.828075] ? perf_trace_lock+0xd6/0x900 [ 242.832204] ? pfkey_do_dump+0x76/0x450 [ 242.836164] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 242.841340] __pfkey_xfrm_state2msg+0x3db/0x3960 [ 242.846075] ? lock_acquire+0x1dc/0x520 [ 242.850037] ? xfrm_state_walk+0x190/0xd90 [ 242.854262] dump_sa+0x189/0x640 [ 242.857615] ? pfkey_send_notify+0x1200/0x1200 [ 242.862180] ? kasan_check_write+0x14/0x20 [ 242.866397] ? do_raw_spin_lock+0xc1/0x200 [ 242.870617] ? pfkey_dump_sa_done+0x50/0x50 [ 242.874928] xfrm_state_walk+0x623/0xd90 [ 242.878976] ? pfkey_send_notify+0x1200/0x1200 [ 242.883543] ? xfrm_audit_state_notfound_simple+0x100/0x100 [ 242.889237] ? kfree_skb+0x1a2/0x560 [ 242.892936] ? pfkey_broadcast+0x602/0x900 [ 242.897169] ? rcu_is_watching+0x85/0x140 [ 242.901302] ? kasan_check_write+0x14/0x20 [ 242.905521] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 242.910435] ? wait_for_completion+0x870/0x870 [ 242.915002] ? pfkey_broadcast+0x607/0x900 [ 242.919231] ? pfkey_dump_sa_done+0x50/0x50 [ 242.923537] pfkey_dump_sa+0x42/0x50 [ 242.927235] pfkey_do_dump+0xac/0x450 [ 242.931026] ? xfrm_state_walk_init+0x6b/0x200 [ 242.935595] ? dump_sa+0x640/0x640 [ 242.939118] ? skb_split+0x11d0/0x11d0 [ 242.942992] pfkey_dump+0x564/0x6d0 [ 242.946607] ? pfkey_spddump+0x210/0x210 [ 242.950654] pfkey_process+0x7cc/0x8a0 [ 242.954527] ? iov_iter_npages+0xe60/0xe60 [ 242.958774] ? pfkey_send_new_mapping+0x1260/0x1260 [ 242.963792] pfkey_sendmsg+0x5f4/0x1050 [ 242.967753] ? _copy_from_user+0xdf/0x150 [ 242.971890] ? pfkey_spdget+0xb10/0xb10 [ 242.975854] ? security_socket_sendmsg+0x94/0xc0 [ 242.980590] ? pfkey_spdget+0xb10/0xb10 [ 242.984549] sock_sendmsg+0xd5/0x120 [ 242.988246] ___sys_sendmsg+0x805/0x940 [ 242.992206] ? copy_msghdr_from_user+0x560/0x560 [ 242.996952] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 243.002473] ? proc_fail_nth_write+0x96/0x1f0 [ 243.006954] ? __fget_light+0x2ef/0x430 [ 243.010912] ? fget_raw+0x20/0x20 [ 243.014346] ? find_held_lock+0x36/0x1c0 [ 243.018392] ? kasan_check_write+0x14/0x20 [ 243.022608] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 243.027536] ? wait_for_completion+0x870/0x870 [ 243.032107] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.037624] ? sockfd_lookup_light+0xc5/0x160 [ 243.042105] __sys_sendmsg+0x115/0x270 [ 243.045979] ? SyS_shutdown+0x30/0x30 [ 243.049762] ? __sb_end_write+0xac/0xe0 [ 243.053721] ? fput+0x130/0x1a0 [ 243.056990] ? ksys_write+0x1a6/0x250 [ 243.060781] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 243.065607] ? ksys_ioctl+0x81/0xd0 [ 243.069219] SyS_sendmsg+0x29/0x30 [ 243.072745] ? __sys_sendmsg+0x270/0x270 [ 243.076789] do_syscall_64+0x29e/0x9d0 [ 243.080659] ? vmalloc_sync_all+0x30/0x30 [ 243.084790] ? _raw_spin_unlock_irq+0x27/0x70 [ 243.089268] ? finish_task_switch+0x1ca/0x810 [ 243.093746] ? syscall_return_slowpath+0x5c0/0x5c0 [ 243.098660] ? syscall_return_slowpath+0x30f/0x5c0 [ 243.103574] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 243.108925] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.113758] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 243.118927] RIP: 0033:0x455319 [ 243.122099] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.129789] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 243.137043] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 243.144292] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 243.151540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 243.158793] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000004 2018/04/14 15:03:51 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1ffff, 0x0) write$eventfd(r0, &(0x7f0000006000), 0xff03) mmap$binder(&(0x7f0000624000/0x4000)=nil, 0x4000, 0x3000002, 0x22812, r0, 0x0) write$eventfd(r0, &(0x7f0000000000), 0x8) 2018/04/14 15:03:51 executing program 7: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000140)={{0x100, 0x8}, 0x1, 0x3, 0x1, {0x200, 0x2a48}, 0x4, 0x1}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f000000a000)=[{0x7, 0x3, 0x0, 0x0, @tick=0xfffffffffffffffd, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x30) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x0}]}) syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0x12f, 0x800) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000100)={r3}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x4a48b125e13656f}) 2018/04/14 15:03:51 executing program 0: perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x11, 0x4) io_setup(0x80, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, &(0x7f00000000c0)) lseek(r0, 0x0, 0x3) 2018/04/14 15:03:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2000000000000000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:51 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_sa2={0x2, 0x13, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x60}, 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2d0, 0x100) dup(r0) ioctl$KDDISABIO(r1, 0x4b37) 2018/04/14 15:03:51 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000dbfffc)=0x3, 0x4) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x1, 0x10}, 0xc) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9effc), 0x4) sendto$inet6(r0, &(0x7f0000ab4f8e)="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", 0x541, 0x0, &(0x7f0000aaa000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r1 = dup(r0) write$sndseq(r1, &(0x7f0000801f40)=[{}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0xc0) write$evdev(r1, &(0x7f00001d1000)=[{{0x0, 0x2710}}, {{0x0, 0x7530}}, {{0x0, 0x2710}}], 0x48) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000080)=""/33) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r3}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000000)={r5}, &(0x7f00000000c0)=0x8) sendmmsg$alg(r1, &(0x7f00004fef90)=[{0x0, 0x0, &(0x7f00000b4000)=[{&(0x7f000050ef3f)='l', 0x1}], 0x1, &(0x7f00009b7000)}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000f06000)={0x9}, 0x10) write$eventfd(r1, &(0x7f000057bff8), 0x8) readv(r0, &(0x7f0000001240)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1) write$eventfd(r1, &(0x7f000061f000), 0x8) readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1) 2018/04/14 15:03:51 executing program 2: add_key(&(0x7f0000000100)="6173796d6d65747269630000f623c165dbdd5da4e516feae1218931b7f62f1989e779cb3e199015e6f224dc786b78b696462c7dec58cd05fa42773a0af0a703d63e19620fd165b5d862cf735059c401152746037a51f9d035dcf4197d265f6f5d246b14212db69e767574420fb11a7308eb293967dbd5a729bb8c6833a854e2036d4e9270fef4cef270638e56c144263ecf69038c96c9d38f68668c21513e19c1311eea8ee94c59609987d033ca3c8ad624dbc5c8958aaa4e9158c5850c6228a22d0adaabe8bb566c069d5baa64e30af6d878c", &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f0000000040)="1080", 0x2, 0xfffffffffffffffd) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1c1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x400080, 0x0) [ 243.250971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor4'. [ 243.288113] binder: 18030:18031 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:51 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ee1fa8)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001000)="a23364fd5e580ef24d71a19dd93fc727", 0x10) sendmmsg(r1, &(0x7f0000001ac0)=[{{&(0x7f0000000000)=@can={0x1d}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)='[', 0x1}], 0x1, &(0x7f00000003c0)}}], 0x1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x10000008, 0x0) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0x800, 0x4) kexec_load(0x1, 0x4, &(0x7f0000000380)=[{&(0x7f00000000c0)="1a7e51f7063e389bad97cfac401ab727fde57e50ef6d23ae6494f1de4d0e8cfa2c27cac79b87a332a8e3ddd56e69da2ec362", 0x32, 0x69, 0x20}, {&(0x7f0000000180)="3090ce96a0aaad0664f9724b337ee1f85284e634295d50f4d3126431d34b35a1e2e38b7bcf14397c310a75f808517cc9b9a0f99bd313c82e4903fe636c63dd2e0b574610ae52be73fbc1c49ccd17bdb1ad2821229437dc529f31c982c9cc5233493ccd0c062fd9a09361bfa5e3647a2c8cd9ba261de35b0504ede00d0e57dffcc75ef61d9d7e25ff3acd848568aba75f4be39c843ebd5f", 0x97, 0x8, 0x8}, {&(0x7f0000000240)="64f843e9d7140a655bf8a926e6159ff1b3016a1dc639cfd272a4c04f20f9aceae62cac84a84b41fff7abe5cbee0ffe67277bc4", 0x33, 0x3f, 0x1}, {&(0x7f0000000280)="6ddb663dafccc302e143e7133ade3f021f700b683f721e04e0a634175261698938d4e6b5d858326327a5b62542116e5e323f2c04c75ecf7eaa13908c6c85d0bbcce003594a821d9e3ef5f95b1511ba3bf69607ac6e73e2ec2cdf0fdb800b4da59b91", 0x62, 0x1}], 0x160000) [ 243.331426] binder: 18030:18041 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:51 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x4800}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 243.438712] binder: 18050:18052 IncRefs 0 refcount change on invalid ref 18432 ret -22 [ 243.477212] binder: 18050:18055 IncRefs 0 refcount change on invalid ref 18432 ret -22 2018/04/14 15:03:52 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101040, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000000080)={0x5, 0x1, 0x9, 0x18de, 0x81}, 0xc) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000016ffc), 0x4) recvmsg(r0, &(0x7f0000019fc8)={0x0, 0x0, &(0x7f000001a000), 0x0, &(0x7f000001b000)}, 0x2) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000100)={r3, 0x80000, r2}) writev(r1, &(0x7f0000bf3fa0)=[{&(0x7f0000dee3d3)="96", 0x1}], 0x1) 2018/04/14 15:03:52 executing program 4: r0 = socket$inet(0x2b, 0x400000000000001, 0x1) timer_create(0x3, &(0x7f0000000080)={0x0, 0x21, 0x0, @thr={&(0x7f0000000000)="b72f86760d9ea1def957363f1cdcea3a", &(0x7f0000000040)}}, &(0x7f00000000c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000100)={{0x77359400}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000340), &(0x7f0000000380), 0x8) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8918, &(0x7f0000000140)={'bridge0\x00', {0x2, 0x0, @multicast2=0xe0000002}}) 2018/04/14 15:03:52 executing program 5: r0 = syz_open_dev$tun(&(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000040)=0x1000890000001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={"623d015b814000", 0x4003}) r1 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @dev, 0x0}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r2) sendmmsg(r1, &(0x7f0000003e80)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x3, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c, &(0x7f0000000300), 0x3d9, &(0x7f0000000280)}}, {{&(0x7f0000000080)=@nfc_llcp={0x27, 0x1, 0x0, 0x0, 0x0, 0x0, "99066c9aa4c2fbbf0aecb573b9d1bdc8be397716e627f0d1865ea32e0822c1026f14d27d9eb2214e9b34beb87de5d3aab05c161c037b28907fcb4fa979f696"}, 0x60, &(0x7f0000000f80), 0x0, &(0x7f0000000000), 0x98}}], 0x2, 0x0) 2018/04/14 15:03:52 executing program 6 (fault-call:1 fault-nth:5): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:52 executing program 7: syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$xfs(&(0x7f0000000380)='xfs\x00', &(0x7f00000003c0)='./file1\x00', 0x7, 0x0, &(0x7f0000000440), 0x800488, &(0x7f0000000480)=ANY=[@ANYBLOB='nouuid,noquota,swalloc,uquota,uqnoenforce,prjWuota,swalloc,nobarrierv=./file0,ikeep,\x00\x00\x00\x00\x00\x00']) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0xa0002) connect$vsock_dgram(r0, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @my=0x0}, 0x10) 2018/04/14 15:03:52 executing program 2: r0 = perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget(0x3, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil) shmctl$IPC_RMID(r1, 0xe) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x1, r0, 0x1}) 2018/04/14 15:03:52 executing program 1: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0), 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000f6fff0)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x3, {0x62c0, 0xba52, 0x6, 0x3f8, 0x0, 0xfffffffffffffffd}}, 0xffffffffffffff93) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000a8d000)={&(0x7f0000c78ff4)={0x10}, 0xc, &(0x7f0000df6000)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c0000001740000000000000000000ff000000000800010038952b971bff9839a733a20dde25e0d0813f1bf5541c7c9f813d3d105734c5292935cf08b24ef2d6b518fd9f1377dd5b8f57d0079507e9db7de69a5f37d98a8ec3999c65c6771466dcd19f4763b3df9bd0d7248245e615ae0e5bb25440e845af2e8d1fbd7a1ec636c213ecda20354b1438a8fd155ce58c25e50ad7b7194c027a5750111597918ae27248b41225bc58c4f8451c771802623ac2e08b03c264914ff06dc941fffd72241292061c7851fbb1f1f60a9ec6b6afb40e878544ae8c266e60d91d03d0ea3fdd10"], 0x1c}, 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000002980)={0xffffffffffffffff}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000516000)) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f0000000000)={[], 0xff}) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f000074af90)) listen(0xffffffffffffffff, 0x80000001) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x7bb7}, &(0x7f0000000500)=0x90) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={0x0, 0x5, 0x41a, 0xfffffffffffffffa}, &(0x7f00000001c0)=0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002200)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f00000022c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)=ANY=[@ANYBLOB=')sJ\\', @ANYRES16=r6, @ANYBLOB="20032bbd7000fedbdf2503000000080006000500000008000600050000000800050002000000080006009b3c845f"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x80) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680)='IPVS\x00') setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000580)=@assoc_id=r5, 0x4) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYRES32=r2], 0x1}, 0x1, 0x0, 0x0, 0x20040801}, 0x40) r7 = socket$netlink(0x10, 0x3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000200)={0x31, 0x0, 0x8000, 0x10000, 0x8000, 0x0, 0xffffffff}, &(0x7f0000000240)=0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x2}, @generic={0x0, 0x818d, 0x82e, 0x1000}, @map={0x18, 0x1, 0x1}, @alu={0x7, 0x4, 0x1, 0x0, 0x1, 0x138}, @ldst={0x0, 0x2, 0x6, 0x7, 0xb, 0x8, 0x4}, @exit={0x95}], &(0x7f00000006c0)='GPL\x00', 0xfffffffffffffff9, 0x98, &(0x7f0000000700)=""/152, 0x41f00, 0x1}, 0x48) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000840)=r8, 0x4) writev(r7, &(0x7f000051c000)=[{&(0x7f0000000140)="480000001400190d76a81014aed182f30284470080ffe00600000000000000a2bc5603ca0016087f89000000200000000101ff0000000309ff5bffff08c7e5ed5e00000000000000", 0x48}], 0x1) ioctl$DRM_IOCTL_CONTROL(r8, 0x40086414, &(0x7f0000002180)={0x1, 0xb40}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000003c0)={'bpq0\x00', {0x2, 0x4e21, @multicast1=0xe0000001}}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000540)={'bond0\x00', 0xa00}) 2018/04/14 15:03:52 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x6}], 0xfffffed7, 0x0, &(0x7f0000000300)}) [ 244.183082] FAULT_INJECTION: forcing a failure. [ 244.183082] name failslab, interval 1, probability 0, space 0, times 0 [ 244.186082] XFS (loop7): unknown mount option [prjWuota]. [ 244.194372] CPU: 1 PID: 18061 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 244.206721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.216072] Call Trace: [ 244.218669] dump_stack+0x1b9/0x294 [ 244.222315] ? dump_stack_print_info.cold.2+0x52/0x52 [ 244.227517] ? unwind_get_return_address+0x61/0xa0 [ 244.232438] ? __save_stack_trace+0x7e/0xd0 [ 244.236758] should_fail.cold.4+0xa/0x1a [ 244.240812] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.245905] ? save_stack+0xa9/0xd0 [ 244.249517] ? save_stack+0x43/0xd0 [ 244.253136] ? kasan_kmalloc+0xc4/0xe0 [ 244.257006] ? __kmalloc_node_track_caller+0x47/0x70 [ 244.262097] ? __alloc_skb+0x14d/0x780 [ 244.265974] ? __pfkey_xfrm_state2msg+0x3db/0x3960 [ 244.270887] ? dump_sa+0x189/0x640 [ 244.274410] ? xfrm_state_walk+0x623/0xd90 [ 244.278629] ? pfkey_dump_sa+0x42/0x50 [ 244.282500] ? pfkey_do_dump+0xac/0x450 [ 244.286456] ? pfkey_dump+0x564/0x6d0 [ 244.290239] ? pfkey_process+0x7cc/0x8a0 [ 244.294282] ? pfkey_sendmsg+0x5f4/0x1050 [ 244.298415] ? sock_sendmsg+0xd5/0x120 [ 244.302285] ? ___sys_sendmsg+0x805/0x940 [ 244.306414] ? __sys_sendmsg+0x115/0x270 [ 244.310457] ? SyS_sendmsg+0x29/0x30 [ 244.314158] ? do_syscall_64+0x29e/0x9d0 [ 244.318205] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.323551] ? print_usage_bug+0xc0/0xc0 [ 244.327600] ? __lock_is_held+0xb5/0x140 [ 244.331651] ? __kmalloc_node_track_caller+0x33/0x70 [ 244.336735] ? __kmalloc_node_track_caller+0x33/0x70 [ 244.341822] ? rcu_read_lock_sched_held+0x108/0x120 [ 244.346823] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 244.352087] __should_failslab+0x124/0x180 [ 244.356307] should_failslab+0x9/0x14 [ 244.360089] kmem_cache_alloc_node+0x56/0x780 [ 244.364573] ? __kmalloc_node_track_caller+0x47/0x70 [ 244.369663] __alloc_skb+0x111/0x780 [ 244.373360] ? skb_scrub_packet+0x580/0x580 [ 244.377665] ? check_same_owner+0x290/0x320 [ 244.381972] ? rcu_note_context_switch+0x710/0x710 [ 244.386889] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 244.392408] ? xfrm_alg_name_match+0xb6/0xe0 [ 244.396801] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.402321] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 244.407493] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 244.412490] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 244.417669] __pfkey_xfrm_state2msg+0x3db/0x3960 [ 244.422418] dump_sa+0x189/0x640 [ 244.425770] ? pfkey_send_notify+0x1200/0x1200 [ 244.430335] ? kasan_check_write+0x14/0x20 [ 244.434553] ? do_raw_spin_lock+0xc1/0x200 [ 244.438773] ? pfkey_dump_sa_done+0x50/0x50 [ 244.443082] xfrm_state_walk+0x623/0xd90 [ 244.447733] ? pfkey_send_notify+0x1200/0x1200 [ 244.452306] ? xfrm_audit_state_notfound_simple+0x100/0x100 [ 244.458000] ? kfree_skb+0x1a2/0x560 [ 244.461705] ? pfkey_broadcast+0x602/0x900 [ 244.465929] ? rcu_is_watching+0x85/0x140 [ 244.470065] ? kasan_check_write+0x14/0x20 [ 244.474284] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 244.479203] ? wait_for_completion+0x870/0x870 [ 244.483767] ? pfkey_broadcast+0x607/0x900 [ 244.487989] ? pfkey_dump_sa_done+0x50/0x50 [ 244.492298] pfkey_dump_sa+0x42/0x50 [ 244.495997] pfkey_do_dump+0xac/0x450 [ 244.499788] ? xfrm_state_walk_init+0x6b/0x200 [ 244.504353] ? dump_sa+0x640/0x640 [ 244.507877] ? skb_split+0x11d0/0x11d0 [ 244.511788] pfkey_dump+0x564/0x6d0 [ 244.515402] ? pfkey_spddump+0x210/0x210 [ 244.519446] pfkey_process+0x7cc/0x8a0 [ 244.523321] ? iov_iter_npages+0xe60/0xe60 [ 244.527541] ? pfkey_send_new_mapping+0x1260/0x1260 [ 244.532560] pfkey_sendmsg+0x5f4/0x1050 [ 244.536520] ? _copy_from_user+0xdf/0x150 [ 244.540656] ? pfkey_spdget+0xb10/0xb10 [ 244.544628] ? security_socket_sendmsg+0x94/0xc0 [ 244.549368] ? pfkey_spdget+0xb10/0xb10 [ 244.553325] sock_sendmsg+0xd5/0x120 [ 244.557030] ___sys_sendmsg+0x805/0x940 [ 244.560989] ? copy_msghdr_from_user+0x560/0x560 [ 244.565739] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.571258] ? proc_fail_nth_write+0x96/0x1f0 [ 244.575739] ? __fget_light+0x2ef/0x430 [ 244.579696] ? fget_raw+0x20/0x20 [ 244.583134] ? find_held_lock+0x36/0x1c0 [ 244.587180] ? kasan_check_write+0x14/0x20 [ 244.591401] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 244.596316] ? wait_for_completion+0x870/0x870 [ 244.600889] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.606406] ? sockfd_lookup_light+0xc5/0x160 [ 244.610886] __sys_sendmsg+0x115/0x270 [ 244.614759] ? SyS_shutdown+0x30/0x30 [ 244.618542] ? __sb_end_write+0xac/0xe0 [ 244.622503] ? fput+0x130/0x1a0 [ 244.625769] ? ksys_write+0x1a6/0x250 [ 244.629559] ? ksys_ioctl+0x81/0xd0 [ 244.633172] SyS_sendmsg+0x29/0x30 [ 244.636694] ? __sys_sendmsg+0x270/0x270 [ 244.640739] do_syscall_64+0x29e/0x9d0 [ 244.644611] ? vmalloc_sync_all+0x30/0x30 [ 244.648743] ? _raw_spin_unlock_irq+0x27/0x70 [ 244.653224] ? finish_task_switch+0x1ca/0x810 [ 244.657703] ? syscall_return_slowpath+0x5c0/0x5c0 [ 244.662619] ? syscall_return_slowpath+0x30f/0x5c0 [ 244.667534] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 244.672883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.677713] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 244.682882] RIP: 0033:0x455319 [ 244.686052] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.693745] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 244.700997] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 244.708251] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 244.715501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 244.722751] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000005 2018/04/14 15:03:52 executing program 4: r0 = socket(0x10, 0x80000000803, 0x0) sendto(r0, &(0x7f0000000000)="120000001200e7ff00ffe90009144a000ae9", 0x12, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000040)={'bcsf0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) recvmsg(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/83, 0x53}], 0x2, &(0x7f00000013c0)=""/208, 0xd0}, 0x0) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) [ 244.736425] binder: 18064:18069 IncRefs 0 refcount change on invalid ref 6 ret -22 2018/04/14 15:03:52 executing program 6 (fault-call:1 fault-nth:6): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:53 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(camellia))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) r1 = socket(0xf, 0x80000, 0x80) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x1, 0x1, 0x20, 0x2c, 0x10000}, 0xc) [ 244.788203] binder: 18064:18083 IncRefs 0 refcount change on invalid ref 6 ret -22 [ 244.873320] FAULT_INJECTION: forcing a failure. [ 244.873320] name failslab, interval 1, probability 0, space 0, times 0 [ 244.884637] CPU: 0 PID: 18095 Comm: syz-executor6 Not tainted 4.16.0+ #2 [ 244.891479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 244.900835] Call Trace: [ 244.903431] dump_stack+0x1b9/0x294 [ 244.907074] ? dump_stack_print_info.cold.2+0x52/0x52 [ 244.912278] ? is_bpf_text_address+0xd7/0x170 [ 244.916787] ? kernel_text_address+0x79/0xf0 [ 244.921198] ? __unwind_start+0x166/0x330 [ 244.925341] should_fail.cold.4+0xa/0x1a [ 244.929388] ? __save_stack_trace+0x7e/0xd0 [ 244.933698] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 244.938797] ? save_stack+0xa9/0xd0 [ 244.942411] ? save_stack+0x43/0xd0 [ 244.946030] ? kasan_kmalloc+0xc4/0xe0 [ 244.949901] ? kasan_slab_alloc+0x12/0x20 [ 244.954036] ? kmem_cache_alloc_node+0x144/0x780 [ 244.958774] ? __alloc_skb+0x111/0x780 [ 244.962651] ? __pfkey_xfrm_state2msg+0x3db/0x3960 [ 244.967571] ? dump_sa+0x189/0x640 [ 244.971096] ? xfrm_state_walk+0x623/0xd90 [ 244.975317] ? pfkey_dump_sa+0x42/0x50 [ 244.979191] ? pfkey_do_dump+0xac/0x450 [ 244.983152] ? pfkey_dump+0x564/0x6d0 [ 244.986939] ? pfkey_process+0x7cc/0x8a0 [ 244.990987] ? pfkey_sendmsg+0x5f4/0x1050 [ 244.995120] ? sock_sendmsg+0xd5/0x120 [ 244.998990] ? ___sys_sendmsg+0x805/0x940 [ 245.003125] ? __sys_sendmsg+0x115/0x270 [ 245.007173] ? SyS_sendmsg+0x29/0x30 [ 245.010874] ? do_syscall_64+0x29e/0x9d0 [ 245.014925] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.020275] ? __sys_sendmsg+0x115/0x270 [ 245.024319] ? SyS_sendmsg+0x29/0x30 [ 245.028024] ? do_syscall_64+0x29e/0x9d0 [ 245.032072] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.037424] ? print_usage_bug+0xc0/0xc0 [ 245.041471] ? perf_trace_lock_acquire+0xe3/0x980 [ 245.046299] ? graph_lock+0x170/0x170 [ 245.050088] ? __lock_is_held+0xb5/0x140 [ 245.054142] __should_failslab+0x124/0x180 [ 245.058364] should_failslab+0x9/0x14 [ 245.062152] kmem_cache_alloc_node_trace+0x5a/0x770 [ 245.067166] __kmalloc_node_track_caller+0x33/0x70 [ 245.072082] __kmalloc_reserve.isra.38+0x3a/0xe0 [ 245.076828] __alloc_skb+0x14d/0x780 [ 245.080532] ? skb_scrub_packet+0x580/0x580 [ 245.084848] ? rcu_note_context_switch+0x710/0x710 [ 245.089770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 245.095293] ? xfrm_alg_name_match+0xb6/0xe0 [ 245.099689] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 245.105212] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 245.110388] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 245.115390] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 245.120575] __pfkey_xfrm_state2msg+0x3db/0x3960 [ 245.125332] dump_sa+0x189/0x640 [ 245.128688] ? pfkey_send_notify+0x1200/0x1200 [ 245.133256] ? kasan_check_write+0x14/0x20 [ 245.137474] ? do_raw_spin_lock+0xc1/0x200 [ 245.141715] ? pfkey_dump_sa_done+0x50/0x50 [ 245.146033] xfrm_state_walk+0x623/0xd90 [ 245.150087] ? pfkey_send_notify+0x1200/0x1200 [ 245.154662] ? xfrm_audit_state_notfound_simple+0x100/0x100 [ 245.160359] ? kfree_skb+0x1a2/0x560 [ 245.164059] ? pfkey_broadcast+0x602/0x900 [ 245.168289] ? rcu_is_watching+0x85/0x140 [ 245.172426] ? kasan_check_write+0x14/0x20 [ 245.176648] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 245.181570] ? wait_for_completion+0x870/0x870 [ 245.186137] ? pfkey_broadcast+0x607/0x900 [ 245.190362] ? pfkey_dump_sa_done+0x50/0x50 [ 245.194670] pfkey_dump_sa+0x42/0x50 [ 245.198370] pfkey_do_dump+0xac/0x450 [ 245.202156] ? xfrm_state_walk_init+0x6b/0x200 [ 245.206722] ? dump_sa+0x640/0x640 [ 245.210249] ? skb_split+0x11d0/0x11d0 [ 245.214129] pfkey_dump+0x564/0x6d0 [ 245.217745] ? pfkey_spddump+0x210/0x210 [ 245.221795] pfkey_process+0x7cc/0x8a0 [ 245.225672] ? iov_iter_npages+0xe60/0xe60 [ 245.229896] ? pfkey_send_new_mapping+0x1260/0x1260 [ 245.234943] pfkey_sendmsg+0x5f4/0x1050 [ 245.238909] ? _copy_from_user+0xdf/0x150 [ 245.243055] ? pfkey_spdget+0xb10/0xb10 [ 245.247029] ? security_socket_sendmsg+0x94/0xc0 [ 245.251773] ? pfkey_spdget+0xb10/0xb10 [ 245.255735] sock_sendmsg+0xd5/0x120 [ 245.259434] ___sys_sendmsg+0x805/0x940 [ 245.263402] ? copy_msghdr_from_user+0x560/0x560 [ 245.268154] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 245.273679] ? proc_fail_nth_write+0x96/0x1f0 [ 245.278164] ? __fget_light+0x2ef/0x430 [ 245.282125] ? fget_raw+0x20/0x20 [ 245.285563] ? find_held_lock+0x36/0x1c0 [ 245.289616] ? kasan_check_write+0x14/0x20 [ 245.293838] ? __mutex_unlock_slowpath+0x180/0x8a0 [ 245.298758] ? wait_for_completion+0x870/0x870 [ 245.303336] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 245.308858] ? sockfd_lookup_light+0xc5/0x160 [ 245.313341] __sys_sendmsg+0x115/0x270 [ 245.317218] ? SyS_shutdown+0x30/0x30 [ 245.321007] ? __sb_end_write+0xac/0xe0 [ 245.324976] ? fput+0x130/0x1a0 [ 245.328243] ? ksys_write+0x1a6/0x250 [ 245.332045] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 245.336877] ? ksys_ioctl+0x81/0xd0 [ 245.340494] SyS_sendmsg+0x29/0x30 [ 245.344027] ? __sys_sendmsg+0x270/0x270 [ 245.348078] do_syscall_64+0x29e/0x9d0 [ 245.351951] ? vmalloc_sync_all+0x30/0x30 [ 245.356083] ? _raw_spin_unlock_irq+0x27/0x70 [ 245.360568] ? finish_task_switch+0x1ca/0x810 [ 245.365052] ? syscall_return_slowpath+0x5c0/0x5c0 [ 245.369969] ? syscall_return_slowpath+0x30f/0x5c0 [ 245.374888] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 245.380243] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 245.385078] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 245.390250] RIP: 0033:0x455319 [ 245.393422] RSP: 002b:00007f519ed09c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.401116] RAX: ffffffffffffffda RBX: 00007f519ed0a6d4 RCX: 0000000000455319 [ 245.408367] RDX: 0000000000000000 RSI: 0000000020003000 RDI: 0000000000000013 [ 245.415621] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 2018/04/14 15:03:53 executing program 5: perf_event_open(&(0x7f00000000c0)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0x8001}, &(0x7f0000000080), 0x8) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, &(0x7f00000001c0), 0x0, r2}) r3 = dup2(r0, r1) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000000140)={0x63}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) prctl$setptracer(0x59616d61, r4) 2018/04/14 15:03:53 executing program 4: keyctl$set_reqkey_keyring(0xe, 0x10800000000004) request_key(&(0x7f00007c5000)='logon\x00', &(0x7f0000a08000)={0x73, 0x79, 0x7a}, &(0x7f0000d77ff9)='\x00', 0x0) [ 245.422875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 245.430128] R13: 00000000000004ea R14: 00000000006fa690 R15: 0000000000000006 2018/04/14 15:03:53 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000003000000000000000000000095000000000000007ed932c13d9760dfe6d949303819e72e3f228c6f46d06e2028fe9b6954bf522fc241d0c52a498724fa65f0b059a97d51341ceaf5b490c13c"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) sendto$inet(r0, &(0x7f00008ac000), 0x266, 0x0, 0x0, 0x1cd) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f00000001c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000000180)={&(0x7f00000000c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x3a, &(0x7f0000000140), 0x0, &(0x7f0000000280)=""/239, 0xef}, 0x0) 2018/04/14 15:03:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0xf505}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:53 executing program 7: r0 = socket$netlink(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x16) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100023b0509000100110100ff3ffe58", 0x1f}], 0x1) 2018/04/14 15:03:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000200)=0x100000001, 0xfffe) connect$inet6(r0, &(0x7f0000000080)={0xa}, 0x1c) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x7cec, 0x40000) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f00000002c0)) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000240)={{0x0, 0x7530}, {r2, r3/1000+10000}}, &(0x7f0000000280)) getsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f0000000000), &(0x7f0000000040)=0x4) [ 245.544507] binder: 18116:18117 IncRefs 0 refcount change on invalid ref 62725 ret -22 2018/04/14 15:03:53 executing program 4: r0 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_mreqn(r1, 0x114, 0x271a, &(0x7f0000000040)={@remote, @remote}, &(0x7f0000000000)=0x224) 2018/04/14 15:03:53 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000280)={0x0, 'bridge0\x00', 0x2}, 0x18) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/keycreate\x00') r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000100)='fou\x00') sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x2c, r3, 0x8, 0x70bd28, 0x25dfdbfe, {0x2}, [@FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @loopback=0x7f000001}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x50}, 0x1}, 0x0) [ 245.593496] binder: 18116:18125 IncRefs 0 refcount change on invalid ref 62725 ret -22 2018/04/14 15:03:53 executing program 0: r0 = perf_event_open(&(0x7f00000017c0)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x15, 0x5, 0x0) getsockopt$inet_mreqn(r1, 0x114, 0x2710, &(0x7f0000000000)={@remote, @remote}, &(0x7f0000000040)=0xfee8) r2 = dup3(r0, r1, 0x80000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xff}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000100)={r3, @in={{0x2, 0x4e20, @loopback=0x7f000001}}, 0xfff, 0x1ff, 0x7, 0x4, 0x8}, &(0x7f00000001c0)=0x98) 2018/04/14 15:03:53 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304, 0x2000}], 0xfffffed7, 0x0, &(0x7f0000000300)}) 2018/04/14 15:03:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000000)=""/222, &(0x7f0000000100)=0xde) sendmsg$key(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000182000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120000000300000000000000000006000000000000000000000000000000e00000010000000000000000000000000000000000000000000000000000000004e9c500ff0011004878e0fa70e0ae5501c33159412a9c1a3e00000000000000030005000000000002000000ac14ffbb000000e5ffffff0004000300000000000000000000000000000000000000000000000000000000004b8d9bdbb4d715d75c1cdeb0c51e7eec66032f183aeeebe69d42799f8c56f87ca51acb0c7236a8507454e07f6a"], 0xa8}, 0x1}, 0x0) 2018/04/14 15:03:53 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) unlink(&(0x7f0000000080)='./file0/file0\x00') syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e9a, 0x204200) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000d17ffc), 0x4) 2018/04/14 15:03:53 executing program 4: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x101000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r0, 0x400}], 0x1, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x7ff}, 0x8) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x3, r0}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) openat$cgroup_type(r0, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x4) ioctl$KVM_SIGNAL_MSI(r0, 0x4020aea5, &(0x7f00000001c0)={0xd001, 0x4, 0x1f, 0x9, 0x94d}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000200)={'filter\x00', 0x4}, 0x68) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000280)) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000002c0)=0xff, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000300)={0x33, @multicast2=0xe0000002, 0x4e20, 0x4, 'fo\x00', 0x22, 0x219, 0x47}, 0x2c) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000340)={0x2, 0x0, [{}, {}]}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000003c0)={0x80000000}, 0x1) r1 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0}, &(0x7f0000000440)=0xc) setpgid(r1, r2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@broadcast=0xffffffff, 0x4e23, 0x0, 0x4e21, 0x0, 0xa, 0x0, 0xa0, 0x17, 0x0, r3}, {0x0, 0x4, 0x3, 0x6, 0x7, 0x7, 0x7ff, 0x401}, {0x7fffffff, 0x6, 0x8, 0x4}, 0x200, 0x0, 0x2, 0x0, 0x2}, {{@in=@multicast2=0xe0000002, 0x4d2, 0x32}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x21}, 0x3503, 0x2, 0x1, 0xaa, 0x2, 0x2, 0x7fffffff}}, 0xe8) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000580)={0x2b, @dev={0xac, 0x14, 0x14, 0x12}, 0x4e21, 0x1, 'wrr\x00', 0x95915ddba79c69, 0x80000001, 0x2c}, 0x2c) init_module(&(0x7f00000005c0)='!:)#vmnet0mime_type\x00', 0x14, &(0x7f0000000600)='wrr\x00') bind$bt_sco(r0, &(0x7f0000000640)={0x1f, {0x8, 0x7, 0xffffffffffffffff, 0x0, 0x401}}, 0x8) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000680)={'tunl0\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f00000006c0)=""/118, &(0x7f0000000740)=0x76) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000780)={0x0, 0x5}, &(0x7f00000007c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000800)={r4, 0x51, "a5c6830cdf6981d10d157fb0862a2d597c2e6802abbe6d6230d66033226b7dfe332c8a5d5cb91b417f32fa9fade24f8df55dc85e370206281dbce7719a5bf22127f6f830f04af0b3f1550bbb325fa36442"}, &(0x7f0000000880)=0x59) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000008c0)={0x6}, 0x1) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000900), &(0x7f0000000940)=0x4) setsockopt$inet6_buf(r0, 0x29, 0xff, &(0x7f0000000980)="9d819c6e4aa347b837e2c344148f1f34c46fdfd5c2d4e4fb88c1d80eaeeb1f177376a1534d617880592bf06c505a89c17529a12cebe623d4cde68b0fdae0ca3e3c1aa1d0bee886f705910b3106ed4bf0e56a81887fe94ea13c60387e4d3bfce633d18b248564ec7b0ea4", 0x6a) 2018/04/14 15:03:53 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1f, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}, 0x1a) [ 245.714762] binder: 18137:18139 IncRefs 0 refcount change on invalid ref 8192 ret -22 [ 245.733185] binder: 18137:18142 IncRefs 0 refcount change on invalid ref 8192 ret -22 2018/04/14 15:03:54 executing program 6 (fault-call:1 fault-nth:7): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:54 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x3) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) 2018/04/14 15:03:54 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x80400, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000040)=""/107) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt(r1, 0x114, 0x5, &(0x7f0000000080), 0x0) 2018/04/14 15:03:54 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0x174f, 0x100) syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0xffffffffffffffff, 0x581282) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0xfffffffffffffee4) r1 = accept$alg(r0, 0x0, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) sched_setparam(r2, &(0x7f0000000080)) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000fb0ff4)=""/12, 0xc}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x40, 0x802) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000200)=0x24, 0x4) ioctl$FIONREAD(r3, 0x541b, &(0x7f0000000180)) 2018/04/14 15:03:54 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.swap.current\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r1, 0x800442d4, &(0x7f0000000040)=0x5) r2 = dup(r0) setsockopt$inet6_int(r2, 0x28, 0x11, &(0x7f0000000080), 0x4) 2018/04/14 15:03:54 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000ae8ff8)='./file0\x00', 0x14104a, 0x0) write(r1, &(0x7f0000000280)="e4", 0x1) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) lseek(r0, 0x4, 0x3) 2018/04/14 15:03:54 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2000) unlink(&(0x7f0000000080)='./file0/file0\x00') syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x9e9a, 0x204200) mknod$loop(&(0x7f0000000200)='./file0/file0\x00', 0x0, 0xffffffffffffffff) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000080)) rmdir(&(0x7f00000000c0)='./file0\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x7, &(0x7f0000d17ffc), 0x4) 2018/04/14 15:03:54 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304}], 0xfffffed7, 0xf505000000000000, &(0x7f0000000300)}) [ 246.837453] binder: 18178:18181 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00004c6f8b)='mounts\x00') ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x9, 0x3}}) mkdir(&(0x7f000022d000)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400800, 0x673a14233b759677) mount(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000982ff9)='tmpfs\x00', 0x0, &(0x7f0000ebcffe)) preadv(r0, &(0x7f00000023c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}], 0x1, 0x0) [ 246.885207] binder: 18178:18192 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:55 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:55 executing program 2: capset(&(0x7f00001e8ff8)={0x19980330}, &(0x7f0000011fe8)) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f0000000080)={'ip6tnl0\x00', @ifru_addrs=@in={0x2, 0x0, @rand_addr}}) recvfrom$inet(r0, &(0x7f0000000000)=""/48, 0x30, 0x2100, 0x0, 0x0) 2018/04/14 15:03:55 executing program 7: mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r0 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)=""/175, 0xaf) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) 2018/04/14 15:03:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setns(r0, 0x4000000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x8001, 0x3, 0xffffffff, 0x200, 0x3, 0x3e, 0xc000000000000000, 0x399, 0x38, 0x1ff, 0xda2c, 0xff, 0x20, 0x1, 0x60f6, 0x5c5, 0x10001}, [{0x1, 0x6, 0x0, 0x100000000, 0x8000, 0x3, 0x0, 0x6}], "dcf445ef497a39e8474067d65f54aba5ed36b0e8b5651e35ac013d8e2cebc51cbb3cb1720d494a2e281895c25abe8744aabdc01c5043b9f0e978f946ba08cf17bba0683e31fa75cc30fd958ebae322e231f90ff6815d4ce9b94789dfb708212101a1dabca7c1857096bc066a877c82b01337fa01745151391e5ccd10dde0285e574d7d6165963d06f6766d728a9d3340e01294ee2d47"}, 0xee) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmsg(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}, 0x0) 2018/04/14 15:03:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@reserved=0x1}) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="d4"], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000010000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f0000000100)="0f09c744240000380000c74424028f000000c7442406000000000f0114240f9a9f00800000670f209a642e3e0f01f7670f080fc7aeb2440000660f388153940f30ad", 0x42}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/14 15:03:55 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000140)='p{', 0x2, 0x4000010, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') 2018/04/14 15:03:55 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x20, 0x94, &(0x7f0000000080)}) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f0000000100)=""/200) 2018/04/14 15:03:55 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304}], 0xfffffed7, 0x74000000, &(0x7f0000000300)}) 2018/04/14 15:03:55 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x400300, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:55 executing program 4: r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)={0x4, [0x91, 0x7fffffff, 0x8, 0x3]}, 0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="7d73cf61100f", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xffffffff}, @igmp={0x16, 0x0, 0x0, @multicast2=0xe0000002}}}}}, &(0x7f0000000200)) [ 247.057280] binder: 18216:18221 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 247.079633] binder: 18216:18226 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:55 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @dev}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@mcast2={0xff, 0x2, [], 0x1}, 0x14, r1}) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xe46, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}) r3 = syz_open_pts(r2, 0x800) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000340)='z', 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) waitid(0x0, r4, 0x0, 0x1, &(0x7f0000000240)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000936ffc)=0x3) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) 2018/04/14 15:03:55 executing program 5: pipe2(&(0x7f0000000040), 0x80800) syz_emit_ethernet(0x86, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa009100290081004e00001100f83b5dfb8a8ef42cae87049f5576568aa51f231e6ac05605e950fdc3c8b69ad1250a08b40d6c32547db5e12653ab7f5cc5fd87be6fcbf73f3d427ef526f0f418b0e382a6baa13df33c36b4fec91f5181942cfd95c1be06ce142fea434800d0a3cd1d791a533b2b493f01762fd61122bcaea6e6f3badf55fbe8848fab1e29d806687195d98cb7ab2909f4f75ccb85f8a89970cff38892db6138b1fab3c7303002a5f2c2aa8946b30c7b9a2eeabf1eaaafc66557308895bfbe5d304ffd3d7e3140c33f34be12"], &(0x7f0000000280)={0x0, 0x2, [0x0, 0x82a]}) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) pwrite64(r0, &(0x7f0000000100)="219c8e5cd23a358b27349cdcb73cbf8f947a63436a05e0e9543d75399429704e366edfef34447046923e703749ae", 0x2e, 0xfffffffffffffffd) 2018/04/14 15:03:55 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x97ffffff, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304}], 0xfffffed7, 0x48000000, &(0x7f0000000300)}) 2018/04/14 15:03:56 executing program 0: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000240)=0xfffffffffffffffd, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, @broadcast}, &(0x7f0000000340)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x21}}}}, &(0x7f0000000440)=0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB="190000005519ca25ee946cf72d3cfc89070000004a17cf8b9afcca22753898423525cf1c2a8440f4"], &(0x7f00000004c0)=0x21) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/hwrng\x00', 0x101000, 0x0) setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000580)=0x40, 0x2) keyctl$set_reqkey_keyring(0xe, 0x4) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ppp\x00', 0x20040, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000500)={{0xa, 0x4e23, 0x0, @empty, 0x2}, {0xa, 0x4e22, 0xffffffff, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, 0xcb4b, [0x3, 0x3, 0x2, 0x9, 0x3, 0x2, 0x3, 0xfffffffffffffffd]}, 0x5c) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x800, 0x0) sendto$packet(r4, &(0x7f00000000c0)="aeabc64218483150990ab29d54bd20604c43552ffc02f12ffbfad8b8f50c1bd6c69093580c82cc361bc1", 0x2a, 0x4, &(0x7f0000000140)={0x11, 0xf8, 0x0, 0x1, 0x0, 0x6, @random="1e3eb05707d9"}, 0x14) request_key(&(0x7f00003b8ffa)='logon\x00', &(0x7f0000f8dffb)={0x73, 0x79, 0x7a}, &(0x7f0000ee9000)='cifs.spnego\x00', 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r4, 0x40046207, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x4}, &(0x7f00000001c0)=0x8) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000480)=r5, 0x4) openat(0xffffffffffffffff, &(0x7f0000000000)='/\x00', 0x400000, 0x61) openat(r4, &(0x7f0000000180)='.\x00', 0x10000, 0xd0) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000040)=""/26) msgget(0x3, 0x144) 2018/04/14 15:03:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000bc0)='team\x00') ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003e40)={'team0\x00', 0x0}) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)=0x401, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000a80)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2109000000400000888d235b7ebf8b090000d0af3fd1e587f97ebe6bfcf21f01e5792ed4d07d264897e1f9314f10b96653339df6ad84de924a192d523ce9fb029b4669aae40228dcc960c37055aedd9ef22fc4951eb191c28b4fa5e0e8ff0d3ee1c5a64cb95c14a758d25b5c4d4ae0db32d69797920856db3f823da8c03da6e7880e2a843bba5810c3eeb5273188a1754358b62b515dd57ffe7ed2f0ee86f887a80d9cba62a88bb485cf67cd68a2f51a3f6520d689e155cc01eeaa91ed", @ANYRES32=r2, @ANYBLOB="3800020034000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000e00000004000400"], 0x54}, 0x1}, 0x0) 2018/04/14 15:03:56 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x80, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @dev}, &(0x7f0000000100)=0xc) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@mcast2={0xff, 0x2, [], 0x1}, 0x14, r1}) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x0, 0xe46, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd}) r3 = syz_open_pts(r2, 0x800) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000180)) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x2800) ioctl$TCXONC(r3, 0x540a, 0x0) write(r3, &(0x7f0000000340)='z', 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) waitid(0x0, r4, 0x0, 0x1, &(0x7f0000000240)) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000936ffc)=0x3) perf_event_open(&(0x7f0000d2af88)={0x2, 0x78, 0xe2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) 2018/04/14 15:03:56 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x1000000, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) 2018/04/14 15:03:56 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mq_open(&(0x7f0000000000)='\x00', 0x40, 0x0, &(0x7f0000000080)={0x8, 0x1f, 0x8, 0x6, 0x8001, 0x131, 0x1ff, 0xfffffffffffffffd}) fanotify_init(0x0, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f017000660f23790f18f90f0d7df301e5e28e0f01cf0f1ba316842e65666c0f0119", 0x22}], 0x1, 0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/04/14 15:03:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1080}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r1, 0x1, 0x70bd28, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x11}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2, 0x8}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x24, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x101}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@dev={0xfe, 0x80, [], 0xd}}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1=0xe0000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x100000000}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000094) ioctl$KDGKBMODE(r0, 0x4b44, &(0x7f0000000240)) iopl(0x10000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000280)={0x2}) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f00000002c0)) mknod$loop(&(0x7f0000000300)='./file0\x00', 0x4, 0x1) r2 = open$dir(&(0x7f0000000340)='./file0\x00', 0xc00, 0x100) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000380)=0x1, 0x4) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000003c0)="f3f3d2319a00300000ab00f3f0839b0070000052b8010000000f01d9c4c3715c673947b97b0b00000f32440f20c0350f000000440f22c066c7869a0000000bd50fb22572fb0000b9800000c00f3235004000000f30", 0x55}], 0x1, 0x4, &(0x7f0000000480), 0x0) sendmsg$netrom(r0, &(0x7f0000000680)={&(0x7f00000004c0)=@ax25={0x3, {"bc98460d256f50"}, 0x80d5}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000500)="a5d5346cb9a9e058099bbe2063a3fbee98f56e81fa8eaaac05187e7a489f406d54e7228d6c9dbd390e864a2b0a786bfd4a0211e86094956b4ece8b7fabecfe", 0x3f}, {&(0x7f0000000540)="91ba0956c7daa642bc1d2afd39c8f0a2416f6e7d86ab90b07f1e9871b749e6de8cac40d6cf334d517f07ae3b28841db64c5d26540c3b2433c1f42bb1dcfff2702e7645788724890eaa6079784273f494c97be2f149a0fb74d23cec5071cfcf74c609ce3509264dbd4406d1d13418fb8c9870abe5f266a57ee8ddc2bedf0a7362abf28edd4eaabef4420ce5", 0x8b}], 0x2, &(0x7f0000000640)=[{0x10, 0x119, 0x4f0}], 0x10, 0x4008001}, 0x4004050) close(r0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x4) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f00000006c0)={0x1, 0xfffffffffffffff9, 0x1}) fcntl$getflags(r2, 0x401) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000740)={0x1, &(0x7f0000000700)=[{}]}) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000780)) mkdirat(r2, &(0x7f0000000b80)='./file0\x00', 0x110) fstat(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$getownex(r0, 0x10, &(0x7f0000002300)={0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000002340)=0x0) r6 = accept$ax25(r0, &(0x7f0000002900), &(0x7f0000002940)=0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002b40)={0x0}, &(0x7f0000002b80)=0xc) lstat(&(0x7f0000002bc0)='./file0\x00', &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000002c80)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0]) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000002cc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000002d00)={{{@in6=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000002e00)=0xe8) lstat(&(0x7f0000002e40)='./file0\x00', &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000002f00)={{{@in6, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast1}}, &(0x7f0000003000)=0xe8) stat(&(0x7f0000003040)='./file0\x00', &(0x7f0000003080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f00000031c0)={&(0x7f0000000bc0)=@kern={0x10, 0x0, 0x0, 0x40100}, 0xc, &(0x7f0000002ac0)=[{&(0x7f0000000c80)={0x1260, 0x14, 0x900, 0x70bd26, 0x25dfdbff, "", [@nested={0x1e4, 0x76, [@generic="2894d0ed48f2b777b42de0df47a90acf4bd1fb11ee143af09103020cd8ba01d8ea46d52d562b19f8ef7ab6968a8b4258134da3b035797cce29fb5cbd4f125d72b40f6e6daa85f9b751ef8c50727889c5b78774a4577c4f75986298d47226489b204bc4aa574827a22f437f4286aeff1caa89f51777461eb67f4af946175c707b722dd80d78d8fc36406799e33e87d52c9d612028dff2a3ef03b3bd52c5d42eb6db26e5b20fc292fa1c0a2d8cdf13adfe5655b159b5a9540f8e85e1190e218b791b54bbae1f0a895ba3e022efc8f6cf74b436f92a0a2281fa4ccd236fcef0", @typed={0x8, 0x45, @fd=r2}, @typed={0x8, 0x72, @fd=r2}, @generic="7334c7ff258f00c3e8", @generic="b81cc1ebb3bab58c5e22905da2dc702eb6469f9a429a7e9c81b8901976db747cec5f3d02796396a24409cf6469f1c12cefb7aab2f9d17d7030cdff753e4bdc78261bbe3d9779e368e0c3dc914c8126b69163866491c65c84c0ca08cd65c29d2974329bd3beb6a410965a098f4cfda1a949b8561974bc076610bdaa7d2301388b6bdbe732623c42e612d043b85f7d4add484dc3400f9ca3098b4419326e335540da7e3c60af99afb86a53", @typed={0x3c, 0x28, @binary="9d07ef0a3c0300c82ea8a59bf4fee865983404bc0cd534bca999999c25f06a6c54c68e7afe084a1c27bdc865c44372314c246d5df967"}]}, @generic="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", @nested={0x64, 0x2d, [@generic="ce88863f7381b9ddde09bf5f61b34b5c1f6f66af755e2fd26d420640ec6ec7304070d2fb41047bf0b598747426bac35cbc2428b1533cbf2de187ae3d0b2572ecd41ca60ae3df3bc5e03af59ef7a1142751cca446a498", @typed={0x8, 0x54, @ipv4=@broadcast=0xffffffff}]}, @typed={0x8, 0xb, @uid=r3}]}, 0x1260}, {&(0x7f0000001f00)={0x3f4, 0x24, 0x330, 0x70bd26, 0x25dfdbfb, "", [@nested={0x14c, 0x38, [@generic="0a7abb0c9e5fc09d0c1e5160252e69b8cfcb", @generic="466dc73c778ca72112101b2ce2931215f71d16ae68e5a7f62c33d823cf2eeeb680443dd38ef042996f350c49359df7e7fe652e737bbf1a576efe653d592edf7e2ff7e8a940f20e539368dbcbc2acd9b0d32b4c440ddcdc9638ab14a1669f2472677b07b4256153eb6a1bdb46a624d7ee4ea0038e482c5cfc61d0cc72d70de74c3b4f5addc33513bf1829c2cd6427d2bfcd136ab56c67dbe8b9ae454d2cb06bdcef0849263a8ee7ec1b0f2128309428c818079d81c375a78315844770f5928183df79ffb50489b4a526c8f26da5b740cd13e4aba26330740be2", @generic="aeaaba9d4f7f9caff2ba178c904a0f56b61a81a1e68e15ff6114f79d41770b667457f64565f2134ad34b4335d3b9468eba13b0c105228b2612abd3f5988d", @typed={0x8, 0x55, @u32=0x7fff}, @typed={0x14, 0x9, @ipv6=@dev={0xfe, 0x80, [], 0x18}}]}, @nested={0x134, 0x31, [@typed={0x14, 0x3f, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x94, 0x27, @binary="bc165820f3dbaa177f2f328987f24befc8f97fae07a2415ee7e0f6c34f7b92ef6fa62e4f8974d4d3cf60f9522eccb6464107d795d65197fc8aca38d200582f35f2009b6bf84c0ea021bda97040eeb8cfe68e4ae5ae68abda86eb075b82be97875f66960b1f4889f08aa5e7f3e87f89747083361c54ee256fc7e671c94e7a45aa65e52154c121b7c7d51d48288971621d"}, @typed={0xc, 0x89, @u64=0xac8}, @typed={0x8, 0x6d, @u32=0x100}, @generic="5e2e36e575d703cde29b92b9756cf7b59bc2eaf222f5da3156aa7d260e37eabab7e72c724fa60df055d0c21b4630bc77d16760ba9a37acaa26a952808f6767521c6cff43eb4892a4a187d0291f143613b09a4bef6159519a3cffe690aaa8a3d10d7636a1448fbe755b6561aac179dd7f79c3"]}, @typed={0x14, 0x400, @str='rdma.current\x00'}, @generic="26cff8b76b26e525bf37cf7e80928a0ade5da0adcc1adb0ea2d3c7b83d59eb7cb7f65585e25458f358f6c6ed628d0c2d72562236c864bb5f4eb4360eae91b54c8707b8c05a56975cbcbe867631b15b8386ff9a8b1cde6d7c25b235bf778e1ea3bed7f76dd79e1289c65ea3216b582238f2fe787a5dc1481838520d71429a5cec74f42257ae8ddce73252d82debe9ff8ba8f4aa8dff5f2cadc5c87f6e8c55536ae514bd28bbd4b9f2880a3684dc6509bd9981a0e018d261b25e5d5f7d5f1bae2e49ec9db5b9f5e75eacb70e804917368bc8775acd5fe432c5f718d32571010d2d4632c9e34840bf548bf28dd652", @generic="6c109f4b196f38448daf6db7453c0485abc0c5417cf464ec93b9db61752e6f060b3e2a4ca0a6604f5243eab94b2a0ab5f9aac068c25dd7f267c2c7a36354d91aae407d47d1d11d517307fd682ec075ec2336a69ec8b8d4628d9d3eabe381601646"]}, 0x3f4}, {&(0x7f0000002380)={0x468, 0x20, 0x400, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x8, 0x51, @pid=r4}, @generic="803611e421aeae437156fb322501d468dda1e023fe5f1d4ea7c6535bb0e6fd724325d3aac411cf1a8aa125532b70b20d9e2e8ad9be288d604f54172d6bec27f1b5329408419ab8321e3664a40d", @nested={0x3c0, 0x4d, [@generic="f6211a046d63091443ccdbe861ba03c64867dc3f84f1b0f0f17f2b7a0b731eff25f8db1db73dd2bb924a2caf15f41027517de9afab541346d0e35cb60800b81f4dbdc114a8920f546bb5dc7300ed8fd91aa57ba5f1f99150136b00a900ddf969e8f3134e7614a228094bae9ccb37f2d89a6061f53c4f063f4ef89f2c07221c3a9c776f87e63e91a1ab5cc757d603d1156998381b835c06cc0d96607342e04ae9dcb99467d2a2b4f9397e9add979a997099d87351646384499bcd436f63e55220e7b17fad098c2938f87880bb1da3c4d977aede37e597fd5f034127eac404d9012f43f7e948a97b76cc9c6385873182baad39665e", @typed={0x14, 0x5e, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @typed={0xb4, 0x3, @binary="9408d9ddf5adc3f818f009746f79a1b1e0288f1c9cd1c15441196bc4ab71b48442f7fa642fb6759e581eeb8df3fc8a0d7571704300ab329b4909cc3bb842086e178002368449898c03606f389e7ad48cd41300db27d2c1d8bbdcd991d3bf8b9b8db44c381455805f1660bc97418f3b4c38ee38159fe50db602908334b3e432e5e38391690b7d7bc6108b31480bac1a9ac0bc1d3f744d32c543c5c929e489c8360a84ad3db5d342a84fe985ca56"}, @generic="9402c7310fc597870a014d016f2fd10da19135a147c8c5863f12a0d99017b40db27bd307b4d49a90e58ab8b1d3af407b6f87a718df1f44185f8fa11c513d3730953d4e008c47a6ac6bd67df7158bcfbd5f1ba093f5c365ea609091fbc23a2423545a5b348edbaa353b3dc4b3398148bb3b814de3470d84cff270a44583d3ff15d3960f28d01bdd67548ab2f3cf8eb4bd2babd614508f788bc57f08ecdf13fee35b0b76245088b7ec9518a43b1486db8e8f9a5c68b76657b288abce58bd4dcbffba8dd94413320cbe32d1f206c4f1a5305c6040b5fe4e9161c9496167906aec329e02d04f", @generic="0ed564f7e6247fac07299ad7c2ba1a3f2b5694d934298e89a630736ca151044a574b78f3d079", @typed={0x8, 0x22, @pid=r5}, @typed={0x4, 0x34}, @generic="edb8dfc8e56b40d058f797b1974f1247f120c5586360ac46f1e6cd58c820b72fd4d1ca05d72774ddac0930b5714b3b85eeb4107f035112a2ccf2139988097b7d58c8e82ed20a13c5c042339b4105da23454d953cb191da31552e4a683d41a8085b30978e44498e2e077dd3677e8f14487c7a618c7b98a6d212673c9d43e2f3b4c193eb34e86cd11480d0dd9f8d13b4b538bcb71eb6f83978ba98ccf47079ca72d20df6b5f208fb88d064dc1e5fe5034efe1ba2cca4416131e9da6b95851aa999d804b3a0385498b4ab2a6e449c9661f90b811b2a75fe957cf3fb073025acf4b52a175a7cab80f6"]}, @typed={0x38, 0x61, @binary="0f823c0ea0bb0577117f032ad3811a77bb45382a8c95be904928c9a9bb81ae75fc0759b972969bbd60da7cd8da7dfba4739619"}, @typed={0x8, 0x18, @fd=r2}]}, 0x468}, {&(0x7f0000002800)={0xe0, 0x2c, 0x2, 0x70bd26, 0x25dfdbff, "", [@typed={0x14, 0x5b, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @generic="15b41a9fb5d43d5590b01e49b4bdeb858e7edf39f06de68fd09035da7253505f931ae306db960120715b0bbc73f7cd99051c18d815ee466977477c49bc0da252c695fd71733e0402fe06be48", @generic="39f44dc987a5a405ddc224d8f024ee8e112e74b80b2ac679e1f5d0d9bdae597382642da87d340f29c589dd4fa141421380b01c3d879a1b77922c65ec2f7ba7d589e2fabfb4e4a433c0bfb3028f9632aa0ed42606e59c3574c4808a9f01854ed978106e1706201c480a7058519a6a2387"]}, 0xe0}, {&(0x7f0000002980)={0x108, 0x21, 0x201, 0x70bd2c, 0x25dfdbfe, "", [@nested={0xf0, 0x4b, [@typed={0xc, 0x56, @str='none\x00'}, @generic="6c73f23219c8dc42ecc2b013000ee96ad32927765737a5ed57643a5f5ca63b650e379d01d7a104160d860b3dbd53b103f6440e03ae3d3f0b28c59c9b180997165b9953331427fecf0c80d6158374e0c144c1507c3c08be7c574fa72deadb4a07b0ef95dd2f5bec921646b1e1fca8f91f34e94e6cf12b56c38c6d1d2577f0326db6421187c7e340f94c9d557519ee3c6869f796979d5d207ee1cf26356654f93fb9d270cca52085fb70174f5354cccdab9a963cbc4883676bb4919012", @generic="8869d9b525b2747a6c1bd3f322a9461bb9c1559ca324047b09afbf1d914753d7ded6"]}, @typed={0x8, 0x24, @fd=r6}]}, 0x108}], 0x5, &(0x7f0000003100)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @cred={0x20, 0x1, 0x2, r13, r14, r15}, @rights={0x10, 0x1, 0x1}, @rights={0x28, 0x1, 0x1, [r2, r2, r2, r2, r0, r2]}], 0x98, 0x40000}, 0x4040001) 2018/04/14 15:03:56 executing program 4: r0 = creat(&(0x7f0000002540)='./file0\x00', 0x2) ioctl$fiemap(r0, 0x40086602, &(0x7f00000002c0)) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_pid(r1, &(0x7f0000000100)=ANY=[], 0xfffffea0) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000008000000009cb0000470000000005a2b4b57948064c730000000000000100000000000000000000800000000002000000000000000010000000000000000000000000000000000000000000e800efffffff00"]) sendfile(r0, r0, 0x0, 0x5) socket$kcm(0x29, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x400000000000000a, 0x1ff, 0x7fff, 0x100000043}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000700)={0x0, 0x5, 0x0, 0x1ff, 0x0, r2, 0x9}, 0x2c) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r4 = perf_event_open(&(0x7f0000000500)={0x7, 0x70, 0x9, 0x7, 0x7ff, 0xffffffff, 0x0, 0x0, 0x20001, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffff7, 0x4, 0x67b, 0x8001, 0x7fffffff, 0x7, 0xbe, 0xb8, 0x0, 0xd9, 0x5, 0x128, 0x6, 0x4, 0xfffffffffffffeff, 0x1, 0x3, 0xffffffff, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x5a, 0x4, @perf_config_ext={0x2, 0x2}, 0x20, 0x99b, 0x0, 0x7, 0x1, 0x1, 0xffffffff}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x40082404, &(0x7f0000000440)=0x5bc6) mkdir(&(0x7f0000000280)='./file0\x00', 0xfffffffffffffffe) socketpair(0x8, 0x2, 0x4, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000025c000)={0x0, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000003c0)={&(0x7f0000000080)='./file1\x00', r5}, 0x10) mkdir(&(0x7f00000006c0)='./file1\x00', 0x88) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp, 0x8000000200000000, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0xffffff0b, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd}, 0x0, 0x0, r4, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xb, 0x7e, 0x6, 0x1, 0x1}, 0x2c) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x0, &(0x7f0000000200)) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000004c0)={&(0x7f0000000480)='./file0/file0\x00', r7}, 0x10) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000680)=r6, 0x4) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f0000000580)) mount(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, &(0x7f0000000300)) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file1\x00', &(0x7f0000000240)='squashfs\x00', 0x808, &(0x7f00000002c0)="ac9558818f62e72b6f91beaceadb3a985059e3daba0fff7ae9829a87f616e2adebede33891df5f847f840b1d4601d44abb3d8ed8e1a5a741efd6bec2997e6789fb79eb8d89122d9abb2de430a722093924adc54397469b0f3dc53737fed53ba196085ec845c3e43ec52eec494437593e784a6aa83927d2bc251f7b515a10779a7af4c2f092dba12cbd849c5429cd154c171f0cf888bda02abae80bb8817734409e219dac443300b80b358fbf6d4a7ed3577aef284cf07f4bfdc0e87157fc902a003d3eef3d0730a347") mount(&(0x7f000091dff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000fb5ffc)='nfs\x00', 0x0, &(0x7f000000a000)) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r2, &(0x7f0000000300)="1cb335da96a398ff09a3375ead96f3feb43168952b122288b9b20409269a5c47ed1377a08bf87e3a12125d0c9cab0738f1fa8253bbcc9acf15a8f5083f3d86f45f1e5dd2ebea03a4bbc09d0f325b9bc0bd6aa2b1392f5b75b778888244accfa6ec6d65ddd13e04c0a10e02cebe33eb1802f595241af2a188ead84e29e838cdfe67e6fc6bdfa30200fc4c0fa9185080864458e95274f419d65e4060f0d00f0f6150bf9d8eef008c452884e2806b2e8e9627b76af244b5ceb445a27b62918a188390b7611abfed87b199157462e40687806d329ad20a8f1a76cd2ec2a01cfccb268f9c03000cc699d00000000000000000", &(0x7f00000001c0)=""/9}, 0x18) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000400), 0x19) 2018/04/14 15:03:56 executing program 5: r0 = socket$unix(0x1, 0x80000000000001, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x8002) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000000)=0xff, 0x4) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000932000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) 2018/04/14 15:03:56 executing program 6: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000003000)={0x97ffffff00000000, 0x0, &(0x7f0000000000)={&(0x7f0000001000)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) [ 248.137261] binder: 18260:18265 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 248.172449] binder: 18260:18268 IncRefs 0 refcount change on invalid ref 0 ret -22 2018/04/14 15:03:56 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000700)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f00000006c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ff00006e", @ANYRES16=r1, @ANYBLOB="010001fbff0000ad00000900000004000300"], 0x18}, 0x1}, 0x0) 2018/04/14 15:03:56 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xf, 0x376, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0xce, &(0x7f0000000180)=""/206, 0x0, 0x1}, 0x13) rt_sigtimedwait(&(0x7f0000000140)={0x2}, &(0x7f00000002c0), &(0x7f00000004c0)={0x77359400}, 0x8) r0 = syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x52, 0x80001) getsockopt$netlink(r0, 0x10e, 0x7, &(0x7f0000000580)=""/181, &(0x7f0000000480)=0xb5) sendto(r0, &(0x7f00000003c0)="140fa0c043acdc890d3a9ea508d2fc07b529d2d5ac7b589936ce99e4f1a112c85e65fb8f4efc37953cb3b7b651e59fdde9294979424b52ff28c8aa546f5c1bf736d1", 0x42, 0x50, &(0x7f0000000500)=@ethernet={0x1}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000000500000000b6099cbf61061d87d8d0dfea1a11fb22000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000780)={0x0, 0x14, "e3e50edb24e8735d4a9c4e8af02170a14f2b8b0a"}, &(0x7f00000007c0)=0x1c) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000740)=@assoc_id=r1, &(0x7f0000000700)=0xffffffffffffff74) getpeername$netlink(r0, &(0x7f0000000640), &(0x7f0000000680)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000006c0)={0x0, 0x1000}, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x64, 0x4) 2018/04/14 15:03:56 executing program 2: r0 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000280)="cc", 0x1, 0xfffffffffffffffc) r1 = socket$inet(0x2, 0x80000, 0x6fc) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0xc0, [], 0x4, &(0x7f0000000000)=[{}, {}, {}, {}], &(0x7f0000000040)=""/192}, &(0x7f0000000180)=0x78) keyctl$get_keyring_id(0x0, r0, 0x0) 2018/04/14 15:03:56 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x4, 0x0, &(0x7f0000000280)=[@increfs={0x40046304}], 0xfffffed7, 0x700, &(0x7f0000000300)}) [ 248.341478] binder: 18283:18284 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 248.405690] binder: 18283:18287 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 248.442374] IPVS: stopping backup sync thread 13025 ... [ 248.449130] device bridge_slave_1 left promiscuous mode [ 248.454688] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.479133] device bridge_slave_0 left promiscuous mode [ 248.484704] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.635919] team0 (unregistering): Port device team_slave_1 removed [ 248.649448] team0 (unregistering): Port device team_slave_0 removed [ 248.661339] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 248.678252] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 248.738891] bond0 (unregistering): Released all slaves [ 248.852860] ================================================================== [ 248.860422] BUG: KASAN: use-after-free in uprobe_perf_close+0x45e/0x5f0 [ 248.867167] Read of size 4 at addr ffff8801b3e7a1a4 by task syz-executor4/18261 [ 248.874600] [ 248.876231] CPU: 0 PID: 18261 Comm: syz-executor4 Not tainted 4.16.0+ #2 [ 248.883055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 248.892398] Call Trace: [ 248.894981] dump_stack+0x1b9/0x294 [ 248.898607] ? dump_stack_print_info.cold.2+0x52/0x52 [ 248.904140] ? printk+0x9e/0xba [ 248.907415] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 248.912167] ? kasan_check_write+0x14/0x20 [ 248.916397] print_address_description+0x6c/0x20b [ 248.921240] ? uprobe_perf_close+0x45e/0x5f0 [ 248.925646] kasan_report.cold.7+0x242/0x2fe [ 248.930054] __asan_report_load4_noabort+0x14/0x20 [ 248.934979] uprobe_perf_close+0x45e/0x5f0 [ 248.939212] ? probes_open+0x1a0/0x1a0 [ 248.943103] ? mutex_trylock+0x2a0/0x2a0 [ 248.947157] ? graph_lock+0x170/0x170 [ 248.950953] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 248.956140] trace_uprobe_register+0x355/0xcd0 [ 248.960722] ? uprobe_perf_close+0x5f0/0x5f0 [ 248.965130] ? kasan_check_read+0x11/0x20 [ 248.969269] ? rcu_is_watching+0x85/0x140 [ 248.973410] ? rcu_pm_notify+0xc0/0xc0 [ 248.977289] ? perf_event_attach_bpf_prog+0x3e0/0x3e0 [ 248.982476] ? perf_uprobe_init+0x260/0x260 [ 248.986796] perf_uprobe_destroy+0xa0/0x130 [ 248.991114] ? perf_uprobe_init+0x260/0x260 [ 248.995433] _free_event+0x3ff/0x13b0 [ 248.999235] ? __mutex_unlock_slowpath+0x140/0x8a0 [ 249.004168] ? ring_buffer_attach+0x830/0x830 [ 249.008665] ? lock_downgrade+0x8e0/0x8e0 [ 249.012814] ? mark_held_locks+0xc9/0x160 [ 249.016959] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 249.021534] ? _raw_spin_unlock_irq+0x27/0x70 [ 249.026028] put_event+0x48/0x60 [ 249.029390] perf_event_release_kernel+0x8bd/0xf90 [ 249.034319] ? put_event+0x60/0x60 [ 249.037855] ? locks_remove_flock+0x4b7/0x640 [ 249.042344] ? find_held_lock+0x36/0x1c0 [ 249.046407] ? lock_downgrade+0x8e0/0x8e0 [ 249.050554] ? kasan_check_read+0x11/0x20 [ 249.054699] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.059105] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 249.063684] ? locks_check_ctx_file_list+0x100/0x140 [ 249.068781] ? kasan_check_write+0x14/0x20 [ 249.073011] ? do_raw_spin_lock+0xc1/0x200 [ 249.077241] ? _raw_spin_unlock+0x22/0x30 [ 249.081381] ? locks_remove_file+0x3f7/0x5a0 [ 249.085782] ? fcntl_setlk+0x1020/0x1020 [ 249.089837] ? fsnotify+0x415/0x1100 [ 249.093563] ? perf_event_release_kernel+0xf90/0xf90 [ 249.098661] perf_release+0x37/0x50 [ 249.102285] __fput+0x34d/0x890 [ 249.105564] ? fput+0x1a0/0x1a0 [ 249.108841] ? _raw_spin_unlock_irq+0x27/0x70 [ 249.113339] ____fput+0x15/0x20 [ 249.116615] task_work_run+0x1e4/0x290 [ 249.120498] ? task_work_cancel+0x240/0x240 [ 249.124816] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.130347] ? switch_task_namespaces+0xa2/0xd0 [ 249.135014] do_exit+0x1aee/0x2730 [ 249.138557] ? mm_update_next_owner+0x980/0x980 [ 249.143226] ? print_usage_bug+0xc0/0xc0 [ 249.147285] ? __lock_acquire+0x7f5/0x5140 [ 249.151515] ? find_held_lock+0x36/0x1c0 [ 249.155578] ? __lock_acquire+0x7f5/0x5140 [ 249.159809] ? debug_check_no_locks_freed+0x310/0x310 [ 249.164993] ? lock_downgrade+0x8e0/0x8e0 [ 249.169148] ? debug_check_no_locks_freed+0x310/0x310 [ 249.174332] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 249.179353] ? debug_object_active_state+0x2e7/0x4e0 [ 249.184450] ? kasan_check_read+0x11/0x20 [ 249.188594] ? rcu_is_watching+0x85/0x140 [ 249.192736] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 249.197921] ? graph_lock+0x170/0x170 [ 249.201719] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 249.206732] ? trace_hardirqs_on+0xd/0x10 [ 249.210874] ? find_held_lock+0x36/0x1c0 [ 249.214933] ? graph_lock+0x170/0x170 [ 249.218723] ? find_held_lock+0x36/0x1c0 [ 249.222785] ? memset+0x31/0x40 [ 249.226064] ? find_held_lock+0x36/0x1c0 [ 249.230128] ? lock_downgrade+0x8e0/0x8e0 [ 249.234280] do_group_exit+0x16f/0x430 [ 249.238197] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 249.242775] ? SyS_exit+0x30/0x30 [ 249.246222] ? _raw_spin_unlock_irq+0x27/0x70 [ 249.250712] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 249.255729] get_signal+0x886/0x1960 [ 249.259442] ? ptrace_notify+0x130/0x130 [ 249.263499] ? __unwind_start+0x166/0x330 [ 249.267641] ? __kernel_text_address+0xd/0x40 [ 249.272138] ? unwind_get_return_address+0x61/0xa0 [ 249.277068] ? __save_stack_trace+0x7e/0xd0 [ 249.281397] ? save_stack+0xa9/0xd0 [ 249.285029] do_signal+0x98/0x2040 [ 249.288564] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.293929] ? kasan_check_read+0x11/0x20 [ 249.298070] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.302475] ? setup_sigcontext+0x7d0/0x7d0 [ 249.306795] ? kasan_check_write+0x14/0x20 [ 249.311023] ? do_raw_spin_lock+0xc1/0x200 [ 249.315255] ? trace_hardirqs_off+0xd/0x10 [ 249.319489] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 249.324587] ? debug_check_no_obj_freed+0x2ff/0x584 [ 249.329610] ? exit_to_usermode_loop+0x87/0x310 [ 249.334277] exit_to_usermode_loop+0x28a/0x310 [ 249.338858] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 249.343696] ? ksys_mount+0xa8/0x140 [ 249.347410] do_syscall_64+0x792/0x9d0 [ 249.351290] ? vmalloc_sync_all+0x30/0x30 [ 249.355433] ? _raw_spin_unlock_irq+0x27/0x70 [ 249.359925] ? finish_task_switch+0x1ca/0x810 [ 249.364417] ? syscall_return_slowpath+0x5c0/0x5c0 [ 249.369340] ? syscall_return_slowpath+0x30f/0x5c0 [ 249.374269] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 249.379630] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 249.384475] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.389671] RIP: 0033:0x455319 [ 249.392850] RSP: 002b:00007f4c2cce0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 249.400552] RAX: ffffffffffffffec RBX: 00007f4c2cce16d4 RCX: 0000000000455319 [ 249.407815] RDX: 00000000200001c0 RSI: 0000000020000140 RDI: 00000000200000c0 [ 249.415079] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 [ 249.422341] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 249.429600] R13: 00000000000003fb R14: 00000000006f9028 R15: 0000000000000000 [ 249.436872] [ 249.438493] Allocated by task 18259: [ 249.442206] save_stack+0x43/0xd0 [ 249.445655] kasan_kmalloc+0xc4/0xe0 [ 249.449361] kasan_slab_alloc+0x12/0x20 [ 249.453330] kmem_cache_alloc_node+0x144/0x780 [ 249.457908] copy_process.part.38+0x16bf/0x6e90 [ 249.462566] _do_fork+0x291/0x12a0 [ 249.466095] SyS_clone+0x37/0x50 [ 249.469458] do_syscall_64+0x29e/0x9d0 [ 249.473344] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 249.478514] [ 249.480130] Freed by task 7564: [ 249.483401] save_stack+0x43/0xd0 [ 249.486846] __kasan_slab_free+0x11a/0x170 [ 249.491070] kasan_slab_free+0xe/0x10 [ 249.494859] kmem_cache_free+0x86/0x2d0 [ 249.498822] free_task+0x166/0x1d0 [ 249.502351] __put_task_struct+0x2d2/0x600 [ 249.506577] delayed_put_task_struct+0x367/0x470 [ 249.511326] rcu_process_callbacks+0x941/0x15f0 [ 249.515987] __do_softirq+0x2e0/0xaf5 [ 249.519769] [ 249.521393] The buggy address belongs to the object at ffff8801b3e7a180 [ 249.521393] which belongs to the cache task_struct(33:syz4) of size 5952 [ 249.534911] The buggy address is located 36 bytes inside of [ 249.534911] 5952-byte region [ffff8801b3e7a180, ffff8801b3e7b8c0) [ 249.546771] The buggy address belongs to the page: [ 249.551693] page:ffffea0006cf9e80 count:1 mapcount:0 mapping:ffff8801b3e7a180 index:0x0 compound_mapcount: 0 [ 249.561657] flags: 0x2fffc0000008100(slab|head) [ 249.566326] raw: 02fffc0000008100 ffff8801b3e7a180 0000000000000000 0000000100000001 [ 249.574203] raw: ffffea0006c79320 ffffea00075faba0 ffff8801accbb680 ffff8801b36e29c0 [ 249.582067] page dumped because: kasan: bad access detected [ 249.587761] page->mem_cgroup:ffff8801b36e29c0 [ 249.592239] [ 249.593851] Memory state around the buggy address: [ 249.598768] ffff8801b3e7a080: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.606117] ffff8801b3e7a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 249.613824] >ffff8801b3e7a180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.621172] ^ [ 249.625570] ffff8801b3e7a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.632918] ffff8801b3e7a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 249.640264] ================================================================== [ 249.647606] Disabling lock debugging due to kernel taint [ 249.653180] Kernel panic - not syncing: panic_on_warn set ... [ 249.653180] [ 249.660537] CPU: 0 PID: 18261 Comm: syz-executor4 Tainted: G B 4.16.0+ #2 [ 249.668750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 249.678089] Call Trace: [ 249.680666] dump_stack+0x1b9/0x294 [ 249.684289] ? dump_stack_print_info.cold.2+0x52/0x52 [ 249.689475] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 249.694227] ? uprobe_perf_close+0x3b0/0x5f0 [ 249.698624] panic+0x22f/0x4de [ 249.699809] WARNING: CPU: 1 PID: 7564 at net/ipv6/xfrm6_tunnel.c:345 xfrm6_tunnel_net_exit+0x2c0/0x4f0 [ 249.701806] ? add_taint.cold.5+0x16/0x16 [ 249.715345] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.719734] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.724120] ? uprobe_perf_close+0x45e/0x5f0 [ 249.728518] kasan_end_report+0x47/0x4f [ 249.732498] kasan_report.cold.7+0x76/0x2fe [ 249.736799] __asan_report_load4_noabort+0x14/0x20 [ 249.741705] uprobe_perf_close+0x45e/0x5f0 [ 249.745918] ? probes_open+0x1a0/0x1a0 [ 249.749784] ? mutex_trylock+0x2a0/0x2a0 [ 249.753819] ? graph_lock+0x170/0x170 [ 249.757598] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 249.762766] trace_uprobe_register+0x355/0xcd0 [ 249.767328] ? uprobe_perf_close+0x5f0/0x5f0 [ 249.771713] ? kasan_check_read+0x11/0x20 [ 249.775840] ? rcu_is_watching+0x85/0x140 [ 249.779964] ? rcu_pm_notify+0xc0/0xc0 [ 249.783826] ? perf_event_attach_bpf_prog+0x3e0/0x3e0 [ 249.788994] ? perf_uprobe_init+0x260/0x260 [ 249.793297] perf_uprobe_destroy+0xa0/0x130 [ 249.797598] ? perf_uprobe_init+0x260/0x260 [ 249.801898] _free_event+0x3ff/0x13b0 [ 249.805681] ? __mutex_unlock_slowpath+0x140/0x8a0 [ 249.810585] ? ring_buffer_attach+0x830/0x830 [ 249.815058] ? lock_downgrade+0x8e0/0x8e0 [ 249.819187] ? mark_held_locks+0xc9/0x160 [ 249.823311] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 249.827870] ? _raw_spin_unlock_irq+0x27/0x70 [ 249.832343] put_event+0x48/0x60 [ 249.835686] perf_event_release_kernel+0x8bd/0xf90 [ 249.840594] ? put_event+0x60/0x60 [ 249.844109] ? locks_remove_flock+0x4b7/0x640 [ 249.848582] ? find_held_lock+0x36/0x1c0 [ 249.852622] ? lock_downgrade+0x8e0/0x8e0 [ 249.856750] ? kasan_check_read+0x11/0x20 [ 249.860874] ? do_raw_spin_unlock+0x9e/0x2e0 [ 249.865260] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 249.869821] ? locks_check_ctx_file_list+0x100/0x140 [ 249.874899] ? kasan_check_write+0x14/0x20 [ 249.879110] ? do_raw_spin_lock+0xc1/0x200 [ 249.883322] ? _raw_spin_unlock+0x22/0x30 [ 249.887445] ? locks_remove_file+0x3f7/0x5a0 [ 249.891831] ? fcntl_setlk+0x1020/0x1020 [ 249.895870] ? fsnotify+0x415/0x1100 [ 249.899567] ? perf_event_release_kernel+0xf90/0xf90 [ 249.904645] perf_release+0x37/0x50 [ 249.908249] __fput+0x34d/0x890 [ 249.911505] ? fput+0x1a0/0x1a0 [ 249.914762] ? _raw_spin_unlock_irq+0x27/0x70 [ 249.919236] ____fput+0x15/0x20 [ 249.922492] task_work_run+0x1e4/0x290 [ 249.926358] ? task_work_cancel+0x240/0x240 [ 249.930663] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 249.936180] ? switch_task_namespaces+0xa2/0xd0 [ 249.940829] do_exit+0x1aee/0x2730 [ 249.944349] ? mm_update_next_owner+0x980/0x980 [ 249.948992] ? print_usage_bug+0xc0/0xc0 [ 249.953031] ? __lock_acquire+0x7f5/0x5140 [ 249.957243] ? find_held_lock+0x36/0x1c0 [ 249.961282] ? __lock_acquire+0x7f5/0x5140 [ 249.965494] ? debug_check_no_locks_freed+0x310/0x310 [ 249.970660] ? lock_downgrade+0x8e0/0x8e0 [ 249.974791] ? debug_check_no_locks_freed+0x310/0x310 [ 249.979957] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 249.984963] ? debug_object_active_state+0x2e7/0x4e0 [ 249.990054] ? kasan_check_read+0x11/0x20 [ 249.994178] ? rcu_is_watching+0x85/0x140 [ 249.998303] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 250.003467] ? graph_lock+0x170/0x170 [ 250.007244] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 250.012235] ? trace_hardirqs_on+0xd/0x10 [ 250.016360] ? find_held_lock+0x36/0x1c0 [ 250.020400] ? graph_lock+0x170/0x170 [ 250.024177] ? find_held_lock+0x36/0x1c0 [ 250.028218] ? memset+0x31/0x40 [ 250.031473] ? find_held_lock+0x36/0x1c0 [ 250.035514] ? lock_downgrade+0x8e0/0x8e0 [ 250.039643] do_group_exit+0x16f/0x430 [ 250.043510] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 250.048068] ? SyS_exit+0x30/0x30 [ 250.051497] ? _raw_spin_unlock_irq+0x27/0x70 [ 250.055968] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 250.060966] get_signal+0x886/0x1960 [ 250.064668] ? ptrace_notify+0x130/0x130 [ 250.068710] ? __unwind_start+0x166/0x330 [ 250.072833] ? __kernel_text_address+0xd/0x40 [ 250.077306] ? unwind_get_return_address+0x61/0xa0 [ 250.082213] ? __save_stack_trace+0x7e/0xd0 [ 250.086523] ? save_stack+0xa9/0xd0 [ 250.090133] do_signal+0x98/0x2040 [ 250.093650] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.098992] ? kasan_check_read+0x11/0x20 [ 250.103119] ? do_raw_spin_unlock+0x9e/0x2e0 [ 250.107505] ? setup_sigcontext+0x7d0/0x7d0 [ 250.111804] ? kasan_check_write+0x14/0x20 [ 250.116016] ? do_raw_spin_lock+0xc1/0x200 [ 250.120226] ? trace_hardirqs_off+0xd/0x10 [ 250.124439] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 250.129520] ? debug_check_no_obj_freed+0x2ff/0x584 [ 250.134520] ? exit_to_usermode_loop+0x87/0x310 [ 250.139170] exit_to_usermode_loop+0x28a/0x310 [ 250.143730] ? syscall_slow_exit_work+0x4f0/0x4f0 [ 250.148550] ? ksys_mount+0xa8/0x140 [ 250.152248] do_syscall_64+0x792/0x9d0 [ 250.156116] ? vmalloc_sync_all+0x30/0x30 [ 250.160240] ? _raw_spin_unlock_irq+0x27/0x70 [ 250.164712] ? finish_task_switch+0x1ca/0x810 [ 250.169185] ? syscall_return_slowpath+0x5c0/0x5c0 [ 250.174093] ? syscall_return_slowpath+0x30f/0x5c0 [ 250.179004] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 250.184345] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 250.189167] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 250.194332] RIP: 0033:0x455319 [ 250.197498] RSP: 002b:00007f4c2cce0c68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 250.205185] RAX: ffffffffffffffec RBX: 00007f4c2cce16d4 RCX: 0000000000455319 [ 250.212430] RDX: 00000000200001c0 RSI: 0000000020000140 RDI: 00000000200000c0 [ 250.219676] RBP: 000000000072bea0 R08: 0000000020000200 R09: 0000000000000000 [ 250.226924] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 250.234169] R13: 00000000000003fb R14: 00000000006f9028 R15: 0000000000000000 [ 251.321499] Shutting down cpus with NMI [ 251.325899] Dumping ftrace buffer: [ 251.329413] (ftrace buffer empty) [ 251.333096] Kernel Offset: disabled [ 251.336696] Rebooting in 86400 seconds..