ctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 75.829391] sd 0:0:1:0: [sg0] tag#1008 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 75.838194] sd 0:0:1:0: [sg0] tag#1008 CDB: Test Unit Ready [ 75.843948] sd 0:0:1:0: [sg0] tag#1008 CDB[00]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.852827] sd 0:0:1:0: [sg0] tag#1008 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 75.861705] sd 0:0:1:0: [sg0] tag#1008 CDB[20]: 00 00 00 00 [ 75.909639] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:34 executing program 7: r0 = open(&(0x7f0000520ff8)='./file0\x00', 0x141042, 0x0) set_mempolicy(0x0, &(0x7f0000000040)=0x5, 0x0) ftruncate(r0, 0x7fff) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$KVM_S390_UCAS_MAP(0xffffffffffffffff, 0x4018ae50, &(0x7f00000002c0)={0x5, 0x7, 0x5}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x806, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000180), &(0x7f0000000200)=0x4) ioctl$TIOCLINUX7(r1, 0x541c, &(0x7f00000001c0)={0x7}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000280)={0x7ff}, 0x1) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x0, 0x0) sendfile(r1, r0, &(0x7f0000335ff8), 0x0) ioctl$TIOCSSOFTCAR(r1, 0x541a, &(0x7f0000d26ffc)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x3, 0x7ff}, &(0x7f0000000240)=0x8) close(r2) 2018/03/31 13:27:34 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) accept4(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f00000001c0)=0x80, 0x80000) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x3, 0x1, 0x0, 0x9, 0x583}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x80, @loopback={0x0, 0x1}, 0xcc12}]}, &(0x7f0000000300)=0xc) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f0000cbdfb8)='v', 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000f0cffc), 0x4) write(r0, &(0x7f0000000340)="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", 0xe01) 2018/03/31 13:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:34 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:34 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x20000) r2 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x2, 0x3}, {0x2, 0x5}, {0xc, 0xfff}, {0x3, 0x3}, {0xe, 0x3}], 0x5) 2018/03/31 13:27:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 76.090249] binder: 8708:8714 ioctl 8010aa01 20000180 returned -22 [ 76.125192] binder: 8708:8714 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:34 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x22) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:34 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f000090cfed)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x81, 0x140) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000080)={0x36f1, 0x5}) perf_event_open(&(0x7f0000001000)={0x0, 0x78, 0x0, 0x20, 0x0, 0x6, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)=""/250) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)) 2018/03/31 13:27:34 executing program 4: personality(0x83ffffd) r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x5246ece9, 0x400000) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7) io_destroy(0x0) [ 76.187094] binder: 8708:8714 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:34 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f000051e000)={r1, &(0x7f0000fc5000), &(0x7f0000950000)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000dc3000)={r1, &(0x7f0000f4d000), &(0x7f0000107000)=""/78}, 0x18) r2 = socket(0x11, 0x2, 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000580)={0x0, 0x7, 0xaa7}, &(0x7f00000005c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000600)={r3, 0xbf, "b46609695eb20481aa8fddd977c5dc8d41284cc9087c26fe20fcd026767db6fe35b1022c2c98ab13f2e87b979eac14917d815314266fb55baf7919a2b6be8a000dc6e8f630466e8ebc39eb018f908848d37768427215bb0cfe5a07a03e0366858dd067a3f68e07769f8d5bdb665beb79b5d9f3bc26a4a57935bc393c20041379144a0f91217af132d7bd25b2ab98a0769b49c1ab650c00c70d009477479f53e4daea550bfa13badd35a7d72b1077de834471ef5a68bf14038ed0f8d83d2e18"}, &(0x7f0000000700)=0xc7) r4 = accept4(r0, &(0x7f00000004c0)=@ethernet, &(0x7f0000000540)=0x80, 0x800) setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0xffffffff) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000200)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000080)=""/101, 0x65}, {&(0x7f0000000100)=""/115, 0x73}], 0x2, &(0x7f00000002c0)=""/253, 0xfd, 0x1}, 0x2000) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000003c0)={0x0, 0x49, "68bfc872d646ad6111edc201fdc297b0982f35cb5cec08ac73e61e59dba1271a5c56b3d23b519d7f7abfcf986470368e0859977f5d6c04f8b41c4a868619ae8bc3c9f70e7903060f62"}, &(0x7f0000000240)=0x51) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000440)={r6, 0x7fffffff}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000001c0)={r3, 0x14, "c917fab42581d4000000052c0742a9271fcb6911"}, &(0x7f0000000280)=0x1) 2018/03/31 13:27:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 76.321998] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:34 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:34 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x22) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:34 executing program 5: r0 = syz_open_dev$sndtimer(&(0x7f0000ea5000)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000001000)={{0x100000001}}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x4, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffe, 0x10, 0xffffffffffffffff, 0x0) tkill(0x0, 0x1000000000016) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f000001cfb0)={0x0, 0x1}) [ 76.410181] binder: 8753:8754 ioctl 8010aa01 20000180 returned -22 [ 76.447383] binder: 8753:8754 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:34 executing program 4: perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000007c0)=0x0) getpgid(r0) move_pages(0x0, 0x4000005f, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000000540)=[0xfffffffffdffffff, 0xf2, 0x7, 0x5], &(0x7f0000000140), 0x0) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0xfffffffffffffffd, 0x9, &(0x7f0000000680)=[{&(0x7f00000000c0)="4f64e4f344c5e1a2f126904594f5c750d78e92035dd084c751f3df3abd42df656e1fa2fa98dd73bdb8bdb7bcfd5b4b1d2116ecd6a66fa2455208f7474ebfac383871957590c0d8f4983c093250837a19b9917d69827bc41a9cbbf8221a948856d8959820df7c2b27e7738dd446a1c5103a1e569385e7c6acabe09df220c78dfc7e5c5d68903fa73fd91202685ed06a0badd8902b2acb8fb82dbfb3afb8775c004d0841eea4baebbf", 0xa8, 0x6}, {&(0x7f0000000180)="30ff6cdb1e37cd31c14580bb8035448bafb3b4e76d38b45f3c8c9f4bd10d4701fb7dd220e934b7352e2c2f4bff9e", 0x2e, 0x882}, {&(0x7f00000001c0)="b264d6abbad7b08b41b8c85027a90cbfb813dac324fb8c261044e90c72e2593e0446328972386ff1183c3a6bd0cd6c68d3ae3ab04ed90c424647e7f8a944e1baa1bb5174721812abf9b938eea8343f190908209f9161152d1cafb5eeb7f18b20bee5170ed1ab82060225b5a196239af73a50b6cd0f02e5c092abc6e3c10da468a27794401238af2050468b82052d4434d264a6bf861fa266c3231825618e0bef3460df4e619f28f22e8d76f3aea3ccf74c79934068a38ab13247d24e20ed4b37292596586cc31a344647c3a3439749654448479bc0147652ba0723bb9280c3b002edfa82a1c093ae59d5be44d6625f6a8b1c613e4be47284", 0xf8, 0xc9b}, {&(0x7f00000002c0)="36c2a377eb52832d2f88a80711c8db2e5a3c02bc32b633cfb2a723b9e6be0f4d890bb300531394c23cf85678e1cea07a98c93715438321f6231a40c683ba350612ad0737ae9e3c4dfdf58ba9dec82c267d0fdd54137831c521985a2c30bb577db23d597e2b10ed38c9a128f8ef423c80669ba9e84cb3f267ab741a868a6760d8dd42dc5d5597db87e2835576c46b74ed69c987204df5f1ffb6b5aa25ffc621a78f1d6476421dfeb1e0442e1137347b9179b3e846a9eee79f66c6e78824338cd04011d04a9b", 0xc5, 0xfff}, {&(0x7f00000003c0)="70c7fb43c251518eddafbc9c20583c6477c5906c2fba28955a1717ca4242122605aa77af99db1f93e15b3c55541ba23ff29f12cbf57440b44242eeeef995b96256b58b7d64825626a3cadf2d7c90eaf6b683c7eeb4f48d9436e463cf1f8341f0b3f0d0930ac73435979f4376f1dfc4b1952ddd07371409238a841c74f63b2afb3af0633241f806d501", 0x89, 0x4730}, {&(0x7f0000000480)="fc29cab5059ebae98e71bf0439ef746a587562540b52213121d5140b522d4782b3ef0de1573ecc2fa21744e7f2f23a0e138d90b66a98de226fda2c99587f0c2f3ede3ba032f8efaa38a45ddf6518d02ac72fafc58b7039ad66cffc1f9d58f361a9888594c9b0f10c55085c0b231b6ddd860d21d3305b85b9f22fc27270f2123e9083d48901af2df6471f26868099492a37", 0x91, 0x3}, {&(0x7f0000000540), 0x0, 0x7fffffff}, {&(0x7f0000000580)="0b56fefb7a48860fe8b24803be6f373e18a50c5e17cb657489c13c1982059a80db21d6d145705ae912a3d1c028345bfbcb0e89740803e7f0ec87", 0x3a, 0x9}, {&(0x7f00000005c0)="ddcb16ab88c8e4f07502bac741231b21493e4583f97ba76dd0d99d2d6714f7ff2626d5b8e459592f11f7931205618305d5ceffe5fc6b386e6c91b12aa5c2493dfe760c76b5679f155d2a784ef5d9f3a8df4cea0550647835f049e2ddc7a228f94dbb1bc53f54a6e5db18fa840b6184a58a3f1c324f1863be104293d18e9abc96826820addbd579a8024f8fc7eb62dad959fc5271d248bb189c816f8ee77383f44a1f636b766a0be3683d47a587dde4df7c0818a4227e", 0xb6, 0x200}], 0x100000, &(0x7f0000000700)={[{@case_sensitive_yes={'case_sensitive=yes', 0x3d, [0x78, 0x34, 0x38]}, 0x2c}, {@dmask={'dmask', 0x3d, [0x36, 0x34, 0x33, 0x31, 0x37]}, 0x2c}, {@uid={'uid', 0x3d, [0x37, 0x0]}, 0x2c}, {@gid={'gid', 0x3d, [0x36, 0x35]}, 0x2c}, {@uid={'uid', 0x3d, [0x3c, 0x2d, 0x31, 0x37, 0x32, 0x37, 0x31]}, 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, [0x37, 0x36, 0x34, 0x31, 0x2d, 0x2d, 0x3f]}, 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, [0x3f, 0x39, 0x7e, 0x33, 0x0, 0x7f, 0x37, 0x35, 0x7c]}, 0x2c}, {@show_sys_files_yes={'show_sys_files=yes', 0x3d, [0x32, 0x32, 0x33]}, 0x2c}]}) 2018/03/31 13:27:34 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 76.486610] binder: 8753:8754 transaction failed 29201/-22, size 40-16 line 3026 [ 76.577848] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:35 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:35 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x22) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:35 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="08631040", @ANYRES64=r2, @ANYBLOB="01000000000400ec613c7cf8e5dcd0d728995baf9911a66d5b23c99f81935a1f4d046c65394ba7736d037f3e2253464a1b90bf54eb1d470fb6aac4c9155204000045f407f1bfa69b047b90e9de1dd7ae9dc22c1197f06fafbf7993e1373d"], 0x85, 0x0, &(0x7f0000000180)="0da45815efc1c4b7ebd2a84250b4282c1c0d7fd5b13ec061066c0930a62626cca0160aeefb7343f3938a9dbb5e05356c01b1d91762440ff576b3299ef8edad6776303efbfc2c762980c1f9de29af57d02778ed40de66db022db096f6bfc21aa2c648131dbb7c9b1d49be399184b16514b8569908c8eb4b4bb18801589f9f8c65706b321c2f"}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x0, 0x2001) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000100)={'nat\x00', 0x6, "3b84d1aa96fa"}, &(0x7f0000000080)=0x2a) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000a000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="8a83fea898158ea64ffbc52c9804b870b6bb47d5c4743ac6c31993f266672694f0f5d1a915a79faae253ec3d744a5697121fe818"], 0x118, 0x0, &(0x7f0000000100)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007fd0)={0x44, 0x0, &(0x7f0000d06000)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f000000d000)=[@fda={0x66646185}, @flat={0x73682a85}], &(0x7f0000006000)=[0x20]}}], 0x0, 0x0, &(0x7f000023c000)}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x40, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x7fffffff}], 0x2c) 2018/03/31 13:27:35 executing program 4: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000400)='/dev/snd/timer\x00', 0x0, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x2900, 0x4) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000140)=@pic={0xfffffffffffffe00, 0x6, 0x8, 0x4d, 0x5d, 0x2, 0x2a69, 0x4ed2, 0x1, 0x3, 0x45, 0x3, 0x1, 0x1, 0x9, 0x7fff}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r1, 0x403c5404, &(0x7f0000000040)={{0x40, 0x0, 0x0, 0x2000003, 0xffffffffffffffff}, 0x0, 0xffffffbf7fffffff}) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x8bfb, 0x40000200003) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x70f7, @random="55e702a60d58"}) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x403c5404, &(0x7f0000000240)={{0x1, 0x2b61396c98c78051, 0x80000001, 0x2, 0x6}, 0x20}) 2018/03/31 13:27:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 77.181789] binder: 8798:8800 ioctl c0306201 20000240 returned -14 [ 77.184194] binder: 8806:8811 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:35 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="0000000000000040f720f51af901d400e95ca8935221a952893d275f8a67a986fafb82bbac88b2f680e4d4d8fada0a4aa2e64c5da17845e6628769ada56e13bebe68c2d7ac125075dbc6e1210d7d871ae27d589a04747de60db3278d969852dd25030137cc8ac3") fchdir(r0) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000080)=0x7fffffff, &(0x7f0000000140)=0x4) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x0) 2018/03/31 13:27:35 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 77.227954] binder: 8798:8800 ioctl c0306201 2000a000 returned -14 [ 77.234522] binder: 8806:8811 got transaction with invalid offset (0, min 24 max 40) or object. [ 77.262828] binder: 8798:8800 got transaction with invalid handle, 0 [ 77.270600] binder: 8806:8811 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:35 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 77.279304] binder: 8798:8800 transaction failed 29201/-22, size 56-8 line 3055 2018/03/31 13:27:35 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:35 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/209, 0xd1}, {&(0x7f0000000180)=""/42, 0x2a}, {&(0x7f00000001c0)=""/6, 0x6}], 0x3) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x0, 0x3, 0x0, 0x0, "4b893f214574a02e747d7a5f4b0018325268d12d8708e2e14e68b6a59f9284e0319f072d53262b3ef6a653a6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "5698eba5ac05ecc168ba762ba3cb1426fef03b336e485dd7a40c2be6620406e625986a8fc848ec102e67a73a57d72ce8e838de4740cef82beb06fa817042b12d", &(0x7f0000000200)='-\x00', 0x2}) 2018/03/31 13:27:35 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) [ 77.337364] binder: 8798:8829 ioctl c0306201 20000240 returned -14 [ 77.371930] binder: 8798:8800 ioctl c0306201 2000a000 returned -14 [ 77.377098] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.412465] binder: 8798:8829 transaction failed 29189/-22, size 56-8 line 2848 [ 77.433616] binder: 8841:8842 ioctl 8010aa01 20000180 returned -22 [ 77.456486] binder: 8841:8842 got transaction with invalid offset (0, min 24 max 40) or object. [ 77.479242] binder: 8841:8842 transaction failed 29201/-22, size 40-16 line 3026 [ 77.496120] binder: undelivered TRANSACTION_ERROR: 29189 [ 77.510273] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.532641] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:36 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:36 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$l2tp(0x18, 0x1, 0x1) r1 = dup(r0) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0086426, &(0x7f00000000c0)={0x200000000000044a, &(0x7f0000000540)}) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, &(0x7f0000000100)={0x0, 0x2}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x200040, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000080)=0x100, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r3, 0x5eb855) r4 = socket$inet_dccp(0x2, 0x6, 0x0) get_mempolicy(&(0x7f0000005200), &(0x7f0000005240), 0x0, &(0x7f0000482000/0x3000)=nil, 0x4) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001900)='/selinux/enforce\x00', 0x100, 0x0) getsockname$unix(r5, &(0x7f0000005100)=@abs, &(0x7f0000005140)=0x8) connect$inet(r4, &(0x7f0000772000)={0x2, 0x4e27}, 0x10) r6 = accept4(r3, &(0x7f0000975000)=@can, &(0x7f0000752ffc)=0x10, 0x0) sendto$inet(r4, &(0x7f0000531fff), 0x0, 0x0, 0x0, 0x0) sendmsg$nl_netfilter(r6, &(0x7f0000b76fc8)={&(0x7f0000715000)={0x10}, 0xc, &(0x7f000066f000)={&(0x7f0000896000)=ANY=[@ANYBLOB="35d5000000000000ffffffff0000000000000000"], 0x14}, 0x1}, 0x0) sendmmsg(r6, &(0x7f0000005040)=[{{&(0x7f00000022c0)=@ipx={0x4, 0x0, 0x0, "5d3efb3c3669"}, 0x80, &(0x7f0000002440), 0x0, &(0x7f0000002480)}}, {{&(0x7f0000002940)=@nl=@proc={0x10}, 0x80, &(0x7f0000002a80), 0x0, &(0x7f0000002ac0)}}, {{&(0x7f0000002c00)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x80, &(0x7f0000004ec0), 0x0, &(0x7f0000004f00)}}], 0x3, 0x0) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000141000), 0x0) write(r4, &(0x7f0000f8aff1), 0xff8f) sendto$inet(r4, &(0x7f0000494f01), 0x0, 0x0, &(0x7f0000198ff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendmsg$rds(r6, &(0x7f0000001fc0)={&(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000080)=""/224, 0xe0}, {&(0x7f0000000180)=""/74, 0x4a}], 0x2, &(0x7f0000001cc0)=ANY=[@ANYBLOB="58000000140100000600000000000000000000009a000000", @ANYPTR64=&(0x7f0000000240)=ANY=[@ANYBLOB="0100000000000000"], @ANYPTR64=&(0x7f0000000280)=ANY=[@ANYBLOB="0000008000000000"], @ANYBLOB="0900000000000000ff0f000000000000000001000000000000080000000000000c000000000000000002000000000000180000001401000002000000000000007f00000000000000580000001401000009000000000000000600000008000000", @ANYPTR64=&(0x7f0000000440)=ANY=[@ANYBLOB="810000000000006c34e9c53c103d369fc1586221967800"], @ANYPTR64=&(0x7f0000000300)=ANY=[@ANYBLOB='M\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="8e0d00000000000006000000000000000018000000000000f7ffffffffffffff11000000000000000000ffffffffffff480000001401000001000000000000000000008000000000", @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="e900000000000000", @ANYPTR64=&(0x7f0000001740)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x110}, 0x0) 2018/03/31 13:27:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:36 executing program 5: clone(0x200, &(0x7f00000005c0), &(0x7f0000000640), &(0x7f0000000380), &(0x7f0000000540)="967f4162909ecc571b2419e7fbf3022c909b915dbb74e6031f") bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00'}, 0x10) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000680)='cpuset.memory_pressure\x00', 0x0, 0x0) read(r2, &(0x7f00000006c0)=""/144, 0x90) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000480), &(0x7f0000000440)=0xfffffffffffffd81) r3 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f00000008c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000880)="b3", 0x1, r1) keyctl$update(0x2, r3, &(0x7f0000000240)="df02754677212dfc3e2acc26fdc3ffa64813da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa023895113293535d1c0066d20e0f275188b4b4c187e18774fc2227cbb60fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f252510d87bd91d03e7dc2faed85adcd88ca30e75b1e143a72d94defa187e48b89efbbbcc9b9a9a307353df7a21affce4e9149eb122cbc356cb681365afd979e97b57b596e901864a68679f", 0xc0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340)='/dev/hwrng\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000380)={0x0, 0x800, 0xfff, 0x9}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000400)={r5, 0x9}, 0x8) setsockopt$inet6_MRT6_DEL_MFC(r4, 0x29, 0xcd, &(0x7f00000004c0)={{0xa, 0x4e23, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x8}, {0xa, 0x4e20, 0x100000001, @empty, 0x8}, 0x7, [0x8, 0x94, 0x5, 0x7, 0x0, 0x5, 0x2c, 0x6]}, 0x5c) open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) syz_mount_image$hfs(&(0x7f0000000240)='hfs\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x0, &(0x7f00000006c0), 0x33040, &(0x7f00000006c0)=ANY=[]) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, &(0x7f0000000140), 0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r8 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) open_by_handle_at(r6, &(0x7f0000000200)={0x54, 0x7, "d587c655a9adea552fcec38e8cfe60ed3cb3454eb4661d3725eac145afd8392326ae45cf0c21d197cd271832a5fa6e57bd52057c8e8ad0a0414766854b9b5e57f33c712c2f47130480983421"}, 0x20800) r9 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x1fffe, 0x0) ftruncate(r9, 0x8001) r10 = open$dir(&(0x7f0000000580)='./file0\x00', 0x2, 0x0) ftruncate(0xffffffffffffffff, 0x0) setsockopt$inet_MCAST_MSFILTER(r7, 0x0, 0x30, &(0x7f0000000900)={0xa3ce, {{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x0, 0x5, [{{0x2, 0x4e22, @multicast1=0xe0000001}}, {{0x2, 0x4e23, @rand_addr}}, {{0x2, 0x4e24, @multicast2=0xe0000002}}, {{0x2, 0x1f, @multicast2=0xe0000002}}, {{0x2, 0x4e22, @loopback=0x7f000001}}]}, 0x310) write(0xffffffffffffffff, &(0x7f0000000300)="d88a8d38144e5013d473c0ac2ca61ff3b749a4f5c7e6e9c2ce586e5cfca5d60ffc9a4df71856925b300ab39b1dd592385821faecb039bcdc475ffbacb982187073fc479f1cc6ffa0000af0026e75921d8a8310071ec28e0e6292680755e470aa73f538545ff8b19c257d032f9da1fa51f9a41568ce04a04f48d13d59ef80d3419c", 0x81) tee(r8, r8, 0x3aa8, 0x2) fcntl$getown(r7, 0x9) sendfile(r10, r10, &(0x7f0000000040), 0x7527fb3200000000) syz_mount_image$vfat(&(0x7f0000001640)='vfat\x00', &(0x7f0000001680)='./file0\x00', 0x200, 0x1, &(0x7f0000002900)=[{&(0x7f00000016c0)="cf029ff80a1c57176fcec2ab1bff3e9ffbe0d31231540853608f9da1c7222aad36e440f9ff9e69b8e53ae45dc736ca700022dc4ec4", 0x35, 0x9}], 0x1001, &(0x7f0000002980)) pwritev(r10, &(0x7f0000002cc0)=[{&(0x7f00000029c0)="111cbe3291187171ac60bb9d2ddc1b23875d91c229", 0x15}], 0x1, 0x0) 2018/03/31 13:27:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:36 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 78.133567] binder: 8864:8866 ioctl 8010aa01 20000180 returned -22 [ 78.169847] binder: 8864:8866 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:36 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:36 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 78.219726] binder: 8864:8866 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:36 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) [ 78.310084] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:36 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000fc7000)={0x5, 0xa, 0x4000000000080, 0x2}, 0x14) chdir(&(0x7f0000000880)='./file0\x00') bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000100)=""/81}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)={0xb, 0xc2, 0x0, 0x9, 0x5, r0, 0x7}, 0x2c) recvmmsg(0xffffffffffffff9c, &(0x7f0000000d00)=[{{&(0x7f0000000580)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000600), 0x0, &(0x7f0000000700)=""/180, 0xfffffffffffffd38, 0x888}, 0x4}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000007c0)=""/132, 0x84}, {&(0x7f0000000f80)=""/222, 0xde}, {&(0x7f0000000640)=""/57, 0x39}, {&(0x7f0000000980)=""/132, 0x84}, {&(0x7f0000000a40)=""/117, 0x75}, {&(0x7f0000000ac0)=""/119, 0x77}, {&(0x7f0000000b40)=""/254, 0xfe}, {&(0x7f0000000c40)=""/31, 0x1f}], 0x8, &(0x7f0000000cc0)=""/42, 0x2a, 0x7}, 0x80000000000}], 0x2, 0x10000, &(0x7f0000000d40)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000d80)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}}, 0x81}, &(0x7f0000000e40)=0x88) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000e80)={r2, 0xffffffff}, 0x8) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000600), &(0x7f0000000ec0)=0x2) r3 = syz_open_dev$vcsa(&(0x7f0000000f00)='/dev/vcsa#\x00', 0xb25d, 0xc000) write$cgroup_type(r3, &(0x7f0000000f40)='threaded\x00', 0x9) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockname(r4, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0xfffffffffffffe97) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={r6, 0x50, &(0x7f0000000240)}, 0x10) sendmsg$netrom(r5, &(0x7f0000000680)={&(0x7f0000000180)=@ax25={0x3, {"61b7d04114510f"}, 0x8404}, 0x10, &(0x7f0000000340), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x1d5, 0x800}, 0x40000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000080)=0x3, 0x4) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x20010, r3, 0x0) [ 78.394586] binder: 8899:8900 ioctl 8010aa01 20000180 returned -22 [ 78.437936] binder: 8899:8900 got transaction with invalid offset (0, min 24 max 40) or object. [ 78.457780] binder: 8899:8900 transaction failed 29201/-22, size 40-16 line 3026 [ 78.492686] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:37 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x0, &(0x7f0000f07000)}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:37 executing program 5: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140), &(0x7f0000000180)=0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$packet(0x11, 0x2, 0x300, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet6(0xa, 0x807, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000006c0)={{{@in6=@dev, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0x8c0) connect$packet(r1, &(0x7f0000000100)={0x11, 0x3, r3, 0x1, 0x4, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) sendmsg$nl_route(r0, &(0x7f0000001cc0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000000009babae33e301050000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000d0081ffffff08001b0000000000"], 0x30}, 0x1}, 0x0) 2018/03/31 13:27:37 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:37 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000629000)) r1 = syz_open_pts(r0, 0x1) fcntl$setstatus(r1, 0x4, 0x2c00) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000fd6000)='z', 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x1b) close(r0) 2018/03/31 13:27:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x0, &(0x7f0000f07000)}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 79.150931] binder: 8930:8932 ioctl 8010aa01 20000180 returned -22 [ 79.182470] binder: 8930:8932 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x45) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(0xffffffffffffffff) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:37 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={0xac, 0x14, 0x14, 0xbb}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @rand_addr}}}}, &(0x7f0000000040)) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000000)={0x0, 'lo\x00'}, 0x18) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) fcntl$getflags(r0, 0x1) [ 79.215186] binder: 8930:8932 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:37 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000001000)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) io_setup(0xa3c, &(0x7f0000409000)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f00002a8000)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0xfd28}]) 2018/03/31 13:27:37 executing program 0: timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) [ 79.295971] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x0, &(0x7f0000f07000)}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 79.345500] binder: 8967:8968 ioctl 8010aa01 20000180 returned -22 [ 79.379168] binder: 8967:8968 got transaction with invalid offset (0, min 24 max 40) or object. [ 79.426726] binder: 8967:8968 transaction failed 29201/-22, size 40-16 line 3026 [ 79.466367] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:37 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) 2018/03/31 13:27:37 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x45) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:37 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r2, 0x0, 0x0, 0x0) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r5, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:37 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)="2e2f4267726f75702e63705edff384923549a597bed24cdd", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000140)="6875a46765746c622e3207000000696d69745f696e5f627974657300", 0x2, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_type(r2, &(0x7f0000000280)='threaded\x00', 0x1) 2018/03/31 13:27:37 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) fadvise64(r0, 0x0, 0x9, 0x2) shutdown(r0, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(ccm(aes-asm))\x00'}, 0x6d) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffa, 0x2) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x10, @tick=0x1ff, 0x55a, {0x7ff, 0xf800000000000000}, 0x7, 0x0, 0xf}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000180)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}}}, &(0x7f0000000280)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x900000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={0x28c, 0x8, 0x8, 0x800, 0x70bd29, 0x25dfdbfb, {0xa, 0x0, 0x3}, [@generic="354d4e263ef0ebb59d4c6e19db95efc207b77a6acec612e4e343cb1dca8802e898bd477dfc8ac7172fa2f610611c199a6d58a55052d27311879bccba9a07510830c80eb8abea220b7d21de9b2e2711c13703e5ebc5beec526f8ffb21fc0a5b2c632bfa92188153fe4f6df00594694caf54391678ebbe6a5762102380561c456c88ca88ff35e024fb634bc6e61ffc08ad7186fb", @nested={0x1e4, 0x89, [@generic="b49178fed2", @generic="c828bc26b3860320cf492cfc84288c7fe008a021a55e2165363570ddd091b438cf593283e755064d653f1608f1b025987723ec8ad3aa22abbf1bab7e7d3cc665bbc44f245b3c37dc80737ac20852024055e30e6fcc7396e601427b777ccad2a4743137289dd45e94bbbf8d8eaa8b22880def41b4aaec54fdf43a31da0688cc6b47a5e9a78a4598be2f8b022fa9a0c514f7cffde0f36b11bca7a07e4aecfd81a6f589b7fc22e3c7d39904ffbb7a10df061a5a32d69589d7299578f7d68e5aeb15b70d921af9bcb7e6012d16a407aca9d3ae1668d972b165fbfe61ff2131075e66771ad898", @typed={0xc, 0x57, @u64=0xfffffffffffff001}, @generic="d0d72b7aef35ac4756dd98cdfa4156ba1098f773ea15ef1901c645494447a928b2b9b4d18073e3ddc27de06835ebd026769ff1b2eb35665b0941ff5770a5ac64a3147678ded70553c1c7b4d072df8e5688b2dfccb0c53caa5a6c1a5bbae21d46632a01954d8be8dfe2a5dd46292af865f7f9fbde5ac2f7077a7e4f869902370350ca77ddf631c10fdcbe2e4e22fd3dbb9e927689914714547ce1b3fcd6118441830f61c4c9b564fd741c8a453c285f2e97ce3f2eb3bd34cd790855ec4fa9ca5177fd20e72b3eab65c57c5288730e6c854bdee00fe2c59d", @typed={0xc, 0x3, @u64=0x3}, @typed={0x8, 0x4f, @uid=r3}]}]}, 0x28c}, 0x1, 0x0, 0x0, 0x4004080}, 0x1) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6", 0x3) 2018/03/31 13:27:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:37 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x0, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:37 executing program 0: timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) [ 80.038291] binder: 8981:8982 ioctl 8010aa01 20000180 returned -22 [ 80.070227] binder: 8981:8982 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x45) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:38 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x5, 0xb, 0x4, 0xb, 0x0, 0xffffffffffffff9c}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000040), &(0x7f00000000c0)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r0, &(0x7f0000000040)}, 0x10) 2018/03/31 13:27:38 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x0, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 80.088867] binder: 8981:8982 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:38 executing program 0: timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:38 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:38 executing program 4: r0 = syz_open_dev$binder(&(0x7f00000107d8)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000011a000/0xc00000)=nil, 0xc00000, 0x0, 0x10011, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f0000001200)='/dev/binder#\x00', 0x2) r2 = socket(0x2, 0x3, 0x40000000000000ff) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)) getsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000001240)={@remote}, &(0x7f0000001280)=0xc) [ 80.165805] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.237045] binder: 9024:9028 ioctl 8010aa01 20000180 returned -22 [ 80.294333] binder: 9024:9028 got transaction with invalid offset (0, min 24 max 40) or object. [ 80.309956] binder: 9024:9028 transaction failed 29201/-22, size 40-16 line 3026 [ 80.349115] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:39 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r2, 0x29, 0x35, &(0x7f0000000040), &(0x7f0000013000)=0x4) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f00000006c0)={{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) close(r0) 2018/03/31 13:27:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x0, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:39 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) 2018/03/31 13:27:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x4b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:39 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:39 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 81.085500] binder: 9052:9061 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:39 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 81.132318] binder: 9052:9061 got transaction with invalid offset (0, min 24 max 40) or object. [ 81.158238] binder: 9052:9061 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:39 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64]], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:39 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:39 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:39 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 81.244144] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.297553] binder: 9084:9085 ioctl 8010aa01 20000180 returned -22 [ 81.322727] binder: 9084:9085 got transaction with invalid offset (0, min 24 max 40) or object. [ 81.348066] binder: 9084:9085 transaction failed 29201/-22, size 40-16 line 3026 [ 81.387007] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:40 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) recvmsg(r0, &(0x7f0000005180)={&(0x7f0000004ac0)=@can, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000005100)=""/93, 0x5d}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00005bfff0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getsockname$unix(r0, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) madvise(&(0x7f000089e000/0x4000)=nil, 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a45320, &(0x7f0000000140)={{0x7587}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x800}) 2018/03/31 13:27:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64]], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0x0, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:40 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00'}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:40 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) 2018/03/31 13:27:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64]], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 82.125619] binder: 9109:9111 ioctl 8010aa01 20000180 returned -22 [ 82.159724] binder: 9109:9111 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3b) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:40 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 82.198588] binder: 9109:9111 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:40 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:40 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:40 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 82.296875] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:41 executing program 4: mknod(&(0x7f000086c000)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f00004be000)='./file0\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') connect(r1, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x0, 0x4, 0x3, {0xa, 0x4e20, 0xffffffffffff7fff, @dev={0xfe, 0x80, [], 0xb}, 0x7ff}}}, 0x80) flistxattr(r1, &(0x7f0000000100)=""/177, 0xb1) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000000040)={0x5004, 0x2, 0x2, 0x2, 0x7}) 2018/03/31 13:27:41 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:41 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) creat(&(0x7f0000000000)='./file0\x00', 0xb3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:41 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 83.278288] binder: 9156:9165 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:41 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) creat(&(0x7f0000000000)='./file0\x00', 0xb3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:41 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:41 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:41 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 83.325877] binder: 9156:9165 got transaction with invalid offset (0, min 24 max 40) or object. [ 83.365297] binder: 9156:9165 transaction failed 29201/-22, size 40-16 line 3026 [ 83.466200] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:42 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x20000000000008, &(0x7f0000353000), 0x4) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2}, 0x10) sendto$inet(r0, &(0x7f00006fd000), 0x0, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x9, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}, {0x2, 0x4e22, @broadcast=0xffffffff}, 0x24, 0x8001, 0x15f00000000000, 0x3, 0xbf6, &(0x7f0000000000)='gre0\x00', 0x1, 0x7, 0x5}) setsockopt$inet_mreq(r1, 0x0, 0x20, &(0x7f0000bf9000)={@dev={0xac, 0x14}, @loopback=0x7f000001}, 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='nv\x00', 0xfffffffffffffe4b) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000000c0)={0x4, r0, 0x1}) ioctl$DRM_IOCTL_MODESET_CTL(r2, 0x40086408, &(0x7f0000000100)={0x400, 0x7}) 2018/03/31 13:27:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086"], 0x27) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) creat(&(0x7f0000000000)='./file0\x00', 0xb3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:42 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:42 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 84.143121] binder: 9193:9194 ioctl 8010aa01 20000180 returned -22 [ 84.177367] binder: 9193:9194 got transaction with invalid offset (0, min 24 max 40) or object. [ 84.199328] binder: 9193:9194 transaction failed 29201/-22, size 40-16 line 3026 [ 84.271953] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:42 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:42 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086"], 0x27) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:42 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:42 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:42 executing program 4: prctl$intptr(0x24, 0x800) clone(0x0, &(0x7f0000b85fff), &(0x7f0000008000), &(0x7f0000000ffc), &(0x7f0000000000)) prctl$intptr(0x200000029, 0x20000000000000) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000080)=0x500000000000000, 0x4) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x14e) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000040)=0x22a, 0x8) 2018/03/31 13:27:42 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:42 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086"], 0x27) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 85.051636] binder: 9229:9231 ioctl 8010aa01 20000180 returned -22 [ 85.084454] binder: 9229:9231 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 85.122762] binder: 9229:9231 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:43 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:43 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000205fe9)='net\x00') unlinkat(r0, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {}]}) 2018/03/31 13:27:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:43 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 85.220205] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.305537] binder: 9265:9269 ioctl 8010aa01 20000180 returned -22 [ 85.346614] binder: 9265:9269 got transaction with invalid offset (0, min 24 max 40) or object. [ 85.366786] binder: 9265:9269 transaction failed 29201/-22, size 40-16 line 3026 [ 85.400817] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:43 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto(r0, &(0x7f0000000000)="0786223935644c7b8d1d9e6caecc1066011dc9c139d33c23b331147cd74b90aa652f8a9f7817a14fbcaef2b38de6f183df174b6cc6bb1f94a3266843d5a958431e35fe5ee0164dc3a21a03757112bbdcf2d85f7d6d2f99b2b1723edc6c4122d92447c60f52d76c9808a7a36bd7afb8af54f469b54564f6fcca", 0x79, 0x7e, &(0x7f0000000100)=@llc={0x1a, 0x104, 0x421e, 0x401, 0x80000001, 0x7ff, @random="15f9bfa53c0f"}, 0x80) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000f07000)=[{0x6}]}, 0x10) 2018/03/31 13:27:43 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x0, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:43 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:43 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:43 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:43 executing program 4: perf_event_open(&(0x7f0000fdef88)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xffffeffffffffff6, &(0x7f0000000100)) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x5, 0x2000) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f0000000140)=""/97) 2018/03/31 13:27:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:43 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:43 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 85.959353] binder: 9286:9289 ioctl 8010aa01 20000180 returned -22 [ 85.992930] binder: 9286:9289 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 86.042155] binder: 9286:9289 transaction failed 29201/-22, size 40-16 line 3026 [ 86.144457] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:44 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x0, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917"], 0x38) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:44 executing program 4: r0 = socket$inet6(0xa, 0x1001000000080001, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f00000001c0)={0x0, 0x7}) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000280)=""/128, &(0x7f0000000300)=0x80) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000540)=0x0) syz_open_procfs(r2, &(0x7f0000000580)='mounts\x00') r3 = getpid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x1, 0x36, 0xffffffffffffffff, 0x3) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x5c) setsockopt$inet6_MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000e93fb4)={{0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, {0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}}, 0x5c) r5 = syz_open_procfs(r3, &(0x7f0000000240)='fdinfo\x00') sched_setattr(r3, &(0x7f0000000380)={0x0, 0x1, 0x0, 0x0, 0x0, 0xd7c7, 0x1}, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x400445a0, &(0x7f0000000340)=0x9) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0xb2a}, 0x8) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/loop-control\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x1) ptrace$peekuser(0x3, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$sock_ipx_SIOCAIPXITFCRT(0xffffffffffffffff, 0x89e0, &(0x7f00000003c0)) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) madvise(&(0x7f000096d000/0x2000)=nil, 0x2000, 0x0) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}]}, &(0x7f0000000140)=0xc) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f00000001c0), 0x4) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000640)={'security\x00'}, &(0x7f0000000600)=0x54) pwrite64(r6, &(0x7f0000000440)="393275e1f1", 0xffffffd8, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x32, r6, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000080)=""/84, &(0x7f000000cffc)=0x54) 2018/03/31 13:27:44 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x26) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:44 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f77"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:44 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:44 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917"], 0x38) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 86.900711] binder: 9339:9345 ioctl 8010aa01 20000180 returned -22 [ 86.937611] binder: 9339:9345 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:44 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x26) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 86.972178] binder: 9339:9345 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:44 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000466000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384\x00'}, 0x58) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f000024affc), 0x3) 2018/03/31 13:27:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 87.097694] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:45 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917"], 0x38) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x26) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:45 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:45 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000f72ffc)=0x621c, 0x4) sendto$inet6(r0, &(0x7f0000f7dfef), 0xfffffe23, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000001080)=@nfc, 0x10, &(0x7f00000033c0), 0x0, &(0x7f0000003440)=""/222, 0xde}}], 0x1, 0x8000000000002000, &(0x7f0000003a40)) r1 = socket$inet6(0xa, 0x80001, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000, 0x160) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x3f) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x3, [{{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x210) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) 2018/03/31 13:27:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 87.831597] binder: 9394:9395 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:45 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:45 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7c, 0x101000) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140), 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x62dc, 0x3}) rt_sigsuspend(&(0x7f0000000080)={0x4}, 0x8) 2018/03/31 13:27:45 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf"], 0x3b) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:45 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x26) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 87.872779] binder: 9394:9395 got transaction with invalid offset (0, min 24 max 40) or object. [ 87.908932] binder: 9394:9395 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:45 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:45 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) [ 87.984395] binder: undelivered TRANSACTION_ERROR: 29201 [ 88.049535] binder: 9425:9429 ioctl 8010aa01 20000180 returned -22 [ 88.072674] binder: 9425:9429 got transaction with invalid offset (0, min 24 max 40) or object. [ 88.092444] binder: 9425:9429 transaction failed 29201/-22, size 40-16 line 3026 [ 88.126837] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:46 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf"], 0x3b) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x26) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:46 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3f) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:46 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:46 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf"], 0x3b) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 88.756614] binder: 9447:9448 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:46 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 88.803563] binder: 9447:9448 got transaction with invalid offset (0, min 24 max 40) or object. [ 88.845426] binder: 9447:9448 transaction failed 29201/-22, size 40-16 line 3026 [ 88.865238] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:47 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47"], 0x3c) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3f) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:47 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:47 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x26) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x15, "28269bcb13202a2b2fee172fd0ce16245080087ac6"}, &(0x7f00000000c0)=0x1d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:47 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47"], 0x3c) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 89.682866] binder: 9476:9480 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3f) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:47 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:47 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x15, "28269bcb13202a2b2fee172fd0ce16245080087ac6"}, &(0x7f00000000c0)=0x1d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 89.738318] binder: 9476:9480 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:47 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 89.796127] binder: 9476:9480 transaction failed 29201/-22, size 40-16 line 3026 [ 89.862872] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:48 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47"], 0x3c) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3f) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x0, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x15, "28269bcb13202a2b2fee172fd0ce16245080087ac6"}, &(0x7f00000000c0)=0x1d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:48 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:48 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:48 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x0, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x20, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529d"}, &(0x7f00000000c0)=0x28) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:48 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:48 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3f) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 90.625137] binder: 9534:9536 ioctl 8010aa01 20000180 returned -22 [ 90.661801] binder: 9534:9536 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:48 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x20, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529d"}, &(0x7f00000000c0)=0x28) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 90.700907] binder: 9534:9536 transaction failed 29201/-22, size 40-16 line 3026 [ 90.768859] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:49 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:49 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x0, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:49 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:49 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:49 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x3f) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:49 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x20, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529d"}, &(0x7f00000000c0)=0x28) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:49 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:49 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200), &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) [ 91.533759] binder: 9579:9580 ioctl 8010aa01 20000180 returned -22 [ 91.574295] binder: 9579:9580 got transaction with invalid offset (0, min 24 max 40) or object. [ 91.597881] binder: 9579:9580 transaction failed 29201/-22, size 40-16 line 3026 [ 91.629280] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x0, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x25, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd"}, &(0x7f00000000c0)=0x2d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:50 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:50 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x0, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 2018/03/31 13:27:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x0, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 92.463467] binder: 9608:9610 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:50 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 2018/03/31 13:27:50 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:50 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x32) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:50 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:50 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x25, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd"}, &(0x7f00000000c0)=0x2d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:50 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x0, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 92.503664] binder: 9608:9610 got transaction with invalid offset (0, min 24 max 40) or object. [ 92.570187] binder: 9608:9610 transaction failed 29201/-22, size 40-16 line 3026 [ 92.621534] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:51 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) 2018/03/31 13:27:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0x0, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x25, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd"}, &(0x7f00000000c0)=0x2d) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:51 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x0, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0x0, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:51 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x28, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff16"}, &(0x7f00000000c0)=0x30) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:51 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 93.387636] binder: 9655:9657 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:51 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:51 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:51 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0x0, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 93.428859] binder: 9655:9657 got transaction with invalid offset (0, min 24 max 40) or object. [ 93.488447] binder: 9655:9657 transaction failed 29201/-22, size 40-16 line 3026 [ 93.549417] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:52 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x28, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff16"}, &(0x7f00000000c0)=0x30) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:52 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x0, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 94.319233] binder: 9705:9709 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:52 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x28, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff16"}, &(0x7f00000000c0)=0x30) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:52 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:52 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:52 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 94.360824] binder: 9705:9709 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:52 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240), &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 94.418187] binder: 9705:9709 transaction failed 29201/-22, size 40-16 line 3026 [ 94.460543] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x29, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656"}, &(0x7f00000000c0)=0x31) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:53 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x0, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:53 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, 0x0, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x29, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656"}, &(0x7f00000000c0)=0x31) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:53 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 95.236864] binder: 9752:9753 ioctl 8010aa01 20000180 returned -22 [ 95.270927] binder: 9752:9753 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:53 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:53 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x29, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656"}, &(0x7f00000000c0)=0x31) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:53 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 95.336148] binder: 9752:9753 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:53 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x0, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:53 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 95.404387] binder: undelivered TRANSACTION_ERROR: 29201 [ 95.427932] binder: 9798:9802 ioctl 8010aa01 20000180 returned -22 [ 95.458390] binder: 9798:9802 got transaction with invalid offset (0, min 24 max 40) or object. [ 95.470209] binder: 9798:9802 transaction failed 29201/-22, size 40-16 line 3026 [ 95.485921] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:54 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:54 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:54 executing program 5 (fault-call:3 fault-nth:0): bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 96.149394] FAULT_INJECTION: forcing a failure. [ 96.149394] name failslab, interval 1, probability 0, space 0, times 1 [ 96.160623] CPU: 0 PID: 9814 Comm: syz-executor5 Not tainted 4.16.0-rc7+ #283 [ 96.167865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.177188] Call Trace: [ 96.179749] dump_stack+0x194/0x24d [ 96.183348] ? arch_local_irq_restore+0x53/0x53 [ 96.187995] should_fail+0x8c0/0xa40 [ 96.191681] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 96.196754] ? find_held_lock+0x35/0x1d0 [ 96.200790] ? find_held_lock+0x35/0x1d0 [ 96.204829] ? check_same_owner+0x320/0x320 [ 96.209121] ? noop_count+0x40/0x40 [ 96.212723] ? rcu_note_context_switch+0x710/0x710 [ 96.217622] ? save_trace+0x2b0/0x2b0 [ 96.221394] ? page_add_new_anon_rmap+0x750/0x750 [ 96.226216] should_failslab+0xec/0x120 [ 96.230165] kmem_cache_alloc_node_trace+0x5a/0x760 [ 96.235157] __get_vm_area_node+0xae/0x340 [ 96.239362] __vmalloc_node_range+0xa3/0x650 [ 96.243743] ? bpf_prog_alloc+0xaa/0x350 2018/03/31 13:27:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:54 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:54 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, 0x0, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:54 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x0, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:54 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:54 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 96.247775] ? usercopy_abort+0xd0/0xd0 [ 96.251723] __vmalloc+0x45/0x50 [ 96.255059] ? bpf_prog_alloc+0xaa/0x350 [ 96.259088] bpf_prog_alloc+0xaa/0x350 [ 96.262945] ? bpf_prog_kallsyms_find+0x440/0x440 [ 96.267760] ? mpi_resize+0x200/0x200 [ 96.271538] bpf_prog_load+0x2e3/0x1bb0 [ 96.275486] ? bpf_prog_new_fd+0x50/0x50 [ 96.279525] ? find_held_lock+0x35/0x1d0 [ 96.283561] ? __might_fault+0x110/0x1d0 [ 96.287596] ? lock_downgrade+0x980/0x980 [ 96.291719] ? lock_release+0xa40/0xa40 [ 96.295665] ? check_same_owner+0x320/0x320 [ 96.299957] ? __check_object_size+0x8b/0x530 [ 96.304425] ? __might_sleep+0x95/0x190 [ 96.308372] ? security_bpf+0x89/0xb0 [ 96.312151] SyS_bpf+0xe0f/0x4830 [ 96.315574] ? trace_hardirqs_off+0x10/0x10 [ 96.319870] ? save_stack_trace+0x1a/0x20 [ 96.323987] ? bpf_prog_get+0x20/0x20 [ 96.327756] ? __lock_acquire+0x36c0/0x3e00 [ 96.332056] ? check_same_owner+0x320/0x320 [ 96.336358] ? find_held_lock+0x35/0x1d0 [ 96.340389] ? trace_hardirqs_off+0x10/0x10 [ 96.344680] ? _parse_integer+0xe9/0x140 [ 96.348710] ? trace_hardirqs_off+0x10/0x10 [ 96.353003] ? _parse_integer+0x140/0x140 [ 96.357121] ? check_same_owner+0x320/0x320 [ 96.361414] ? find_held_lock+0x35/0x1d0 [ 96.365455] ? trace_hardirqs_off+0x10/0x10 [ 96.369753] ? get_pid_task+0x93/0x140 [ 96.373613] ? lock_downgrade+0x980/0x980 [ 96.377733] ? find_held_lock+0x35/0x1d0 [ 96.381769] ? __f_unlock_pos+0x19/0x20 [ 96.385713] ? lock_downgrade+0x980/0x980 [ 96.389830] ? get_pid_task+0xbc/0x140 [ 96.393692] ? proc_fail_nth_write+0x9b/0x1d0 [ 96.398158] ? map_files_get_link+0x3a0/0x3a0 [ 96.402625] ? find_held_lock+0x35/0x1d0 [ 96.406661] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 96.411473] ? vfs_write+0x374/0x510 [ 96.415160] ? wait_for_completion+0x770/0x770 [ 96.419712] ? __lock_is_held+0xb6/0x140 [ 96.423752] ? __sb_end_write+0xa0/0xd0 [ 96.427698] ? fput+0xd2/0x140 [ 96.430863] ? SyS_write+0x184/0x220 [ 96.434554] ? do_fast_syscall_32+0x156/0xf9f [ 96.439021] ? bpf_prog_get+0x20/0x20 [ 96.442794] do_fast_syscall_32+0x3ec/0xf9f [ 96.447088] ? do_int80_syscall_32+0x9c0/0x9c0 [ 96.451637] ? _raw_spin_unlock_irq+0x27/0x70 [ 96.456102] ? finish_task_switch+0x1c1/0x7e0 [ 96.460571] ? syscall_return_slowpath+0x2ac/0x550 [ 96.465473] ? prepare_exit_to_usermode+0x350/0x350 [ 96.470464] ? sysret32_from_system_call+0x5/0x3c [ 96.475280] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 96.480097] entry_SYSENTER_compat+0x70/0x7f [ 96.484475] RIP: 0023:0xf7f88c99 [ 96.487809] RSP: 002b:00000000f5f840ac EFLAGS: 00000282 ORIG_RAX: 0000000000000165 [ 96.495488] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000002000e000 [ 96.502729] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.509968] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.517303] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 96.524542] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.532157] syz-executor5: vmalloc: allocation failure: 4096 bytes, mode:0x14280c0(GFP_USER|__GFP_ZERO), nodemask=(null) [ 96.543171] syz-executor5 cpuset=syz5 mems_allowed=0 [ 96.548410] CPU: 0 PID: 9814 Comm: syz-executor5 Not tainted 4.16.0-rc7+ #283 [ 96.555655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 96.564985] Call Trace: [ 96.567548] dump_stack+0x194/0x24d [ 96.571146] ? arch_local_irq_restore+0x53/0x53 [ 96.575786] ? idr_get_free+0xfd0/0xfd0 [ 96.579732] ? rcu_pm_notify+0xc0/0xc0 [ 96.583596] warn_alloc+0x19a/0x2b0 [ 96.587195] ? zone_watermark_ok_safe+0x400/0x400 [ 96.592006] ? kmem_cache_alloc_node_trace+0x36f/0x760 [ 96.597260] ? __get_vm_area_node+0x234/0x340 [ 96.601730] __vmalloc_node_range+0x4f0/0x650 [ 96.606201] ? usercopy_abort+0xd0/0xd0 [ 96.610160] __vmalloc+0x45/0x50 [ 96.613499] ? bpf_prog_alloc+0xaa/0x350 [ 96.617533] bpf_prog_alloc+0xaa/0x350 [ 96.621390] ? bpf_prog_kallsyms_find+0x440/0x440 [ 96.626211] ? mpi_resize+0x200/0x200 [ 96.629988] bpf_prog_load+0x2e3/0x1bb0 [ 96.633941] ? bpf_prog_new_fd+0x50/0x50 [ 96.637976] ? find_held_lock+0x35/0x1d0 [ 96.642010] ? __might_fault+0x110/0x1d0 [ 96.646040] ? lock_downgrade+0x980/0x980 [ 96.650159] ? lock_release+0xa40/0xa40 [ 96.654102] ? check_same_owner+0x320/0x320 [ 96.658392] ? __check_object_size+0x8b/0x530 [ 96.662859] ? __might_sleep+0x95/0x190 [ 96.666806] ? security_bpf+0x89/0xb0 [ 96.670579] SyS_bpf+0xe0f/0x4830 [ 96.674004] ? trace_hardirqs_off+0x10/0x10 [ 96.678296] ? save_stack_trace+0x1a/0x20 [ 96.682413] ? bpf_prog_get+0x20/0x20 [ 96.686188] ? __lock_acquire+0x36c0/0x3e00 [ 96.690479] ? check_same_owner+0x320/0x320 [ 96.694770] ? find_held_lock+0x35/0x1d0 [ 96.698803] ? trace_hardirqs_off+0x10/0x10 [ 96.703093] ? _parse_integer+0xe9/0x140 [ 96.707128] ? trace_hardirqs_off+0x10/0x10 [ 96.711418] ? _parse_integer+0x140/0x140 [ 96.715532] ? check_same_owner+0x320/0x320 [ 96.719827] ? find_held_lock+0x35/0x1d0 [ 96.723855] ? trace_hardirqs_off+0x10/0x10 [ 96.728146] ? get_pid_task+0x93/0x140 [ 96.732002] ? lock_downgrade+0x980/0x980 [ 96.736121] ? find_held_lock+0x35/0x1d0 [ 96.740157] ? __f_unlock_pos+0x19/0x20 [ 96.744103] ? lock_downgrade+0x980/0x980 [ 96.748222] ? get_pid_task+0xbc/0x140 [ 96.752079] ? proc_fail_nth_write+0x9b/0x1d0 [ 96.756542] ? map_files_get_link+0x3a0/0x3a0 [ 96.761008] ? find_held_lock+0x35/0x1d0 [ 96.765043] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 96.769853] ? vfs_write+0x374/0x510 [ 96.773536] ? wait_for_completion+0x770/0x770 [ 96.778087] ? __lock_is_held+0xb6/0x140 [ 96.782123] ? __sb_end_write+0xa0/0xd0 [ 96.786065] ? fput+0xd2/0x140 [ 96.789230] ? SyS_write+0x184/0x220 [ 96.792918] ? do_fast_syscall_32+0x156/0xf9f [ 96.797381] ? bpf_prog_get+0x20/0x20 [ 96.801150] do_fast_syscall_32+0x3ec/0xf9f [ 96.805441] ? do_int80_syscall_32+0x9c0/0x9c0 [ 96.809993] ? _raw_spin_unlock_irq+0x27/0x70 [ 96.814456] ? finish_task_switch+0x1c1/0x7e0 [ 96.818920] ? syscall_return_slowpath+0x2ac/0x550 [ 96.823821] ? prepare_exit_to_usermode+0x350/0x350 [ 96.828809] ? sysret32_from_system_call+0x5/0x3c [ 96.833621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 96.838434] entry_SYSENTER_compat+0x70/0x7f [ 96.842809] RIP: 0023:0xf7f88c99 [ 96.846142] RSP: 002b:00000000f5f840ac EFLAGS: 00000282 ORIG_RAX: 0000000000000165 [ 96.853818] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000002000e000 [ 96.861059] RDX: 0000000000000048 RSI: 0000000000000000 RDI: 0000000000000000 [ 96.868297] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 96.875537] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 96.882774] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 96.890374] Mem-Info: [ 96.891104] binder: 9819:9836 ioctl 8010aa01 20000180 returned -22 [ 96.892802] active_anon:140205 inactive_anon:78 isolated_anon:0 [ 96.892802] active_file:3493 inactive_file:8251 isolated_file:0 [ 96.892802] unevictable:0 dirty:87 writeback:0 unstable:0 [ 96.892802] slab_reclaimable:9943 slab_unreclaimable:100009 [ 96.892802] mapped:73285 shmem:84 pagetables:1103 bounce:0 [ 96.892802] free:1276179 free_pcp:448 free_cma:0 [ 96.914333] binder: 9819:9836 got transaction with invalid offset (0, min 24 max 40) or object. [ 96.932549] Node 0 active_anon:552580kB inactive_anon:312kB active_file:13972kB inactive_file:33004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:293140kB dirty:348kB writeback:0kB shmem:336kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 221184kB writeback_tmp:0kB unstable:0kB all_unreclaimable? no [ 96.932551] Node 0 DMA free:15908kB min:164kB low:204kB high:244kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15908kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.932563] lowmem_reserve[]: 0 2839 6346 6346 [ 96.932573] Node 0 DMA32 free:2909836kB min:30168kB low:37708kB high:45248kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129292kB managed:2910632kB mlocked:0kB kernel_stack:0kB pagetables:0kB bounce:0kB free_pcp:796kB local_pcp:676kB free_cma:0kB [ 96.932584] lowmem_reserve[]: 0 0 3506 [ 96.948750] binder: 9819:9836 transaction failed 29201/-22, size 40-16 line 3026 [ 96.969514] 3506 [ 96.969518] Node 0 Normal free:2187820kB min:37248kB low:46560kB high:55872kB active_anon:552580kB inactive_anon:312kB active_file:13972kB inactive_file:33004kB unevictable:0kB writepending:348kB present:4718592kB managed:3590640kB mlocked:0kB kernel_stack:5216kB pagetables:4264kB bounce:0kB free_pcp:1156kB local_pcp:468kB free_cma:0kB [ 96.969530] lowmem_reserve[]: 0 0 0 0 [ 96.969539] Node 0 DMA: 1*4kB (U) 0*8kB 0*16kB 1*32kB (U) 2*64kB (U) 1*128kB (U) 1*256kB (U) 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15908kB [ 96.969579] Node 0 DMA32: 5*4kB (UM) 5*8kB (UM) [ 97.033115] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.039709] 5*16kB (UM) 6*32kB (UM) 1*64kB (M) 2*128kB (M) 4*256kB (UM) 4*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 707*4096kB (M) = 2909836kB [ 97.039743] Node 0 Normal: 199*4kB (UME) 67*8kB (UME) 23*16kB (UME) 122*32kB (UME) 54*64kB (UM) 4*128kB (U) 5*256kB (UM) 28*512kB (UME) 14*1024kB (UM) 7*2048kB (UM) 523*4096kB (UM) = 2196068kB [ 97.129312] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 97.137882] 11827 total pagecache pages [ 97.141842] 0 pages in swap cache [ 97.145283] Swap cache stats: add 0, delete 0, find 0/0 [ 97.150630] Free swap = 0kB 2018/03/31 13:27:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:55 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:55 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, 0x0, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0x8, 0x401]}) getsockopt$inet_mreq(r0, 0x0, 0x24, &(0x7f00000000c0)={@remote, @dev}, &(0x7f0000000100)=0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 97.153643] Total swap = 0kB [ 97.156655] 1965969 pages RAM [ 97.159747] 0 pages HighMem/MovableOnly [ 97.163701] 336674 pages reserved 2018/03/31 13:27:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={0x0, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:55 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 97.205263] binder: 9852:9855 ioctl 8010aa01 20000180 returned -22 [ 97.233761] binder: 9852:9855 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:55 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:55 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="b6098de5e8e1e6a854e21bd9f5a75f675ead22080e83dbb937a5022132babc1e0383db86d207663dcaff98b4089c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, [0x1ff, 0x7, 0xd1, 0x1000]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:55 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:55 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 97.267297] binder: 9852:9855 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:55 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:55 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) [ 97.332426] binder: undelivered TRANSACTION_ERROR: 29201 [ 97.366882] binder: 9894:9896 ioctl 8010aa01 20000180 returned -22 [ 97.383487] binder: 9894:9896 got transaction with invalid offset (0, min 24 max 40) or object. [ 97.399291] binder: 9894:9896 transaction failed 29201/-22, size 40-16 line 3026 [ 97.424818] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a92597865de744b9de"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x14) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}, 0x56, r1}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f00000002c0)=0xe8) ioprio_get$uid(0x3, r3) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f0000000300)={0x110, {0x2, 0x4e22}, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e22, @rand_addr=0x2}, 0x200, 0x6, 0x5, 0x345, 0x4bab, 0x0, 0x7ff, 0x2, 0x3ff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b40000e2000000002500030000000000070000000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:56 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x0, 0x6, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @broadcast=0xffffffff}}}, &(0x7f0000000540)=0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000580)={0x0, 0x1000, "35a135f3cb41d5390108b7266e4663984c0d77d74327173fcdb3babefe76a91ef742d737ab81ee407a7439fa0a437e32152a958bebe80ee991b105660ae3ace3a3e7de34257303726ce302b64eae62a8ffadef7f24dc965c360082b12825faed4318be4fa5b3e54ca2ce82bedc38e697d0b14fccc660b9dbbcb105158f37a44fb56f7ffb29d786c8da6e2457954403359497e851cdef97aab4a7216f503c71efe259481e11dfe92f075b6585239ad5d5ed2960e02a6c2461970b55f7bf9fb1faf0bead1d3f8e818e1194f55c4a48efc48ab5e674b094bb7e05f9e1f2025065540fb79d3b2a971a9b9657bdab7ff941a8a679711719c7b6007f28dac6094071c09849ada21b20c09a3b0ac821bc738bbebd71976b93432195415a4ad1d7fee31ba7929172f6c734c6bc7b6ed72db53ee882627dd31ef9718f920b4c89d2a946312060ac8b2a25056207c0e8bc53ae4ee22086c5e6e80ac1e44ad0afedd611e2c678699b78a283e0aecff3224e4678cddde5976af31343137475f01e2dc3160249f39a7cbca818202069d65fa5421cf301ec6597080aff844b3e964e9abeba0ad6e31bbaa7167048be3564e084c6bfdd1e99083003e3e61e7423d32696b5cc33abc7540a7dd0ae12ac88f5e1608c6373ec4cecc6b81678539d5923930408aceeb5e6e189d5e30e6475fda125d1653e3433fd019a9978b9fdbb3fecb75b90ac4c6073bb46c8d5c0ca6aeade030947f9018d82d30bc38b48917e2205aa5d59a2614da30027f4f127fa9d8f951d13ba66740cfad879b1b2cc7c4672ed5d7bff581fd54856f084b654a734f2c838a41bbeb7ba3498aa50b85c9ad96203b99a79212b838355799028bd44c3ec01f61d333aa92ed4f040dea0b9c3ad628ab120c4ef97c520bccf167501848de9afeb297041491873892568a4b602b1d16e3c6989ee0096e9ca99bc7b0e71f12f414d9c4820620a84d39bdf83adcd7fbeb71608aac1ad21375857d6b7c832c142a69203cf9b63035c1720d0dd8989cf5d8e0a709830b2285bcbe8f08f9c402e0b7e7b29480ce1824ccf3257c47bb8191d1e11750ed62e178c4620ab7861e90417a571dbf566813989d39c7134f92162763fd6c2a8f8f3f14c2ff04b510cd6a2121761f4a64867eb038a75d789aca5009770881f6320ba84c39713a348cd68139e2f98dd754100c64eb96d094b6c55275ccc8f41e58d7e4f03e23ac67178f6d6e32b24760e05e0e9f41bc10cd34953851e36d2ce1c175551c0656336a5d5807f28d061ded603d71a279d90ee0fe69116983538bed2b6736a781f15508daa190972b92a9018d8d1201cafb182c73df2bbc1de2e24ae2be7db731f4b3d63645b9c72e1055c81789f92b9a14c6a1aca3da8b161d35519d1e4579ed9d3c8e9fdaaf3a5bc344c8d8c329e8df3d4f3ef14e87fc55a1839e353e3c59e077749c80d39ed7dfea3d834ecf5c81fbd49049196d60cd83e3b26a72911498d94516d1f47a5a95757a062251be540dd13e706c3a5a930c6a61b69a094fd4ecc8c5f58e5ed22a3a1bc42ed5e9753b8865d308b5c4588a7ff558b2889c1a17381958143c916d63f055fd6d63ae61a00230fa5c50e03f718db8d887e186f5284ea1c10b234cee7e21a3b498d3491234f293a171503221bf26d864c6136f5d81f7018224643b71a83dfd0da547c8a71a8022370cead27837c0c2c54a3b2445b5476963fd93f0b01debdb7fc625e5859bcccb3fdebf72611bd262301ca4c193dbf4f88b7c16c9f5726589d8a449762ea58e1c441777febaf7b61e226bd3b8e221c6927b05001610518c013f6605a465d67983ae7faf6958cf8a594064d99e20e2d20769401ccc45718b26a410bc20b2c6e60ae652ff6a916033762c83993d843410bc60377a304d4b5ae41cf647682174a1dffe424d39e0740c2b33151c48dafe0fea609a8ed454aa04d7030808f0bfa2b471e07b63cea794d7fdb227ecf2dd76730145af7d2e5a5092f3c822ec67f5b550e5ff3995edace7e53a35badadef15e7e63ddd60e26b36b9220563c1a337bb27d9dd216db298de77506e11bfe1fad9758a3ceae147a3fd67a731a262a8932e507037a213239290201490861879b3a91a222feaa3c078a63a8e8802d8cd2333655ddf76c7a7fdb5ef5b915b5dfb0acc6378f714cf2298f522358b723f950caf3fcb1aa9778ef41cc7f6ee37a58b4122d087e3784a5f5132ffd9abf088c53874c7ce6ce1afcb0a6d097986bf5bdda763ca4834774e2ca09cbcc06baf55c5c576d134dfb9f38c8c839a10c67ab3b75947b6529448ac310d8c843e658c663dba55ce9e48aa9b3fc35123de8997d8aaa05588c0988b27fee294d1a5203e489ab46db57a181a1e9d7c166caf4ba623c3c4cd27e26eb8d987817d703a9591ba4501a79c4517c83aa66b13350fad2eed8245ab3dbd5b21eb8489d7e4d726444ba5fcfbfd852f02f9e43ebbd8f52fafbbd2fb17196c80e9d7e10a75ab5b5e1dbba99d03d3543944edc5dc6a13c0daea38cda643a37d8025ba7fc28094c036e5d7e76db3ce86e8c5c2f6a515024e892e2583f16125d50af4e88290d2da7ff35096fde5feee8485ce6f71700e5923db753ca102f8c450862d4e4e2331c6a604ca57bdc700448e8aabf63adc1cfe9ee629eae3e8e1dff8e42fba5492a444ad0727d4fa14c1dff0398f3e42be06311844b325484be776453349776096dc048d20945ae3d60fb63725c782d115e5cb336d59d120ddf5797b7e90be237132c5ae7fb01ca5db0eea27c6928c778ec13f236be65548f4e2a5424fc0b57ff10b60a6402ebdf87d71f25cc4125dd6fdd656c0faa414797c632c11df27d4de8a47eb14775e763a2d502678601a48b1af89c84eb70ccbaabf85ea1032992659fb968d19249c8e7089cd1c819fedd8525e39d003d1f5c7d2c1e23d0b71ca0c65f30dbc33f0ecd7b8b142d15c771e177b13b0e76a050bca4aa600201d6e288fe818ab9de225b34360d56856a3c74ed54b03128c570161c5628a2a783ba359ce8f2ffe51891125bef79227acfaa15bbeae71599b32e5acb3161ce548c26984ee9075bddfdd09cd785ebd13b6e326e21482ce9f558a4d7b710146a157eaae74f4226ed1a537e2c31f9797ae295934711d4ba60c428c29336776ed91607e6f73c39a0313ffa4b0d1240f9dc280eeedebff79d114eae93e18d85e4d06318be7eb103f6ace7c77fe423fc8e732de452cfec451f5f7f737bb9b223a085533943139a2ca2e1fc35edf7251cc525cca01d96c3f916d31a63a47121fd31bc78a77a28a7262294211f7481d9ac3cebe686d0d6aaf4a21cc02ece3acbed2d0caae51464e0021f1be0b4687c0b5674d7a545a625bee6b522b6c78cd5e81eaa378e5d6c981cd97cc98d2c33dd949321559b16101654f74a4314ddbb837a9af58b8fcb7ee8ade4e814bd88e837ba999140b69ce91d8f55e9fcfe1bb53466f7b5781633c11743037b394465a55a43938018b30e196a5aed13f6c708c60cda7077876a70e89efc6afefebb949b4fe2d7c37cc829a0daeb581a0352c4457d61a70f71307b437654b9555d6a20a7e98fcaf6e033d56526abc25243602e9d0d0621cbe61ad5cd6ea213684baa576e8d741fd49f27cfa26bdb0318b6d432f4535ba45aef79f1ac28eec309dcdd8e669050b9d440d234f8900606f3880030b9c5c971727facf4894e2493a910de17a4b59e6eb23f6430f6b8f00afaab90dc352526a75ec378b87f389b4ea02e04491145bce0bb7c0fa84c4a1d32bd19d9ba4b804ac0a155364222b0dcb438161653ec890ef5bf1291574d60505f1fe69b6dd9a4dc550993529d8f621c10d0a3cb1066f97a744e3ae252a8be6c0344a40ec47bc1b06c3627ac7d33b6435ded091f682b11fc43a2e2571486a479e37088a1d9ef667144962808feb1efb3e2b3f80123612d034d783adf62e964ce71935ab61ef85ef9a4350c5eeebca478d2af6ca6ee4acef67facbe8bae2cdf335c842c747cea94f4e2e8fa971ec6de957b4448a12f301694557082fe68d05c108bd4487b716fe416459a376980b3a993fca3eb5f7024ddb247f490540fc4659343e3189449c166d94ee40568a75480d592ecf6e18ed36a31fbcd2b73964f3331a211ca81a8ca3342ee9d242379c0e3603fd6ee294e4c252c87ac97dc0718cdb57ec0f844d49ea8662bf26a07b5bc3d627f6b00aaf3e9d50b512caee8f8b34e58d143976b47e65f1814abdc984eeab587e8ccc1d032921054e1c1c13dbc8398ad8d9101d6caeb95acf1cf22add5fd248952083e019a11a9f012955cc4e21c4145addfa203b657d814b8c59e6ea07a3c6849aae7b05b694be279ccf80a784917918cc966756ceb253f7e07072f643d294a225b3fc10fbccd6cc86fa11437f9b236bf8e971cf6aca1bd93c6b10e31df250575d94e79136affbf1d25de1cdeb75f7bf6401409ec8d2b0f7e3e0f76216e66790b8f9d7ff2c74576adde1bd50b033f93ee49c139e5d22f0e9ceb471d1fcf3df63b7eff48e8491afd173f7f592c19c6fa63c7e72ee30405a6af07599c65553d515e9f9f1ff98a3d17285b569b0e6ebc386d1b0becd029108c6a14a55758314e9d08ff47e07c9da33fc390ab74d49907f844f2a68c2bb2dcd0f636f803507d504ce5a3b755b343ea9b5c146079eb364d83a938a39bdb4eedfef9b5f7ea445428521651aac27aafc24c62f3a7e1175ee63faceda9ac3c1d19b828a169654e2e8c657e95d8cea07ee768d2506e2bb608b71ccaab0d19b0663e1202f068afc617bd94eaa78fba8e13afef35dea623f7a69d96a8c08f5d71725493e42984bcc97330221b62e6f254bb83aaac3cb9ada30091c30d27f40a6a97cc285f98653aabe9a8aad836fae079fc66848f1fd9afed7bdfb9da83fa70b8dc6f60875e99000cd5bdc3ae5f175743b0b65d9b4f5b5950caf881447723e8d150637c0b3dc40dff8f444f15640c8ab03a5b0c5985984ba69b62f0bec380f0aabfd081dcf7c42545c80937cf332be4c840ef647d8e12ff2c2e22df0dede89bf46bba168dc61c16261898bcfeb9d39785b04a4f1ba8aee0ad92bcf995bdbcf2b8c9c7d6f83f8bf6cbdce6cf0c7ecdec3e5c61fb79e9df25f8d6dc1a06706ca3ba362bd937f50e3418ea920924f8ac972b5a6650b75fb55abc175d6b749cbb3612562868b4c43d46ae240ed7418080dab6bd64ce60dc33fcf5e114ccfb81d843ed79eaf1b1b36c1deadc4ab41e3cf903c72804948800bcad245e1068397f53f18d1bba0a4b402e1b8f1271458318fd1ddba89b7c86556b67b76c41a403b25903e47ec0348b9ac58cb7c743f400d1f726b016c7014a1702cf112f233298d69de26cdf48f7e790a2b80ad491ae7fbe1c6939c5acf7c14c50e04f1cc27d0fa6520ef8ddf78e6bd71a8854697f817eacfdd2262172d261e4512a74d24105d7fa96b3b0964cb463c10ff711ec2fb5e8dd9e39805c098b77a3b4608fc3c52bb1a30ae99f1b2d683271fd3f934923b1bdbdd62ff7a4c187ed987ef97a666e3b41c89487e619496006af4a09bed46973bd2f5f25e5e4a29b5c6ca554a58463bbc4fb2cccf7d0759d7fca41722b82469352c45078c2c4e2cd521fdf221691e9055f2b56a979f54a0784f0a072c4e1e30b0fb939e2053d0aefd8f17415b22ca92a1602666e90304c8f960b0234eaf79e6d06fab4bdbf68297c613548688d498a412bf4ec51be8c4f16a9bf51beb8b9da0b7993b717ded363c807c1408023da8e6c226a2ec545993634466a4c6db"}, &(0x7f00000015c0)=0x1008) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000001900)={0x6}, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000001600)={0x0, 0x6}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001680)={0x0, 0xfffffffffffffffe}, &(0x7f00000016c0)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001700)={0x0, 0x14a07288, 0x4, [0x7, 0x80000001, 0x6, 0x2]}, &(0x7f0000001740)=0x10) sendmsg$inet_sctp(r0, &(0x7f00000018c0)={&(0x7f00000000c0)=@in={0x2, 0x4e21, @rand_addr=0x78c0}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000100)="4cf0cef35c0fb4df37e5a68c1d218e917bd99953f9c9aa59fe3dca4ac0824b54aef6264b1c98a55bdd5229106e00e59be548ccd58723268f216cc97ea0fabe630a47cd641f17ba4c846a7129a119b6f30f42bae0ed3e639784954daf08d4fd5c50e458533c324ceec5dd741a8b6b8e65044dd7e944791b44e1208b76b6f014d93cecb1ed6abe5cf42a1f0268cd1321", 0x8f}, {&(0x7f00000001c0)="f40279664ef53f9c384d6b87cedde58b2621a19d44b73104fcb335510abcb2cd206e22cde64e5fd4c2e49c8043136f714f89ff2336913bb6acdeca7b06e0d8c96bf810ed382154b327dec3a15c43d418a9a76d559ff5e0c99c4802ddaa14cd4f5fe0e35a4d2ba21ae410acba9879f84bc739c01f7b3297d149774c5c437f56e78a4184fde9f59cc01e8dfa6e38fb8438db41f7001cd2b9ddd9f701f0c2a47ea26a152acef81f7763448ff31007b5ee37db5c64e642c9561728deb7b92c10ace1342dff21cd8d9015525844953557d4eed0c5faf900284ce5eda2d3244cfeb3ff8c9e2c2fe3aca1a2bac22fc3fdf0a99a0b95", 0xf2}, {&(0x7f00000002c0)="1666ba93576b99e470300a2fa3ebe17d789761a0d66d93abb2b6df9cf40131fa3735e94e7ce79e3e877cc5998ebe0a4277dbc5e145127a9ded197d3de311448bbfd3cad2647790dbe7dfd58ad4ab2ad17c9368c636c724c3c1cef0403c", 0x5d}, {&(0x7f0000000340)="9f77e0c00758411ab1909cb80f4583fa1f840dae7cadba1d6eb6c83f646b3afbe74eefa05191d74fd79e02b3ee4b81f59f391d541e2e", 0x36}, {&(0x7f0000000380)="eda46b363ce3dd08b3e54ee0d863ccea1fc33364d069ed88225e041772bc21cb9450a8e2f7545134c39e5f8f294d50aa043aca625ccacb6cdb52c0678d19aea02d8dbb5d9caf27890ed5acc575bbdf756624c6d2ad8723bfc4a359268aaf3862566fa0ada925d7bbc5d43f8af3cbcb3130a898d5f267e01def84a588275dd50b94a3d33b51fc070af938c51bcb12ff0eac61a6c62256d4ef6f5dcfba7f9c2bf0723ce3cda9f1e2fb3d8e65a1a355609de52c521eca14cd", 0xb7}], 0x5, &(0x7f0000001780)=[@sndinfo={0x1c, 0x84, 0x2, {0x7fffffff, 0x0, 0x6, 0x0, r1}}, @sndrcv={0x2c, 0x84, 0x1, {0x1, 0x0, 0x1, 0x3, 0x6, 0x2, 0x100000001, 0x7, r2}}, @sndinfo={0x1c, 0x84, 0x2, {0x1, 0x4, 0x0, 0x9, r3}}, @sndrcv={0x2c, 0x84, 0x1, {0x1f, 0xe0, 0x0, 0x5, 0x9, 0x2, 0xfffffffffffffffe, 0x3f, r4}}, @sndinfo={0x1c, 0x84, 0x2, {0xec, 0x4, 0x12, 0x8d4e}}, @init={0x14, 0x84, 0x0, {0x7ff, 0xae, 0x2, 0x100000000}}, @sndrcv={0x2c, 0x84, 0x1, {0x8000, 0x1, 0x2, 0x4, 0x4, 0xde05, 0x93, 0xfffffffffffffffc, r5}}], 0x134, 0x40000}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 98.104780] binder: 9910:9914 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 98.148129] binder: 9910:9914 got transaction with invalid offset (0, min 24 max 40) or object. [ 98.174142] binder: 9910:9914 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x24002, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$GIO_FONT(r0, 0x4b60, &(0x7f0000000140)=""/220) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'vcan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) 2018/03/31 13:27:56 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x0, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 98.242451] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 98.282666] binder: 9956:9959 ioctl 8010aa01 20000180 returned -22 [ 98.322971] binder: 9956:9959 got transaction with invalid offset (0, min 24 max 40) or object. [ 98.339961] binder: 9956:9959 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000100)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x0, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 98.364947] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000001c0)={0x74, 0x0, [0x1ff, 0x10001, 0x20000000d3, 0x20000401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 98.412812] binder: 9988:9989 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) readahead(r0, 0x80000000, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 98.458804] binder: 9988:9989 got transaction with invalid offset (0, min 24 max 40) or object. [ 98.492410] binder: 9988:9989 transaction failed 29201/-22, size 40-16 line 3026 [ 98.583712] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:56 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x0, 0x3f71, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000003c00)={@rand_addr, @loopback, 0x0}, &(0x7f0000003c40)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="03000000000000002500000000000000070000000000000000000000000000000000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x100, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], r1}, 0x48) 2018/03/31 13:27:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64]], 0x10) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:56 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x3, 0x498440) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000100)={0x5, 0x80000001, 0x9, 0x2, 0x20}) 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x0, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 98.680046] binder: 10026:10036 ioctl 8010aa01 20000180 returned -22 [ 98.718675] binder: 10026:10036 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64]], 0x10) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 98.767515] binder: 10026:10036 transaction failed 29201/-22, size 40-16 line 3026 [ 98.876830] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:56 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:56 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x0, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:56 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x0, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:56 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', r0}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x410001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:56 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64]], 0x10) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:56 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, r6, 0x0) unshare(0x3fefffd) [ 98.968480] binder: 10074:10080 ioctl 8010aa01 20000180 returned -22 [ 99.008486] binder: 10074:10080 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x100000000000, 0x440) getsockname(r0, &(0x7f0000000280)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0xfffffffffffffe84) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000100)=""/150) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000002500000000000000070000000000000000000004000000009500000000000000128470f8d220b15754ec5d90997016440db72fbc9a5db9ee76d2a8b4c0383d27de67abeb85359272022aa52a4746111c768497faae863067aa6dee91e3fcd41fb6c5a3a635a1d1720f3b337536be0f28"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x0, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB], 0x10) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r1, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 99.048910] binder: 10074:10080 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:57 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x0, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x0, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 99.160437] binder: undelivered TRANSACTION_ERROR: 29201 [ 99.199892] binder: 10111:10117 ioctl 8010aa01 20000180 returned -22 [ 99.254087] binder: 10111:10117 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r1, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB], 0x10) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x0, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:57 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x0, 0x8181, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x0, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 99.299675] binder: 10111:10117 transaction failed 29201/-22, size 40-16 line 3026 [ 99.324939] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r1, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)=0x0) sched_getscheduler(r1) lseek(r0, 0x0, 0x2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 99.389461] binder: 10144:10145 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x0, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB], 0x10) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 99.438683] binder: 10144:10145 got transaction with invalid offset (0, min 24 max 40) or object. [ 99.510363] binder: 10144:10145 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001000)="15", 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 7: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(0xffffffffffffffff, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r1, 0x6, 0xffffffffffffffff, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(0xffffffffffffffff, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:57 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x0, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:57 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x20000, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r1, &(0x7f0000000100)="30f93121f110ce843b8b400f8027e3beb6b01e4609480a63609979670c86b461d5577065d027e0c3ee1ff935b65e3442d5566f9bfee4", &(0x7f0000000140)=""/216}, 0x18) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) r3 = getpgid(0x0) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() socketpair$ipx(0x4, 0x2, 0x0, &(0x7f00000018c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001900)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@multicast1}}, &(0x7f0000001a00)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001a40)={0x0, 0x0, 0x0}, &(0x7f0000001a80)=0xc) r10 = getpgid(0x0) r11 = getuid() getgroups(0x3, &(0x7f0000001ac0)=[0x0, 0x0, 0x0]) r13 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000021c0)={{{@in6=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@loopback}}, &(0x7f00000022c0)=0xe8) fstat(r0, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r16 = getpid() stat(&(0x7f0000003a40)='./file0\x00', &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getpgid(0x0) r20 = geteuid() r21 = getegid() ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000004540)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000004580)={{{@in=@multicast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000004680)=0xe8) lstat(&(0x7f00000046c0)='./file0\x00', &(0x7f0000004700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000004780)=0x0) stat(&(0x7f00000047c0)='./file0\x00', &(0x7f0000004800)={0x0, 0x0, 0x0, 0x0, 0x0}) r27 = getgid() r28 = getpid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000004880)={{{@in6=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f0000004980)=0xe8) r30 = getegid() r31 = fcntl$getown(r2, 0x9) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000049c0)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@remote}}, &(0x7f0000004ac0)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004b00)={0x0, 0x0, 0x0}, &(0x7f0000004b40)=0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000004b80)={0x0}, &(0x7f0000004bc0)=0xc) r35 = getuid() lstat(&(0x7f0000004c00)='./file0\x00', &(0x7f0000004c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000005080)=0x0) r38 = geteuid() getresgid(&(0x7f00000050c0)=0x0, &(0x7f0000005100), &(0x7f0000005140)) r40 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000006400)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000006500)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006540)={0x0, 0x0, 0x0}, &(0x7f0000006580)=0xc) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000065c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000006600)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@mcast1}}, &(0x7f0000006700)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006740)={0x0, 0x0, 0x0}, &(0x7f0000006780)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000067c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000006800)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000006900)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000006940)={0x0, 0x0, 0x0}, &(0x7f0000006980)=0xc) r49 = getpgrp(0x0) r50 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000007c40)={0x0, 0x0, 0x0}, &(0x7f0000007c80)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000007cc0)={0x0, 0x0}) lstat(&(0x7f0000007d00)='./file0\x00', &(0x7f0000007d40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000007dc0), &(0x7f0000007e00), &(0x7f0000007e40)=0x0) fcntl$getownex(r2, 0x10, &(0x7f0000007e80)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000007ec0)={{{@in=@loopback, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast1}}, &(0x7f0000007fc0)=0xe8) r57 = getegid() r58 = getpgrp(0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000008080)={0x0, 0x0}, &(0x7f00000080c0)=0xc) fstat(r2, &(0x7f0000008100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000008200)=[{&(0x7f0000000280)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000017c0)=[{&(0x7f0000000300)="8c40f5424d4ce4b110a07f26dc981b759d9a39cb7335b5c681f01135700936a42c90017987e542e4dba66ca4764c95858603879b79c6b90b039b961ba7c77b4a907f8991606b9835db0fa9a4c94732d5b18c968345c33f3a", 0x58}, {&(0x7f0000000480)="28c2c448c2dfaea61c24d049808449dfe3eab5bb69dec74064582ca7e3ab1abe16303ae39f649eb69837751f6786d5d0c17b283b07bcc582b10ee292", 0x3c}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="bab8abeb29", 0x5}, {&(0x7f0000001580)="ddb01152f38c894fb8addec4f9a1b91df6951d5ef20f35f703e9432a7948aef2c72e9495afd509b25db8cdba340dc8d34f43", 0x32}, {&(0x7f00000015c0)="91bfd3e3cd3f006b433313cb0bac9483afda6f32e02735496dce2eb17cf7e5f4ff96d635475d282e6ead95c4352149349ba928a38e8c05961365d0039da4f5a196844f2467da12753188c1d2ad76e14f587824bc5ff8ecef646a34c4c99292936ee8ec5a3450e9cfad95d1c41e24f7dff975d698ad13af5ee91db9a9178885bec6c09afe4a296106de9c55c87010bf4a36f893201e3bfec5a3e354f9dbdfe082df4f3b158b24e766835fa0e5546f85df3093a65d3cd69b0c93962841f0cdbc22e886d27bb78002d5bdb6160e8e75fde0a39467709c022dcdf0ca8588", 0xdc}, {&(0x7f00000016c0)="2374132bafab36e5111a3542db82214beac85bc3c6d4d0463038fbae9fe90f734da58e1e4814f85546c9d1d3d41404bdcb2d9ab347c803ca695bc609a00a1dec2bf8bc404cc29c2adc1fe60462fcce789d701137e441a24b5a0f4cdfbb7fa8a7cf0d698d14ea5ebf5aab35f7215402680a4562940f38c874d54865fe12fdd04891718200c6aa241b42452ce20749b69dd53223e9e4905c4f7b27056b5a265e7247ccfd8d87938d21f19c5db60d4ea10e3af38a0ed3a80d8de96a16f74ef8ea8eba8c1be7413ecf1e3d0dacf41a39e31074b70c843bebcde3cfc32bb8cb6a372eca", 0xe1}], 0x7, &(0x7f0000001b00)=[@rights={0x18, 0x1, 0x1, [r2, r2, r1]}, @cred={0x18, 0x1, 0x2, r3, r4, r5}, @rights={0x1c, 0x1, 0x1, [r0, r6, r0, r1]}, @cred={0x18, 0x1, 0x2, r7, r8, r9}, @rights={0x20, 0x1, 0x1, [r1, r1, r2, r1, r2]}, @cred={0x18, 0x1, 0x2, r10, r11, r12}, @rights={0x10, 0x1, 0x1, [r2]}, @rights={0x1c, 0x1, 0x1, [r0, r0, r2, r0]}], 0xc8, 0x8000}, {&(0x7f0000001c00)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000001c80)="9c053577dc78c8e0197c78c91ea964cc404cf232a6d25964af135a9484419c91d4c8fa1e2cee847dead49a308f48a7a7e2762631152092b805012eb9aaf396b0d178d933", 0x44}, {&(0x7f0000001d00)="20031bf3d7c9fb6fccde130440a3a136bb0da277e1b8e3cc75a3e29ff8de703cb6b27d59fd7ce98e2f0dc36861995da41bf65874258938ac4c2eb19073b222d0e037d9211e130b328e8acef97f4a59244c80d78cc55d1c985eb9d760a9b1b11ba9c510e745e11e570914cdd7be8706ef6936648488302e9457e6d7d3ae3854bc50469c", 0x83}, {&(0x7f0000001dc0)="150af7843ef292619a934eb089661e0b4be15fdea3524b35f2c6ea819524179c2243a47cb33253461bff2e5b1e7182f7e4e1f6fbe1ca9e2b8838c7e9f6", 0x3d}, {&(0x7f0000001e00)="8e12cf2d6299de4f4cfe7aa7e124a6221c82e60ad55d888098b4cfd1ae794ab4755762fddf0da20cac3bc1774894c9c98f1ad83718b5116f8a1090d47a3eedfc2382bc13fddb12658812fcaf5869681905d59a44013e6013cbeac7bd79003a857f2a", 0x62}, {&(0x7f0000001e80)="a1a7c7cb84893bbfb7ddb7e9b324da5cd5fc0a51eff5277f96b7540f81732a47e73fb8c0631cc0b0ba4b4dd07017fd99ec1aa5b53bbd1a7761592dcba6ff402c0c15c65c9c957e95eb6df1c8b2af194c22fc9fce884ff39e5fc0a244a5adf69f7e27bf8bab55b885b7d60fe6885fe3498e862a1dcd4ae84e8258f9c95fc3c919", 0x80}, {&(0x7f0000002000)="11ed722cb42577093a20e184a67841c0cb5c1e5fe929ff497e60c0be7fa5e548bd883b68d7aaa5201d51dd10992d7d609308469881371d35aa685e9a3e1549f5e2cf109e244ac0843aead7cee94ed46f8de93a9465a7ed1cecc49b12c81474989885b0fcb3bd4d09f8eac7931a295799e048dc658bc58f72e5e1e2237efe10418a524672bc212128149519046c0b11766fc1eab077bf3da1b25219436d8103b77230820515b9389bb982c92c66c1f7b8b892f39e9fe1b3d53e25996b87ca77001fe559ddf4d58504d10e8489cbb6d0efb5bf3a0cd1354869c6ef449b3d485ae5640067e6f30e95b735c8cdde5942cd", 0xef}, {&(0x7f0000001f00)="323dce2599bd90f72df9939171d45d7fa968266f34ce59e5bf277b5c27d32f50ba9f23485deb87f0800100dcb08c0f9889e3254f535f64ce0790ef52d68cbc1c6cc1902427f0410d5b66e7071d6c6ff2f5a2d9e731c08454b5b33ff91cb89b4017c1d688a6dfe59cd60d1a73660106c3d40439c3c1c55f9fe4a97d09c4f63f36c40de8c39cb3996b86fd97c17cc336e92c46570c6ce936950163c92e535c98c2230716446b9b6cdd8aec7b014c18b4821cfcab28c05407", 0xb7}, {&(0x7f0000002100)="6df27b85371527fd4113da90f82698dc05863f649c0a1e41a5f04df84a1cef44fa33af8808d814ebd0209a6dd6bf895039f30a6d5e97bb394875cc891300527a141e", 0x42}], 0x8, &(0x7f0000002380)=[@rights={0x10, 0x1, 0x1, [r2]}, @rights={0x34, 0x1, 0x1, [r2, r1, r0, r1, r1, r2, r1, r2, r1, r1]}, @rights={0x1c, 0x1, 0x1, [r1, r2, r0, r1]}, @rights={0x2c, 0x1, 0x1, [r2, r2, r0, r2, r0, r0, r2, r0]}, @cred={0x18, 0x1, 0x2, r13, r14, r15}, @rights={0x10, 0x1, 0x1, [r0]}], 0xb4, 0x4804}, {&(0x7f0000002440)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000002580)=[{&(0x7f00000024c0)="797d58510bc989b24475fc00af19057d5bb393b526cd62e133ed62c30a44bf60a22822ef0db4c8722ce49369bcd1ea499696c53edd563e2fc5c78e2aa2939ef39ca1df77493e67d2c12b6005f0d557b459d6c9d5bba69dbcb1625216dd40cc06543507ef1dd09ad7f9f4d12899f01160701faf96fe7d52faa630b5dd6a2ffdd2677932bfc9922a5b5e8d42bc96ea54a255a5ff1ce3ce58a5eac0350a2ac5526cbd81a0fccbb795ba590b489e257f6c90e3a3b91d", 0xb4}], 0x1, 0x0, 0x0, 0x40}, {&(0x7f00000025c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000027c0)=[{&(0x7f0000002640)="ac5f6b985a5722d55f0aaa15891e7858f358c6f92153019c91cc943e6d63a7e4112c4507cce6596648cb77520ec85d02b57e8596e713d36df52d21284dbc06f32340f4e5afbff7c36f7a7530d5a42b805c8428d68cd2e8879f99077e38641fc5bf5646068340c228d94c4f50f5feaeac29218903510c83abc92d51319db431", 0x7f}, {&(0x7f00000026c0)="4be009acf94faef749523395be9713895628a949d140ea8cab64cfcc3ccbdc7f7aa1f6752318757c2575835efafe2f5494a8c0bd9084c105760ef7319c72cde7aa9852b39c9f130031619b96cd8e588cb53171a2f9dd297374411e56f117d065eb5551128089129607bf5e3806d711f2b4d7cd339b41c4be5c721722075627187cbed407e72a4fa5672b2e8354c97c9398308c33c72de15eb0439e1ff77c0f132ca13bc6aa6601ef0be0b33681a80c1b6422d46d56ac432eff076f77504be3f2d1cd8415c8f7dece5d721955cb4880", 0xcf}], 0x2, 0x0, 0x0, 0x40000}, {&(0x7f0000002800)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f0000003a00)=[{&(0x7f0000002880)="0b49d44690c09dc5d742c921cb37114aa3e02f1eca3254c5d14d01d5dfc7fcfaf4f1e303192e0a83d35fe89c633458c83a8f8b6b3115830afdabc2cf8be6ca619d3c9b9ea549805af0090618628263993e60ad8f59392e5d34ddc89da54e07b2f7c6c18d54274d56ab4f0da4bd707ac90b166f60e1de3f33b2f3cd037a0e16cdc05e765dd2a8e9b28027cd17e82cadbd6e229db7a4295ecade9c5cf5662824a8accaaecb9e5b3431d51ecc92c6b905d3791322ee89e452594c77cfa460421e5ca7eef6bdcf", 0xc5}, {&(0x7f0000002980)="18360105e99d3bda4b68b9176171d0d52b535bc86254334c5fa1d5bd2d1d0c7b2bb0bfe2ab29944a86fcd68abc64487d1a0fc8303fdafa4bf5e0717701cea555adfe9310c2fc5096d51dd242f699915d2e926b803785731b2277e9e7fb", 0x5d}, {&(0x7f0000002a00)="999d90489f0f9e3ccab2797a88cb16ed9b00b1f488355869277c092f753b2b28d9f38472db9774b76726e6c51327718ed120f3f7883e7c824722f0856731d01b6207a9832dbe9c54fb31d481c9129ad7d21784fd80ab58ef1e4915ec1f1b59318d367c052663c11221a023e907c02e1292755de4f79a54b4082c38101812dbbc9edbef531fbbf06458793c548b6c5c231c3aa8e316fd2f3886ed7d1166d68b29f8528aad126571ef9baa11d96099b6ac18d18d781f5cdbb50c3f36bd0b2ae2fae26b3213ba01682c453f1379a3f1c95ed0398723d605b280bb6302baab91a48e9723823af6b393a477de8d10feabc9fb87b45d41312fb97960aa02be0e09a1ff924d39731fb7b92d7f378799bd5552b068c79c98b8165fe91fbc8347ff9d930ecc695d230ede01a1e92d5bafa6f8bb791cc2edbd50b3d5577c736fbb0ca3e80e53a862bd1954758dccea021fa3326324e13454aa590c86994fef23b784e341a45ba5766c99e4dfb0b859d9a1585131dd3b8ae13ed5b24a8b74beddbf87ad0aaf6c837f64fc5a1db84d478de59f714c0a1ad3b8b7f1c509f817503ffde1df93a97ac789b688d36ea9019203ec7247b4ca5caa4658b08d7388bc5c09883632419f5f98f95b90088989727a61d375af5340c4c1088f09202a8dd4f10ac244424cfe90a65854b59cbeb854347625a93476f6e7e39a51de57f6b1011ecd83cecd9b2614bdb5632bcf6b93c4c86419207fd9772be6a802d573eb058c210d45c7db61cddc19867f43e2abaa701c930e0363e51129db328d62e8d84c96c99fd3b1749d10261a56fd7f4d046c2d9a45b2b1a535463ce614e3f59ec791af44d4ea1ba757fcc1717cf4baf748504cc86aab829bd1dca40c9affa2f14d062cc1894edc837a0ad0c0fdbdd64a6ab1b25a84f1e6f83cdbcf607a07a379dc64da3dccf5176f8daf12c356e6758e1a0429ebd109107bb766c1fec50a61e1c38df2177e2308cb784100d8af6cbb72a09528e04510486545d415bc7df0f5e4bc92b5aa8a7ae6516cf21cb415284af98582061045952ea1656838398a6e52e4d545a5d146ddfc345e6e487291adb65046925c12f72e1c847ab3f8a136d5c0078477d3fb866f430279bce25dfa63043d9f3044a09ab036913a3207643c5c84f662670d73d73ea0a8f17d34ab152940f68d4f2b23d99d7e7a7024c5845c882d39c764162f5953bb52a5c7937659339baecb47c936dd913f6d58bfc45e0a350b1ae1680ccf0f694816a99d460130a8dda393373388712f4697fc96cdbe7d4e71aca1e72521159194cf078f84321e935b1806a84fdd5d70277b946ee3676eb0f2fb2769f44ca256ed5120120b386b5eee40927be6ccb8d77439a8b4cbe217851f05fd1453059fcdbe5214b2579421794a139c09d943902aeb335c86c5d46b06ee53f19cd3460e2775c24ae030c2ef1242c08dd7d8a9beb824b0feba198ecb423b2ad802ee659a2e605d24d94cf1fcc6dd4990f7f234cefc1f97433e7debec03832ecb73214e63dff2828fcad860b8f1f943afb69c84988073169ed961cefcf48037a88e6ef8a7a86b19a184e27ae8885798cc8c2d7a4979d295c9d0ae3c782ea686b35868d67ba56da03b34d84add4d17b6c452859fdd13cd2e27d278788f9291b6f02900d25b22a3e4a823b124bcfd9b7518ce826ad4c737ca1643769816133223aab6ed23c878187f7855e05f5b29a83b4c73325ff725f1be2ec51ea6370d503c47be3c6f1a945aee447875c89fedcf8ab7af6fd8f686c6fa2ee412d29bc4f326777746a638a89979e26e4a1cbae19508581b87a4501ea32d280cdef5cc50f3054d80ee56ccc7849df2ff92c9fb87b4dbbf01e33376e393a6323996cae2f2ab99dc46a27daeb44d8b895ff2921337fd08b1d28367e4918058eac80363cf0ad6ce895588e36194b4d185e74cf27bb344c7c904a16526c32ce5cd99261850a98fdb109f87b3ea8c7c4c52ac2ea89f7d6c45b7f8f80287b236a7d3439815a762437a1ed2c55cdd7ebbbeab5b7e8ea2d0891f061b4cda70da9c13086da80dace93663d92efedbbe9019dc91a9bacfccb2c2fd6a73edcab508e6703f3cb3ea9566438aa4584341c9403b9b5b74c74e4f15b1e3737b47ad9e612b57851236f21610997171dcd185698b55cd8ab2173065f7ddf9cfc755a31660232ee8c5d6b8ccadddbc724d682afa3d70c44034444954ba918580344ca62d41012c51bde2aa4e1b8db2f0130782013436a85889ceb7442c0547a2b58933a79ae7aa114e345e99028befa58418918f5a54cb381b8af37511ca64a561fe479b8545b38b9e751834b6de1dcab76a3c94872151bf1a8b23de2df31fd203d455b00924c08bd0971bab22ac37b8d8475be27a34c572aba35007a0a6f230ba565ddc519459980d297b82230732ae7414f483dcf33e98ebe79095048203ef07a947559025e2ac40e533fd72387655d24a697023a822a417879138ad1d08dc29f82155966f626dd4ed56e1e1cba10d744ea2d04245d37b3636f2f0b286b240f347a54ca0556c11004b2d44981a88b0bceb1e1c2fdf9b83c92531e274e82930a4ac6050ecfb9e895fdb7b56a5f6d944bda4673a883045a5c68682981ea544625fecfe08c72f648c6b5b697c37537dbfe95bc1db4114c9185b6aef3f2e0ae30a2c2968b032887cd716115643691718e493b8cb0e202237b31e67719fe9929d1fadebe01f272e548b55e46d1689c7cf657480830afd95ad1f7d62ab52a92b5d0a3c402bed62d21f8d760e735add6e2f47b99db8f291221a40e5ffa52ec6ead1364fda3ab7b0c1c1d7be03383925df92a377ba93d4d2dd788fdbe884b069b8f06e4ed5d11ba6ca7b653d2d2ef37b273bdaa185d69f10551bbeeb6290266b00d2bc5a4fbf7c6d554e402344e3dc271560e03ecf0536657de715cbcf17df079585fc9d87a126029f1ed837b4ba9826fe8d8174e675a08b87571250ae2a9107896a548c6a43c866e0b557dcb99d92328f162133e4558a5e94ba16a49bc16159312345158c7222fe6ffc8fee14369c1ceb7d30735724a620f7c8b11b606511d5ef984d313ae60c0f4d74f595c8b68c2c9b82b02630ec1555cf86dd5a0d299a1bd16984efa7281df2a8a6fb53dbfcaddd98d0e223cdcf86412d0a3a18698484254114914600393d3844adb8b6fd345c0ce4b589a18b6ec2d90181db63e1e2652c44b29678cc6a9df892684826f694a75ca170c8b5aab74b4f6c3d27098d34cf996e58f631fe6227346aed28e866e4b32e9dae46d04ed29b70abee3928b4d9e85e2a05678a8525955b482a28fbfecd8a187deb574606f7c4cf2444365fc8ec67b62edab67a953b0b10eef52c00a78f0b5da996dea22e3b850e395bec8ecfa94f19e4cf0a68d931f6e0caa6ba62d1e0597ce1e1df3033a9a1029af3c6b420f7ab85451c22ddd3a710a2be80278c97b70b08ae3455f199756e3d55f23b7b1760d43270fde19c2538b444ba5cf139c48960ed999152e0b0836a31bbc00266431b2ab8c1a2fd0c8c7e020ebe04214c6eadee9c3e26a849110f59606ff8cc20289c1deeaa03637481ab96f02d8dd6c0d0f76b2cfcaa2717fbd76832a6b2e6abd2493dd3baabad08e1971a1e6efab3367ce8113ec9b51194e9f1f3494eabd3278d95ab9effd4fd200b06825c3183ac3c60eeffc8f1ce7c221d5af773d4d7051080af374209ec392d18219e8f4b8a81638ebc678ff2097b3b50354c602bade08f90cefb0c2f65f02d62aba8db5c7a7f3072abd06579c40dd96d0f9674c8e0718a79b1e7ef01dd7e67d15aac4121732a7a6eb91daa12c7900952743397f9d1d1d5b729bf947202c0c03562db4ff3adcff418aa9263489231c6f2af9749fed0008dfa25e39110dea6df53d381d92e4aaf179ddf381636f2155430329ef9d66f2082b28082de358b58e22f1e1fa6d5648d95d6b4c8b9715b2a9361970165770be7e4ea6a133d968099ce3f18c911d9a205c2a77f26d6a39dce7bd867d94729a9121dba010e53525afb12cd272938f70762d05beaa290538875898fcee084dd0de68d1fc61b437a8746498dbb5389dc1cfefca5280bd8b3d1a1e3e564710acc72930f975e56d5e7e83a7a9e7769b64e5395477443fc98ba76363e00fd1b53c995a3330a5a0afb6be04e93ff036bdf9ef0dc705803ca64da5924845e9529d08557d2f366d66f4c85c94125445e84228c26d17865c386682a51a5effcba7015aadf3c9e9e68c3763353fa0bf7e98f62efb932d26e54a1c572f00fda89f4d51ccdf4ffd00f49657e3258cfe9fc41d45d7afefcb839bd8830128b7df1579e5b749910dfa5f5abe639b752f74fcc16dbbbc16944ab6e4a57adcfe9614a52a94a85d1dc0849ddd238e778a1a95af9da76974c4bf581caa99e4c7afba30d2227889930c3278a6d79d94c93b6fdf73525bf0d11b4ceb6858af317eea29f4120f6edf93bc2c7d145e3fbc68460da837bff82df0580a910f8a99c1f8bf97d246c91c1b862217b23dd1fe2fc6cb896424482594dd775d204220922fcc9e7036ceef6763fb7a3015d1f8f46d35113873ca6fd24745b07bb61b0ce6662550005925b90bfafcf6db5624660cfb6ce1b7f079aa496cd8f2910ae4a6fce3d3b412d671b8e5d57436144ac845543a3a3f157e1343536f68ff86e6d892cf37846c261225d2fd9ce2e4bd4b4e1f851fb32d34cb25433ed4e226805f84f880f2fcbe819eafe645fda8cc2f63fd152dc688c76c9b41dd38378d081f3a62916e86eda8ef5da8d97d34d076dcda7014c87d3d7d3ddd32b41ce5dfdbe58fe3e35324aa7bd495f8e368b3719f999b82099c889988770de5aea07c69b41846e506bb99f6353dbb3eb5447ac89179d631106fdef7a870b4b4b96c9b8bfc4f2d70d80af3585e24226112407375bbd03f1ca3d4d9d840f3190274180525cb69fa6852b68f9a5f3f76ca11708f1e7ef1753bf06a44d4b907ba309c4470d0264b529a643f9892c045a7f04b6f86063335d1a09556b391e8ad42c6b876dfb471fd19cb04eba1efdc776b6775e06bb4e62ecd544f978784187e8a680e15166f400c43a7767617c4cd8c3486dc548982e5e07a36013ff4283c6f411d48dc64e94be94659473174f599b5052a9f3f0516dcf5102ef8e941bc6a978f11b61f54e4b042506658a7c995e54c4357286b6686edd634ea9256fe99d9f0d16756af14da05ea5070378469773f9d2c388a46fd9a2a48b6241885332400daed58d61ec93f77f98670caf5277ea1e942d72d42ffa7ce74e5f50e6cd43ec83d9774bd03218ec2974897cbd553b3f23515286153abc152387e48a81f1ec5a8076726b24f70d7190ff0ffd5c263047c8b4e834ca7da92f7e889349883f6642c3479e025e04cfd635377f242c51342121f6c323e2c7259f487df12bf6220b3184041cb49bd261c30ac49ca3aa5bcd79471944373f9121d4aa620b9b461d2f98cbdf5eec0392d8c13e0c51132e513b83b02e0f9f31e50ab0d86b18bad716ba40b17c8587dfea8049dc3ddb2fe207dade28cbd521f52f239920b806ffb785af6dab0719685fd5d8d173d6b3d7b8553bd2b68a0b7ad4447d0f979d7659dfe1d20d3cadef960c1d3f5a964ab4782af72dc136e73b6d61aef400c4279ab49383294ac7f1c06f41322cb8d5e68c958231750136e267add6074c1286e295224547edc3b002ab3c8edbd6fe9a92d85043205540363361c7b3d081240ff41115fa4ba0b75313007efe823d6d22559613f9bdc54884e958c309965f8cda2702", 0x1000}], 0x3, &(0x7f0000003b80)=[@cred={0x18, 0x1, 0x2, r16, r17, r18}], 0x18, 0x20000000}, {&(0x7f0000003bc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003c40)="4d94868ad3094e94d04a34f24ae414e564f50b1f5916a67e686fc558dc99970d2d2c2a81741b6775f51382b768f4e38d9a38e335b182d5a75b4962c6cf4bb7725b24245e5a2f6e6033d18730f374deb0f70336d81736c7d7fbd801c6c75e994023d83ca4fc31e9712f3a6e5e8f56e3875d8a0fac993a420d45bdd73928039d", 0x7f}, {&(0x7f0000003cc0)="faf825cb8c24302de17e0ffd634725a9a00a1b2390b2056cce140e4c58d19e23a7aab78de50d68dcbae696738a50ab677e7a89fdd361a4766162ef0bc0c3b446c700bd7700c0677235be4c8186d4adf9ff24bc81a57de13caa4821fc3429f62283880163a3c012ae09f996a438333f604a46622479840f804b47759b5cc92cc9fe4a50e95ae0c9783f6f12dd1fed86297d120e1d1d918efa120d7b914d4319b43a2b429e7e42f8b38990bc1b007b5e", 0xaf}, {&(0x7f0000003d80)="75a773a0128981279887d41c8fb6ef5e42a7d1542c3075d4907c0b068b48942fce8769f5768b90cc9d678ee0787088b94243292a6518127f882fd667907e4bd3b1a7bcb709002c6febebe31635cd08a6664d87c91c4ae723e6a20f49f9cc85491ab12ccb43aae09b8c852966c31cfd7a14e0cffb4907403e849f1ac62c161c333f472ee7c5ef3beaf794850a976debc115c53d75fe58d137984a2a782271a8478c28582b944491bdfdb00cf0c706dab1d40b491728ae563ee02b89a90b304235096a9686e9070072bafb41e1c6", 0xcd}, {&(0x7f0000003e80)="5fe4d93a74bca565c1817bd7630f9aadee0d3e61fe", 0x15}], 0x4, 0x0, 0x0, 0x4040}, {&(0x7f0000003f00)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000004000)="4397f6d45456da78411452455cf00ccef7dc42da1fa3b0810e0c64aa913403518050882c08d81d6f3f38a02b759c25d7d3ca7a9f1485d9dc1abaa290b88a46d6c4bee84ca3c5dc6594d89b59d0a8ce88d8d765", 0x53}, {&(0x7f0000004080)="75bdab755526c3242cff14ae2753dfc7a4d006ebdc18cf5c70789349eab5eec6bc54f1aaa775e19a2c777c68cb80f90717ba2034532b1796d244df42054cfdb30750ef58d73b791758f42aa94886eb6992f4f8fb6eafff80824316a970c04ec8dad16ca16d58b57d5cc2260fcdfb", 0x6e}, {&(0x7f0000004100)="1671a7e4cdf89bfb1c957c6b4c2d835a482fd8ecec9750a3efc5c2e7082d86918d2d8e90e8e1ad9b193206c8b08d3c9a175661aeab853f2266c862287b1308e7091770e853210d211352f99c64932bfd4b795d", 0x53}, {&(0x7f0000004180)="78f6056e9e15c88e817b0e5e04fac87131de2ea0b54e99f5ece5f634a11bba9021fb0c3e146546e6a7998d9aaf56ef28d8bf21468559e33f4f358fbc791791d67719", 0x42}, {&(0x7f0000004200)="5b581994f36544cca88a211cc9c6d6adae27ac35fb706f7d942e4992ae6dfc8de64d23c5f5bc790e5084bf31116a5726bc4419cf5a6072779f7462777d567dafe4c36871dcb48d325224a00093f28317846416952c9d21369a9b5e48f6781cca6a67fc4b7f0a4895601b87539923f9273c5db295f661d77013ecbbc59cf3e4035dd3010a66f3b071656217341a7f15932ab0ba7b8e381dff79efa3552657abf3eb6a9f13db055e0cc09eeed604b0d466f7855fd98804d0eee3c844f39c3835d06990dac7ee3d372e8e", 0xc9}, {&(0x7f0000004300)="6bd8fedf0d6e10cfc3cf62421d7463dfa2aba69bd30576cf14cd50f590e28f29f8f1205039a944f7c9f903b8fe5d46f656cd09d5709ac8f0d914a48c6a34bb2be31bd309a79753345b6f1209f44eb69786c65afbd9ff2e78356203488cedd467e9be230a2165b9", 0x67}, {&(0x7f0000004380)="65094253eb6b3e61c1c9f59efc8002011cfe264edd344cfed04dff4b37bc9acd3a4a294bdec779c6c4b81e832c338b6a74f442f23c8577771753e9945db351b23a46c69c860ac3fc34345070a3a429338efd789290483fe7dc33c528e29fd94d081afb0060bd3952ae32d80abdd4f94067f7ca12f7745d5355a6daee0994da5f61a3e03079610b468c810c968c07535aeddb1a4296c8963c8e9855ca4c", 0x9d}, {&(0x7f0000004440)="074a498666067b9bffbc7ceda5cf5618fd4961ef6fab044cc14f47bfcedacd265c5067684bf2903bae371386199bd1c00bd2e10ccf6e45991763ef1c286a362d840511ef05c735fda4d92142a8bd5fe2b6d77d710def1727c864f5fbb1289824651a5838eaa8a76488e4cb621e86aca0be37f2a4f1a9da931620e30f7af8dfc05237acbba0666f0ac4176c175aa350518e327f16d1d6ffe4438d9a66ccaad86986dae371d621851826e413e0cfe18079476eb4541721453cd4678c5a0cb5bd74849401751806f3bfbc3d5ae2aaec4b10b501964c4e2501becd44314a5d", 0xdd}], 0x8, &(0x7f0000004cc0)=[@cred={0x18, 0x1, 0x2, r19, r20, r21}, @rights={0x18, 0x1, 0x1, [r1, r2, r1]}, @cred={0x18, 0x1, 0x2, r22, r23, r24}, @cred={0x18, 0x1, 0x2, r25, r26, r27}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r2, r2, r1, r2]}, @cred={0x18, 0x1, 0x2, r28, r29, r30}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r0, r1]}, @rights={0x1c, 0x1, 0x1, [r2, r0, r1, r0]}, @cred={0x18, 0x1, 0x2, r31, r32, r33}, @cred={0x18, 0x1, 0x2, r34, r35, r36}], 0x10c, 0x20004011}, {&(0x7f0000004e00)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000005040)=[{&(0x7f0000004e80)="184b002be12a169ec8828563b57690fa3ddd1a1f7b6aea25cdd4a7b406cef8a7b81aa03146be4b0efce9d9bbf64cee1e722b473457dc766e396a67f59b7e51789ce65ef6fb1ba902705ee757dbccec4eca399e017957ddbda2ae19f3e9453e13d942a543dfed8af527f3c06ca20585f15598242ae466b82eefc7cda5640c5a964b496449a346f8", 0x87}, {&(0x7f0000004f40)="5d528f5efd07d18b6d13098946eabe90091a2dcda2cf4e54fe591d5cdbabb681d8682f4e9fdd248a487ccdbf5f47", 0x2e}, {&(0x7f0000004f80)="94513d1ebee16f6dbfe6e6c9de2659352c47dacad10e918e833d124a637db036eaa0993a9cfe1f882824c20d18070e1054a2ab0dbbf229b756d1f5a2b01b1676c8e0add623364d09f53d3d5ab6c2571609fc2197496ab7154bca17fdb82afae2561deb305f4efa8017c18cf69cf0024bb1e88883e74f71ef27cef548680488e3647633c7ab0963a2062cbd4d5dcf352b77c44a9f88c9622d9d7cab44201c68cfb59032b44aa05575a8c2cc6626ae9a116e208a383f4b1e", 0xb7}], 0x3, &(0x7f0000005180)=[@rights={0x28, 0x1, 0x1, [r2, r2, r0, r2, r1, r1, r1]}, @cred={0x18, 0x1, 0x2, r37, r38, r39}, @rights={0x1c, 0x1, 0x1, [r0, r1, r1, r1]}], 0x5c, 0x1}, {&(0x7f0000005200)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000063c0)=[{&(0x7f0000005280)}, {&(0x7f00000052c0)="bc13f5e0e3e2aded9a886c9aea4cbd57138106072e11c3d702e08a30fc25647d0dc72fd8e6768c835f3242a79dd8f8bb323684a4e9689a6294ab103d380ddd87eaa764b98aa6", 0x46}, {&(0x7f0000005340)="3a68c37846c2f7d9504c7897be3458190cef2200b9532db548157eae2b10d046211778b6873e7c8525b0a580df92512c835cc50a3a31eba02460d9959f1dce0ce06e4f40d8d535cbc8ab8581c0a18a5462c7f425c07c1199b0c0c536b46a64060fe1ae2ec95ed65bbfe4ea551945a845", 0x70}, {&(0x7f00000053c0)="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", 0x1000}], 0x4, &(0x7f00000069c0)=[@cred={0x18, 0x1, 0x2, r40, r41, r42}, @rights={0x10, 0x1, 0x1, [r1]}, @rights={0x20, 0x1, 0x1, [r0, r2, r2, r0, r0]}, @cred={0x18, 0x1, 0x2, r43, r44, r45}, @cred={0x18, 0x1, 0x2, r46, r47, r48}, @rights={0x18, 0x1, 0x1, [r1, r0, r2]}, @rights={0x14, 0x1, 0x1, [r1, r1]}], 0xa4, 0x4000005}, {&(0x7f0000006a80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000007c00)=[{&(0x7f0000006b00)="a435d077688f1ce500bff5b9a26bcebfa924c99c2dba82109b25bb46d1de11135bb311c7ed14dbe14619375a1816fb74b1ae5b79bb9185db35fa858fde81598ea6714844975f2235394ed0990678052d27d528612ba4ed79a2be50df510c7ceb91d138d42ea1e8b3a417ce939728fe982196fa1f63fe502c497f858d68967d22299fe3dfd7fa6c20cbe1706b98976790edeb4856854235cb320ab8c7c7aacc6f3952f8f6566d8de0d76c8ec7f20c", 0xae}, {&(0x7f0000006bc0)="bd0424c5606390861d8a5b", 0xb}, {&(0x7f0000006c00)="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", 0x1000}], 0x3, &(0x7f0000008180)=[@cred={0x18, 0x1, 0x2, r49, r50, r51}, @rights={0x20, 0x1, 0x1, [r0, r0, r2, r0, r0]}, @cred={0x18, 0x1, 0x2, r52, r53, r54}, @cred={0x18, 0x1, 0x2, r55, r56, r57}, @cred={0x18, 0x1, 0x2, r58, r59, r60}], 0x80}], 0xa, 0x24004080) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000004c0)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000000500)='GPL\x00', 0xfffffffffffffff9, 0xfffffd9b, &(0x7f0000000380)=""/195}, 0x48) [ 99.592580] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) unshare(0x3fefffd) [ 99.674138] binder: 10185:10186 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40000000000000025000000000000000700000000000000000000000000000095cf6e000000000095f6b242816b56a4652d4c2cb1b497636b2e20224966e91241c241cacbac78297849521e786dc6d82aa95b3839495573a00fb8f7bb90d0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001000)="15", 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 99.725585] binder: 10185:10186 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:27:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, [0x1ff, 0x7, 0xcf, 0x401]}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000140)={@dev, @local, 0x0}, &(0x7f0000000180)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10001, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000060000000000000000000000000000000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f00000001c0)=""/195, 0x41100, 0x0, [], r1}, 0x48) [ 99.779704] binder: 10185:10186 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x0) 2018/03/31 13:27:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x0, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:57 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a3d14131f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:57 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000001000)="15", 0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, 0xffffffffffffffff, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:57 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 99.897660] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:57 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x0) [ 99.961274] binder: 10230:10232 ioctl 8010aa01 20000180 returned -22 2018/03/31 13:27:57 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:58 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$sock_ifreq(r0, 0x8934, &(0x7f00000000c0)={'nr0\x00', @ifru_names='vlan0\x00'}) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) creat(&(0x7f0000000100)='./file0\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b400000000070000000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 100.005946] binder: 10230:10232 got transaction with invalid offset (0, min 24 max 40) or object. [ 100.037228] binder: 10230:10232 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32]], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad"], 0x2a) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x0) 2018/03/31 13:27:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:58 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x0, 0x3f, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:58 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 100.176469] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b8649"], 0x37) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 100.245539] binder: 10277:10278 ioctl 8010aa01 20000180 returned -22 [ 100.262590] FAULT_INJECTION: forcing a failure. [ 100.262590] name failslab, interval 1, probability 0, space 0, times 0 [ 100.273897] CPU: 0 PID: 10280 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 100.281260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 100.287531] binder: 10277:10278 got transaction with invalid offset (0, min 24 max 40) or object. [ 100.290605] Call Trace: [ 100.290627] dump_stack+0x194/0x24d [ 100.290643] ? arch_local_irq_restore+0x53/0x53 [ 100.290668] should_fail+0x8c0/0xa40 [ 100.314198] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 100.319307] ? find_held_lock+0x35/0x1d0 [ 100.323373] ? find_held_lock+0x35/0x1d0 [ 100.327450] ? check_same_owner+0x320/0x320 [ 100.331777] ? rcu_note_context_switch+0x710/0x710 [ 100.336706] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 100.339150] binder: 10277:10278 transaction failed 29201/-22, size 40-16 line 3026 [ 100.341551] should_failslab+0xec/0x120 [ 100.341564] kmem_cache_alloc+0x47/0x760 [ 100.341576] ? __lock_is_held+0xb6/0x140 [ 100.341593] getname_flags+0xcb/0x580 [ 100.341604] getname+0x19/0x20 [ 100.368276] do_sys_open+0x2e7/0x6d0 [ 100.371988] ? filp_open+0x70/0x70 [ 100.375524] ? SyS_read+0x220/0x220 [ 100.379148] compat_SyS_openat+0x2d/0x40 [ 100.383205] ? compat_SyS_open+0x40/0x40 [ 100.387263] do_fast_syscall_32+0x3ec/0xf9f [ 100.391578] ? do_int80_syscall_32+0x9c0/0x9c0 [ 100.391998] binder: undelivered TRANSACTION_ERROR: 29201 [ 100.396144] ? _raw_spin_unlock_irq+0x27/0x70 [ 100.396155] ? finish_task_switch+0x1c1/0x7e0 [ 100.396167] ? syscall_return_slowpath+0x2ac/0x550 [ 100.396177] ? prepare_exit_to_usermode+0x350/0x350 [ 100.396187] ? sysret32_from_system_call+0x5/0x3c [ 100.396198] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 100.430068] entry_SYSENTER_compat+0x70/0x7f [ 100.434451] RIP: 0023:0xf7f51c99 [ 100.437787] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 2018/03/31 13:27:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64]], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7e7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f00000000c0)=0x8, &(0x7f0000000100)=0x4) 2018/03/31 13:27:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:58 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 100.445467] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 100.452709] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 100.459948] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 100.467189] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 100.474430] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 100.534933] binder: 10296:10298 ioctl 8010aa01 20000180 returned -22 [ 100.561231] binder: 10296:10298 got transaction with invalid offset (0, min 24 max 40) or object. [ 100.590931] binder: 10296:10298 transaction failed 29201/-22, size 40-16 line 3026 [ 100.638203] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:58 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:27:58 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x13) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:27:58 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:27:58 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64]], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b8649"], 0x37) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:58 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:58 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 101.003410] FAULT_INJECTION: forcing a failure. [ 101.003410] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 101.015235] CPU: 0 PID: 10314 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 101.022575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.031906] Call Trace: [ 101.034475] dump_stack+0x194/0x24d [ 101.038078] ? arch_local_irq_restore+0x53/0x53 [ 101.042728] should_fail+0x8c0/0xa40 [ 101.046422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 101.051503] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 101.056667] ? __lock_acquire+0x664/0x3e00 [ 101.060875] ? check_same_owner+0x320/0x320 [ 101.065171] ? find_held_lock+0x35/0x1d0 [ 101.069209] ? trace_hardirqs_off+0x10/0x10 [ 101.073503] ? _parse_integer+0xe9/0x140 [ 101.077540] ? trace_hardirqs_off+0x10/0x10 [ 101.081835] ? _parse_integer+0x140/0x140 [ 101.085957] ? check_same_owner+0x320/0x320 [ 101.090254] ? find_held_lock+0x35/0x1d0 [ 101.094291] ? trace_hardirqs_off+0x10/0x10 [ 101.098588] ? should_fail+0x23b/0xa40 [ 101.102455] __alloc_pages_nodemask+0x327/0xdd0 [ 101.107099] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 101.112092] ? find_held_lock+0x35/0x1d0 [ 101.116140] ? check_same_owner+0x320/0x320 [ 101.120438] cache_grow_begin+0x72/0x640 [ 101.124477] kmem_cache_alloc+0x400/0x760 [ 101.128597] ? __lock_is_held+0xb6/0x140 [ 101.132636] getname_flags+0xcb/0x580 [ 101.136410] getname+0x19/0x20 [ 101.139576] do_sys_open+0x2e7/0x6d0 [ 101.143269] ? filp_open+0x70/0x70 [ 101.146788] ? SyS_read+0x220/0x220 [ 101.150391] compat_SyS_openat+0x2d/0x40 [ 101.154429] ? compat_SyS_open+0x40/0x40 [ 101.158463] do_fast_syscall_32+0x3ec/0xf9f [ 101.162762] ? do_int80_syscall_32+0x9c0/0x9c0 [ 101.167320] ? _raw_spin_unlock_irq+0x27/0x70 [ 101.171791] ? finish_task_switch+0x1c1/0x7e0 [ 101.176259] ? syscall_return_slowpath+0x2ac/0x550 [ 101.181162] ? prepare_exit_to_usermode+0x350/0x350 [ 101.186150] ? sysret32_from_system_call+0x5/0x3c [ 101.190970] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 101.195788] entry_SYSENTER_compat+0x70/0x7f [ 101.200167] RIP: 0023:0xf7f51c99 [ 101.203501] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 [ 101.211181] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 101.218421] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.225662] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.232903] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 101.240143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/31 13:27:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 101.249450] binder: 10319:10325 ioctl 8010aa01 20000180 returned -22 [ 101.271540] binder: 10319:10325 got transaction with invalid offset (0, min 24 max 40) or object. [ 101.289210] binder: 10319:10325 transaction failed 29201/-22, size 40-16 line 3026 2018/03/31 13:27:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b8649"], 0x37) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:59 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x0, 0x6, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:27:59 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64]], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:59 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) sendfile(r5, r5, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:27:59 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x1}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 101.332822] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:27:59 executing program 3 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:27:59 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)=0x0) getsockname$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@mcast2, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@mcast1={0xff, 0x1, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x4e22, 0x0, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x6, r2, r3}, {0xf800000000000000, 0xffffffffffff0001, 0x2600, 0x8, 0x416a, 0x9, 0x9, 0x100}, {0x8, 0x8, 0x4d2c, 0x2}, 0x7ff, 0x0, 0x1, 0x0, 0x1}, {{@in, 0x4d5, 0xff}, 0xa, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x3500, 0x3, 0x1, 0x722, 0x3ff, 0x1, 0x525}}, 0xe8) waitid(0x0, r1, &(0x7f0000000100), 0x9, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) [ 101.406716] binder: 10338:10340 ioctl 8010aa01 20000180 returned -22 [ 101.443747] binder: 10338:10340 got transaction with invalid offset (0, min 24 max 40) or object. [ 101.473872] FAULT_INJECTION: forcing a failure. [ 101.473872] name failslab, interval 1, probability 0, space 0, times 0 [ 101.485169] CPU: 0 PID: 10356 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 101.488214] binder: 10338:10340 transaction failed 29201/-22, size 40-16 line 3026 [ 101.492516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 101.492523] Call Trace: [ 101.492543] dump_stack+0x194/0x24d [ 101.492559] ? arch_local_irq_restore+0x53/0x53 [ 101.492568] ? unlock_page+0x19f/0x270 [ 101.492586] should_fail+0x8c0/0xa40 [ 101.527989] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 101.533088] ? __lock_acquire+0x664/0x3e00 [ 101.537328] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 101.542519] ? find_held_lock+0x35/0x1d0 [ 101.546593] ? check_same_owner+0x320/0x320 [ 101.550917] ? rcu_note_context_switch+0x710/0x710 [ 101.555840] ? find_held_lock+0x35/0x1d0 [ 101.556364] binder: undelivered TRANSACTION_ERROR: 29201 [ 101.559900] should_failslab+0xec/0x120 [ 101.559913] kmem_cache_alloc+0x47/0x760 [ 101.559927] ? trace_hardirqs_off+0x10/0x10 [ 101.577613] get_empty_filp+0xfb/0x4f0 [ 101.581476] ? proc_nr_files+0x60/0x60 [ 101.585337] ? rcutorture_record_progress+0x10/0x10 [ 101.590327] ? __lock_is_held+0xb6/0x140 [ 101.594359] ? trace_hardirqs_off+0x10/0x10 [ 101.598658] ? unwind_get_return_address+0x61/0xa0 [ 101.603570] path_openat+0xed/0x3530 [ 101.607265] ? path_lookupat+0xba0/0xba0 [ 101.611297] ? lock_downgrade+0x980/0x980 [ 101.615419] ? do_sys_open+0x2e7/0x6d0 [ 101.619281] ? lock_release+0xa40/0xa40 [ 101.623229] ? find_held_lock+0x35/0x1d0 [ 101.627262] ? do_raw_spin_trylock+0x190/0x190 [ 101.631819] ? __lock_is_held+0xb6/0x140 [ 101.635856] ? _raw_spin_unlock+0x22/0x30 [ 101.639978] ? __alloc_fd+0x29b/0x750 [ 101.643756] do_filp_open+0x25b/0x3b0 [ 101.647528] ? may_open_dev+0xe0/0xe0 [ 101.651304] ? strncpy_from_user+0x323/0x430 [ 101.655687] ? mpi_resize+0x200/0x200 [ 101.659461] ? get_unused_fd_flags+0x121/0x190 [ 101.664020] ? getname_flags+0x256/0x580 [ 101.668057] do_sys_open+0x502/0x6d0 [ 101.671743] ? do_sys_open+0x502/0x6d0 [ 101.675607] ? filp_open+0x70/0x70 [ 101.679123] ? SyS_read+0x220/0x220 [ 101.682729] compat_SyS_openat+0x2d/0x40 [ 101.686763] ? compat_SyS_open+0x40/0x40 [ 101.690802] do_fast_syscall_32+0x3ec/0xf9f [ 101.695101] ? do_int80_syscall_32+0x9c0/0x9c0 [ 101.699658] ? _raw_spin_unlock_irq+0x27/0x70 [ 101.704124] ? finish_task_switch+0x1c1/0x7e0 [ 101.708592] ? syscall_return_slowpath+0x2ac/0x550 [ 101.713493] ? prepare_exit_to_usermode+0x350/0x350 [ 101.718482] ? sysret32_from_system_call+0x5/0x3c [ 101.723298] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 101.728114] entry_SYSENTER_compat+0x70/0x7f [ 101.732492] RIP: 0023:0xf7f51c99 [ 101.735828] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 [ 101.743508] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 101.750750] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 101.757991] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 101.765235] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 101.772480] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/31 13:28:00 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) sendfile(r5, r5, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:28:00 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) 2018/03/31 13:28:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:00 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x0, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:28:00 executing program 3 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:28:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:00 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x3ff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, &(0x7f00000001c0)=0x4) chmod(&(0x7f00000000c0)='./file0\x00', 0x1d1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:28:00 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) [ 102.164436] FAULT_INJECTION: forcing a failure. [ 102.164436] name failslab, interval 1, probability 0, space 0, times 0 [ 102.175729] CPU: 0 PID: 10373 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 102.183087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 102.192438] Call Trace: [ 102.195033] dump_stack+0x194/0x24d [ 102.198668] ? arch_local_irq_restore+0x53/0x53 [ 102.203340] ? __lock_acquire+0x664/0x3e00 [ 102.207579] should_fail+0x8c0/0xa40 [ 102.211300] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 102.216403] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 102.221593] ? trailing_symlink+0x810/0x810 [ 102.225914] ? find_held_lock+0x35/0x1d0 [ 102.229985] ? check_same_owner+0x320/0x320 [ 102.234300] ? find_held_lock+0x35/0x1d0 [ 102.238367] ? rcu_note_context_switch+0x710/0x710 [ 102.243304] should_failslab+0xec/0x120 [ 102.247275] kmem_cache_alloc_trace+0x4b/0x740 [ 102.251853] ? refcount_add+0x60/0x60 [ 102.255648] ? find_held_lock+0x35/0x1d0 [ 102.259721] ? pty_resize+0x270/0x270 [ 102.263521] tty_alloc_file+0x43/0xa0 [ 102.267327] ptmx_open+0x64/0x310 [ 102.270775] ? pty_resize+0x270/0x270 [ 102.274573] chrdev_open+0x257/0x730 [ 102.278285] ? cdev_put.part.1+0x50/0x50 [ 102.282346] ? fsnotify_first_mark+0x2b0/0x2b0 [ 102.286930] ? _copy_to_user+0xc0/0xc0 [ 102.290820] ? security_file_open+0x89/0x190 [ 102.295216] do_dentry_open+0x667/0xd40 [ 102.299174] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 102.304082] ? cdev_put.part.1+0x50/0x50 [ 102.308125] vfs_open+0x107/0x220 [ 102.311562] path_openat+0x1151/0x3530 [ 102.315431] ? path_lookupat+0xba0/0xba0 [ 102.319467] ? lock_downgrade+0x980/0x980 [ 102.323586] ? do_sys_open+0x2e7/0x6d0 [ 102.327451] ? find_held_lock+0x35/0x1d0 [ 102.331488] ? do_raw_spin_trylock+0x190/0x190 [ 102.336045] ? __lock_is_held+0xb6/0x140 [ 102.340084] ? _raw_spin_unlock+0x22/0x30 [ 102.344204] ? __alloc_fd+0x29b/0x750 [ 102.347981] do_filp_open+0x25b/0x3b0 [ 102.351753] ? may_open_dev+0xe0/0xe0 [ 102.355531] ? mpi_resize+0x200/0x200 [ 102.359307] ? get_unused_fd_flags+0x121/0x190 [ 102.363864] ? getname_flags+0x256/0x580 [ 102.367900] do_sys_open+0x502/0x6d0 [ 102.371587] ? do_sys_open+0x502/0x6d0 [ 102.375450] ? filp_open+0x70/0x70 [ 102.378964] ? SyS_read+0x220/0x220 [ 102.382566] compat_SyS_openat+0x2d/0x40 [ 102.386599] ? compat_SyS_open+0x40/0x40 [ 102.390634] do_fast_syscall_32+0x3ec/0xf9f [ 102.394929] ? do_int80_syscall_32+0x9c0/0x9c0 [ 102.399485] ? _raw_spin_unlock_irq+0x27/0x70 [ 102.403955] ? finish_task_switch+0x1c1/0x7e0 [ 102.408426] ? syscall_return_slowpath+0x2ac/0x550 [ 102.413330] ? prepare_exit_to_usermode+0x350/0x350 [ 102.418321] ? sysret32_from_system_call+0x5/0x3c [ 102.423136] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 102.427956] entry_SYSENTER_compat+0x70/0x7f [ 102.432335] RIP: 0023:0xf7f51c99 [ 102.435670] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 [ 102.443351] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 102.450596] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 102.457836] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 102.465077] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 102.472317] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 102.489289] binder: 10367:10369 ioctl 8010aa01 20000180 returned -22 [ 102.512099] binder: 10367:10369 got transaction with invalid offset (0, min 24 max 40) or object. [ 102.535789] binder: 10367:10369 transaction failed 29201/-22, size 40-16 line 3026 [ 102.567138] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/31 13:28:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) r3 = inotify_init1(0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r3, r4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r5 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r5, 0x0, 0x0, 0x0) write(r5, &(0x7f0000001000)="15", 0x1) sendfile(r5, r5, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r5, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:01 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="a925c28e1a7f7722bf"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001900)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001940)={{{@in=@loopback, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000001a40)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001a80)={0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0xc) r5 = getpgrp(0xffffffffffffffff) r6 = geteuid() fstat(r0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000020c0)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@rand_addr}}, &(0x7f00000021c0)=0xe8) stat(&(0x7f0000002200)='./file0\x00', &(0x7f0000002240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000002600)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@local}}, &(0x7f0000002700)=0xe8) stat(&(0x7f0000002740)='./file0\x00', &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000002800)={0x0, 0x0}, &(0x7f0000002840)=0xc) getgroups(0x8, &(0x7f0000002880)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff]) fcntl$getownex(r0, 0x10, &(0x7f0000003c80)={0x0, 0x0}) getresuid(&(0x7f0000003cc0), &(0x7f0000003d00), &(0x7f0000003d40)=0x0) fstat(r0, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = fcntl$getown(r0, 0x9) stat(&(0x7f0000003e00)='./file0\x00', &(0x7f0000003e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000003ec0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000004180)=0x0) fstat(r0, &(0x7f00000041c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = gettid() lstat(&(0x7f00000042c0)='./file0\x00', &(0x7f0000004300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004380)='./file0\x00', &(0x7f00000043c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getpid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004600)={0x0, 0x0}, &(0x7f0000004640)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004680)={0x0, 0x0, 0x0}, &(0x7f00000046c0)=0xc) r32 = fcntl$getown(r0, 0x9) r33 = geteuid() r34 = getegid() sendmmsg$unix(r1, &(0x7f00000047c0)=[{&(0x7f00000001c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000001640)=[{&(0x7f0000000240)="66c24df8cc5275658eae5c9f0cd8887b3fa00fb3ae58b64879030472", 0x1c}, {&(0x7f0000000280)="3cbb2c0e7743076c73c1fae7fbf0908e2e6ca038e164625ca008ab015057405e57184e725bb13597c8a4fc7758a3db8174102a71661fb7e303d159a2d76aae2e21ca261b4084095f2b8a7dacaee75f326d532b7038842dcb539cb069b1cf73ffb365bdef334b998b649faab5235ee929f6fc86da94ff32138395fd911f33dc66994d9b041791c94e4844fd851306a626a85b942cb4394f94a8cdd3b82c1bda142c0fb007893591494929a91ac9f0c72b8778ea21bd62", 0xb6}, {&(0x7f0000000340)="2f0d8bfbd1b06f0bad5f4d598ed98c", 0xf}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="d03d5d704a0654f34ba982a15f79db66fbb65f5655465c67ded16b9f554103c72fbe15daf86b72833c80efc307258d8a5ebc06658a4443f0bb179f28298e4ad43c81ab5358b1305d27a7ed91e069d6975aa8809cd688defca4d3d4c68850aa0d9196d658af8a9ff95b95d87639445df84029618b4e2f7d44462ec38fe7c5d80355b6c2dc9e27003fd0509b3c221d77484a4a1f162413700d01063e4cd8d8b60e3611470d54edd49574eed4cff799816343edc8c9abbe2a73a7ea53221c34efb05a263448c34d976244", 0xc9}, {&(0x7f00000014c0)="2407a1e6700bc6039f751399481a283afcf8919794aa0b1569f4ccc7cac87ecdc24ddba2597c33656bff3fa40816bc2f25b3cff18233c257b6c339a3b8e30b3cb1d4228d2a5dad569233cfae3980cd3cb74aacf9d09e21cf326658f8caae022b0a8c38c4ff79a3587e0e038534a00799412b4d02cbb352415be2a7935220bfa305f0e8bd05e2e6a50a0b1859514d186bfea33f14b38f8be8947c07c268be75ae97c1f5ca8366b2967344847ca550c7cf7e2ca8f90c0538e8f5f13e081c460f233f97f9f68b86f807a9a10cc8876ca3bd48da77e10db62e8ef31fc228e0b4cd0d3080", 0xe2}, {&(0x7f00000015c0)="10240f5e011bc76c661eda9afaff302026f98bd036581ebdeb98c5b96492158d14aed808663659783daa948c637230f8e3e2cdb9d5696e09d9c8ca15640e052ec4edd3d0197aaefc31c8225a2a2ea1eb017809a61921d56e9171", 0x5a}], 0x8, &(0x7f0000001680)=[@rights={0x14, 0x1, 0x1, [r0, r0]}, @rights={0x10, 0x1, 0x1, [r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x14, 0x1, 0x1, [r0, r0]}], 0x60, 0x8004}, {&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f00000018c0)=[{&(0x7f0000001780)="033c304a70638b1bdfcc78710ba44b810b842d5a2406f5f78a2ca6dafd8ee10635b28e424056ef11600ca4fad0b9cb777ea61069eee13edad86ea0392a1503d9c4bcfa417b8c8edeb607b9263f8ad6a4b93357c90b9d733a352ec434e5384dcde1cd330d324b5f5ad269f02f5a349eb2b00f3bb536ca647cfebfcdb3889495802b30eba6", 0x84}, {&(0x7f0000001840)="0d8cbac1c8fbf650d33e5d28614f5a171f65d56303195c55a02a6b18e3ca70b4a68e3799498e45d0ae80ea79422e01e4dde9da7b0be00616ee3cc41465d635e125074f4370209df251c3af052eef41d252d74b49157cc463d9ffbdc114136b28c109793498c440", 0x67}], 0x2, &(0x7f0000001b00)=[@rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r2, r3, r4}, @rights={0x14, 0x1, 0x1, [r0, r0]}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}], 0x58, 0x40800}, {&(0x7f0000001b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001d80)=[{&(0x7f0000001c00)="998c7237880377714e443139214897d3a31ca36535a13b9ec4359d9afa9b9264eba8c0bf81b624a685e6aa0a66801bcd874f83d7eb28358ae6af19b23d5778b423b7089b59d7ddc6649ec79ecb466c3e667d436120558a4bae969d3d6eac9108601190ca757c7b38692e993850085d6ef1a9133d9bec9921f69fdbd21a56b256bf06ec4b8eab2662f72f70bcf504a012ba2fd9ed37971097d439743436fcec74b5614abb97f281e4d6feb9bf782a709437e1db3629f5ee8dd16fec1bd25f1b", 0xbf}, {&(0x7f0000001cc0)="df2c50a49daedfbc8fcea33f45bbcdaa236f634785066b86980e28c8ff001d458bd849234e962328d5c10bc9fd3839515924f26bff68d560c499ee6ebd9c82f9a116295ca1a0fab6c54c1449099c49e543077be2b21907bde85e8e8e6d408344ce7a4bc1b9a578ce0fa60025157a5edd5cb3640a02c2a9d4e00bb0005e0a4774614c12b9f15de81929f070a24eb784581e88c266d15683d6ce8da8dda61fdadf9fa85864f91a4745f0122acb4d6398c186511ba11936ae", 0xb7}], 0x2, 0x0, 0x0, 0x90}, {&(0x7f0000001dc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000002000)=[{&(0x7f0000001e40)="1c46ef6020e9405c359dad653b2171025fdf6eb86d83b7c341827a34dc41c2b7ae3cb1589b8ed650", 0x28}, {&(0x7f0000001e80)="2659d0dfdeffd498503e30d7536007709ce0a1c16096b4ca4525fdfe24882721eb91b381281f37d88a2a8551844a1bd05ccdf04ecf4e448e6628cb9ae6fe9c511716945da1", 0x45}, {&(0x7f0000001f00)="4fcd1e87cb6bbd2ae9732fc2b07737d11bbde242a6437a4efba03027610ddaf7ed33277f7c1e74c4421697e2e1af81023933c79b40f9e0023033be8163f1d5634212fde5bb25765061c592e77b2ff94d572678fb76bd85bdf854c2c2fb600e5110cb5510c6de42a5c80707aef1747ac2f78205ddfaa097df7ce38a0dc55eb14e40", 0x81}], 0x3, &(0x7f00000048c0)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="180000000100000002000000", @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10], 0x64, 0x80}, {&(0x7f0000002340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000025c0)=[{&(0x7f00000023c0)="90b3a825867f5691a886b8213bda67b178611d621c1e54459004ec3b4304a5d921c0be1ccbd49a0bd78ebece3680632a03487cbaf88e9ad68e0221cbf9eeb1480e86df552236dec9436f6d1dda851b5c976f05838afa5d513e60e1e2cdc68e117deae9d71c08d8f23f887f9b2a26bd660469e524fbd614fab400a417b1f3ee6e4fd59c16b73b8344690ccc97a9f395184637c3dfe6008d2696951c31f8be9072cdc696a01866ee22e4b02340bd8eaaf4e550d5946f949c", 0xb7}, {&(0x7f0000002480)="3efec20ecc2728c9b66dd1a80cdf07df585e362e81695c11f18b4f4add8f620d28d6a1689009847c34d2de554862ea4a83efec6b8d9d12e71ee74eb9a0ed12170a3317c97f160df61842ebd8c95b7a72a06f1f91fd451bd87af3055a242cbbccc9f8bb801b481f1ffb18e0a39e998821d2c7a4e980b5fe74af970ec711faf3dcb66cbea2ced0a15bda9bddc2682b7a775062b880c434d6450daa687c43226f7dc5988c55b30f45e2e9f44f9e5b562b418c3030265b2cb7dc18d1e8736e20ef869c29c81d79f3dbeed0d4a24ee44944bc6477dce9cdb0d0b0f6191764b2dcb36cca19a68f9727bc97c35637", 0xeb}, {&(0x7f0000002580)="16250978459d3431f2580d0ec077a2499aada447a1f8a3ffa1a7daa1764be4d1592f88676df81066", 0x28}], 0x3, &(0x7f00000028c0)=[@rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r11, r12, r13}, @rights={0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r14, r15, r16}], 0x6c, 0x1}, {&(0x7f0000002940)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c40)=[{&(0x7f00000029c0)="599cb6f3b9af20795e7a784b103469b49a746fc5190e3a7bc589ee3231e7d2d5caf635e6d367bd6488a6004b106ef2a0e72f2dc87334cc344d789b349dbc0e7af87d456b5f4880a4f7236a8acd31e8bad846de2f70ca9a15bf56904b3c4d437c1f23dae8f42baaf4be2b9c46e13101795585eb5a1263c2427042f6e6dd807b3bd93523e3cc1e6166a610bfc57121f9cb0d2f2d7f1febfed44275c1552b2e12e6caae967263601c5894f72fb7b5ce83397b2d2d30950ff5d1e0d5f917edd0acf40f9d1a509f2fe6a1f433ba4d533ba8f0c769b191e05703ceffcaf53c814280f6176ae8277919d5c15dc161208bd75591", 0xf0}, {&(0x7f0000002ac0)="c3f0bf382de2ba4dcac15f64b5660ad51b97112059bb3450b3db7248b5b20764d0cdbd39c62e7077bd6423d98fe4263ae48e57165356533f7df38c56148da294eef067eeafdc8383bfe1efae087bc1b9f6d2b1f4eacaa9fd10a9fcaeb70157aeea030e2e1921ffd1bf474c365c633229a996b034ff705bcc01f8c87f70b2f9e5bb663ea83befd7a71fece43c882dbae2b51b816e907a1f8814de594ca16ac2765f", 0xa1}, {&(0x7f0000002b80)="46123c5476e56114566b3e8871a70968ec9ccf84398fd8bade0ac55395c73d01fa88d9ef574d665bdee4a842f372ca64c6024ddeef9570ba366a5a99573f12f49fd08d7b95aa05322494d7782fd6a9a2464aa3f33f3ee8cb22a422c1f12456afb867942e34902f159dbdeda2963f14541e4b3c443121347f318fa25d1ab7bcd2bd2f3ca0ed345ae6c123e065d7355baa636fdab6da50f3051312a16e18857cfabc62222c248078b9bce08d7af1eb9715c42dc8d5668ddb346b6e59a66c5e898d5b411c9636b6b7719c9f119e0da2a4b22ea8779c771dcf7cb6eaf7d8a1eec2a4eab0c4fa4afe33e09a553aa92fcb8fcdfb0dc395d7f32f5ad7dc705ce8aa29504da3ddf2babdb19b68c799e808e1bf3481ea0960bf01b392fd10438466a118d403025b261585cb26fe5a2ae82d7ebc68acef46058c9d2f985d583a2d2e4e852e27097390d5d573f03572438fbc3a0b315505779e3b5b1b272cf0a207a5aef595a01a8d19b4956a16de096ed0576487b6cc10fb8b5deb46fd98d6381acfc6d42449f02c113d480f042b259f3f786b57ecb85f23705b3b88958fb1eb49166816b3ae316fa4ac16d135860a290c573ffe96cf7ebfe38d440b500f4e772f3de1abd042a6e715a027ed3fe9d1782fc1036fa9e617756d4a1129ff274fa7756fdb60dd785c18ef59dc41a90b9b1132bc3045d8f7410303783e8b89f528f8ce981f327d7dd8914754b8e3de62529e2953ba5c1d3b184cdb0264b96053691e48d20befed4da3eada1f074ee9ef60436c2efd524dd3735d27270d4d4b96b1540fa494bc64a49bc6ee2478816b218a131ce24acff3bea129fba4b42fbf929f35b9efa83b51439259ed849c6f71926a7814aeae17e132709fc7a88d504820a45c04989565823fa50052d9c44724e241182c8d9a2b9b2796ce1ca7ae03456e85bff77e8b60f6bd46dbb91a616ead2a662a1a1fbf0b5cfd5224afe394e2f4daa8cb1b30adefb6fd63acf374bc5aa80dfcf00e6e5235c91c7feb1937d5a61ecf8b2f92e77ed52dd822b863a2a4f8eb2307b47eabcb85c34d5213f23f4ce154bbad092ab7382a023a1a6d2783f1f8476a82a2e9ba3034f7ab45aef7d530ed4e4cbcf80a88dd48b75e57af8292bad556ff64082bea77be1e95c53f62f8ef8305d4e739e45bf0a13cfd986ea7265beee8a0d15a83db3362b77268319de254d3594891e7fcc70b9a1d979c94e4b8565097862b873d9aafdcbd3c4cf318ee372f6d82d6efdfb6c6821ae38d96b54d73b34ea34a8c898254fe117185aa8def085da47d1c6e477b12c952a59a26a4f21b9f38b7b2157c318abcb6fb34e4161436889a9dcd6dcfc81455ac778a6bd9444daac0fe4978237fb864bbc7f8ee0adfbbb9f37e4616c0d542767eba4990286246d9d2446fcba7fd3e6a8d8dfc92139e2a3a879d0f51cae7c17e34f4bcf7c0091182685ee5b9616ab5cff981f9fefa6b8f410796e1b1dfca6500779d925a4e1fc26fd620c4ecba0df7872ecfd3c5f994bbbafda5a6da78064a54367baeb4983e39998fa0e619f514a1c8997e009be7e6b1e5e31098a0f3a30db1df9003b08656c53336abe6ba3ab62329d535e378974872b6a401a5735a498a9d2a602627131f3d211fcec5431ddc0813568e41b5bdc39abe4afff75a311d3fb9a2ad3874cf0671747e2f903950914a0688f4ce96cb5921db31d8ec6b05246ddcff48552269b384a71b0516e11b7edff6871c175114669495cb645a4d10b8e53ba360c84ac7cf26e09c349773a45b00de9d15886538d7658b485803664a335e3427d368b6ad740dd764edc72a708af21e7b86196bda54eb065c102a00ea0e596ccc5c2ded73b7c6374f0487f01f32002f1df788ac9123c6e03e624f57d338e32560518736679e8ca7de04592585438c0da1898fa0f4e5208e553caa10d02e3ea302b3eb271fd8def94f65b2825a23d8045c253efa85b6431480f2a3f14317ffdb872de4660a511ec8b5090ad05ed107a933efa0881f02a342f60607aa9f0d7e4511eefce9dc19b1835f1c597b35657ff72b0bded55624d9cabc10168c005c2c689e2588b34e22aab9625c602a06b4012b184c3b6e10a1e2f12af1f5f698e201fad915b2cd9e881ae33916f1e3d065b6f7ad290b563ad02ccb5db9a2deeeb7245383383c2d5853769e43fa6d7f98d4ef14305cb87fcbe3fda775315b97f285e09e9606f2f2b027ffac04a6894d80a3731534c54b38cc2e71b9b6951b48c562a87fe96687b10ed8fd9824ae2df75512a270b25ce49bd592d81345ed55240c47c1c1025e814faa056888ed3af60b7a86fd3725fcb2e693ae19e58f3117924dc02450a2ef808d1a48251a3445df5dfe3a9e2eaa5bf3defbc60c1b6d5ce382d7a9263e25e1a338c6599c32e2dc1ffcbe40d617c3118ae4cf8dfe9493f8bc4c1e43175f872ebb642c1c570f76a2cb51432385029d829d20fbc1d84ebb07d0bb7391512b8b3e744e8e4ec202bfef3512d3a0f657881bca7090394765e2317023010f1f59a4e59dda5cac44abfaedf2f37039bead4852ce08867a2ea876306573a406b0ef5c857e22324f8a18ad8c137716d27b67baae58075845bdcb115ff3990665de1675fd0f1307f30e0ded4d08bfa3c640469572ccc088746346f02814772ab347ca441b129110e2693c010d17c6affe663d481bca5ba4960cc598173be01ad4f2c99452e9259d59e669ea162136c44eef41472b9b12b1e029647c849cb296e160fe7f32925a7c876dea20c78169c664b7c7c8b482981ee6e7f26e8cedf02bfde4d8cbae39aabcad874dfa467b1770f6487484c529411a7030d80219940e6842fe0d2f82e8a77219898e57c5d72e8c7b3b851b2cc693513190b808c799d42051e507468504a68941bda6813caca58880064b6482bbf4ff367700bb1179f3509ca15cd2d0051d2a31339005d75a6c27a631c93c98f38fc31541b50aa282ab5917cd557c6d7bf78f7328f7e10242c3ffbc5c8b3f81534ae334be6cc68f2cf676c819c47ed19f2513ff12a6405ea8ac4c1ac77726fd9add740d8adf6e5da40a4c8f9dfc443a0d7b83a342106b2165bb838de9278ee08bb6540e139cfe055fe7996dcdd8a8cfdcaaeaae784e12aa7bf1c53852135b64ce67ec549bb2d876eb8eb08825b92649042c9d866ed42c64986876283509d57d94cd58d693167f11d8c8d79447ea630452438a408b651de17792490770a9682361e36d7e35f7eb3b48afd8b3b96066bf658cedee63729528c35814f668a919d069d33488d6509f3e89cae99fe08e7a20e7e7115746eda38762bc17d59e3fde6ff101de037fef97d592cefd79d2bd07b0e781dd861701a53fb5554c506f557047dd0b31d6d80a28512544d31e160170dd5cb0f728dfb959b9839c30357561174dda269f42a889d6a6d14cb2fd0a24fca41fcd2dff26376b82d4bbddc7f658aa9c4266c0416e536f5fbb6b2062a45f249ef392a9631b00ea06c402addab3634b758f651e4df569762721a6a50c03972f6ef5de4a56919dc0ef3c9b8d16c66dd5f1a4a8c2a94c07eb6845b23d69f2c95cbea332273f3f7d2da0489d16c6d58e15ff160424b3a507e9ba940d74a906f0dcfa7ddd6bdb6855be6da40f148f7b8115e8578373d4e0d1ff8319ef55f9cf3458537a2581bbd5d1961a55f9c131136454a3610258422f49073795cbff16e3cec1c716631a6892d7b56f041f4938feede9ce4439b36d3f20c83f14d5a63258b5da74ee674dee7d5a46d4f7aec5da697a842cd25be76e299bcbd3acd339d19148321d6a0457d3d3ad603113f9f3e4c646bdf033e3e36fb530daee2d2ed3aa1d73c52694d1dae8385056b223ba287dede3e077e9d7c767cfe29017fd3bcbc79e3234eb9aa36530f436c81ed36ec16d832994ca4c6aecd43500fa65fa882a2a130aa8e36c274c05bab7285123c93f269081aae774f7403adb3d828c87e10ae49f7e5df2aa01b39d01b8b265ac5946c7bd6254aa626a32068e41cbaafb55983949a1ca1915f50ae1a90d3697ec8f188a02a5b1ed20d3fc14d255e26fe22d8d081c7769a7e7eb43e3a74d2a7fcadfd36fbf4bf122ab84e14f5f7d12fe1fdcd2039965ac4e5a312816e0d4498c9728cc0fdb7185444823ef243e1c99cf9fe14ea568e39a6b14e3b22d5ccc232d90c3a9d71070b7241e4908d7c26b83f3ff1073c5a1cef7a5721069fb705a708f44797e42008dbaa232c5a8b2f360a27cf7f6d93e7e5ec13c28e0ffa621299b13b32d704129b6800f1239e60db9cbdd996b866bcb9180ceb497796a120ca182ce20d8502183bea7ea492c68bb592a16e4bc442be386b4209d7a1e5b5b3bc644478f35bbbe47eaf3ed57c84ea80678dfd40c5165495eecd04a88acc0c4a34e310845896b5ea71e926fc2d79e56e995757c4a29f90a545f63551f48123b9200f52b0cf9f36397327780ab0b9fe8eb9107be8d3f89d9609b466f00165f4aa51eebb70d336b4d84ae4d04d2ce0608e8e058627bed229c4333c4006ac9dec5f5d537eec961126109bc87fc6e6c26e1766304b8f98fd98ca5d237ce8738b29aae77db8812494971b38a9c3bde257ea81b39998465ebabd6f8da02a90980b3260d3a34992abcd043b9028a9498104f2942ecfc47e6edff01895cd3ea14690cb9bb1afcf0935f6a32124f7001977ae92043e78faffcf3826d9448e43bbc2314a00bb0dd399fe5c219c7662c0a7541852a3dcbdd42825bfc5af07cd58e90bdf943dece97b242cdbee973f3b61cb57581f6c49eb32b9170b47e695001fe970edd590d12e699468a4f898cfe46d84d5f82ee79148c7d0c16dd93e1f42421815ea8a1a09df6b418d306463bb445a9d9331ded8b70c9e60ca56db5ee4fc762f9dcafb0151f7844f293782441f520e5d366deb11ad8441a1b566a2fd973636fe8b150cd2fa1e2cf97ccff99d797f5e25368881117c175fa64e44ce2d760d9f76d073c5e7d65c631ad32fa87487e1e4bccf8a4f242a609d37b78613827546e9e784a3dabf5651a8c0b8fc40f714180f1341c41cf243f0dfc0106240b0009f4e31201755a7ab476d3297b3682fb4feb160064d60801ad2cd5307824407789a355eb75e8a753d9de9170f39c2610708be7c777cab20ebb680338ae99506941a74e961f878e98466cd303e191373c103a4a2b00c9368424f6a3dd716dd53eac9cc1f6a8bbbeb4be5c1cb2c8d4257ed5e27ce9cf06af197f7102067d1d65330cfece559af7c13cbc780f70780415d381bf893a983399458b9bc26dec9ecc84a54b402de5a271b10f0350130fb9016150f30e7b87993b5f37606f0e21a65f351e06f5f9b2b32d300278832ed032d1902464abc5740f243fd5c8421ed0ce3ebb0d7e8815abbd9ac77a95d2358dda6bf5ae51dc0a9e2cb40efa1e141ce41b6ae1a90f072ae6b6ef46ffc71f454a78d8969c45d30991a991931439dcbed5522e5dfef9f496b48ae4423547579100bbdd43011d3b653a9e2b944f20c57e6ff42582e35b9f51d43086cd0aacfb62a3e0ab9fda433fc9803fcb7527f669c7864f267f214cf66e40a1d5e7625e95899f8b353c6ab612037cd2f9899101de77af22c5a154637239e213e57eb132b4d0c4669058ea29b344d790bb5fefe8097f24f76d65d480569818f241ab2c24e14cbd752acbcb7d989fb0d31b853e8d0f67f1a39bf68672746c24293ad956eb78431567e2147bc7df2917a03e9ef9e985299b85212158875e8875242544b71abbd696f41034dcf251eff45cd7720c94b1299fbdb4de581e", 0x1000}, {&(0x7f0000003b80)="5a6c5b56f1c9b6e01b7ef301d68c6270b3f8ceb1bcfa2c04922c4f387093b2da45ef27f75945e60eb95d9bad7c4ac5ed3ba6cd8b4c09c2d0f339e232b2a09686a3e69491aedc2b54437f666603d590bc93a355c5da07ad0286aee0b494bd55403fdaba7fecfb20e5fe094b756a384d5b4548a28313378e0eade002bfe0c0a187eb2326d2682371d113d633362d", 0x8d}], 0x4, &(0x7f0000003f00)=[@rights={0x10, 0x1, 0x1, [r0]}, @rights={0x2c, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r17, r18, r19}, @rights={0x10, 0x1, 0x1, [r0]}, @rights={0x1c, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r20, r21, r22}], 0x98, 0x40}, {&(0x7f0000004000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004140)=[{&(0x7f0000004080)="7f1c203791650de7755da7c1e3a01e05d2669ac12796cb92b660d7d7877bb31207cc861523e128d1294028fc3663bd749d1b5826ea6a2efcbf9c63b7ddf818a82b055f71abd56e47211f3e50ab5e2e91838eaa34b258f58eafc2f91070ad6110760bff767283ea548cfa4cf77a5f457dfa67c7e6ead16dceb8c8baf6382d66496e5fce01e6298ad7ca6bc88ec98b2404dd1c25dc2516b776f32da1e1c639581791cd8e001a8a632c4ce3160e4314b5aa153f023f1397", 0xb6}], 0x1, &(0x7f0000004440)=[@rights={0xc, 0x1, 0x1}, @cred={0x18, 0x1, 0x2, r23, r24, r25}, @rights={0x24, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r26, r27, r28}], 0x60, 0x4004001}, {&(0x7f00000044c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000045c0)=[{&(0x7f0000004540)="3318bbd10baceb4b7585c499647e96a47746d3beea616f217d2fa3ec3f698f2ed9e7f69eb6627f22baaf6ac382588415fbfba4cd4a0faee6167a72faabee2cf49a7df453", 0x44}], 0x1, &(0x7f0000004700)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0, r0]}, @cred={0x18, 0x1, 0x2, r29, r30, r31}, @rights={0x10, 0x1, 0x1, [r0]}, @cred={0x18, 0x1, 0x2, r32, r33, r34}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0, r0]}], 0xb0, 0x4}], 0x8, 0xc040) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=""/154, 0x9a) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:28:01 executing program 3 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) 2018/03/31 13:28:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6}, &(0x7f0000000380)={0x0, 0x3, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:28:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:01 executing program 0: ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f0000000040)={'syzkaller1\x00', 0x6}) timer_create(0x2, &(0x7f0000000080)={0x0, 0x27, 0x6}, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bond0\x00'}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xffffffffffffffff}, &(0x7f0000000240)=0x8) clock_adjtime(0x7, &(0x7f0000000340)={0x1, 0x20, 0x6, 0x3f71, 0x8181, 0x3f, 0x0, 0x2, 0x80, 0x0, 0x7, 0x7, 0x7, 0x0, 0x5f71, 0x0, 0x5, 0x7, 0xff, 0x0, 0xc78, 0x40}) r0 = syz_open_dev$binder(&(0x7f0000236ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4, 0x20011, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000180)={&(0x7f0000ffa000/0x5000)=nil, 0x5000}) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008000)={0x44, 0x0, &(0x7f0000004fbc)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, 0x10, &(0x7f000026c000)=[@ptr={0x73622a85, 0x0, &(0x7f00004edf8a), 0x1}], &(0x7f000000afd0)=[0x0, 0x0]}}], 0x0, 0x0, &(0x7f0000009000)}) ioctl$TIOCLINUX5(0xffffffffffffffff, 0x541c, &(0x7f0000000100)={0x5, 0x5, 0x7, 0xffffffffffffffff}) getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000540)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}, 0x8, 0x0, 0x78}) sysinfo(&(0x7f00000005c0)=""/23) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000600), &(0x7f0000000640)=0x4) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f00000006c0), 0x4) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000700)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x5, 0x0, 0x400}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000900)='/dev/ppp\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000ec0)=@filter={'filter\x00', 0xe, 0x4, 0x0, [0x0, 0x20000800, 0x20000be0, 0x20000d70], 0x0, &(0x7f00000007c0), &(0x7f0000001340)=ANY=[]}, 0x50) 2018/03/31 13:28:01 executing program 7: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) read(r0, &(0x7f0000465f8e)=""/114, 0x72) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) perf_event_open(&(0x7f0000000140)={0x4, 0x70, 0x8fc3, 0x8001, 0x6, 0x4f74, 0x0, 0xfffffffffffffff7, 0x4200, 0xee54891e249a0c5c, 0x2, 0x4, 0x6, 0xbf, 0x4, 0x3, 0x8, 0x0, 0x10001, 0x6, 0xfffffffffffffffe, 0x3956765b, 0xfffffffffffffff9, 0x80, 0x5, 0x9, 0x80000000, 0xff, 0x8, 0x2, 0x0, 0x4, 0x5, 0x800000000000000, 0x3fdc, 0x9, 0x3ff, 0x884, 0x0, 0x4d, 0x4, @perf_bp={&(0x7f0000000100), 0x9}, 0x1000, 0x3, 0x9caa, 0x0, 0x6, 0x9, 0x3}, r2, 0x6, r0, 0x3) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f00000000c0)={0x2c, @empty, 0x4e21, 0x3, 'lblcr\x00', 0x4, 0x4, 0x7b}, 0x2c) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f}, 0xe) ioctl$sock_SIOCGIFINDEX(r0, 0x2401, &(0x7f0000003780)={'bcsf0\x00'}) read(r0, &(0x7f00000010c0)=""/4096, 0x1000) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) [ 103.197439] FAULT_INJECTION: forcing a failure. [ 103.197439] name failslab, interval 1, probability 0, space 0, times 0 [ 103.208877] CPU: 0 PID: 10402 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 103.216227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.225558] Call Trace: [ 103.228123] dump_stack+0x194/0x24d [ 103.231731] ? arch_local_irq_restore+0x53/0x53 [ 103.236381] should_fail+0x8c0/0xa40 [ 103.240071] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 103.245149] ? devpts_new_index+0x98/0x290 [ 103.249361] ? trace_hardirqs_off+0x10/0x10 [ 103.253659] ? __might_sleep+0x95/0x190 [ 103.257608] ? find_held_lock+0x35/0x1d0 [ 103.261651] ? __lock_is_held+0xb6/0x140 [ 103.265691] ? check_same_owner+0x320/0x320 [ 103.269987] ? find_held_lock+0x35/0x1d0 [ 103.274029] ? rcu_note_context_switch+0x710/0x710 [ 103.278936] should_failslab+0xec/0x120 [ 103.282883] kmem_cache_alloc_trace+0x4b/0x740 [ 103.287444] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 103.292259] ? check_same_owner+0x320/0x320 [ 103.296558] alloc_tty_struct+0xda/0xa20 [ 103.300595] ? __do_SAK+0x30/0x30 [ 103.304030] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 103.308848] ? mnt_get_count+0x150/0x150 [ 103.312883] ? dput.part.20+0x207/0x830 [ 103.316834] ? module_unload_free+0x5b0/0x5b0 [ 103.321305] ? __radix_tree_preload+0x133/0x1c0 [ 103.325948] ? mutex_unlock+0xd/0x10 [ 103.329636] ? devpts_new_index+0x142/0x290 [ 103.333933] tty_init_dev+0x78/0x4b0 [ 103.337627] ptmx_open+0xf3/0x310 [ 103.341054] ? pty_resize+0x270/0x270 [ 103.344826] chrdev_open+0x257/0x730 [ 103.348517] ? cdev_put.part.1+0x50/0x50 [ 103.352553] ? fsnotify_first_mark+0x2b0/0x2b0 [ 103.357112] ? _copy_to_user+0xc0/0xc0 [ 103.360974] ? security_file_open+0x89/0x190 [ 103.365361] do_dentry_open+0x667/0xd40 [ 103.369311] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 103.374212] ? cdev_put.part.1+0x50/0x50 [ 103.378250] vfs_open+0x107/0x220 [ 103.381680] path_openat+0x1151/0x3530 [ 103.385543] ? path_lookupat+0xba0/0xba0 [ 103.389583] ? lock_downgrade+0x980/0x980 [ 103.393704] ? do_sys_open+0x2e7/0x6d0 [ 103.397566] ? find_held_lock+0x35/0x1d0 [ 103.401606] ? do_raw_spin_trylock+0x190/0x190 [ 103.406161] ? __lock_is_held+0xb6/0x140 [ 103.410197] ? dgram_connect+0xb0/0x360 [ 103.414147] ? _raw_spin_unlock+0x22/0x30 [ 103.418271] ? __alloc_fd+0x29b/0x750 [ 103.422049] do_filp_open+0x25b/0x3b0 [ 103.425822] ? may_open_dev+0xe0/0xe0 [ 103.429597] ? mpi_resize+0x200/0x200 [ 103.433373] ? get_unused_fd_flags+0x121/0x190 [ 103.437928] ? getname_flags+0x256/0x580 [ 103.441963] do_sys_open+0x502/0x6d0 [ 103.445650] ? do_sys_open+0x502/0x6d0 [ 103.449511] ? filp_open+0x70/0x70 [ 103.453032] ? SyS_read+0x220/0x220 [ 103.456638] compat_SyS_openat+0x2d/0x40 [ 103.460672] ? compat_SyS_open+0x40/0x40 [ 103.464705] do_fast_syscall_32+0x3ec/0xf9f [ 103.469004] ? do_int80_syscall_32+0x9c0/0x9c0 [ 103.473568] ? _raw_spin_unlock_irq+0x27/0x70 [ 103.478039] ? finish_task_switch+0x1c1/0x7e0 [ 103.482507] ? syscall_return_slowpath+0x2ac/0x550 [ 103.487410] ? prepare_exit_to_usermode+0x350/0x350 [ 103.492400] ? sysret32_from_system_call+0x5/0x3c [ 103.497219] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 103.502040] entry_SYSENTER_compat+0x70/0x7f [ 103.506421] RIP: 0023:0xf7f51c99 [ 103.509756] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 [ 103.517435] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 103.524677] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 103.531920] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 103.539162] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 103.546406] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 2018/03/31 13:28:01 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r2) r3 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r3, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32], @ANYRES64], @ANYBLOB], 0x10) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(r3, 0x0, 0x0, 0x0) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) sysfs$1(0x1, &(0x7f0000001000)='$\x00') unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) [ 103.573599] binder: 10406:10411 ioctl 8010aa01 20000180 returned -22 [ 103.596775] binder: 10406:10411 got transaction with invalid offset (0, min 24 max 40) or object. 2018/03/31 13:28:01 executing program 6: r0 = syz_open_procfs(0x0, &(0x7f0000252000)='map_files\x00') setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000540), &(0x7f0000000580)=0x4) accept4$ax25(r0, &(0x7f00000001c0), &(0x7f0000000200)=0x1a5, 0x0) getdents(r0, &(0x7f0000000040), 0x7385baf8532ca971) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000e9bff0)={0x1, &(0x7f0000f07000)=[{0x6, 0xfffffffffffffffe, 0x0, 0x101}]}, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000600)=0xc) connect$inet(0xffffffffffffffff, &(0x7f0000987000)={0x2, 0x4e23}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00004eef09), 0x0, 0x4001, &(0x7f0000848ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000e96fc8)={0x0, 0x0, &(0x7f00009df000)={&(0x7f00007cc000)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_x_sec_ctx={0x1, 0x18}]}, 0x18}, 0x1}, 0x0) time(&(0x7f0000000780)) sendmsg$key(0xffffffffffffffff, &(0x7f0000351000)={0x0, 0x0, &(0x7f0000886000)={&(0x7f00000001c0)=ANY=[]}, 0x1}, 0x40001) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x2a, "28269bcb13202a2b2fee172fd0ce16245080087ac6e5dba05788e4ff6302529dba83dcc8cd21ff1656a0"}, &(0x7f00000000c0)=0x32) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x6}, &(0x7f0000000180)=0x8) shutdown(0xffffffffffffffff, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000002c0)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) select(0x40, &(0x7f0000000340)={0x200, 0x7f, 0x0, 0x0, 0x0, 0x10000, 0x6, 0x1}, &(0x7f0000000380)={0x0, 0x0, 0x1800, 0x0, 0x0, 0x3, 0x0, 0x9}, &(0x7f00000003c0)={0xad7, 0x734752c5, 0x8, 0x0, 0x0, 0x800000000, 0x0, 0x80000001}, &(0x7f0000000400)={0x77359400}) r2 = syz_open_procfs(0x0, &(0x7f0000006a00)='net/raw6\x00') preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0) accept4(0xffffffffffffffff, &(0x7f0000001100)=@ipx, &(0x7f00000000c0)=0x80, 0x0) 2018/03/31 13:28:01 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4e1db706865ef"], 0x43) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:01 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(r2, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) fallocate(r2, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(r6, 0x0, 0x0, 0x0) write(r6, &(0x7f0000001000)="15", 0x1) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x10, r6, 0x0) unshare(0x3fefffd) clone(0x0, &(0x7f0000b53000), &(0x7f000084effc), &(0x7f0000c35ffc), &(0x7f0000b3bfff)) ioprio_set$pid(0x2, 0x0, 0x0) 2018/03/31 13:28:01 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="baa42583f5395f706906eb6bf3b05f41b7b493a1338a091d9b7398d95c954b955025e33e868c69d8c4cc8cbf32a427e0439c1df9aa15d0db56c0096aa50b8d1de3b9ec019420704f9efbc1a50213bacc0d523b388dc7f7393075361e3b25eb2501d67202a199601683dc47737d2890d7a83efeeb46587deeff82544862cf9ea0bdcc60be5642fbdbf0e39f073cd9371395365e152894b8b270f30400000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r0 = creat(&(0x7f0000000000)='./file0\x00', 0xb3) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, [0x1ff, 0x6, 0xcf, 0x401]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x25}, [@ldst={0x7}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) 2018/03/31 13:28:01 executing program 3 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000fdaff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000fd9ffc)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4000, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCNXCL(r0, 0x540d) memfd_create(&(0x7f0000000100)=']\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000200)='./file0\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYPTR64=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000180)=ANY=[@ANYRES32, @ANYPTR, @ANYRES64, @ANYPTR]], @ANYPTR, @ANYPTR=&(0x7f0000000440)=ANY=[@ANYRES16=r0, @ANYPTR64=&(0x7f00000003c0)=ANY=[@ANYRES64], @ANYRES32, @ANYPTR=&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32=r2], @ANYRES64], @ANYBLOB="f40e89e23b03846a2069d9214fe4c242bd48d46c442086c2f3ad587d31b68aaa87ca5a606b864917f823cf47d4"], 0x3d) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000000)) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = inotify_init1(0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) dup2(r4, r5) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@sack_info={0x0, 0x9}, &(0x7f0000000280)=0xc) add_key$keyring(&(0x7f00000004c0)='keyring\x00', &(0x7f0000000500)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f0000000600)) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x0, 0x0, 0x8}, &(0x7f0000000380)=0x98) r6 = memfd_create(&(0x7f0000000ffc)='$\x00', 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) sendfile(r6, r6, &(0x7f00000006c0), 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x10, r6, 0x0) unshare(0x3fefffd) [ 103.626822] binder: 10406:10411 transaction failed 29201/-22, size 40-16 line 3026 [ 103.728278] binder: undelivered TRANSACTION_ERROR: 29201 [ 103.805581] FAULT_INJECTION: forcing a failure. [ 103.805581] name failslab, interval 1, probability 0, space 0, times 0 [ 103.816881] CPU: 0 PID: 10430 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 103.824226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 103.833559] Call Trace: [ 103.836133] dump_stack+0x194/0x24d [ 103.839744] ? arch_local_irq_restore+0x53/0x53 [ 103.844390] ? __unwind_start+0x169/0x330 [ 103.848517] ? __kernel_text_address+0xd/0x40 [ 103.852995] should_fail+0x8c0/0xa40 [ 103.856694] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 103.861778] ? save_stack+0xa3/0xd0 [ 103.865386] ? trace_hardirqs_off+0x10/0x10 [ 103.869689] ? alloc_tty_struct+0xda/0xa20 [ 103.873896] ? tty_init_dev+0x78/0x4b0 [ 103.877761] ? ptmx_open+0xf3/0x310 [ 103.881360] ? chrdev_open+0x257/0x730 [ 103.885224] ? find_held_lock+0x35/0x1d0 [ 103.889262] ? __lock_is_held+0xb6/0x140 [ 103.893318] ? check_same_owner+0x320/0x320 [ 103.897627] ? rcu_note_context_switch+0x710/0x710 [ 103.902541] ? lock_release+0xa40/0xa40 [ 103.906501] should_failslab+0xec/0x120 [ 103.910460] kmem_cache_alloc_trace+0x4b/0x740 [ 103.915034] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 103.920040] ? trace_hardirqs_on+0xd/0x10 [ 103.924182] tty_ldisc_get.part.3+0x66/0x140 [ 103.928583] tty_ldisc_init+0x19/0x70 [ 103.932366] alloc_tty_struct+0x18b/0xa20 [ 103.936500] ? __do_SAK+0x30/0x30 [ 103.939944] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 103.944764] ? mnt_get_count+0x150/0x150 [ 103.948806] ? dput.part.20+0x207/0x830 [ 103.952767] ? module_unload_free+0x5b0/0x5b0 [ 103.957238] ? __radix_tree_preload+0x133/0x1c0 [ 103.961885] ? mutex_unlock+0xd/0x10 [ 103.965576] ? devpts_new_index+0x142/0x290 [ 103.969879] tty_init_dev+0x78/0x4b0 [ 103.973569] ptmx_open+0xf3/0x310 [ 103.976996] ? pty_resize+0x270/0x270 [ 103.980776] chrdev_open+0x257/0x730 [ 103.984474] ? cdev_put.part.1+0x50/0x50 [ 103.988523] ? fsnotify_first_mark+0x2b0/0x2b0 [ 103.993092] ? _copy_to_user+0xc0/0xc0 [ 103.996956] ? security_file_open+0x89/0x190 [ 104.001339] do_dentry_open+0x667/0xd40 [ 104.005287] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 104.010189] ? cdev_put.part.1+0x50/0x50 [ 104.014232] vfs_open+0x107/0x220 [ 104.017666] path_openat+0x1151/0x3530 [ 104.021539] ? path_lookupat+0xba0/0xba0 [ 104.025582] ? lock_downgrade+0x980/0x980 [ 104.029701] ? do_sys_open+0x2e7/0x6d0 [ 104.033565] ? find_held_lock+0x35/0x1d0 [ 104.037599] ? do_raw_spin_trylock+0x190/0x190 [ 104.042153] ? __lock_is_held+0xb6/0x140 [ 104.046196] ? _raw_spin_unlock+0x22/0x30 [ 104.050325] ? __alloc_fd+0x29b/0x750 [ 104.054101] do_filp_open+0x25b/0x3b0 [ 104.057878] ? may_open_dev+0xe0/0xe0 [ 104.061654] ? mpi_resize+0x200/0x200 [ 104.065432] ? get_unused_fd_flags+0x121/0x190 [ 104.070252] ? getname_flags+0x256/0x580 [ 104.074299] do_sys_open+0x502/0x6d0 [ 104.077991] ? do_sys_open+0x502/0x6d0 [ 104.081863] ? filp_open+0x70/0x70 [ 104.085375] ? SyS_read+0x220/0x220 [ 104.088990] compat_SyS_openat+0x2d/0x40 [ 104.093037] ? compat_SyS_open+0x40/0x40 [ 104.097083] do_fast_syscall_32+0x3ec/0xf9f [ 104.101382] ? do_int80_syscall_32+0x9c0/0x9c0 [ 104.105937] ? syscall_return_slowpath+0x2ac/0x550 [ 104.110838] ? prepare_exit_to_usermode+0x350/0x350 [ 104.115832] ? sysret32_from_system_call+0x5/0x3c [ 104.120657] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 104.125494] entry_SYSENTER_compat+0x70/0x7f [ 104.129906] RIP: 0023:0xf7f51c99 [ 104.133241] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 [ 104.140921] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 104.148162] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.155407] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.162652] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 104.169893] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.177405] Kernel panic - not syncing: n_tty: init_tty [ 104.182773] CPU: 0 PID: 10430 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #283 [ 104.190110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 104.199442] Call Trace: [ 104.202009] dump_stack+0x194/0x24d [ 104.205619] ? arch_local_irq_restore+0x53/0x53 [ 104.210261] ? vsnprintf+0x1ed/0x1900 [ 104.214044] panic+0x1e4/0x41c [ 104.217211] ? refcount_error_report+0x214/0x214 [ 104.221940] ? trace_hardirqs_on+0xd/0x10 [ 104.226066] ? tty_ldisc_init+0x58/0x70 [ 104.230022] tty_ldisc_init+0x69/0x70 [ 104.233802] alloc_tty_struct+0x18b/0xa20 [ 104.237928] ? __do_SAK+0x30/0x30 [ 104.241367] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 104.246183] ? mnt_get_count+0x150/0x150 [ 104.250216] ? dput.part.20+0x207/0x830 [ 104.254163] ? module_unload_free+0x5b0/0x5b0 [ 104.258631] ? __radix_tree_preload+0x133/0x1c0 [ 104.263285] ? mutex_unlock+0xd/0x10 [ 104.266973] ? devpts_new_index+0x142/0x290 [ 104.271272] tty_init_dev+0x78/0x4b0 [ 104.274959] ptmx_open+0xf3/0x310 [ 104.278384] ? pty_resize+0x270/0x270 [ 104.282156] chrdev_open+0x257/0x730 [ 104.285844] ? cdev_put.part.1+0x50/0x50 [ 104.289876] ? fsnotify_first_mark+0x2b0/0x2b0 [ 104.294434] ? _copy_to_user+0xc0/0xc0 [ 104.298294] ? security_file_open+0x89/0x190 [ 104.302677] do_dentry_open+0x667/0xd40 [ 104.306624] ? debug_lockdep_rcu_enabled+0x77/0x90 [ 104.311528] ? cdev_put.part.1+0x50/0x50 [ 104.315564] vfs_open+0x107/0x220 [ 104.318992] path_openat+0x1151/0x3530 [ 104.322860] ? path_lookupat+0xba0/0xba0 [ 104.326895] ? lock_downgrade+0x980/0x980 [ 104.331020] ? do_sys_open+0x2e7/0x6d0 [ 104.334889] ? find_held_lock+0x35/0x1d0 [ 104.338921] ? do_raw_spin_trylock+0x190/0x190 [ 104.343476] ? __lock_is_held+0xb6/0x140 [ 104.347519] ? _raw_spin_unlock+0x22/0x30 [ 104.351640] ? __alloc_fd+0x29b/0x750 [ 104.355416] do_filp_open+0x25b/0x3b0 [ 104.359188] ? may_open_dev+0xe0/0xe0 [ 104.362972] ? mpi_resize+0x200/0x200 [ 104.366754] ? get_unused_fd_flags+0x121/0x190 [ 104.371308] ? getname_flags+0x256/0x580 [ 104.375347] do_sys_open+0x502/0x6d0 [ 104.379042] ? do_sys_open+0x502/0x6d0 [ 104.382909] ? filp_open+0x70/0x70 [ 104.386422] ? SyS_read+0x220/0x220 [ 104.390034] compat_SyS_openat+0x2d/0x40 [ 104.394076] ? compat_SyS_open+0x40/0x40 [ 104.398109] do_fast_syscall_32+0x3ec/0xf9f [ 104.402405] ? do_int80_syscall_32+0x9c0/0x9c0 [ 104.406962] ? syscall_return_slowpath+0x2ac/0x550 [ 104.411863] ? prepare_exit_to_usermode+0x350/0x350 [ 104.416853] ? sysret32_from_system_call+0x5/0x3c [ 104.421673] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 104.426493] entry_SYSENTER_compat+0x70/0x7f [ 104.430872] RIP: 0023:0xf7f51c99 [ 104.434207] RSP: 002b:00000000f5f4d0ac EFLAGS: 00000282 ORIG_RAX: 0000000000000127 [ 104.441890] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000020000000 [ 104.449144] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.456400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 104.463654] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 104.470897] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 104.478878] Dumping ftrace buffer: [ 104.482563] (ftrace buffer empty) [ 104.486247] Kernel Offset: disabled [ 104.489846] Rebooting in 86400 seconds..