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"}, 0x1008, 0x800) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r15, 0x84, 0x8, &(0x7f0000003880), &(0x7f00000038c0)=0x4) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) fcntl$setflags(r1, 0x2, 0x1) 2018/03/30 07:54:52 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='security.trused&\x00\x00'], &(0x7f0000000140)='posix_acl_access%mime_type{(nodev)\x00', 0x23, 0x1) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = dup(r0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f00000000c0)) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$int_in(r3, 0x5473, &(0x7f00000001c0)=0xffffffff) 2018/03/30 07:54:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(0xffffffffffffffff, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:52 executing program 5: r0 = perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x1}}}, &(0x7f0000000480)=0xffffffffffffff24) ptrace$setopts(0xffffffffffffffff, 0x0, 0x7ff, 0x0) bind$netrom(0xffffffffffffffff, &(0x7f0000000040)=@ax25={0x3, {"b461317a1e6eae"}}, 0x10) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000002c0)={r1, 0x800, 0x1e, "de20dacfdb4d8b684a62e36bdfd4ab28a78bfa4990cb9d79dbaf35006a19"}, 0x26) getegid() socket$inet(0x2, 0x5, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000005c0)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000600)={r1, 0x100}, &(0x7f0000000640)=0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000900)=""/135, 0x87}], 0x1}, 0x0) r3 = creat(&(0x7f0000000140)='./file0\x00', 0x62) r4 = syz_open_procfs(0x0, &(0x7f00000004c0)="2f65786500000000000090d8b75e67e16b394342abb5158df87ea8984e79c93df7498b2b34796068700e29fbd789f9a031f23e16c96e30baed2961953b057f7a3222943acc4b8cfa4de553f8276731ddeb811efd44ea011e1a0db9074a28a826c88566b89c57cc3cca4aec41d37fa27c8daa19030d03139d0aea71d509d9a20ba7deceb656cc1308d9d1f111b6bd1595486f55e229923be4ed8cbfb78e86280b4cacf386bfac070afb312a4c520a03b27f805d181bd09ea208931a36e888060a2d") perf_event_open(&(0x7f0000223000)={0x2, 0x70, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r4, 0x40206417, &(0x7f00000000c0)={0xfc, 0xba, 0x6, 0x643, 0x8, 0xe195}) fsetxattr(r4, &(0x7f0000000140)=@known='user.syz\x00', &(0x7f0000000000)='\x00', 0x3df, 0x0) fremovexattr(r4, &(0x7f0000000080)=@known='user.syz\x00') ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000200)={0x4, @time, 0x7, {0x18c9, 0xff}, 0x93, 0x0, 0x4}) r5 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000040)="318a8c7fa2361bc1a12643ec23ad7c12722e4435786ab351e73b91cbd36fa3eb7abb443efd957e37db3a8927b65ab3e6f28c23004a0c39c2da000a7911e7ae7cb02dd07822ad6883afe62fae4f6de49d5fafae82c2a40cfa38fa1c9bf28caf0e612e8d91448f52596e0dcc4f0d229935a22151d17e354b95a3c878390a9c0b23814c26d992797e041d5eb3c7fefa9d334a3cf048da587353b687c2e56c57eae4c7bd842c5c625bdcfc050fc55a4a2a332c7c4933665cbe4af399d62069f8a83fe8585f6a9b90", 0xc6}, {&(0x7f0000000140)="57c4baf5fd0cdd9a325050d0f7f3ebf597ca94e0d0c8b0e69d1ff821f82c26fbc548a37098bb189831b0c781d6871cfdc2b4febfac91978d35b526dc763365f919c3b1d2e447025473e6311e33da1085006c94d3aeae1fbef13c2cf545f9b5c0ed5623de0d1a72b279a1b57cc74ae1cc1b95d0b3dec0c72a7a793fd9e5a1a1165f8f6e91", 0x84}, {&(0x7f0000000200)="4a3b70b137fd02e52850ba13c78344917424a4478c20786e070a2bb376e65b779b2f7025d4a9d2b7789346afcf4ef6f496c2c60af4421e405a9843fd2ba668ee2da6787e625a1ec90205eb5e1d95cab5b9f7e9371a5ad8a4f6808f7821e02ceb9e2884d9df93c7eaa63645394fe8713884962c59aecdbf7314147be2e3e08b78c8a265b6e3cf537cf1e666918a61b815064d80fd31d0dfe9d85cd13a2dda6a2aca208013348a005ddffe0b934a4706225282aad2d76adff681e3a2c810c8b4cab8115b179065be2b440437c4d5eb8fe7c30d99b5895a0906ad847656", 0xdc}, {&(0x7f0000000300)="7ef7b5af4f0b369c1bf0157cf92065042071784b0c2c168abc3a49c8f213f698e9b10a9f569cf579b0e5fc41f6ae27be8b39a27bc6fd30d9331da7ca77fdffeb30c1a4e752e97c058b2bc0ee45bc7f4a56ff6315eab463d23f51ee54cdcfd685a9aada894fe90a3f4e580334984e773c8e176addd348f68407874db1ec1b0d6d03ae5218a697baddffe49f2e7aab14146cdbf9ff57116a24221a43144411885d0a0b6e27b87e2a2d020a09b8dcf31bed7d979c49ee8b907648d1800e44", 0xbd}], 0x4, 0x3c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$pptp(0x18, 0x1, 0x2) 2018/03/30 07:54:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x0) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:52 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 73.583379] binder: 9752:9753 got new transaction with bad transaction stack, transaction 317 has target 9752:0 [ 73.593766] binder: 9752:9753 transaction failed 29201/-71, size 0-0 line 2875 [ 73.620100] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:54:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0), 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendto(r0, &(0x7f0000000140)="fd25caa811d1c4d6e5a0a9f8b6ad1b066ab16ecc835715f9b801cde7fb48b95ab4e92162d8fc3a9824df9561a918766b867b717c7cb05d17ecda46358cf9359b85ba618ee2504b517d31183e01ccca5e8cb5e57663681b41d85bf037", 0x5c, 0x4000000, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x42800) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x63ba00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x1000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@nl=@unspec, 0x80) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000100)=""/42) 2018/03/30 07:54:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 73.678724] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 73.681312] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:54:52 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0), 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x0) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 73.726593] binder: 9752:9773 ioctl 40046207 0 returned -16 2018/03/30 07:54:52 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x400000) 2018/03/30 07:54:52 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 73.806411] binder_alloc: 9752: binder_alloc_buf, no vma [ 73.811987] binder: 9752:9773 transaction failed 29189/-3, size 0-0 line 2963 [ 73.824568] binder_alloc: 9752: binder_alloc_buf, no vma [ 73.830129] binder: 9752:9753 transaction failed 29189/-3, size 0-0 line 2963 [ 73.878954] kernel msg: ebtables bug: please report to author: Wrong len argument [ 73.905487] binder: undelivered TRANSACTION_ERROR: 29189 [ 73.911055] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:54:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000180)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000100)={0x8}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000140)={0x2000}) r3 = inotify_add_watch(r2, &(0x7f0000000080)='./file0\x00', 0x480) inotify_rm_watch(r2, r3) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:52 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x178, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') r1 = semget$private(0x0, 0x2, 0x80) semop(r1, &(0x7f0000000080)=[{0x0, 0x4, 0x1800}, {0x3, 0x0, 0x1000}, {0x1, 0x9, 0x1000}], 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x0) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 73.927635] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 73.949211] binder: release 9752:9753 transaction 317 out, still active [ 73.956067] binder: undelivered TRANSACTION_COMPLETE [ 73.961214] binder: undelivered TRANSACTION_ERROR: 29201 [ 73.966707] binder: send failed reply for transaction 317, target dead 2018/03/30 07:54:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040), 0xca, &(0x7f0000000140)=ANY=[@ANYBLOB="1000000000000000110100002ec941ebdbc59d91fd00000000"], 0xfffffffffffffe48}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 74.011966] kernel msg: ebtables bug: please report to author: Wrong len argument [ 74.046759] binder: 9809:9814 got new transaction with bad transaction stack, transaction 322 has target 9809:0 2018/03/30 07:54:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 74.057212] binder: 9809:9814 transaction failed 29201/-71, size 0-0 line 2875 [ 74.102309] kernel msg: ebtables bug: please report to author: Wrong len argument [ 74.139690] binder: BINDER_SET_CONTEXT_MGR already set [ 74.148859] binder: 9809:9833 ioctl 40046207 0 returned -16 [ 74.162343] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 74.173098] binder_alloc: 9809: binder_alloc_buf, no vma [ 74.178708] binder: 9809:9814 transaction failed 29189/-3, size 0-0 line 2963 [ 74.207626] binder_alloc: 9809: binder_alloc_buf, no vma [ 74.213209] binder: 9809:9833 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:54:52 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000080)="f1926f8c070a69242cbb3ddb9bad89c314607e51a1ce3431adc0496e5ca34cb6089a84dcaa3d14c750e6ae404ad76c6d62af233e154e3289a4cb1eb01ed2cc0706734c86cf7d936cbd98067b94927f155303cadd17c782d8adc1c5b2dcb2bc58615974f389ff6f574d8ad5a8e8a8162e535372e7feba01f28ebb656b2552cd807ce5a159504f5e6603d32d8ca940f76e10e5972011bbb47bd43f8ce493bdd9d48eb9876de2929a57e5e23797f11a16dada9311f3c99a27cbec51256b62c719fe94c84fa54effcfa05b1bfab214bde6ceab6dbbfedd14bf09ce29ed6667ea101ee0"}, {&(0x7f0000000180)="6750102bf1f80973d5dd316411ebc56b87bc5518d9c0e4791712fa4f06c49ecf13a25f26e0dc39445f0cf53586603be86fef1df41e88fffa8ecaf07b599a9a09282c2a1d1d3cec0fa171913b9a2d45299b4688105dbed5ed368efcc3887acfb2d2912df5ca4482cb024f4d4d"}, {&(0x7f0000000200)="1ae02780cfd5a5d6e2bb20bfa8d6919db10ed54b3e7f0102dbc3d0"}, {&(0x7f0000000240)="8eaf744ed60c8fd3eefae7c4d2a729f7ed3088dcafc930504472379ae3b7a8b43761a01717f668e32e63a594c088c7854412c7b577c87691baa88113062a24093a53be087be57783fc55d912d9f9478ee30993ac8b7e74bef812516d9f1b68a7162436c24e7f84a1ce17cd8ae53b9df082835fa92df407871093b7bb3bc79d736701f1835feca69065a86a64b689b4f3360d92f7"}, {&(0x7f0000000300)="15d2b710f42599bdb9b9305ad772371f933884a5be9f38844bba3b9e20ed9fb122cdd4934fb31d1bacd5da19dc4fe07afd812dace12cccff10d455437a7b5e03ee22181ba3b73f1d0e96c17627ccce2ba5888d288277ced2f2192e3e0a8ba7e832e9f3016013be57ce486bebf11c02afa380702cc24c492074074a964af92b8049a49a3fe196041d7e95644fe0ab1bc41762d9e93e554b028a75bb3ed4ec9de773fc4febfcac10541b469b981691928e8ff969686947c5e2dce1619bac32fc05e5e6db49dfafbac2a25ebc365c0694893876b086cdb7d8c56d3627930ad81b9ecfe208d1eafa178e7c955f9369f6c93fafbc03e5d3439fcf"}], 0x131f, &(0x7f0000002000)=[{0x10, 0x111, 0x3}], 0xfffffffffffffdec, 0xfffffffffffffffe}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r1, 0x8934, &(0x7f0000000040)={'syzkaller0\x00', 0x1ff}) ioctl(r0, 0xc018490e, &(0x7f0000002000)) 2018/03/30 07:54:52 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:52 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(0xffffffffffffffff, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:52 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:52 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000100)) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:52 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$KDSETLED(r1, 0x4b32, 0x5) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163480664000000e35a86a48eda6c39748d6dd200", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:53 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x0, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 74.262521] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.268095] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.274316] binder: release 9809:9814 transaction 322 out, still active [ 74.281151] binder: undelivered TRANSACTION_COMPLETE [ 74.286292] binder: undelivered TRANSACTION_ERROR: 29201 [ 74.291783] binder: send failed reply for transaction 322, target dead 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 5: r0 = creat(&(0x7f0000000400)='./file0\x00', 0x20000000000012) r1 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {0x3}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}, @FOU_ATTR_AF={0x8, 0x2, 0xa}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x1, 0x0) ioctl$DRM_IOCTL_VERSION(r3, 0xc0406400, &(0x7f0000000200)={0xaa94, 0x80, 0x7, 0x19, &(0x7f0000000080)=""/25, 0x5, &(0x7f00000000c0)=""/5, 0xf4, &(0x7f0000000100)=""/244}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1c000000"], 0x10}, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xc0184908, &(0x7f0000002000)) [ 74.345729] binder: 9847:9848 unknown command 105407249 [ 74.366191] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 74.376908] binder: 9847:9848 ioctl c0306201 20000340 returned -22 2018/03/30 07:54:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 74.427171] kernel msg: ebtables bug: please report to author: Wrong len argument [ 74.444999] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:54:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f0000000040)={0x0, 0xaa, "21ce8482fd46ae66ab83de13c1a82648e0bf40d06a6585f8d96ec4d8bfca05fe365e68c67b96c15d649b443687d461bd2b215f538b50ef110135f9a39bf7ee8771a59c27ed79a66aa6f4ef3dc5b5e78f39cff304d6768e5ef904b7f76dbee53eaf355dc1f0d1de8a6cdeb59d68827738d3de19ec1017f0fd9ad9880b49b873f84c1773a90f71270a9a4b229503c6c07c19a41d64daba582f1e764f5e21627f55657543b1076e7fd8e5d0"}, &(0x7f0000000100)=0xb2) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x8002, 0x9, 0x1, r2}, &(0x7f0000000180)=0x10) ioctl(r0, 0xc0184908, &(0x7f0000002000)) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000001c0)=0x1, 0x4) 2018/03/30 07:54:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x0, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 74.479194] binder: 9847:9862 ioctl 40046207 0 returned -16 [ 74.514373] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 74.514981] binder_alloc: 9847: binder_alloc_buf, no vma 2018/03/30 07:54:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x3fe) sendmmsg$unix(r1, &(0x7f0000000100), 0x0, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) ustat(0x9, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f00000002c0)) setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000001c0)={0x5, 0x9, 0x8, 0x4}, 0x6) syz_open_dev$usbmon(&(0x7f0000000340)='/dev/usbmon#\x00', 0x4e, 0x200) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') accept$netrom(r2, &(0x7f0000000200), &(0x7f0000000300)=0x10) connect(r2, &(0x7f0000000240)=@hci={0x1f}, 0x80) ioctl$sock_proto_private(r1, 0x89e1, &(0x7f0000000180)="90b6571d927f5982ce89e63bf3cb493e0fad685d8e1fbc7763a8901b1245e37b2634c974abcb257635332ee0057637125f8031") connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0), 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 74.526162] binder: 9847:9848 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x100000000, 0x2001) connect$rds(r2, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x100}, 0x10) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:53 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0x0, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 74.647495] kernel msg: ebtables bug: please report to author: Wrong len argument [ 74.691900] binder: undelivered TRANSACTION_ERROR: 29189 [ 74.702536] binder: release 9847:9848 transaction 327 out, still active [ 74.709657] binder: undelivered TRANSACTION_COMPLETE [ 74.714865] binder: send failed reply for transaction 327, target dead [ 74.736698] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0), 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000240)=0x0) setpriority(0x3, r1, 0x100) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) getresgid(&(0x7f0000000080)=0x0, &(0x7f00000000c0), &(0x7f0000000100)) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r2, r3) 2018/03/30 07:54:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000180)=""/59, 0x17) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) ioctl$sock_inet_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) 2018/03/30 07:54:53 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0x0, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x0, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = fcntl$getown(r0, 0x9) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x59d, 0x101, 0x20, 0x9, 0x0, 0x81, 0x1000, 0x7, 0x4, 0x9, 0x4, 0x0, 0x62e, 0x5, 0x3ff, 0x9, 0x7b59, 0x0, 0x4, 0x40, 0x7, 0xffffffffffff89ab, 0x2, 0x1, 0xef, 0x8, 0x8, 0x401, 0xea46, 0x7fff, 0x400, 0x81, 0x80000001, 0x100000000, 0x0, 0xff, 0x0, 0x1, 0x2, @perf_bp={&(0x7f0000000040), 0x4}, 0x6280, 0x400, 0x1, 0x6, 0x1000000000000, 0x8001, 0xfffffffffffffff8}, r2, 0xd, r1, 0xb) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r3 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000100)) recvfrom$ipx(r3, &(0x7f0000000140)=""/110, 0x6e, 0x63, &(0x7f00000001c0)={0x4, 0x5, 0x0, "e332cb289126", 0xbee3}, 0x10) 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0), 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 74.843958] binder: BINDER_SET_CONTEXT_MGR already set [ 74.879400] binder: 9907:9917 ioctl 40046207 0 returned -16 [ 74.885753] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xc0184908, &(0x7f0000002000)) [ 74.927070] binder_alloc: 9907: binder_alloc_buf, no vma [ 74.932676] binder: 9907:9908 transaction failed 29189/-3, size 0-0 line 2963 [ 74.947157] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000040)=[{0x10, 0x111}], 0x50440ad21bcbf8ee}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0x0, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:53 executing program 1: socketpair$unix(0x1, 0x8000000000006, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000300)=""/59, 0xfffffd82) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x71) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000240)={r0, r0, 0x7f, 0x5, &(0x7f0000000180)="565ef708d33537292842d81d2fe2085defb87f191086240d04ebe0ca4664c0136fff57506fa889c4dd82134226e0a28831490ae1593eee864e8d8355f0303e0d9d0701e66f52f98cd61dbbd64b4a45b386ef90084547ba4a8a667b555b60119f197a00687d3898b6e3b2f962bb23951ad651ee5684e3ccb1bc0816cfe089a36380ad0e373e1040c2afe76cf7ecfa2139516401639e7ec085f83cbd8e0d6c834ab4738c974897f184aca83f388901009d44af6cae245bc12eace03177", 0x3f, 0x6, 0xeb, 0x5, 0x57672773, 0x382, 0x5, "1c6f20a6d81a40f7e831ef8ddeb2cd34af3f896bcf6f82d6eedb5d9fdf2b49ece2dc6cf29065f7426c7927541bc64d734d112fbc46d5144e87e031c95e10414da03d7c2b976b3a4d15eda64f62caa18e7e56f1226ba1cf"}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:53 executing program 4 (fault-call:17 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:53 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:53 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="61a5e591fa45d9f4c6a0d71356220b11634840", @ANYRES64=0x0, @ANYBLOB="00000000000000007261a8c827e3127c6d3ed94ba99974790db9adeeb4cf51"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:53 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 75.045487] binder: undelivered TRANSACTION_ERROR: 29189 [ 75.052177] binder: release 9907:9908 transaction 330 out, still active [ 75.058993] binder: undelivered TRANSACTION_COMPLETE [ 75.064160] binder: send failed reply for transaction 330, target dead 2018/03/30 07:54:53 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@loopback, @in6}}, {{@in=@multicast2}, 0x0, @in6=@mcast1}}, &(0x7f0000000180)=0xe8) ioctl(r0, 0xc0184908, &(0x7f0000002000)) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) 2018/03/30 07:54:53 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000002000)) [ 75.110232] kernel msg: ebtables bug: please report to author: Wrong len argument [ 75.128553] binder: 9952:9954 unknown command -1847220895 [ 75.165601] FAULT_INJECTION: forcing a failure. [ 75.165601] name failslab, interval 1, probability 0, space 0, times 1 [ 75.165767] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 75.177124] CPU: 1 PID: 9948 Comm: syz-executor4 Not tainted 4.16.0-rc7+ #371 [ 75.190517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 75.192203] binder: 9952:9954 ioctl c0306201 20000040 returned -22 [ 75.199856] Call Trace: [ 75.199877] dump_stack+0x194/0x24d [ 75.199897] ? arch_local_irq_restore+0x53/0x53 [ 75.199909] ? lock_release+0xa40/0xa40 [ 75.199946] should_fail+0x8c0/0xa40 [ 75.199957] ? perf_trace_lock_acquire+0xe3/0x980 [ 75.199979] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 75.199991] ? trace_event_raw_event_lock+0x340/0x340 [ 75.200005] ? perf_trace_lock+0x900/0x900 [ 75.244013] ? find_held_lock+0x35/0x1d0 [ 75.248073] ? __lock_is_held+0xb6/0x140 [ 75.252146] ? check_same_owner+0x320/0x320 [ 75.256446] ? bd_set_size+0x29b/0x330 [ 75.260320] ? rcu_note_context_switch+0x710/0x710 [ 75.265251] should_failslab+0xec/0x120 [ 75.269212] kmem_cache_alloc_trace+0x4b/0x740 [ 75.273782] ? __might_sleep+0x95/0x190 [ 75.277751] ? devm_device_remove_groups+0x50/0x50 [ 75.282684] kobject_uevent_env+0x1ed/0xd30 [ 75.287006] ? up_read+0x40/0x40 [ 75.290390] kobject_uevent+0x1f/0x30 [ 75.294176] loop_clr_fd+0x536/0xb50 [ 75.297882] ? loop_attr_do_show_backing_file+0x1a0/0x1a0 [ 75.303407] ? trace_event_raw_event_lock+0x340/0x340 [ 75.308578] ? lo_compat_ioctl+0x140/0x140 [ 75.312795] ? lo_compat_ioctl+0x140/0x140 [ 75.317019] lo_release+0x101/0x190 [ 75.320631] ? lo_compat_ioctl+0x140/0x140 [ 75.324845] __blkdev_put+0x5bd/0x760 [ 75.328644] ? freeze_bdev+0x1e0/0x1e0 [ 75.332508] ? fcntl_setlk+0x1100/0x1100 [ 75.336544] ? fsnotify+0x7b3/0x1140 [ 75.340270] blkdev_put+0x85/0x4f0 [ 75.343794] ? blkdev_put+0x4f0/0x4f0 [ 75.347576] blkdev_close+0x8b/0xb0 [ 75.351187] __fput+0x327/0x7e0 [ 75.354462] ? fput+0x140/0x140 [ 75.357727] ? _raw_spin_unlock_irq+0x27/0x70 [ 75.362217] ____fput+0x15/0x20 [ 75.365479] task_work_run+0x199/0x270 [ 75.369353] ? task_work_cancel+0x210/0x210 [ 75.373657] ? exit_to_usermode_loop+0x8c/0x2f0 [ 75.378321] exit_to_usermode_loop+0x275/0x2f0 [ 75.382889] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 75.388407] ? do_sys_ftruncate.constprop.14+0x112/0x5d0 [ 75.393835] ? do_syscall_64+0xb7/0x940 [ 75.397805] do_syscall_64+0x6ec/0x940 [ 75.401669] ? __do_page_fault+0xc90/0xc90 [ 75.405879] ? _raw_spin_unlock_irq+0x27/0x70 [ 75.410355] ? finish_task_switch+0x1c1/0x7e0 [ 75.414832] ? syscall_return_slowpath+0x550/0x550 [ 75.419745] ? syscall_return_slowpath+0x2ac/0x550 [ 75.424655] ? prepare_exit_to_usermode+0x350/0x350 [ 75.429656] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 75.435013] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 75.439858] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 75.445027] RIP: 0033:0x4548b9 [ 75.448196] RSP: 002b:00007fb9acabfc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 75.455886] RAX: 0000000000000013 RBX: 00007fb9acac06d4 RCX: 00000000004548b9 2018/03/30 07:54:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 75.463132] RDX: 0000000000000000 RSI: 0000000000000013 RDI: 0000000000000016 [ 75.470381] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 75.477627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000018 [ 75.484874] R13: 000000000000006c R14: 00000000006f2ac0 R15: 0000000000000000 2018/03/30 07:54:54 executing program 4 (fault-call:17 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 1: socketpair$inet6(0xa, 0x800, 0x9000000000, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_buf(r0, 0x29, 0xd2, &(0x7f0000001140)="d2a076da865d8ab6ac3a4c8a4a8b3b124b3e05eab1b952e3633949c77bcda38edd89d09c191078b82b826ecf4b3e4c7f94c940563bac18fb6e542167ef625efa8a2816944aa35eaa524cdc64942ea7df0536c37dfd7f2d16418f905876d248b53059db5224d7c64ef245057f55d8fdf8cf5aa3989e70f77ea209b8a0be404a1321736404e3240716ce08beb64ac77b2ad1b4cac59f584a4b00f9d2f5254ab3702599301370bdab19d2c0fe565e", 0xad) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r2, 0x4, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x80, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000100)="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") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r1, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:54 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000002000)) [ 75.533858] kernel msg: ebtables bug: please report to author: Wrong len argument [ 75.546666] binder: BINDER_SET_CONTEXT_MGR already set [ 75.560101] binder: 9952:9970 ioctl 40046207 0 returned -16 [ 75.577893] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) getsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2018/03/30 07:54:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000002000)) 2018/03/30 07:54:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(0xffffffffffffffff, 0xc0184908, &(0x7f0000002000)) [ 75.588063] binder: 9952:9954 unknown command -1847220895 [ 75.610851] binder: 9952:9954 ioctl c0306201 20000040 returned -22 [ 75.679955] binder: release 9952:9954 transaction 333 out, still active [ 75.686846] binder: undelivered TRANSACTION_COMPLETE [ 75.692045] binder: send failed reply for transaction 333, target dead 2018/03/30 07:54:54 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) ioctl$TIOCSCTTY(r2, 0x540e, 0x8000000000000000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x1000000000000285, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000002bd5ee00000000c5de240f245f48"], 0x10}, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x101, 0x10000) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xa) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r2) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000140)={0x4, {{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}}, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) 2018/03/30 07:54:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000e1c000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={&(0x7f0000bfd000/0x400000)=nil, 0x400000}) 2018/03/30 07:54:54 executing program 6 (fault-call:5 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(0xffffffffffffffff, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:54 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 75.822163] binder: 10001:10006 unknown command -1560502323 [ 75.830192] kernel msg: ebtables bug: please report to author: Wrong len argument [ 75.834495] binder: 10001:10006 ioctl c0306201 20000340 returned -22 [ 75.838947] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000022314309c15f666ec700bfb90100000000000018799af25fa44972c6f5b711e15bfd00b7862bf2bee4f99c76feada029010f1d3f423ce829a0831060742c3347222cd8a8645b0938"], 0x10}, 0x0) socketpair(0x9, 0x2, 0x101, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x0, 0x3, 0x7, 0x3, 0x100000001}, 0x6, 0x7f, 0x8}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000140)={'vcan0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:54 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() socket$inet6(0xa, 0x80800, 0x4) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 75.891735] binder: BINDER_SET_CONTEXT_MGR already set [ 75.905498] binder_alloc: binder_alloc_mmap_handler: 10001 2000c000-2000e000 already mapped failed -16 [ 75.958695] kernel msg: ebtables bug: please report to author: Wrong len argument [ 75.958822] binder: 10001:10006 ioctl 40046207 0 returned -16 [ 76.010064] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 76.016374] binder_alloc: 10001: binder_alloc_buf, no vma [ 76.022000] binder: 10001:10041 transaction failed 29189/-3, size 0-0 line 2963 [ 76.033706] binder: 10001:10006 unknown command -1560502323 [ 76.040245] binder: 10001:10006 ioctl c0306201 20000340 returned -22 2018/03/30 07:54:54 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000240), 0x0, &(0x7f00000000c0)=ANY=[]}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) recvmsg(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)}, {&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f0000000280)=""/101, 0x65}], 0x3, 0x0, 0x0, 0x2}, 0x40000000) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000380)=""/100, &(0x7f0000000400)=0x64) 2018/03/30 07:54:54 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) r2 = dup2(r0, r1) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000240)=""/4096) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x4000, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x2, 0xffffffffffffff00}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000001240)={r4, 0xa03}, &(0x7f0000000200)=0x8) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000100)) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00'}, &(0x7f00000001c0)=0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000000c0)={'syzkaller0\x00', 0x100000000}) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffff8001, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000000040)="6d3dc940e3b7042a557a3a5eb52b2ae2b4c9db0d45d0c2ab2ae3d385ec0ca2fdbf9bdb3b2331da4b7a000000b208000000001600000000000000000000000000000000") 2018/03/30 07:54:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) ioctl$KVM_GET_FPU(r3, 0x81a0ae8c, &(0x7f0000000200)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0x0, &(0x7f0000002000)) 2018/03/30 07:54:54 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) [ 76.059429] binder: release 10001:10006 transaction 335 out, still active [ 76.066462] binder: undelivered TRANSACTION_COMPLETE [ 76.071635] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.077109] binder: send failed reply for transaction 335, target dead [ 76.139520] binder: 10058:10059 got new transaction with bad transaction stack, transaction 338 has target 10058:0 [ 76.150127] binder: 10058:10059 transaction failed 29201/-71, size 0-0 line 2875 [ 76.160185] kernel msg: ebtables bug: please report to author: Wrong len argument [ 76.182899] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:54 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x400000, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:54 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x101301, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r1, 0x10e, 0x3, &(0x7f0000000080)=0x800, 0x4) [ 76.190898] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:54:54 executing program 1: read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:54 executing program 2 (fault-call:0 fault-nth:0): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000040)={0x1, 0x3, [@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}]}) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r2, 0x10000) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:54 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 76.220378] binder: 10058:10059 ioctl 40046207 0 returned -16 [ 76.254497] FAULT_INJECTION: forcing a failure. [ 76.254497] name failslab, interval 1, probability 0, space 0, times 0 [ 76.266351] CPU: 0 PID: 10080 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #371 [ 76.271096] binder_alloc: 10058: binder_alloc_buf, no vma [ 76.273720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.273726] Call Trace: [ 76.273744] dump_stack+0x194/0x24d [ 76.273764] ? arch_local_irq_restore+0x53/0x53 [ 76.273800] should_fail+0x8c0/0xa40 [ 76.279391] binder: 10058:10085 transaction failed 29189/-3, size 0-0 line 2963 [ 76.290578] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 76.290597] ? _raw_spin_unlock+0x22/0x30 [ 76.290610] ? __handle_mm_fault+0x5ba/0x38c0 [ 76.290643] ? find_held_lock+0x35/0x1d0 [ 76.300873] kernel msg: ebtables bug: please report to author: bad policy [ 76.301501] ? check_same_owner+0x320/0x320 [ 76.308640] kernel msg: ebtables bug: please report to author: Wrong len argument [ 76.312623] ? rcu_note_context_switch+0x710/0x710 [ 76.312655] should_failslab+0xec/0x120 [ 76.312669] kmem_cache_alloc+0x47/0x760 [ 76.312681] ? handle_mm_fault+0x465/0xb10 [ 76.312693] ? check_same_owner+0x320/0x320 [ 76.318826] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 76.321919] getname_flags+0xcb/0x580 [ 76.321944] getname+0x19/0x20 [ 76.321956] do_sys_open+0x2e7/0x6d0 [ 76.321977] ? filp_open+0x70/0x70 [ 76.321986] ? mm_fault_error+0x2c0/0x2c0 [ 76.321997] ? SyS_read+0x220/0x220 [ 76.322019] SyS_open+0x2d/0x40 [ 76.401953] ? do_sys_open+0x6d0/0x6d0 [ 76.405818] do_syscall_64+0x281/0x940 [ 76.409680] ? __do_page_fault+0xc90/0xc90 [ 76.413890] ? _raw_spin_unlock_irq+0x27/0x70 [ 76.418367] ? finish_task_switch+0x1c1/0x7e0 [ 76.422838] ? syscall_return_slowpath+0x550/0x550 [ 76.427744] ? syscall_return_slowpath+0x2ac/0x550 [ 76.432649] ? prepare_exit_to_usermode+0x350/0x350 [ 76.437643] ? retint_user+0x18/0x18 [ 76.441340] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.446170] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 76.451331] RIP: 0033:0x40eb91 [ 76.454499] RSP: 002b:00007ff408eca7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 76.462181] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040eb91 2018/03/30 07:54:55 executing program 0 (fault-call:17 fault-nth:0): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:55 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000000000f800000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x80, 0x0) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000100)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:55 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x0, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 76.469427] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff408eca850 [ 76.476671] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 76.483917] R10: 000000000000000c R11: 0000000000000293 R12: 0000000000000013 [ 76.491164] R13: 000000000000066f R14: 00000000006fbb08 R15: 0000000000000000 2018/03/30 07:54:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff800000000001, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x10, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000100)=@nl=@unspec, 0x80) 2018/03/30 07:54:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10ff1916bec8d4000000000000001101"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x4, &(0x7f0000000080)="54e20be23d6cc75aa00aee4066641a674527f3500f475b94ca0e") 2018/03/30 07:54:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="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"], 0x0, 0x0, &(0x7f0000011f9d)}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000080)=0x400, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) [ 76.558892] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.564837] binder: release 10058:10059 transaction 338 out, still active [ 76.571930] binder: undelivered TRANSACTION_COMPLETE [ 76.577082] binder: undelivered TRANSACTION_ERROR: 29201 [ 76.582585] binder: send failed reply for transaction 338, target dead [ 76.626514] kernel msg: ebtables bug: please report to author: Wrong len argument [ 76.631350] FAULT_INJECTION: forcing a failure. [ 76.631350] name failslab, interval 1, probability 0, space 0, times 0 [ 76.645506] CPU: 1 PID: 10101 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #371 [ 76.652879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 76.656094] binder: 10110:10111 transaction failed 29201/-22, size -1610881307689957270--1665484469502454212 line 2963 [ 76.662239] Call Trace: [ 76.662265] dump_stack+0x194/0x24d [ 76.662298] ? arch_local_irq_restore+0x53/0x53 [ 76.679209] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 76.679357] should_fail+0x8c0/0xa40 [ 76.693829] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 76.699007] ? trace_event_raw_event_lock+0x340/0x340 [ 76.704216] ? find_held_lock+0x35/0x1d0 [ 76.708359] ? check_same_owner+0x320/0x320 [ 76.712666] ? find_held_lock+0x35/0x1d0 [ 76.716719] ? rcu_note_context_switch+0x710/0x710 [ 76.721672] should_failslab+0xec/0x120 [ 76.725641] kmem_cache_alloc_trace+0x4b/0x740 [ 76.730207] ? lock_release+0xa40/0xa40 [ 76.734182] ? __lock_is_held+0xb6/0x140 [ 76.738246] alloc_pipe_info+0x159/0x4b0 [ 76.742298] ? pipe_read+0x7f0/0x7f0 [ 76.746014] ? __fget+0x36b/0x5b0 [ 76.749492] ? iterate_fd+0x3f0/0x3f0 [ 76.753313] splice_direct_to_actor+0x64a/0x820 [ 76.757969] ? perf_trace_lock+0x900/0x900 [ 76.762191] ? generic_pipe_buf_nosteal+0x10/0x10 [ 76.767025] ? __f_unlock_pos+0x19/0x20 [ 76.770991] ? lock_downgrade+0x980/0x980 [ 76.775139] ? do_splice_to+0x160/0x160 [ 76.779098] ? security_file_permission+0x89/0x1e0 [ 76.784037] ? rw_verify_area+0xe5/0x2b0 [ 76.788100] do_splice_direct+0x29b/0x3c0 [ 76.792248] ? splice_direct_to_actor+0x820/0x820 [ 76.797107] ? rw_verify_area+0xe5/0x2b0 [ 76.801171] do_sendfile+0x5c9/0xe80 [ 76.804911] ? do_compat_pwritev64+0x100/0x100 [ 76.809487] ? __might_sleep+0x95/0x190 [ 76.813473] ? kasan_check_write+0x14/0x20 [ 76.817696] ? _copy_from_user+0x99/0x110 [ 76.821848] SyS_sendfile64+0xbd/0x160 [ 76.825732] ? SyS_sendfile+0x1a0/0x1a0 [ 76.829699] ? do_syscall_64+0xb7/0x940 [ 76.833673] ? SyS_sendfile+0x1a0/0x1a0 [ 76.837643] do_syscall_64+0x281/0x940 [ 76.841512] ? __do_page_fault+0xc90/0xc90 [ 76.845736] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 76.851266] ? syscall_return_slowpath+0x550/0x550 [ 76.856189] ? syscall_return_slowpath+0x2ac/0x550 [ 76.861127] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 76.866500] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 76.871360] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 76.876532] RIP: 0033:0x4548b9 [ 76.879704] RSP: 002b:00007fdb0eb92c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 76.887399] RAX: ffffffffffffffda RBX: 00007fdb0eb936d4 RCX: 00000000004548b9 [ 76.894651] RDX: 00000000200000c0 RSI: 0000000000000019 RDI: 0000000000000014 [ 76.901904] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 76.909159] R10: 0000000102000001 R11: 0000000000000246 R12: 000000000000001a [ 76.916409] R13: 00000000000004c5 R14: 00000000006f9318 R15: 0000000000000000 2018/03/30 07:54:55 executing program 2 (fault-call:0 fault-nth:1): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 76.935148] binder: BINDER_SET_CONTEXT_MGR already set [ 76.943170] binder: 10110:10116 ioctl 40046207 0 returned -16 [ 76.951734] binder_alloc: 10110: binder_alloc_buf, no vma [ 76.957370] binder: 10110:10111 transaction failed 29189/-3, size -1610881307689957270--1665484469502454212 line 2963 [ 76.972342] binder: undelivered TRANSACTION_ERROR: 29189 [ 76.977890] binder: undelivered TRANSACTION_ERROR: 29201 [ 77.000048] FAULT_INJECTION: forcing a failure. [ 77.000048] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 77.011865] CPU: 1 PID: 10124 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #371 [ 77.019219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.028568] Call Trace: [ 77.031141] dump_stack+0x194/0x24d [ 77.034755] ? arch_local_irq_restore+0x53/0x53 [ 77.039431] should_fail+0x8c0/0xa40 [ 77.043134] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 77.048228] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.053400] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.058568] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 77.063766] ? __handle_mm_fault+0x28ed/0x38c0 [ 77.068334] ? check_same_owner+0x320/0x320 [ 77.072645] ? find_held_lock+0x35/0x1d0 [ 77.076686] ? trace_hardirqs_off+0x10/0x10 [ 77.080987] ? do_raw_spin_trylock+0x190/0x190 [ 77.085550] ? should_fail+0x23b/0xa40 [ 77.089429] __alloc_pages_nodemask+0x327/0xdd0 [ 77.094075] ? _raw_spin_unlock+0x22/0x30 [ 77.098209] ? __alloc_pages_slowpath+0x2d10/0x2d10 [ 77.103217] ? find_held_lock+0x35/0x1d0 [ 77.107300] ? check_same_owner+0x320/0x320 [ 77.111616] cache_grow_begin+0x72/0x640 [ 77.115670] kmem_cache_alloc+0x400/0x760 [ 77.119800] ? handle_mm_fault+0x465/0xb10 [ 77.124015] ? check_same_owner+0x320/0x320 [ 77.128336] getname_flags+0xcb/0x580 [ 77.132126] getname+0x19/0x20 [ 77.135296] do_sys_open+0x2e7/0x6d0 [ 77.139000] ? filp_open+0x70/0x70 [ 77.142520] ? mm_fault_error+0x2c0/0x2c0 [ 77.146647] ? SyS_read+0x220/0x220 [ 77.150266] SyS_open+0x2d/0x40 [ 77.153523] ? do_sys_open+0x6d0/0x6d0 [ 77.157391] do_syscall_64+0x281/0x940 [ 77.161255] ? __do_page_fault+0xc90/0xc90 [ 77.165466] ? _raw_spin_unlock_irq+0x27/0x70 [ 77.169940] ? finish_task_switch+0x1c1/0x7e0 [ 77.174415] ? syscall_return_slowpath+0x550/0x550 [ 77.179324] ? syscall_return_slowpath+0x2ac/0x550 [ 77.184233] ? prepare_exit_to_usermode+0x350/0x350 [ 77.189233] ? retint_user+0x18/0x18 [ 77.192936] ? trace_hardirqs_off_thunk+0x1a/0x1c 2018/03/30 07:54:55 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = accept(0xffffffffffffff9c, &(0x7f0000000180)=@ethernet={0x0, @dev}, &(0x7f0000000200)=0x80) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0xc) r3 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0xfffffffffffffff8, 0x20000) connect$inet(r3, &(0x7f0000000340)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000440)={0x9, 0x4, 0x9, 0x0, "9af99feeab979e192e9632cb2d30e1535edd88f3f312846ebbc0c17995083cac48c325beedb12fe60cdcaae2", 0x3}) shmctl$SHM_LOCK(0x0, 0xb) r4 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x200, 0x2101) syz_open_dev$midi(&(0x7f0000000300)='/dev/midi#\x00', 0xc78, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={{{@in=@multicast2=0xe0000002, @in=@multicast1=0xe0000001}}, {{@in6}, 0x0, @in6=@loopback={0x0, 0x1}}}, 0xe8) ioctl$VHOST_VSOCK_SET_GUEST_CID(r3, 0x4008af60, &(0x7f0000000140)={@reserved=0x1}) geteuid() setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x2, [{}, {}]}, 0x48) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast=0xffffffff, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) close(0xffffffffffffffff) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:55 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x0, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:55 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r5, 0x111, 0x2, 0x0, 0x4) 2018/03/30 07:54:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111, 0x3}], 0x10}, 0x2000000000) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x1) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000000100)=""/171, &(0x7f00000001c0)=0xab) 2018/03/30 07:54:55 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x40, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x6c, r2, 0x0, 0x70bd25, 0x25dfdbfc, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1={0xff, 0x1, [], 0x1}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x46}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xfffffffffffffffa}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0xffffffffffffffc1, 0x400000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f00000000c0)={0x2000}) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xc0000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x200, 0x70bd2a, 0x25dfdbfe, {0x1}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x850}, 0x8000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:55 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000180)=@nl=@unspec, 0x1c7) 2018/03/30 07:54:55 executing program 0 (fault-call:17 fault-nth:1): r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 77.197773] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 77.202943] RIP: 0033:0x40eb91 [ 77.206109] RSP: 002b:00007ff408eca7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 77.213798] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040eb91 [ 77.221048] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff408eca850 [ 77.228294] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 77.235540] R10: 000000000000000c R11: 0000000000000293 R12: 0000000000000013 [ 77.242790] R13: 000000000000066f R14: 00000000006fbb08 R15: 0000000000000001 2018/03/30 07:54:55 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4, 0x105bac28b2db1e58) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x13, r1, 0xf) sendmmsg$nfc_llcp(r1, &(0x7f0000005880)=[{&(0x7f0000000080)={0x27, 0x1, 0x1, 0x4, 0xd1, 0x2, "409f9cd486ded5aa02d3e419477af459b2df27a5e80b5683fa41a2d3b2bf4e06e903c7996f415293068822c16609b90f9e9d08df55c965d8e9477a41fb782b", 0x13}, 0x60, &(0x7f0000001600)=[{&(0x7f0000000100)="d5680bd4aec5e51f6ca42c7ac83f1090d97b7e7cbf6d004d19b3e09d0b5c7e39af9db34cbdd183834594bbadb242ba5921d8dc92393c90ae2741733280a07b092cb4a68a30e54d2cfc9de5a0fa0ad8ac781877088b4799ed95da0c6252bf08da", 0x60}, {&(0x7f0000000180)="829ba070912de55768f90305eb0392e4c0f241c4139e0a85871ab99da962105be9f48322e8cc1c09dbde6ead9a48f6134d3cdbf2769943e6b77a769773e25e6c9bad6dc75d4893d5fb90efc26488d57b8f66736067398e13142775db82d7988c6236b0f236c282e33779a79672e9b71d938ca12abe73c208efaf904dd5b295fea185e006412f38b8a0fc45bb4a7b68e6c7d1d4a7aaa8f80a93eade6fdf24a0bdea2a092417a1a5b20142ff4a9b5da36aa02554db457d23e5b48e6cf03019989c69b8d2386a879943354e6ce17eadea9279522929fda23039e89db9948026217b79e6817aa3", 0xe5}, {&(0x7f0000000280)="8f869a25d1b0c265c17fb56b26fc771e19b0fa86a930894fe69213462e3769faacf95b3e8eaf0ab2527e2244d7728e9e4056a2b12f8d40a081e8ecea0cd34c6d04b3c0c82eafd383f4910ccb5451b249d179102dd1910e6ee64fb00b357c9eb3653dfc4b563959c5ebbed47846b4b2e02c9db52a0df6f8adfd5b3a2cc33fa19a3b384125af1a4405698d498c5773236718476165bfce0b63d14532f1abf4dd60681d0ca6e488c240eb0bc2c853c8894f5b40694b6ba24504e1117847dda05d773c74898363b4e8a24c", 0xc9}, {&(0x7f0000000380)}, {&(0x7f00000003c0)="fb584041878721d5f49e318883e89f4834f75d4b8a9c99c2732b5a3b701b78203e548a61dda48fbe7584350c54e05be3389b3f38183e671f6c696e9bbd745eac84918b6cfa631cd831852b70952d7a5045681b4b94783a97390904cd625181477c511cda4904b7bcc75fa7659e3bf3c75bb82359ed08e56c89ae197c1422297abbfa8ee03733604438dc882a7ec2f218804e4f2f71731b067e0a26e5eedbf8a4231179c0c88fbb53307a3e47875e4409749a094826a0ba161188dc6df09cfe406149272255f2decf122b9fee5e116c", 0xcf}, {&(0x7f00000004c0)="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", 0x1000}, {&(0x7f00000014c0)="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", 0xfd}, {&(0x7f00000015c0)="561521ec8baf8db6934ce86157f2db555c7075d4f13b72a49dc5a6ba65b43ae31748233c643d", 0x26}], 0x8, &(0x7f0000001680)={0xf0, 0x19d, 0x0, "26e0f3576c4438ee3de339e65acd4c28ae622ea957048135b7426791dbc0b8805b351a8762a33354730c1e3614fefacf7c4a6f12b13e4be02d2f70e5689095271edb6c1016b1046b316ba6cb70ed3366ba319a0e6620df517fc98f7cda10e103963cb145ddfac48ef334cd36e3305aee6c91fbbc63c98b225a84aaf5450af8db67be9d16387577a43231fd45de196ab81392ccd8eea51790e844ee47ecd74462b48968abc30dfabcace81882762d7068750d0cd19bd23d46279e4cb0a282712e85d98cfa0948df9140bba1fcdae85eae12dbb8f5df8bde676b85fa67"}, 0xf0, 0x40}, {&(0x7f0000001780)={0x27, 0x0, 0x2, 0x7, 0x1, 0x100000001, "3f1d79501a730a8c685a08d4df5c80cc108fc705614ca34cd085044813660a8eb3d9123e545a419a8eba71b43127fe89a4c8f2a47adc8983d73473561311d3", 0x18}, 0x60, &(0x7f0000001b00)=[{&(0x7f0000001800)="ec014bfbb43d3720506246c8624043e3ceaf928a3308da49c004ab3a5dca079efe231da6165c4f3a9a2343993684651df0f668cebcfd73b94bd96e2a7acbc86c2eac6453102cc939dd5f6b5c91a449ccab095d9475d722d54eafee6b40bf285050f5c76e01e1aed29df242e1c2ceec7cd87bfa1a69c461f7a89db1147307ef5afa40305c291cce83fc7bb6f9aaa98b94c238d387ac0c6d4332cbff9eddb7c3", 0x9f}, {&(0x7f00000018c0)="ebf03b56603776eff9c3a6c4ab8dda531b5cbdd9fc71203cce40028296d0b2bf2f72a0b4516230d060ab7b61a6b1045bed83e67ce654c31604ae12004cab5b5d3553963d408fa68a3cbc988d690fce25a6fbefc4166c8f6a2097ee3712178a9f374e387ed598741646b5f5f4c1f2454a6ac3a4d8da1e2a77bca67fb69f247dc9297cdeb3e16b08f217092c70150d6f30dae3d627729269c2fcc676eda991835304f4629d3848e2cbfd17ba0ba8fa3852963cf97a2f073649f41070c8c30ff0971bf691fb2f08bce3b4cfcebcbf89b7cc2a05a972971e60187bec0770", 0xdc}, {&(0x7f00000019c0)="bab2", 0x2}, {&(0x7f0000001a00)="5409d5565db40b663d37cd8c9a503f4a283890db6b9a34f02e9dddda88d9a1513d3fbf9f3a1c2170162ec6fcb110c8c2349d0aeaa022b207bd627094a55cc948cc264f0a7ef2d8a17e49a9341c6362b2e3ce392aef2bd9a88b0ca262530135d6e1948fc10db9f5908d796cd2a6c3dabd1a36c14fa821be368db6d255eab439e59e95b5c32c2b192a5b6a3a60ac769d678d55f826b2e821d31d4ffc95d2a1cb36d3349fe07f761b097605bb", 0xab}, {&(0x7f0000001ac0)="e4d4b72fb8c51fbf6334b297e7e2ca3e962e63889e19160c464b809eaa6100a59527454a9626c711ed166a07ca7b47e7399d91f137b24f57", 0x38}], 0x5, &(0x7f0000001b80)={0xe8, 0x105, 0xf7d9, "79c9c18eef2d98c45e88dbead11c05c1d2b8835c15228bd5d3f3b01b8a67527c8ea2362336e108ff39ba46b4935b5402c9b8ca059182d2e6aa85913636c7156195edea0a8cb1d656164ca7d837c3164cdd88926494c98c4fec6c2056e3b1908747b21ca4ec148639042f5d93bfdb009cbd266ae2d352349836258bd4bc82ee02d3f3d9b8946e443d35af91b315147a6d383fa2e465fa3943ada80510f6be9a07d500fb6b1cadf13aed1fdbe83d1cdeb828f612939d34c40101f0bf24b1b3b98862f784252d0ac3b016456d376af470486caafc1fcc3f"}, 0xe8, 0x8000}, {&(0x7f0000001c80)={0x27, 0x0, 0x0, 0x2, 0x8000, 0x40, "9151fd4169cc55ddc7143e0f7312d58971061c08590b05de6be0caba5f42a5338e62bfc1f88e972b94b54ad202cc1d5927f8a47d28a09a5f5aa04edd418903", 0x36}, 0x60, &(0x7f0000001ec0)=[{&(0x7f0000001d00)="db755a45e1d641a088c832f71d1e78a2bad849715f0ee377ad81a95b35acf6047f6c04808e099f28ccabed87e7e5fbbe82e123e212d3546fa8bcf76bdb08575b5b1070300e210fc7dd12fb428d3cef144acfc33541ee467754e8b31e650e5af2a9a1c86bcde90a714edc1c0da585c8d89cea6557265751818ecc0b5608a753d0ba1eaad627540325960646437b961ced15b2a7769656d91f2b51a1b5c0f18d6933ad831256e16529ca30b4dd62", 0xad}, {&(0x7f0000001dc0)="9a5838a5f2116f623c4471b5bd46e083002bc05b5b5d8e615d88d17508add554e21eb5142efa0d6e45be4bc01f2bc5429f9362a1410de4cabdc6476011a4a471e035e97d64ccc2ef4f3def134e67ab4c700a55a7bcd1eb7129e275e6bfdbb3d0a3694e2667edbf766b46b2620870e6df0691e7700dcfe7e9ce48c9876a2ded305219a2f7d95482babab334fd6916891b1ff564e9231bcc1a09020410f93594d25deddee257da94b346fda5275dd77b27f9a1fba51a4c8d961eae17fffffceea0bf86732e17583a096055006da45457a26cc5b170", 0xd4}], 0x2, &(0x7f0000001f00)={0x28, 0xff, 0x63, "36a30d53420d4de0d7e118f548166f70d482"}, 0x28, 0x40000}, {&(0x7f0000001f40)={0x27, 0x1, 0x0, 0x7, 0x9, 0xfff, "5d5d4e4e860e3b8bfe6ba45a79102979c5453f7aa5b0b2bc098bd6c1616cd36398f2fcc95cdbefe66cba25d14e1bed9a3f506c9ed3ae020f41e94604ef7c69", 0x3}, 0x60, &(0x7f0000002200)=[{&(0x7f0000002040)="0eb3dd60fbf15ec59274a0be68e7dbc7aac1f02a16415e4aa88f40571f96c2a37b241c6f15337b7a5f38dbd497c8702a6afd36eeed5aa71d9eb80f8f6c314841aed34724c32e1c343b0f309c457b4f1de1d2ea6c0528300543a0587334acf2f21f2b8bf3bc21f763d60c4387548a5016254de9938272b0c45da138d5a8b06b8a6e46133e62631c14bdeadd5b82850684baa445ba38d3f2bd3c75e95e311d48f33d139699b5b0ca7035523d9670417b3cd0291c5c4f3731b2d91785b659153a0dac364737acb16074", 0xc8}, {&(0x7f0000002140)="547e06958792702cb7a00f1c1e5fa6f651687dfa183ff50fefe6b97a5826948c90cd48a48ec02a87c0dfabafb2a8e24464bf56226d462fafd7c47bf2dec0c540e055ee11f085e6c4c80b5a085fa383de34bfe92e297b5b0c633237fa0c1c10eff051fcc307a3d864a2803bd722cab84e4c2a3c4315e034bfa5f3bfd8ccd000139ecf6a1f01ecabfdfaaf1182", 0x8c}], 0x2, &(0x7f0000002240)={0x68, 0x0, 0x2, "aec842f83cec11ff4d0c28c3a122dd440cc12365473fdcb2160a0aad9ddea5700b89370caf4f8cb9c661b2310a3c83c9784c286b18f617631262123a32feacff25b5495f07c669116b5475e95a20bd077ab141aef1ef"}, 0x68, 0x80}, {&(0x7f00000022c0)={0x27, 0x0, 0x2, 0x4, 0x3, 0x10000, "fa913756fd819d9576055c14f5249b4c5504ab95e5c360567e8e8a0d23f6b6a6b861cd461d584b80acd8cd772fb0a0c0dbfafd224295d2a5931485e48f3435", 0x12}, 0x60, &(0x7f0000003380)=[{&(0x7f0000002340)="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", 0x1000}, {&(0x7f0000003340)="514dc6524cb46b4241ea4ee82867596251", 0x11}], 0x2, &(0x7f00000033c0)={0x38, 0x104, 0xb44, "6b9df48f4eeaaaaba7ff727d2674bbafe262fc3e3f2f7fe17edad9c6a295fdc84378"}, 0x38, 0x40}, {&(0x7f0000003400)={0x27, 0x1, 0x0, 0x6, 0x10000, 0x0, "153747cec4eaf443a255b7c5cf4be8ae6558238fc359c5ea0932f54451d9fed31a28b03bd7fa9887b41ac1f88f63c9e4b581027df31c870adc351aa664e991", 0x3e}, 0x60, &(0x7f0000003780)=[{&(0x7f0000003480)="6964473fd1c1a598af52aac46d640bf18a525e202a85a8c6aadd68f991fb8622379abd59e944aacf0c0fdedc1ba09142679e93d90aae9a8be8048027796f1cc56c35e6d49779dd97", 0x48}, {&(0x7f0000003500)="0a8f2cb33ceb2731f96ccc47d868e9e6b9e949578a04e9c53c3ec050977ce78a6604e6006f54f5cade5d37daf149f6a7c745979bddd55e1101d18f2439bf2efc3c7fc3a438c88d09240e33024fa2b5c40c30c88c1facea7f47004b4ae93d7ea2cc2ceabdb11217b3082d63d7ead67bb88791e42b6f935a777bfef07cce6a80da72701e924a1bf3c8c9a8c02cfdacdab246", 0x91}, {&(0x7f00000035c0)="26ef5ffdf3586ff6347a53d7ca55e06c1b647748aaeaab3aa61b4c3b8a58998652fb9629f25037b910ffb43d362795658463f94ea49953d7b0d1252f5f3c8df9f21a1d6842b89f95941b546f219740319e52cb81db11bc30ff48e8abd379f9cc88f5ef7f63db09065c565cc8de67", 0x6e}, {&(0x7f0000003640)="1e33800d2963407bab41420041a647901c26507f11407049c7ddc750ed70ef7f4ce86006760c748f218034011d17cd1c36f62b63bb26b67c179e48aa77a9cf5e6ff6f693cf3be59cbda8febbbe7d8745342e518e5697ce29cb1301a98b03a4bec8615e9efbd095c69d969da9c0e3b77ad3e5186b7a042f18b0bae4a1ba239e61544d92fff76c0a4cda267a12804cf097924dfafd56c408e8f0acdf2bb48c0db90324b8a275fc7309ccda75dd35a228f0c16cb55270538e62adbc53155e522e21c270685a52f0", 0xc6}, {&(0x7f0000003740)="04d115ec8504ec7f5ac7064e056a699fc05e367d52ee00e7bedd24505d", 0x1d}], 0x5, &(0x7f0000003800)={0x18, 0x0, 0xb033, "e642d4a11ffae3"}, 0x18, 0x20048004}, {&(0x7f0000003840)={0x27, 0x1, 0x1, 0x7, 0x0, 0x3ff, "b8e602ea056e1ffac3d0f5b83af18c44dff9336eae795ecaf795316417a3864d2b9f233e7a34632b79a4d25e7955fe90c54eaa3b811f568387c264150134fc", 0x29}, 0x60, &(0x7f0000003900)=[{&(0x7f00000038c0)="da3991e55e1a7e280fc5c9b8e927dae24ad73b090af9b18c6800bb3a3e2aaca400c9fc", 0x23}], 0x1, 0x0, 0x0, 0xc1}, {&(0x7f0000003940)={0x27, 0x0, 0x1, 0x3, 0x8000, 0x4, "618de5a1d384685b9db6664c84370c9df037599056cbe0d550e08dec6f52ef5ef5227eca76bbce18ae2b969c6d38e9c46a5c26d61edb17a8cd7d3ef2e74001", 0x3a}, 0x60, &(0x7f0000003ac0)=[{&(0x7f00000039c0)="ed0e473b461f89c247d6bf11e9bcc475d2c251f24c6390b52a2fb32842b5417fa83fe5d3467350d139ff07c5b876f45a7dc8001146fea93cf918a03cd0f0fb0c8001f401229c5fbed8c6bb639ef9c1a5009b8dba736b65b4e4654271fb428c8fba1f7da0bc553f360ddec661d19f68c3f70b2cf3c985ea5851f499e4a9d3c22f4fc9b266931b9c40dce100ae158b9509005353a753a42835375e2a3134bd7bdfe665bad7845514f4d64445c220e9319bf08ec41d383ceda6dba31dfc374e0a08803de65591b319fb62db60cbba3ffe6d8a", 0xd1}], 0x1, 0x0, 0x0, 0x800}, {&(0x7f0000003b00)={0x27, 0x0, 0x2, 0x2, 0x9, 0xf9, "98ed75d224604a8ec151141cd64a1967c576a3fbf18bf65594de04604fbb038f5c7edbf068992f7a430eb486f0c7230739e895a2aa897a2e90bbace8470043", 0x3c}, 0x60, &(0x7f0000003f00)=[{&(0x7f0000003b80)="5c6847c31e06ab33e2c543b732d0ada0fbd8ff8c4ab02bee194e35c393cae6f233b31502002ee3a9aea90ee097f4c4bc40c1915100454ab879d413737d9a2fedfcba7b6e3dd15a3cf90704a39692240804a3f3d8fa96734b90790cdf822b3a656bf62ea0cfc75976d95e94603720b245df0fd6141b629e11c66519a370f3ff0690f81a209f62f3d7eceb475b294499669b00d3b9c2dec51ac588a59d89d5a993c060d2bd8ef2eb778fb653c7578c490f235409ddd1d14de35c10a6c796768c2acdaea41fcfd2ca6cfe1059c6acc85cdaca54727f70d831e1935e7bbdef7bbbc69c3f3b9bfa6e134af9f0fa5a195f9513dc3675f697", 0xf5}, {&(0x7f0000003c80)="2074ff36fca869d77ee46d7cf288309bf7f7dcc001b1a1f9a3e843a949971fd035d32333f48820dff4dc41f8884f9187ea00030bf938668d37e48016a5b82b5d96d1f15f4f604034a9908735e2223a45517e324b07cefb632ffe42b825aa36e9fb78caf800b017931909263f5396d35c2fae2f72cd8582c6c820de629354b42d9be8d4a120eff23f30e59b65154b284065739804816768fe2bf9597e0478f1568cbc95be098a790d4bcc2f1c6ffa9fc0c6c8db133ba78929", 0xb8}, {&(0x7f0000003d40)="1305fbf3c65115a8c474cfa63df103e7a8aa1dd1a71692a67df9d8638604504806eb91c5ab76e868355f63ce2c05422f5b078b7bd2b491ac4d9e79", 0x3b}, {&(0x7f0000003d80)="3223e8ce652dcb36bf9ff11c46bda7fafd50c743b74733e66a6dec38734790c9fff3c15f056a685a55fc42869e1216ce7743bc4f091fec92115b2c28b711f9e8709af86b9e76643ffa211a7a461aaebe56555becb9ff3b5ad5e611ff821bfb488834ed994bfb21f35a0436693b1e8233f0bf984606d72c566acb", 0x7a}, {&(0x7f0000003e00)="812bd05db78ef209b38903c1c1757ee4f206986c75fa7b35e163c1375ddc45f6b53814b3ae80f177ec655b96e1ba39860c821c9655fae675c8bcd6d32d5094c138549caf8111eec00717056dea513fd5bb9666e2ef94f269b4d5c24d3c2a743c25acef5882d013bdbdc57f70b9ddf7bf2169cb638d954962278af3b98262d3b09188a76793a1430215c96a41ec791a51eb284ed40ef384ba8cf320b6ad4f5645e39d49f00920a4d020881980cac77d930009bd1cf4cda2657ed53d33", 0xbc}, {&(0x7f0000003ec0)}], 0x6, &(0x7f0000003f80)={0x90, 0x0, 0x100000001, "f71e73a4baa7e6a78db5ae0dda340798e5788af31114d4607943d2338bd0e351ddf37a49e647fc2a84d3c76ca26a8cd32cbceb52e0f76aedc07bd6d803418f9df7fc8c3eeff4b1094baf5293d0ea91031b8aabc17889dd2b6d26a35a7a91db998e1ecd2ecda4461579495d3e0727590ea0a0e860ed848eda7d"}, 0x90, 0x10}, {&(0x7f0000004040)={0x27, 0x1, 0x0, 0x2, 0x82, 0x4, "aa0f7354fc0889f0e924ff155c149e2f88686c78d209eec0d52d75fb4089d2c98f86eec767a07c49453ff791b91c01b5b360d05f720f692b07b5552e8d92b2", 0x2b}, 0x60, &(0x7f00000056c0)=[{&(0x7f00000040c0)="cc5513cb148adb3bf4f1c84eedf2302f127045766b6490c26c3cd48df74480b31b2f896bff1a77dfb6d79d9fb94a4babaf20f258211122c0d997dc4061d2cea4177b1058d27c5a769399764318163748606782598e8cf484c689cca7d5f42e81b92dd87f0981bb37bf92280c617c300858", 0x71}, {&(0x7f0000004140)="a606abf2bc4a4bfe6f61f64216abc63cbfa48ceac37bff46339016f36305df2e4fbf425e017d4bd853227a01faa41fc929a3100d6e3f5d9a4476c7c85d8b8f629cb7924623bfbb93ecb8165facd71b7d73b93bad8f27254454b8be40e6cc2e1bb54e71c84daf", 0x66}, {&(0x7f00000041c0)="58de2e9fcf7a0fb4817e5c1f27c475fcb6833d73a999d90030e656cb83c7a220d877787d537c478b10c4f374a10cc2b3ba5e78cdf69b4091387804e35e0b07ae86146c63ea0c0a2f66e036c71d57b59ffb18eafd0216efdf1af4a7820a80f9dab269248b3825c971dd8170e530b35d51683482897cf36ec1f4f61c6c6497386996cc3197010fdefa83634ca8e85269ef4b7d1227f5d4c5c925c9e3f4647957c0f786599aa4ac12604c4e9360a1c9257f0607466ecd0abddb10201ecfbcf607cf2a856e096eadec262a7a4415266e1fb664274e37ec4c85163416638ce34642", 0xdf}, {&(0x7f00000042c0)="e26dc4559c7a8413a6034299b68fa625efd3a10b6e50a55b9e266251e9a1b71fee46dd0e159ad361cac7ba268cb7a239667ecf88306894425cfbdce57c0114972976fd424fb466c2195286940d00d0337662da1aecfdf92e51de201fb08017b0c3e768b61a9b56ee4d16336cc6787f818f032c391782056fefb3ff56a4467c069b943443420d819936f65d356a51594dc1d24f93ee7bf8ff6f33e8b57ab9e607e8edf355d1073ad57fd157615560875689fc61aa72545466e7f30e142426f6e690fdc643255d31c94040c2ab3c16f67a42d2054ac49e6b815d70533938a665e1d8d6eb86491a15ad8c7a9563566d4ae741bdb669d63046b4b66ec9dcaf3ac78b5955d0f01a25041fb5d29b4b756f4f01a512751d0d02218abe98bf8de4b5fe071c32e94dd1aa1049e789eade5030d54835e1aae2ed43e992a429c93872650bc4b4687873a7f991385369691b4316468b5ff2d488d2b2511e5460764550a1ec884ad50eb2356a70b36aff6d4744f4d4d06f04ce35e53550a4601664e3e7a6d05eaf2ed2a748cb0384cc0fdac4cba0fdff440f3ece1d423d68ef027925d78b29d1c63e26ccda7a8cbcf2e4d4f5782e74457fb6e48f966340b2da622f636903e69cc3ece76eb4a1bb359cae1066cac4220fd18d00dc3204782670c24b43a516c9609ece0b2b14367becf142a10697890e99636252dff50a0f0bc9f9de2c9cbf041619d8bec647d0b3a9015f561c469e85459e814ba5b6e44ace02aa3615a23567d55a40b622306e4f6f1e1f3989b263bb064e8afff40aacbb3067b746e1e51f5a5ab63f5057cf146d63d7ba50375828ca3213ec55c5f9be2da89cdf4db05de34028f82447700356c6f72196f92cd5f6c7dc5cebe07d03dac50edacd5056e9fb14c2164c12e3cfb8971b6c1b3df19b89e037dc7eb70310dd0e607fa9f557c5e038277642528d83830456bb76978725a8be9f33a15913c9d4a8de9b1303857590df382de86cfe2aed528ec90dcff6dbe985759ff025fef0ba11abe89c04b4ad47cbbda305d142eab49daf1ccef8b694fe648b32ee61f9a60c35eb20daf81cc07e91f78757b824e62fe08edc215b348c24158d137a82311b9c379a9d10737b423c84154264c47002e7ad8a0fc555732c99b0a9a75f8a7bc09bf0ace07159712f184594dd3911480e1f5a48abfc1a9c4e2f079c176da9268815c824d2a196ff7220b32388e3dd6feafedee37b382bc21fade4e63a6e42557224e18490e123dde2d4fee30e4638b2281323ac98c4aba087bf444aa4c02f0027b94b3b453653af56a64e949f55f25ffca11661c9e9c4396d0c6b98194aca2440d4a158b631bbe7291231087542538e7d398713dd085b48794a604e3cfc1e51347b92b2a42df0b79cab4735a472986ecaf43edebbc360d055aa470fcce1d4ee84271c8db196f3d041bed02ac958ba3b7332c928d0f4cf704a35c311ad6ce74e8827e1baf10c84c43772c0d87afae837d2d6d2d449ae763e40644c55a34341f7757b0e1e4d5a09fa8af5f94e77b28a9eb13c88e2ef8178f0fb3eb2a8f62f1806521d2b23428928b75b52462074d633f1f73bbfca8329bddd9ef86551a4d488935335cce18db24dcef887823e26f19072c3c193ffa4ca6bd6419eda4c6e0d3a435ee3438b63dea690c0e11afa89f518fe14951c22f5956eacd720d86180f41aec1d2949b241179a221dad3464bd61bacd7b06ccc3efb05e90ddf0ee8df455bf5769424861e02d5f44448e0c779b4fe0ee0acb96ffcde21f8c407ce223b45b75a84cd954be87b01a26b18ed1bd511f6f5771897ed803481d1878005e03cb226b830f1c10643bd3794401296df1fa1a6a123bdab5aac7c0025fadbde85fc9a0f9d8f1e381bb704e6324850b22ef5b74852bab132a2aec45109ef9ee802c3cd9ac31aae727a8bce79d396e8d353affae54ff3532ac07449dbeb5db71e05a9af7074f8e2ed65cdaf7a5001a230ea8b668448b7b00bfdba6e3257968a8302a9eb06d510eb46e7471fd3c9aef8632b78580564963b82cef877e7af4c0c87e3168321ba014ddbaefc48c95e1cd8a4461455e6405eafb0cc5eb6ddabacf01946fd2ffb62cf25c8b5ca4138d4065dbd4fdd42d08e76a8deee0268bcee60488d8b137ca4f07a75506db35219175328f118278a6bb7149623b1ea84cea88331c26eb071c43af2c13e23509bf30472ba909d3451fb1e9bd972fee6c961cf38e6278aaed186c9f8dce8c5ad8b8789f0bf4f28cd1610fc4cc2fc23c7ed11eb8cfcc1befd12f620a53c8a0dcc1df15525cc9194a85f6142064730ff79d8b58e86f329ee2a6e6fddd2717ed9d14c961f6289b4a5b55822eda2560021f0a5136e5646679b1ebf760ba07891f0c36b0deaf6e62f7a8dd294e1e8d96965df5eaee37d9a22f29e79e86a8668edc6f79b035d54707e8f2089b2313dcd3a73d18816933d933dce835cef1b73bb6dc9a77383bd3415240ba6163717aee865b2f260feacfde4028430b0e7066cbae1852becc1c8fc81e8362a650c9649dc378fc70a4cd68960bf092779393d89b93157d35426e07366781e34cc1eabfb6f8d6d2e568500d381a37fd2904761a2b05f9101ccbdb60829bd913f9cd06766a23cd5a3cf744b81bee18a6e846095b9e21ee49ed99f8d047a1896d0e4187d494d2a0a425dff88d52bacde56df17a243c75d74acb17d05a11dd2398fc11f939b7ddc1b45e17290fb310fb13fb4e5b20bea71b736e6d75bbf08756d52671230ccd32b40b52474ed89def8e34818a5af805b53f524593235dc50edc2fd83c9ebcdb1296210c37651146286183ea10eab241b22f8135bd818357e7db92517a596db8fa92837e9cb2a47b727ddf6aceb57f2e5cfacd2d63aad95511f7adc36158d31ff89d9fd038c1dd574650eb95c2f0dd4157b33c8806859af3da6c36f0db997dd4a85800ea0ffc3e09cad754e203eedc1b41557be573a8b5e90d170b2a31ece1a81ae51f9ceab1dfe85b4c10de49d5adcb71ff027bce6d77482d70904da3b852bed93f9695d8222bec6d8c918a51f0b3e87608aa63552623375b8d12041eda37bb6c6343e1e70b5fbc8a8710b068b0860744389a6dd6b63403a69dcd740b13285080e49a458d2644880c762704897c77d46d0e75eb6799aba2b639142a96aabf6b14adddde9e7b938f63f18315d519c5d3c8b0aaea6e2d8ead9183b60619ea101244d239d36ba3e6e9d099c78ab13461f6d707c8335c4b2106731a5b08b9ec4316c5baf0b71c9b837c843adf4c4a0abf62fc671650060d08e43f395887b9d5cdb0e995cbbdf1395ececfc3a104e192d534b143cf3926e23e91498438b7547edc6277717c8bd04387f51150231a9b98b78fc06ca3ecb87979fe6cbdf361a7ad7271436e70a74836048238bfe724e07c53e6d45674d804df58936e51d9527410a7abbe48ee12b3635e3e6e59b6177b39063cb47c7f0fbc488dfa959d81deb7df1baad49e7492b28fd2221b4c85137d66b1493ecad2343d5d6de5127984688b5d104974123454e3f5ec656f9ba605a5bae634435f79f4aff98d70b2fbed950f0fd1a2957d0ec1137de09ea8a47e056139a8b82eb740a74827936d3fa5bf39aebd0193abe3590f8234e81094a79ce563b1f2f955180083da79609259b3131bea06e6d2f81d744db518543046c32368726b167fe06bca893f759146aa62141b5e4f4bcfc635c16bebca5eb00f28ef066dd3ad395d449fdf35aa9899edbf1385726fb7af2d603ddcad96d1bf4e5752b55184eec92480f6762ce329deee6fafc2be5e50fb3ed44184d543e8236ac234dd40512ce8003a2e62ba694d6b557a84e8035ce12022d4186ac09c30e847a67bcab365aa8da9d71a42ff29d7ff93ac9a29ccd0258b89d460aa56694adb72a303d6593f4587521f75897a072c47f382a0c5e0dd765397864061ff0eb517f8c3ac5645951616da30ebe4774881863c751889188a89299cc9fccdcd8dafa0e467aa49b525926fa220cec1a82dd69f4aa9d2328f221d07a733f79ffe6e08c383dcc9e935b0daaf82a208e37b44c5e5b3fcc93c53837d5a521a3e362c255e61df71edc64fbf4523d78f691db60dd0d1cb6a31a8f3b0e972f34dfbbb7ab9261dd4cc0c5e8f31d1b41744b044eab67b11f9a6df0c8a1e35d85ff03de8b08bb1f9a1907391559392013f0e0e676614d432a8a27a885c1db4a45a7cc5fea5425e5fbc79941f80bbeca18cc6c0d1e43a9a9da53a07237725d6eefb1a7e637903ab10be7bd17aa520b6f9e1fead6589affcb82c4bf578e700ea04cf403129edd9459aa0aa9a1bfee61a2bcf1796fda98d094ab579a16335613febb54fc29e734a6b9dd3c28996f0cad4c7f36ffd3a2b3b73c11968d036a7c66f0781d674b2b69493463bf0af77ed765760672027a6988cdebbbf7171d8f80752702d90631c615be36e8a32012b76fb3bac1292c1875dc0939e079fab9b845152f006319eeb529f1d6579674f955ae6a93f8bf4d0d634da4c7fd1e7e8f6647603c9d18b92665c3fe6c1d41c0f5277a19e16432a7a7d5d41d15b5bb6abd2e0a1635937007afa32c5c4e45a97a8e75b095611e8f95bfba93ddb4b1fd0fe078f386b1a02caa26d67b5fae9f5f8f059a866effb6ef291ab46a3e29a7f6e3e8fd9f51cf5ce238283a872d2677a602936c914e9eb3efea2ec923a459b1424929e78e0073cffe7815799da7550f1314455c8e0eee9c3cf92c1c74b49ff496eeb566716555d9c531954a47516e5651d3f2a75ed4dc226f760efbae2dc86c8dcb5905464c9eee7a78127b54da4d67f6bc8b76e0f1d2da01875db65e2e21fe4a3bc1ab5ff25d8750f608f140d607705b2e861c116c0f411d5f24719293f670f4b9adeb777ed50728293cf443d9dd05c9ad01ea63f25866cda6e0daa21259abd9e5962d5f5fcf0308160a7a3bba3b0cd487dfb9126c43be8a01e310703978f4e8c409c97457c4a5fe4b5d6b5cf5baf182b2e8e3961ec825eb20e8d23e2c6f390d4047b78de3e4eebacda4136f89c842af30093226bf75b04dd8be9977da47b09f4e985547eb8436704fd472ef19a0114a944135965829402c0b9659134771b8bf854bc7a9fceea0441320cc5735b087a1ae990761e0f375b49b9a303a02d42315a95272b60f11d0257204dc9007c7d3162f7b4766e8f98057da52bb4be98595021cffe18adfad27d62b7e925d080b6e16d39ace48ac7184772498cca87ce7ae0d6e89027311e42cb8688a8dcac6f7a58bec387550ed854719a292b5c23f85c42cd73c825f9af5317d0f6cf698d90afcdbfc9cf5e11a10f83f208bd68365aab5079e4014de417cb6c868b70d0256910f79d219a824184073f30bbe9b0014e2c97012293043d2bbe0df0186acc0aa49a10a0277b1d16f48178662938830754f83ad6c5e13486c42e5b7ed7bdaf5b61ff13b2dc448faa90a13dc3ffa6850a3db9d113b1d44bc47f845ea52d201b8c1e6c137c51fd226a9a3ddd95ec79afa80ddb77b8aac2859213de5adecc6115d607a8a35a915f3c154b301ca543b3880e9c91a2c40170947eab8f8087d43f05290e898b947698df0797bda20f247e346fcfc924ccc3a0c23ae7646c60c7ee01e06c339720005e7d75f344392b75438ab93338560e4e18eb1efdbffcf2c1de7900fa78c80b85e1d84227506c8cab5bb24bac745289d97fce83e9161ee4811ccbc8ad605d39daa5180dd928a15ecea49a108d785b917cd9126f91f78ad2ff00274ed1aac7671fc9d22ac397987bfdc38cf1a561386902", 0x1000}, {&(0x7f00000052c0)="1a072403d90dcdf327b82241b8d25707f9c1acce79b0dfc146ebaf8c534e738a0bf5ef86f29ab475e1ba55e400a1ea353847dd366d325103e180ae4118f7c9db61b886e9b7d722724c2c38ce774ccd2d7ded18bbe5c863dfba51119d8ce0e5ddf558b33419ed72a52210b13be7d75ad5", 0x70}, {&(0x7f0000005340)="ae4f39ed66747c449a81e050f137aef29bff", 0x12}, {&(0x7f0000005380)="eaf28f774ae40e5c3abed27243ad2504cb8e2f239e8e2c472cbe6e", 0x1b}, {&(0x7f00000053c0)="9c5a793f430736649a4ec2c5877bb7033da11d769c115a4a9997099e8fd215a4b32375d12c32028ee28c36be09969c308968704ca499438e3646c902d73650a4ae2a07aa51098ae5371f18d1e8eac40292b3fe5c2320ab14783a3044c2827dda678f4b66501ca072210238610e12298b160b9775034ed2089b25b91f3b1ec52d335aea80042a56e24dadeed0b50f13341f42dc4ab5c40d51560693a52761f654cd4fd7ff5ba77c904e699415e0cfe331ed13ef5a2ac644670e93588153f2ac489793a377bf40ba64c379d16f906d96967734c0737de2dce1c4ecbb231f549a71547c5a08f292e95816d3dd735bd2ebcf30ec4ecb9200", 0xf6}, {&(0x7f00000054c0)="038fd0e2ccd2b1cd227a8719a196d7c7f9208b8441099faf9bdf0e014de099d9289cbe5743320a378a11e023a0aa9be5de0f2fe8a52690b8b3d8a1aa41fcfc275aa52df9f8f1fa09915056722c11cddaae37a44677ca7b89d0246d91638441e1f4853704efe5aac1f55391775c1d98731ffd1c0887e9d2e96713ebfdb2fd91f3fbfa8207e5f728476f9828623eb1ae304275cbd22d1547668c01ff849192a2b273c986014046069d071f420399876fd5b976cf66d0ebf88fd0cb1364f00109b5f95166052fe7f4e70afae0e381e2e9861fe1eb607a149e7ac2477264bdaaf046b812ed5b7b865c1d8811e835543737", 0xef}, {&(0x7f00000055c0)="65d6f15b6631d1de86ce5eea72412b700e9cb9d41459d487070fc017be3839664f5cfd60b9eb6db3ebde66d4f3a87553d90669799abdd4c88952b3245d91d4c000f6946d56e15971787854a0e5441dc62e00679698c1908dcfc29439b846e035b7e0eccc6b35a82e951be5a250af5c07f66362b50bc117e34963b1999ae9dc30b64bbf80a7e8e76213ca2d89b667310b289babdb9d8e860ddce5172fb58b737f32b98b9d8128b2b0e0e4ccfb813fe5760c78a2097dbaf69093ac508d1b78dad18c9b6fec05499851057b6624449ce810e9bb92e84ec65f1e1c31638191732ab831b3", 0xe2}], 0xa, &(0x7f0000005780)={0x100, 0x116, 0x101, "84abd901267f3f42d2d5acc8778e148c3df4a7e2a26b8ebb7c5f645b9efa62898ec7750bfe5252bbff21b5852a056702909404237c88b84646e8776239875c2647cdbfd0aff00c02820056629ea68f576cee254896d61030340888fccf95013f56c07c2316e808c735d6cc806ae7893d5bf0a3a15b3a8268f27ddc9b5594a4a84a6f059aacbf7d385723b6afbd7c7917a87c927aa56c55ba5df7f24bb19132731278ef0d8ff18ade73f943366ad8249c46403b1141d26c56425eaf8626142bdce619ad2bb27d988bb903075311dec95cee1c1a53f06d84078a1afe250fd5cffd6c5f09908b5497c63fece2"}, 0x100, 0x80}], 0xa, 0x48000) 2018/03/30 07:54:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r0, r2) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 77.271291] kernel msg: ebtables bug: please report to author: Wrong len argument [ 77.294555] binder: 10129:10131 got new transaction with bad transaction stack, transaction 345 has target 10129:0 [ 77.305178] binder: 10129:10131 transaction failed 29201/-71, size 0-0 line 2875 2018/03/30 07:54:56 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x0, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:56 executing program 2 (fault-call:0 fault-nth:2): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 77.359836] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 77.364187] FAULT_INJECTION: forcing a failure. [ 77.364187] name failslab, interval 1, probability 0, space 0, times 0 [ 77.377345] CPU: 1 PID: 10140 Comm: syz-executor0 Not tainted 4.16.0-rc7+ #371 [ 77.384714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.394077] Call Trace: [ 77.396681] dump_stack+0x194/0x24d [ 77.400357] ? arch_local_irq_restore+0x53/0x53 [ 77.405111] should_fail+0x8c0/0xa40 [ 77.408864] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 77.413985] ? save_stack+0x43/0xd0 [ 77.417608] ? kasan_kmalloc+0xad/0xe0 [ 77.421482] ? kmem_cache_alloc_trace+0x136/0x740 [ 77.426317] ? splice_direct_to_actor+0x64a/0x820 [ 77.431141] ? do_splice_direct+0x29b/0x3c0 [ 77.435442] ? do_sendfile+0x5c9/0xe80 [ 77.439316] ? do_syscall_64+0x281/0x940 [ 77.443361] ? entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 77.448742] ? find_held_lock+0x35/0x1d0 [ 77.452879] ? check_same_owner+0x320/0x320 [ 77.457185] ? percpu_ref_put_many+0x132/0x220 [ 77.461760] ? rcu_note_context_switch+0x710/0x710 [ 77.466712] should_failslab+0xec/0x120 [ 77.470681] __kmalloc+0x63/0x760 [ 77.474125] ? kmem_cache_alloc_trace+0x459/0x740 [ 77.478952] ? lock_release+0xa40/0xa40 [ 77.482923] ? alloc_pipe_info+0x23f/0x4b0 [ 77.487163] alloc_pipe_info+0x23f/0x4b0 [ 77.491215] ? pipe_read+0x7f0/0x7f0 [ 77.494926] ? __fget+0x36b/0x5b0 [ 77.498397] ? iterate_fd+0x3f0/0x3f0 [ 77.502218] splice_direct_to_actor+0x64a/0x820 [ 77.506872] ? perf_trace_lock+0x900/0x900 [ 77.511092] ? generic_pipe_buf_nosteal+0x10/0x10 [ 77.515917] ? __f_unlock_pos+0x19/0x20 [ 77.519881] ? lock_downgrade+0x980/0x980 [ 77.524031] ? do_splice_to+0x160/0x160 [ 77.527992] ? security_file_permission+0x89/0x1e0 [ 77.532925] ? rw_verify_area+0xe5/0x2b0 [ 77.536992] do_splice_direct+0x29b/0x3c0 [ 77.541145] ? splice_direct_to_actor+0x820/0x820 [ 77.546008] ? rw_verify_area+0xe5/0x2b0 [ 77.550076] do_sendfile+0x5c9/0xe80 [ 77.553820] ? do_compat_pwritev64+0x100/0x100 [ 77.558395] ? __might_sleep+0x95/0x190 [ 77.562384] ? kasan_check_write+0x14/0x20 [ 77.566605] ? _copy_from_user+0x99/0x110 [ 77.570752] SyS_sendfile64+0xbd/0x160 [ 77.574637] ? SyS_sendfile+0x1a0/0x1a0 [ 77.578606] ? do_syscall_64+0xb7/0x940 [ 77.582578] ? SyS_sendfile+0x1a0/0x1a0 [ 77.586546] do_syscall_64+0x281/0x940 [ 77.590415] ? __do_page_fault+0xc90/0xc90 [ 77.594632] ? _raw_spin_unlock_irq+0x27/0x70 [ 77.599116] ? finish_task_switch+0x1c1/0x7e0 [ 77.603603] ? syscall_return_slowpath+0x550/0x550 [ 77.608525] ? syscall_return_slowpath+0x2ac/0x550 [ 77.613445] ? prepare_exit_to_usermode+0x350/0x350 [ 77.618451] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 77.623825] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 77.628681] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 77.633855] RIP: 0033:0x4548b9 [ 77.637029] RSP: 002b:00007fdb0eb92c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 77.644724] RAX: ffffffffffffffda RBX: 00007fdb0eb936d4 RCX: 00000000004548b9 [ 77.651986] RDX: 00000000200000c0 RSI: 0000000000000019 RDI: 0000000000000014 2018/03/30 07:54:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = socket$kcm(0x29, 0x7, 0x0) listen(r1, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:56 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f00000000c0)=0x18) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 77.659240] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 77.666491] R10: 0000000102000001 R11: 0000000000000246 R12: 000000000000001a [ 77.673747] R13: 00000000000004c5 R14: 00000000006f9318 R15: 0000000000000001 [ 77.707739] FAULT_INJECTION: forcing a failure. [ 77.707739] name failslab, interval 1, probability 0, space 0, times 0 [ 77.711950] kernel msg: ebtables bug: please report to author: Wrong len argument [ 77.719059] CPU: 0 PID: 10159 Comm: syz-executor2 Not tainted 4.16.0-rc7+ #371 [ 77.728465] binder: BINDER_SET_CONTEXT_MGR already set [ 77.734005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 77.734011] Call Trace: [ 77.734031] dump_stack+0x194/0x24d [ 77.734050] ? arch_local_irq_restore+0x53/0x53 [ 77.734093] should_fail+0x8c0/0xa40 [ 77.734111] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 77.768257] ? perf_trace_lock+0xd6/0x900 [ 77.772384] ? perf_trace_lock_acquire+0xe3/0x980 [ 77.777205] ? find_get_entries_tag+0xeb0/0xeb0 [ 77.781859] ? find_held_lock+0x35/0x1d0 [ 77.785937] ? check_same_owner+0x320/0x320 [ 77.790243] ? rcu_note_context_switch+0x710/0x710 [ 77.795148] ? find_held_lock+0x35/0x1d0 [ 77.799201] should_failslab+0xec/0x120 [ 77.803153] kmem_cache_alloc+0x47/0x760 [ 77.807198] ? perf_trace_lock+0xd6/0x900 [ 77.811330] get_empty_filp+0xfb/0x4f0 [ 77.815197] ? proc_nr_files+0x60/0x60 [ 77.819065] ? perf_trace_lock+0x900/0x900 [ 77.823286] ? __lock_is_held+0xb6/0x140 [ 77.827323] ? trace_hardirqs_off+0x10/0x10 [ 77.831631] ? unwind_get_return_address+0x61/0xa0 [ 77.836548] path_openat+0xed/0x3530 [ 77.840248] ? find_held_lock+0x35/0x1d0 [ 77.844302] ? path_lookupat+0xba0/0xba0 [ 77.848344] ? lock_downgrade+0x980/0x980 [ 77.852473] ? lock_release+0xa40/0xa40 [ 77.856427] ? find_held_lock+0x35/0x1d0 [ 77.860470] ? do_raw_spin_trylock+0x190/0x190 [ 77.865035] ? __lock_is_held+0xb6/0x140 [ 77.869088] ? _raw_spin_unlock+0x22/0x30 [ 77.873213] ? __alloc_fd+0x29b/0x750 [ 77.877016] do_filp_open+0x25b/0x3b0 [ 77.880801] ? may_open_dev+0xe0/0xe0 [ 77.884582] ? strncpy_from_user+0x323/0x430 [ 77.889463] ? mpi_resize+0x200/0x200 [ 77.893256] ? get_unused_fd_flags+0x121/0x190 [ 77.897817] ? __alloc_fd+0x750/0x750 [ 77.901594] ? getname_flags+0x256/0x580 [ 77.905645] do_sys_open+0x502/0x6d0 [ 77.909334] ? do_sys_open+0x502/0x6d0 [ 77.913209] ? filp_open+0x70/0x70 [ 77.916726] ? mm_fault_error+0x2c0/0x2c0 [ 77.920851] ? SyS_read+0x220/0x220 [ 77.924463] SyS_open+0x2d/0x40 [ 77.927721] ? do_sys_open+0x6d0/0x6d0 [ 77.931589] do_syscall_64+0x281/0x940 [ 77.935452] ? __do_page_fault+0xc90/0xc90 [ 77.939664] ? _raw_spin_unlock_irq+0x27/0x70 [ 77.944139] ? finish_task_switch+0x1c1/0x7e0 [ 77.948611] ? syscall_return_slowpath+0x550/0x550 [ 77.953520] ? syscall_return_slowpath+0x2ac/0x550 [ 77.958426] ? prepare_exit_to_usermode+0x350/0x350 [ 77.963422] ? retint_user+0x18/0x18 [ 77.967121] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 77.971954] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 77.977118] RIP: 0033:0x40eb91 [ 77.980286] RSP: 002b:00007ff408eca7a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 77.987969] RAX: ffffffffffffffda RBX: cccccccccccccccd RCX: 000000000040eb91 [ 77.995214] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007ff408eca850 2018/03/30 07:54:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000040)={0x0, 0xfffffffffffffffb, 0x39}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/246, 0xf6}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x3, 0x0) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) chmod(&(0x7f0000000280)='./file0\x00', 0x100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x6, 0x800) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000140)) recvfrom$inet6(r1, &(0x7f0000000080)=""/104, 0x68, 0x100, &(0x7f0000000100)={0xa, 0x4e24, 0x1, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000002c0)=0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, r2, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:56 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 78.002464] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 78.009709] R10: 000000000000000c R11: 0000000000000293 R12: 0000000000000013 [ 78.016952] R13: 000000000000066f R14: 00000000006fbb08 R15: 0000000000000002 [ 78.025711] binder: 10129:10161 ioctl 40046207 0 returned -16 [ 78.032553] binder_alloc: binder_alloc_mmap_handler: 10129 2000c000-2000e000 already mapped failed -16 [ 78.043541] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:56 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x8, 0x1) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x374, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d4d, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x80000000000) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 78.066393] binder_alloc: 10129: binder_alloc_buf, no vma [ 78.072260] binder: 10129:10161 transaction failed 29189/-3, size 0-0 line 2963 [ 78.101739] binder: release 10129:10131 transaction 345 out, still active [ 78.109255] binder: undelivered TRANSACTION_COMPLETE 2018/03/30 07:54:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, @rand_addr}, &(0x7f0000000300)=0x10, 0x80800) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x22e, 0x2, 0x800c, 0x100000000, 0x1ff, 0xffff, 0x2, 0x2, 0x0}, &(0x7f00000003c0)=0x20) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r1, 0x3f}, &(0x7f0000000440)=0x8) r2 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000001c0)={0x0, 0xb5, "1a27bcb97af4151e99db39710321f334b692d15e08668717f86304997c6d6fb104505b369ca6693e98aa18337fb95292aabcf7ff0ba0fff8df842a5025c40736787b485da3116a1a2c39158c2b230f96dc7dcf5adaad6e23432e50702405d790ccbaadf6cb9d37356c7441a76a53451e240043533795f30309622e777d0b39705445465ce5ae6f47626008d6d1f105b048079628cbc26a797e5af1761f71f0e2d793641e398c2335b985e06bf785cada50ce12c84e"}, &(0x7f0000000140)=0xbd) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0x9}, 0xc) r4 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xffffffff, 0x10000) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x5, 0x1000}) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0763485d00000000003b22f1bd86a5e0810206907b653daea72cd67e6648f026f6a2e77fe5b208ff8d033456", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:56 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000024b3ff118bd56a9c000000556ee72c44eab0cb68a058325ff553d98d507d46a8dc"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 78.109267] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.109282] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.125392] binder: send failed reply for transaction 345, target dead [ 78.161988] binder: 10181:10183 unknown command 1565025031 [ 78.171157] kernel msg: ebtables bug: please report to author: Wrong len argument [ 78.173011] binder: 10181:10183 ioctl c0306201 20000340 returned -22 [ 78.192578] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 78.205706] binder: BINDER_SET_CONTEXT_MGR already set [ 78.218852] binder_alloc: binder_alloc_mmap_handler: 10181 2000c000-2000e000 already mapped failed -16 [ 78.223351] binder: 10181:10183 ioctl 40046207 0 returned -16 [ 78.236560] binder_alloc: 10181: binder_alloc_buf, no vma [ 78.242204] binder: 10181:10188 transaction failed 29189/-3, size 0-0 line 2963 [ 78.254332] binder: release 10181:10183 transaction 349 out, still active [ 78.261298] binder: undelivered TRANSACTION_COMPLETE 2018/03/30 07:54:56 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:56 executing program 2 (fault-call:0 fault-nth:3): r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:56 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x0, 0x0) ioctl$KDSKBLED(r2, 0x4b65, 0x6) 2018/03/30 07:54:56 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = accept4(r1, 0x0, &(0x7f0000000300), 0x800) sendmsg$alg(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000340)="0250239a72e8e9cf755a5e7cde1fd033d1fe7100232e4b81592f83e1b2cca6e5ae9aa57c64688ec6", 0x28}, {&(0x7f0000000380)="f03565e93d2ace400ee250cbaf4c9dde8caaa0055f56262b8833bbf6c3bade786ad1ae2816301964e36b347f377e28566467d5306f6668bd6c8e587caa52834fadbefd8d7a8b079b10a9530ce902b1a893c29270692de576aef12b1faf8aef472e95bc66ba72cd4d5fa0564c86c6dbef2fe75d47fdd62e00f3eadf63add780018d1a7b5f143843dfccfefd18b22a5cd7ffe31a64a45aec735847dbdebc0c641d968daba06f33fb52", 0xa8}, {&(0x7f0000000440)="873ed7d16fa4481c62b5ee586f013f1c7028860f9427482783f396a6f37d9787ccbae02c1fbcefb1772b2bb08e72cb3c91884f8703106f393886d31cca0c08c359b333fcf0e9be635f0226e702d9bd274beaa976520df948810b16f1e6a86d9aa1af1bffeb33d803a6229457fc8f3f6440e6f92fdd61eb1cac27611080b2d8da0b70fcbf104a745723c02af7897ee85bdf7a528187d28224df5f66d6f61545c6de696197e81ee01f4a00a297b57d18a025c08442525da61a4d21d98790e9454bd4a203cc5982a6199416ec5a505df4fe418c97bf00894a17de48dacce78f25", 0xdf}, {&(0x7f0000000540)="7bbf4b067e59bf2203c90e9f4c2deacb045f1c2a1cde8900891e", 0x1a}, {&(0x7f0000000580)="29e2950e12cf4ad11bec179be6cfa0253ae1b91da046258a7c7b", 0x1a}], 0x5, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3}, @iv={0x30, 0x117, 0x2, 0x18, "8e365d4a98c4f1eee9d9d43c292a00e29769392d5b65bd43"}, @assoc={0x18, 0x117, 0x4, 0x69}], 0x60}, 0x800) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000700)) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000200)={@in6={0xa, 0x4e21, 0x3}, {&(0x7f0000000100)=""/143, 0x8f}, &(0x7f00000001c0), 0x12}, 0xa0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000002c0)) 2018/03/30 07:54:56 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="100000000000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x80000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 2018/03/30 07:54:56 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000000c0)=0x3ff, 0x8) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x40) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) sync_file_range(r1, 0x100000000, 0x6, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1163484000faa266a4640687000001947369405a010000007c5101282844d6b00483362129860534d560bcb26cc8904a78dcd08bf632c63c", @ANYRES64=r1], 0x0, 0x0, &(0x7f0000000080)}) 2018/03/30 07:54:56 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) close(r3) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:56 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 78.266444] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.271908] binder: send failed reply for transaction 349, target dead 2018/03/30 07:54:57 executing program 5: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000080)={0x7, 0x0, 0x3}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000000000001101000000000000fce411214304000000119ef999f81db241ba4f1fecf5618d25630a7d4817088c39c252e4807d08fb2f9cebd47dafbe0500000023abc810323d7f2853b70f078eecedc3e482d8cde00a41450a58224999ed8504a1dec6d71a94f250c287e70030d5c5fb3a721ab5acf6bc3762"], 0x1b5, 0x10}, 0xfffffffffffffffd) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_type(r0, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) ioctl(r2, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 6: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000500)={&(0x7f00000001c0)=@ethernet={0x306, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="fbb629ccd6ff39a016834ad18645322f7011939c296f6f579641fb8ae0ca44135df428153f63bede305d6afc47d7ea883f738987ef", 0x35}, {&(0x7f0000000280)="6096dd00d587ee43a08f6f6c367d2b2da2b9981cb2ddcea934581338fc55ba2bf45e585d5cd5518c80ad54875c9188fee8e2b74d01807b411947df4bcbbaa5e28ce0684950346e6f5557ff59a2cb2752c74101638e69136ef5d8c9151d4992fde456967dc15eb1e01b69836919a4b8ce61917093336ff46f18ef08ab0b379c31d096a5d28f5521a2b982422d", 0x8c}, {&(0x7f0000000340)="08cbdbb36b6e354b8147d3a7b46121704c9c83aa56e54f9675f1a33d96b80f9130c82ae309c717d8a47d6b6c04d31e76be3a4ef83f4caec5099f2ebbd3d1805d89e753c458e7b41fb5f8699927a1686547cf332f202f4dedcadbf277baaea62668776a386b48d4a48d0ceea20188b78deb388cc8e4af942b78e44effb081cbc83141f9eb01", 0x85}], 0x3, &(0x7f0000000440)=[{0xb0, 0x111, 0x7, "1d835f02afecf5402d4befdc34a74fa6472e9d25931362953b65d89009865b0d5445d92104add5e00e4d7367a0b45a0473f543710f49f1143ddda53f26a7900bd2d078a5b991a1e935dcc99d09c13a4845e697afbefda4c022b18e8f881b5a2e524ff1109a91622a559d0cf12e241e4167c06c51f5febb056e03e8b70995f4d6d9d342347bcb82527be58fe8e99d8efe825c11e5b8cc2cdce27b92840cbadb"}], 0xb0, 0x4008010}, 0x8011) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000eacfa7366807a825de778f3e5bccc80000001101000000000000242afb549acb68672606000000731e97f014ae9623ae0921cef6e6a89dd93e1b72362f243b805f59e87618e145fe8653c64f54ca7758c760131c3063471542e82ddc121075620e76468c4c05a1e0cf2323b48d6ff8285d5d25e0da145f62db110bc0a48cc4b82fb762626fa5e61e2eae7f321895a18d4472dc00a560f8"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0180908, &(0x7f0000002000)) [ 78.324866] kernel msg: ebtables bug: please report to author: Wrong len argument [ 78.338577] binder: 10205:10206 got transaction to invalid handle [ 78.344931] binder: 10205:10206 transaction failed 29201/-22, size -5567468570519697879--8371949298076563348 line 2848 [ 78.360508] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x24) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000001101000000004000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 78.447165] binder: BINDER_SET_CONTEXT_MGR already set [ 78.469375] binder: 10205:10206 ioctl 40046207 0 returned -16 [ 78.508495] binder_alloc: 10205: binder_alloc_buf, no vma [ 78.514331] binder: 10205:10206 transaction failed 29189/-3, size 0-0 line 2963 [ 78.529115] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.540519] binder: release 10205:10206 transaction 352 out, still active [ 78.547519] binder: undelivered TRANSACTION_COMPLETE [ 78.552652] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 07:54:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000001197c795c1d0391a"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x1, 0x4000) ioctl$EVIOCGID(r1, 0x80084502, &(0x7f0000000080)=""/29) 2018/03/30 07:54:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x0, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0xfffffffffffffffe, 0x6aa8129c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) read(r2, &(0x7f0000000100)=""/252, 0xfc) 2018/03/30 07:54:57 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10b06e031127794515dacc7e3bc3a177"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x1d100000000000, 0x3, 0x4db64adb, 0x7fff, 0x1, 0xa06d, 0x600, 0x9, 0x7, 0x101, 0x9, 0x9152, 0x2}, {0x9, 0x0, 0x3, 0x76, 0x3000000000, 0x100000001, 0x4, 0x49, 0x8, 0x3, 0x0, 0x3f, 0x101}, {0x513, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x40, 0x8000000000000000, 0x10001, 0x7, 0x4, 0x6, 0x55, 0xffff}], 0x59a074d4}) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000180)) 2018/03/30 07:54:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x6, 0x20000) connect$pppoe(r1, &(0x7f0000000140)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'irlan0\x00'}}, 0x1e) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000ebff11c1f82d0d7a31ab45967561d155ee7dcc282022da77997e"], 0x10}, 0x0) r2 = getpgrp(0xffffffffffffffff) getpgid(r2) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) getgid() perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc\x00', 0x400, 0x0) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r3, r5, &(0x7f00000000c0), 0x102000001) sync_file_range(r3, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x4) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r0, 0x29, 0x16, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000040)={r5, 0x200}, 0x8) 2018/03/30 07:54:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000040)=0x101, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCGIFCONF(r1, 0x8910, &(0x7f0000000200)=@buf={0x26, &(0x7f00000001c0)="aeb2c3aa4f1313048164e27d52ac17bc7c909a5c761213b21f76e6934cfb004c3eeff98d85df"}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="0000000000e3a3000e1f370e7899b3a71e1edb4cb971562f7667e2a3"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f00000000c0)=""/147) [ 78.558115] binder: send failed reply for transaction 352, target dead 2018/03/30 07:54:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 78.602302] binder_alloc: 10249: binder_alloc_buf size 2749523832 failed, no address space [ 78.602812] kernel msg: ebtables bug: please report to author: Wrong len argument [ 78.610823] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 78.627492] binder: 10249:10250 transaction failed 29201/-28, size 2749523830-0 line 2963 [ 78.635874] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:57 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x105000, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000140)={0x10001000, 0x11, 0x1, r2}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6cdc7f608d773206169de32a428679c0ad76d76587a57c1739a55875550a6470fedc696f7835a2f65f25ea5db58c94dd1f2f41f11dd0241d5f6bba9b113075b8fa3fefb1786c8921e82c2b322efef6c3aa39374ca0f4907e367575d49eb1cd904370a54ef6581598c5c98cc3e1158d63883ab381d735878ffa8e73ee6ba11d2d3f2bee72f75f46ef8d48f27d38741f03a67f62dd1e0ac1"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x2e, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) recvfrom(r1, &(0x7f0000000100)=""/138, 0x8a, 0x40000001, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xa}}, 0x4, 0x2, 0x2, 0x4}}, 0x80) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) timerfd_settime(r2, 0x1, &(0x7f00000002c0)={{r3, r4+10000000}, {r5, r6+10000000}}, &(0x7f0000000300)) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 78.707984] kernel msg: ebtables bug: please report to author: Wrong len argument [ 78.709373] binder_alloc: binder_alloc_mmap_handler: 10249 2000c000-2000e000 already mapped failed -16 [ 78.728322] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 78.798684] binder_alloc: 10249: binder_alloc_buf, no vma [ 78.804390] binder: 10249:10257 transaction failed 29189/-3, size 0-0 line 2963 [ 78.814871] binder_alloc: 10249: binder_alloc_buf, no vma [ 78.820747] binder: 10249:10267 transaction failed 29189/-3, size 2749523830-0 line 2963 [ 78.826244] binder: BINDER_SET_CONTEXT_MGR already set [ 78.835012] binder_alloc: 10249: binder_alloc_buf, no vma [ 78.839824] binder: 10249:10262 ioctl 40046207 0 returned -16 [ 78.840763] binder: 10249:10269 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:54:57 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) ioctl$KVM_NMI(r4, 0xae9a) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) sendfile(r2, r5, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='o', 0x1}], 0x1000000000000356, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) mq_unlink(&(0x7f00000002c0)='proccgroup\x00') sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_procs(r3, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r6 = dup2(r3, r0) ioctl$LOOP_SET_STATUS(r5, 0x4c02, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xdc, 0x9, 0x12, 0x8, "e595624ea8191aff524cf40251feb79dfe216a6796ca4eeabfd2bf857c7f01592ea4a95c5332da86329b56f91752e0844e1c69e950ab0419dfc91824eb191ff2", "b6959b86e29c3c8a41147176b1ae1ff1086cebcddc06284c54801832a05e540f", [0x2, 0x7]}) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) r4 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x1, 0x400000) write$eventfd(r4, &(0x7f0000000240)=0x6, 0x8) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000300)={r5, 0x9}, 0x8) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r3, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) lookup_dcookie(0x56, &(0x7f0000000640)=""/4096, 0x1000) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f0000000340)={0x72e, 0xfffffffffffff077, 0x3}) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)=0x1) getsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f0000000280), &(0x7f00000002c0)=0x4) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:57 executing program 6: r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) syncfs(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getitimer(0x0, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000140)={'NETMAP\x00'}, &(0x7f00000001c0)=0x1e) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000280)) r4 = socket$inet6(0xa, 0x0, 0x0) timer_create(0x7, &(0x7f0000000400)={0x0, 0x35, 0x6, @thr={&(0x7f00000002c0)="3ac5c486460164999320ce70af95be1251ddb77c1bb431d42102d780ac1e17c6b905ef320b3cf6f5606471afd2a72733e117126375d9bcea8d9d7ebcd6d7c8f20c163369ff3410110dc14a6ab7b3aafabbc382d2a85b1935acd5ff0509d960778206a93ef781cf59c4aa9f92dbc5525c406795ef2b4283dbc2692a557dad828448f16ff674dbf134d7143bd38b40", &(0x7f0000000380)="4f97f66e285a59f6833c8cb10e2dfadc928d78ae24cbec5bc6a5b818de529ec2b49ff3d6c21fb55172982df9d424a03e44c7cd813d6e419107f2c2f6adb977d5d7c39398f41ecc3016197590988eef2792347892297ee7ea77a06c700b48"}}, &(0x7f0000000440)=0x0) clock_gettime(0x0, &(0x7f00000004c0)={0x0, 0x0}) syz_open_dev$vcsn(&(0x7f0000000680)='/dev/vcs#\x00', 0x2, 0x3fc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f00000005c0)={0x0, 0x8001}, &(0x7f0000000600)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000640)={r8, 0x7f, 0x4, 0x2}, 0x10) timer_settime(r5, 0x0, &(0x7f0000000500)={{0x0, 0x989680}, {r6, r7+10000000}}, &(0x7f0000000540)) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = socket(0x1e, 0x4, 0x0) getsockopt(r9, 0x10f, 0x84, &(0x7f0000003fb3), &(0x7f0000000000)=0xff5f) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000480)) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x80000) r10 = openat$ion(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ion\x00', 0x40, 0x0) r11 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000140)=0x10, 0x80800) dup2(r10, r11) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r12, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) 2018/03/30 07:54:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x1, 0x0) epoll_pwait(r2, &(0x7f0000000140)=[{}, {}, {}], 0x3, 0x5, &(0x7f0000000180), 0x8) fcntl$setstatus(r1, 0x4, 0x0) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f00000001c0)={0x3, 0x36, 0x4}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:57 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup(r0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x10) [ 78.873153] binder: undelivered TRANSACTION_ERROR: 29201 [ 78.878687] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.884210] binder: undelivered TRANSACTION_ERROR: 29189 [ 78.889699] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:54:57 executing program 5: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x1f, 0x101200) r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9d4e, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc018490c, &(0x7f00000003c0)="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") [ 78.950414] binder: 10299:10300 got new transaction with bad transaction stack, transaction 361 has target 10299:0 [ 78.961091] binder: 10299:10300 transaction failed 29201/-71, size 0-0 line 2875 [ 78.972286] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:54:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 79.001612] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:57 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x0, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 79.046918] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:54:57 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r5, 0x28, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r6, 0x604f, 0x18}, 0xc) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:57 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80200, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:57 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000100)=0x1, 0x4) [ 79.076801] binder: 10299:10319 ioctl 40046207 0 returned -16 [ 79.134774] binder_alloc: 10299: binder_alloc_buf, no vma [ 79.140430] binder: 10299:10300 transaction failed 29189/-3, size 0-0 line 2963 [ 79.161636] kernel msg: ebtables bug: please report to author: Wrong len argument [ 79.173509] binder_alloc: 10299: binder_alloc_buf, no vma 2018/03/30 07:54:57 executing program 5: socket$nl_crypto(0x10, 0x3, 0x15) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000001105000000000000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000140)={0x4, 0xdb, 0x1}, 0xc) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r3 = getpid() getpgid(r3) [ 79.179217] binder: 10299:10319 transaction failed 29189/-3, size 0-0 line 2963 [ 79.195013] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:58 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:58 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x3bfe0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x80000, 0x0) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000200)=0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x6, 0x206000) sendmsg$nl_generic(r3, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000240)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000100)=0x3f, 0x4) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r4, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r3, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0), 0x11d0818502f8619, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fanotify_init(0x8, 0x800) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000000080)="00008fc60000000000007800000000") r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x200000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000140)={r2, 0x6}) 2018/03/30 07:54:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xd17000)=nil, 0xd17000, 0x3, 0x10, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x13, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00005ceffc)=0xffffffffffff8001, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x15, &(0x7f0000d16ffc), &(0x7f00002a5ffc)=0x4) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:58 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r0 = getpgrp(0xffffffffffffffff) getpgid(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r3 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r3, &(0x7f00000000c0), 0x102000001) sync_file_range(r1, 0x2, 0x100000001, 0x7) 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x10, &(0x7f00000000c0)={0xa24}) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000000240)="c6b6c8c3e735e3fc413e987839fdb8ab9cbb8245698426ac5f241060d80370b00e5b2532686971f20027065c3656337c202bdfd685a097fe9d23dfaab11e8d5b70061904818fa1b633eca047ced639f36a71890fc71a394e2d07931771a5083a4d8f4b8d6e314754b0e38491ccc24a9e2c7f73bdd50a9795b43b7c3cd7a3af4532279c99061c3636615b0da0d0b3e5d964c04d") r2 = socket(0x1b, 0x6, 0x200) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}, 0x7, 0x3f}, &(0x7f00000001c0)=0x90) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000003c0)=0x0) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x70, 0xa26, 0x8001, 0x0, 0x10000, 0x0, 0x6, 0x80000, 0xb, 0x8, 0x3ff, 0x12ea, 0x3, 0x1, 0x0, 0x3f, 0x5, 0xfff, 0x8, 0xc20, 0x9, 0x2, 0x5c9, 0x4, 0x9, 0x0, 0x8000, 0x7, 0x0, 0x1, 0x4, 0x7b9, 0x3a6, 0xbab, 0x257, 0x7, 0x80, 0x0, 0x20, 0x0, @perf_config_ext={0x400, 0x6}, 0x4, 0x8, 0x6, 0x0, 0x3, 0xffffffff, 0xffff}, r4, 0x5, r1, 0x3) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x1000}, &(0x7f0000000300)=0x8) r6 = dup2(r1, r5) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0x40405514, &(0x7f0000000400)={0x3ff, 0x2, 0x5, 0x4, "b6725e4df630829e19c918e6d2b629a6b5237b125a6393daf59c8720afaec2e6e1650a190fea0c7a9153d3c7", 0x10000}) [ 79.268714] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.274300] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.287554] binder: release 10299:10300 transaction 361 out, still active [ 79.294636] binder: undelivered TRANSACTION_COMPLETE [ 79.299807] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.305310] binder: send failed reply for transaction 361, target dead [ 79.346132] QAT: Invalid ioctl [ 79.363667] binder: 10360:10361 got new transaction with bad transaction stack, transaction 366 has target 10360:0 [ 79.372389] kernel msg: ebtables bug: please report to author: Wrong len argument [ 79.374281] binder: 10360:10361 transaction failed 29201/-71, size 0-0 line 2875 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000f00000000001101000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/autofs\x00', 0x40, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000000140)=@create_id={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000100)={0xffffffff}, 0x107, 0x1009}}, 0x20) write$rdma_cm(r2, &(0x7f0000000180)=@reject={0x9, 0x108, 0xfa00, {r3, 0x29, "477514", "ddcf01542041d296a8156dd01b4289ecc54ef63b0933b76934c136f06adfcd98e0255eb8b66d77f27b7e2eed47c9f14ed8bdb20a140a266257aefa087f37c4bd3bb55f624cc2415ae3f39ffbf617e105e5f47b32a6d6493d60d9c674a1e8ac3825f4ece026a230a3cd6b274c05004808f737acd8242db8fd19766fafae1855a7f4c803061e89091dd4ba28c8ca52f5b65b3f2b09787ca4260c9656642327ee33c749a7ab69e3898fadaff57402e56a1eb505dadd8ed04a40f13c903dc3491a7e31c7e3779e0ee0c6460311eec43285cd032bab0cb1379743a15c6359a9e3245ed22c955302aae2c7a95759b4b1547b6c1a5526928acc13f19f0e88f1594c8082"}}, 0x110) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10004000ee000000000000005343fae6a0e6e45b96e2a04b74b841b2f4c8b4b0d9337da02987f385814a435c8c9374c929f2050f1201505b36e8ca61c53a8d1b8b372acb294205df380caa2282badd886aeae11f0bc91ebed7e7c73e84acb5145b13ccc3f79fb3c20533900d40bc064e68f0ab840e6c1f3d488150d6d40b7140d988cb10e2d4c0fdfa0f12685be281382c0117dba7327e7d0e761bf653e716b93842f48cffe08837a4fbd45ed3a93dd3918934b95cc5777d1bef361fe0237078ebf72cb0e7ea3623a1db726e414ebb2e65c620d5e2c3618fb9e0640b14ffa9d9ea03bc8ba252a27d05107a120fc491ac193fc277349944"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 79.422212] QAT: Invalid ioctl 2018/03/30 07:54:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000040)={r4, 0x0, 0x2f, 0x1ff}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x40082404, &(0x7f0000000200)=0x2) ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r5, 0x6) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x240a00, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000780)={&(0x7f00000004c0)={0x27, 0x0, 0x2, 0x4, 0x7, 0x6, "7b561c803d1b8dda44fc88560abb6c708c4e233e80e3338b4f46e7a922b340214e5919e91ea16b1b234ab21f820a024da0d505806d7ec9e046fb6bd0ee5a88", 0x38}, 0x60, &(0x7f00000006c0)=[{&(0x7f0000000540)="69aa206bd34649aac2077f416fb8d89efb983ec32ea8990455b089b34ab6d27f90e46d63784dfcb09001df89437d91b5048362b09bd9bb7592e5d52a7ce5c885d56b1fb396bf68d9548803a7d5ad0ee20d49af1a622d46023d4beeceaa4d76ee3456f0790e83cef184737a1dd293d733b7b56bb12b79efa86125314e7923f5382125342c2078970187", 0x89}, {&(0x7f0000000600)="327095df7ac989d40ea4c891d7f4166d6caed19161ef12576dffcab477efb3b0104261f775e19e9a215321d4433777b3760c52a061db9655bfe5b1a360b8786a0c30f6a5841c7d16cd16746b156b6ed240021e46", 0x54}, {&(0x7f0000000680)="af1829cb750d81162afdefda5a287f77c830b48f9a16b4b1e9b6f982c8e5889329dfb432b51d151db4cc0105bbbca4601636847ea7e513", 0x37}], 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB="78000000000000000e01000000000000abea40ff63c852ef10878ef65243177a53add1dc8c137414bf8dbe32d8fcc93bc54a8ffedd143a6658325daf3669d5a87d6c532f8c6cf2754ed8a56cb4c9b517151b1c1538806df5bf0c903f3342a7e469ca5d58996afab1b453d800000000000000000000000000"], 0x78, 0x10}, 0x4) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000000380)={&(0x7f0000000140)={0x27, 0x0, 0x0, 0x5, 0x7, 0x5, "d226569cdbf7d5b322cbf634a24eb8aa53344007782cbede3733594a6d1b2d18dcfa689ddf27001728a04e6504ea830cfbb56e80bdf7b38bf327713e576d2d", 0x16}, 0x60, &(0x7f0000000300)=[{&(0x7f00000001c0)="8fa8a3d0fb9292988ad07faf24a558cf1afde78f5cb6627cd28756ef35444ec1501b417bf7596f6bd82c91d3f047edfd14efafb98af641381945bf6ab0a9fae2831cc49d6367ac5fd14122535a40f4dca4d5f13b87145ca5e50170180bb16449e0f3015a66beb3e3e44861c6c38d0173875df01ab2fcd6ad8c6412d39fca49067a3fcc68398c83d0a925e8bc97655e73a2655d3dd724d3b2330cf03584e0dc837234354940a022", 0xa7}, {&(0x7f0000000280)="d81543b052543655a17ccda935573fcf47a49b9d465d144da4d697a620a95ea8c633757825b28b6a294670ce9e4a4c170545fe0d7141be336a4cf7c98066b3444502275ffce0", 0x46}], 0x2, &(0x7f0000000900)=ANY=[@ANYBLOB="20000900002000000701000004000023f300bfe429d700d6b61cb0b171dd001d8ca28a340f05267dbd664b7f986c3a350a1c939501a1e86d403fea177162170701a1416341ab09756317ec0c8e587cb271907ca2b14105629a8555fa71b29294e193896e042d43cdb8954efbcb536dd5aa456056000000000000000000000000000000"], 0x20, 0x4000}, 0x800) fcntl$setstatus(r0, 0x4, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x4, 0xffffffffffffffff) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400, 0x0) accept$inet6(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000800)=0x1c) syz_open_dev$sndseq(&(0x7f00000008c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f00000003c0)={r2, 0x8}) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(r0, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x2c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r3, &(0x7f0000000840)=@nl=@unspec, 0x99) 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r5, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000640)=""/4096) 2018/03/30 07:54:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) sendfile(r2, r5, &(0x7f00000000c0), 0x102000001) bind$bt_rfcomm(r4, &(0x7f0000000100)={0x1f, {0x7ff, 0x4, 0x100, 0x9, 0xb6, 0x3e}, 0x8}, 0xa) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setlease(r1, 0x400, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000010000e3000000"], 0x10}, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x5, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 79.450670] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:58 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x1f, 0x10000) sendmsg$kcm(r1, &(0x7f0000001fc8)={0x0, 0xb0, &(0x7f0000000040), 0x1dd, &(0x7f0000002000)=ANY=[@ANYBLOB], 0x10}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = getpid() r4 = geteuid() getresgid(&(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000400)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) getgroups(0x3, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) r9 = getpgrp(0x0) r10 = getuid() r11 = getgid() socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000005c0)=0x0) r13 = getuid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) sendmsg$unix(r1, &(0x7f0000000700)={&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)="256557e62ff1a3c73d8ec5483114f72f76673f1c18ca294bd5a28c37d20be13396fdd48365a8ced9d5aa1843a3d48e54ee6dd69071644c9cd60502fd650ef5298891607f85aaf5b826640e622ddba7ccdb7442758f0734c32809328f67ff52254e5a017af5647864c320344ee8c039999fb7b4aae75d2c1f2c63f9cd8fe206904493cbbf89a9cdc29d7dce0e806857dbc1d3f60719335ae56a14a66e1a40e6e83dea84758af803e1b9365d6b744a2c5f0ccb14f5a7a7ae663ebdbc46df79646016614e7f603fa175d88d83f2e14f16e0e1bd0810c9d3e01db9458675914da92526337c76d2db4eb3acdef90782cad79058daa7a553407ed3", 0xf8}], 0x1, &(0x7f0000000680)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}], 0x80, 0x10}, 0xc080) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 79.527706] binder: BINDER_SET_CONTEXT_MGR already set [ 79.534455] binder_alloc: 10360: binder_alloc_buf, no vma [ 79.534482] binder: 10360:10397 transaction failed 29189/-3, size 0-0 line 2963 [ 79.555210] binder: 10360:10361 ioctl 40046207 0 returned -16 [ 79.569281] kernel msg: ebtables bug: please report to author: Wrong len argument [ 79.572531] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r2 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r2, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)=0x0) prctl$setptracer(0x59616d61, r4) lseek(r0, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r2) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) sync() ftruncate(r0, 0x1) read(r0, &(0x7f0000000200)=""/65, 0x41) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r2, 0xffffffffffffffff) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r1, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x7ff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000200)={0x6, &(0x7f0000000040)=[{}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000240)={r5, 0x10}) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000280)=0x3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="3000005b44d362000000"], 0x10}, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) getresuid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) fchownat(r1, &(0x7f00000000c0)='./file0\x00', r2, 0x0, 0x900) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x4200, 0x0) accept4$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2711, @my=0x1}, 0x10, 0x80800) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f00000002c0)={0x2, 0x1ff, 0x7, 'queue0\x00', 0x401}) ioctl(r0, 0xc0184908, &(0x7f0000002000)) rt_sigtimedwait(&(0x7f0000000200)={0xd7}, &(0x7f0000000240), &(0x7f0000000280), 0x8) 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0xfffffffffffffffd) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) r1 = shmget(0x2, 0x1000, 0x202, &(0x7f000000c000/0x1000)=nil) shmctl$SHM_STAT(r1, 0xd, &(0x7f0000000080)=""/30) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00801c090000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:58 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000eeffffffffff1001000000000000"], 0x10}, 0x0) r0 = getpgrp(0xffffffffffffffff) getpgid(r0) r1 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x14, &(0x7f0000000100)={@remote}, &(0x7f0000000140)=0x14) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) sendfile(r1, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r1, 0x2, 0x100000001, 0x7) ioctl(r4, 0xc0184906, &(0x7f0000002000)) [ 79.637970] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.646993] binder: release 10360:10361 transaction 366 out, still active [ 79.654055] binder: undelivered TRANSACTION_COMPLETE [ 79.659282] binder: undelivered TRANSACTION_ERROR: 29201 [ 79.664791] binder: send failed reply for transaction 366, target dead 2018/03/30 07:54:58 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x20080, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) setsockopt(r0, 0x200000, 0x40, &(0x7f00000000c0)="b2bad317205bcfa2a1b1870fab263068402b31dbc8f3ed8802799a330e21ab2e508a20cda18937", 0x27) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x420000, 0x0) 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000001130000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = dup(r1) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000240)={r3, &(0x7f0000000140)=""/236}) 2018/03/30 07:54:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x30, 0x2, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) r5 = syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000640)={{0x13001, 0x2, 0xd, 0x4, 0xbf5, 0x8, 0x3, 0x2beca9be, 0x1, 0x0, 0x2, 0x8}, {0x1000, 0x4004, 0x10, 0x9, 0x31, 0x39, 0x10001, 0x6, 0x8, 0x3, 0x8, 0x80000001}, {0x4, 0xf000, 0xb, 0x45, 0x800, 0x8000, 0x7fffffff, 0x4bba326c, 0x40, 0x2, 0x101, 0x3}, {0x16000, 0x1d000, 0xc, 0x10000, 0x7, 0x1932, 0xfff, 0x0, 0x5, 0x7, 0x100, 0x3ff}, {0x2000, 0x7000, 0xb, 0xfffffffffffffeff, 0x6, 0x8, 0x1, 0x4f, 0x9, 0x0, 0x4, 0x7}, {0xd000, 0x1000, 0xc, 0xf849, 0x7ff, 0x4f2, 0x6, 0x101, 0x5, 0x100000000, 0x1, 0x240000}, {0x101000, 0xd004, 0xf, 0x3, 0x0, 0x3, 0x2, 0x101, 0x2, 0x9, 0x73, 0x7fff}, {0x3004, 0x5000, 0x0, 0x0, 0xc0ba, 0x10000, 0x7fffffff, 0xffffffff, 0x3, 0xe816, 0x1f, 0x3}, {0x0, 0x106000}, {0x4, 0x67cb0c4bcf7edb27}, 0x8, 0x0, 0x5, 0x40000, 0x5, 0xc400, 0xf000, [0x0, 0x3ff, 0x90e, 0x9]}) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x222, 0x70bd26, 0x25dfdbfb, {0x1}, [@FOU_ATTR_IPPROTO={0x8, 0x3, 0x73}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4801}, 0x40000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() r6 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0xffff, 0x181600) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r7 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000240)={0x0, 'bond0\x00', 0x2}, 0x18) [ 79.721986] binder_alloc: 10429: binder_alloc_buf, no vma [ 79.727676] binder: 10429:10431 transaction failed 29189/-3, size 0-0 line 2963 [ 79.756446] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000040)=0x6) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 79.825729] binder: BINDER_SET_CONTEXT_MGR already set [ 79.838539] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 79.868789] binder_alloc: 10429: binder_alloc_buf, no vma [ 79.872674] binder: 10429:10455 ioctl 40046207 0 returned -16 [ 79.874486] binder: 10429:10431 transaction failed 29189/-3, size 0-0 line 2963 [ 79.931593] binder: 10429:10455 unknown command 152862720 [ 79.941718] binder: 10429:10455 ioctl c0306201 20000340 returned -22 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x22000, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)) 2018/03/30 07:54:58 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @dev, 0x0}, &(0x7f0000000140)=0xc) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000200)={0x7, 0x414, 0x5, {0x77359400}, {r4, r5/1000+30000}, {0x1, 0x2, 0x6a7668fb, 0x422}, 0x1, @can={{0x0, 0x8, 0x5, 0x9}, 0x3, 0x2, 0x0, 0x0, "b65cfe12c0af3b4e"}}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000000000000000000040000032a8555f5f435649a7289cbea1ff262f1aa91dfc1ac214dd1d8def3561bfe4b89b437dff8b9c49f26e5676cc9869d85c6bfd6bce000000000000000000000000"], 0x10}, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000180)=0xe8) r4 = getgid() fchownat(r2, &(0x7f0000000040)='./file0\x00', r3, r4, 0x500) ioctl(r0, 0xc0184908, &(0x7f0000002000)) ioctl$DRM_IOCTL_CONTROL(r2, 0x40086414, &(0x7f00000001c0)={0x3, 0x57}) 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000002c0)=[{&(0x7f0000000440)='H', 0x1}], 0x398, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000200), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)='\x00', 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xfff, 0x800a, 0x229, 0x100000000, 0x6, 0x5, 0xef1, r4}, &(0x7f0000000200)=0x20) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:58 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(r1) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r3, r5, &(0x7f00000000c0), 0x102000001) sync_file_range(r3, 0x2, 0x100000001, 0x7) ptrace$getregset(0x4204, r2, 0x202, &(0x7f0000000100)={&(0x7f0000000280)=""/197, 0xc5}) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68440, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000000408}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x001\ay', @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) [ 79.975221] binder: undelivered TRANSACTION_ERROR: 29189 [ 79.982516] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = dup(r0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x4dd, 0x0, 0x7ff, 0x4}, {0x8, 0x3, 0x5, 0x9}, {0x3, 0x6, 0x3, 0xbd95}]}, 0x10) ioctl(r0, 0xc0184908, &(0x7f0000002000)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x100000000, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x9}, @in={0x2, 0x4e24, @rand_addr=0x1}, @in6={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}, 0x5}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x58) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={0x5}, 0x8, 0x0) [ 80.037474] kernel msg: ebtables bug: please report to author: Wrong len argument [ 80.042357] binder: 10485:10490 unknown command 2030514432 [ 80.054280] binder: 10485:10490 ioctl c0306201 20000040 returned -22 [ 80.070245] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x100000001, 0x18000) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000240)=@nat={'nat\x00', 0x19, 0x1, 0x1f8, [0x20000040, 0x0, 0x0, 0x200001d8, 0x20000208], 0x0, &(0x7f0000000000), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'bpq0\x00', 'ifb0\x00', 'bridge0\x00', 'vlan0\x00', @link_local={0x1, 0x80, 0xc2}, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0xb8, 0x120, 0x168, [@ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14}, @local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x29}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @snat={'snat\x00', 0x10}]}, @common=@ERROR={'ERROR\x00', 0x20, {"64ec599661eb9835039d7b9552f63f49a4e54073af800972fe32ab179a37"}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x270) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x7bbc, 0x8000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000002c0)={r4, 0x2, 0x30}, 0xc) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) waitid(0x0, r6, 0x0, 0x3, &(0x7f0000000200)) [ 80.101273] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 80.108707] binder: 10485:10498 ioctl 40046207 0 returned -16 [ 80.133705] binder: 10485:10490 unknown command 2030514432 2018/03/30 07:54:58 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) recvmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000200)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000040)=""/4, 0x4}], 0x1, 0x0, 0x0, 0x40}, 0x10000) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000340)={0x2, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e24}, 0x8, 0x4, 0xfffffffe00000, 0x25, 0x9, &(0x7f0000000300)='syzkaller1\x00', 0x0, 0x5, 0x7fff}) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) ioctl$KVM_SET_XSAVE(r5, 0x5000aea5, &(0x7f0000000640)={"b0d91a4791204f0f108fc851f247cf7691989f0f9bc5c9567c0cb34eee97b2563b8be422d9d4b4e2a6f53cff2ab5e9b56d494c7c3865e3cf4d29b88cfd86f3ecc599b8090a3138b2f7398da4c134b1f131db90f291b23ba31e948712736dbaeaebb10729a4104db82ef9ff1dfa7932779d5c3d2eaf3181786db7b4ea262a841b421fbd49ca55c09ddab5e6a5c19ca3c1924ae09c847314a0f71a66b47d52a61485f43863ca13049df7f6faf8f71f3469e92e50149b5363be0b5e252759d5946c58e9283f2a924a750f72dc2dfb64593f5e5dd72a470b1a99b2cff298203af04164c1337593ab5ea3abe3ee7c7cd1bc1cba41c28167808f0723f84ff659cb4019e3fdb40a0a5def689d4e4cf3da41ffab3316c6de325d4fdd47cd55b528cec99115c654c149a38d41b55f864ae4cbda4d78fac2cd7866b6ac19daa9c13eb08f1f1ba8061916d5043e875b770787158b4d1ec1c9bf9456f5f045f87456cf1b23c6ba4dbeb3770341d3b72cb22544e10fe7fcf89b477d3d8128b88db988885fb45add116494f31930508fd06f632a82ea2efb32fd8d8f01b64fbc3f3ce840953b4bc9b9830570d0ddb4b2bc87b3ea572c8960934190a692ac67ff9e2058eec2c228a0084d9117c22b46421f4b0500d1985a6093bc1a71cda23c95f207ec7860105c9e1d73c55678e9703a4aaca0321c10fb2eb1af97e6301c6a2b9946f5c4b381c6d5f79b8eb334abbba0c326b1ec866a0835ed3416cb1f7dc69e6d263e922ea082613845ed7d8e2a14dc3e695b61f67b938d5c9b337096845a8f95cad761e9bb2ca4c161ead2a0e7cfa1cf3ffcc70e242c2f056c8550c2acc6cbef380ac269353b2639085bdfe365067f0e49669d9e91b45f595c5a78415abedf6b7aa0bdf6384b73e01b751b311f271df48ce43d711422a42a8d9df9d6e87d79475d6de91d6eafc7b33c07bec8b3ad894ae4fe1df2876c2759ab14b8ab73fc4839cefa21a442173b67bce5a0f34adb61febb1bd1203a5f85de37fcc3993a98fdf609723085ecda791edd8770316a7df27b98c8891b21a3a67fbaf8396b18e18ba0fe2af2d93195f067147aabeacd136026913e14f91d6bf5250c36e117f3b71ac5eb7f8680f2c3f25d2d5fa816948d397a9b21a3eb6dffe039628cf89728dde3ced78a955137df55c0d22edece392f3e7e1246a91d06766e6742c86a61a70ac7f0c698c70828082ae40f76e2402b4a1418e3134bc2156852ec173bb92fc0add4d4c372346730a67ab31ba6fd06820f1e66b65f6c9744b04535ae93dbd1de3901c6b5ca94cd9130caaa43a372fd156fd8f14fe582756a8c709172d05eb4b9f9a5fda0b31940b941bae50c2318f97f2b28fb5f13db318c3e10d6ae3a23211b02691a86437a867b1870ea722a16f3eaca696c5a34f41ab3e80d77ab6d89268027bd2f64d85ec467ea"}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 80.169223] binder: 10485:10490 ioctl c0306201 20000040 returned -22 2018/03/30 07:54:58 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x2, 0x20000) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x4) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) sendmsg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000100)="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", 0x1000}, {&(0x7f00000014c0)="8efae52cf82dcddcd707bc5b1ce20911d6852ec581d500afc3ee33af7d6fb9595af527214a5d714701e962f4157e399a53d4e58f9b7a1f71e163b3c0960f559979d8cb57727638b161badfe1c4bf2a1678ba0d7e14b028c5aef8a8402bfe9621fa0a4747bd9668cc2d", 0x1c8}, {&(0x7f0000002040)="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", 0x1000}, {&(0x7f0000001180)="0a1daa9e99e2eb09bdafe10dbc7dcb02da10cef55abfda840d543ef22ab75c7caf0ae0960593ffa840c4f95a1b2bc098f97035d0a22b5de375b5b432e321b7c839e808d046fea384d887e002fd639a0fa6e930cb0be5e6f3a6ca60b86c1cebf6d8b9dc6e79a85bdf4a3c6b148fa5f680680083b9e564cb9bf3ff3cba573c9dbd9e9fae2250ff47edbfee504a558f9efe391432769e60f86ffdead4ea01f186c777c7765724bbadf2665f5612a444863b0c97b7f33b227909e885c324f09504af0558d877d15f7d75e80cdc1a1a2d", 0xce}, {&(0x7f0000001280)="d8163c25e45b54c1bcdaeb520887d133be4c0de4c1b08a7a0c3a33b0cb1ef74bfbb943a3e915cb63cb935db42a040d21d7df7f83bf35f46e182e0a77458340960aaf05f79049396ef81c8bc4c633bd7e5e3dd365", 0x54}], 0x5, &(0x7f0000001380)=[{0xe8, 0x10f, 0x7, "4b3c8bc94e5efc714025b0c1bd75fc4000f02e82748058f25f974d27cf977e346722565996f80e480e30479d6ddd7eb203c80346ef0470dc8b2871c5bed9179743eeefc6e83f258a2245210b2caf0c6d21bfe56b312ff092df90dd0a0501efa9c4218c59b3ef59fbe03d00e58023554706ca2370427b48b5d7ce5834eec3fb620f5ad66e49a534cd61588ba04e8aea162a952d421ae2b3088576807173c2829dd514ed8839952a7b25e9bc689cae7ca1ebd43bb1c53b2f57be385197033122ff16a1ab2721e9ba5fc118e257e39dca49c3045f532f"}], 0xe8, 0x40000}, 0x84) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:58 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) r3 = syz_open_dev$admmidi(&(0x7f0000000240)='/dev/admmidi#\x00', 0x2, 0x80) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x2, 0x9, 0x5a, 0x9, 0x0, 0x4, 0x1, 0x1, 0x7dae, 0x1, 0xff, 0x8, 0x3ff, 0x80, 0x7fffffff, 0xffffffff, 0x6, 0x40, 0x265a, 0x8, 0xfff, 0x1, 0xed, 0x1, 0x101, 0x0, 0x9, 0x8, 0x7ff, 0x4db, 0xdb4d, 0xfffffffffffffffb, 0x1, 0x590, 0x3, 0x7, 0x0, 0x1, 0x0, @perf_config_ext={0x10001, 0x71aa81ab}, 0x0, 0x0, 0x1, 0x1, 0x2, 0x20, 0x31}, r2, 0xf, r3, 0x8) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netrom_NETROM_T2(r4, 0x103, 0x2, &(0x7f0000000100)=0x6, 0x4) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 80.213104] kernel msg: ebtables bug: please report to author: Wrong len argument [ 80.237057] binder: release 10485:10490 transaction 373 out, still active [ 80.244127] binder: undelivered TRANSACTION_COMPLETE [ 80.249307] binder: send failed reply for transaction 373, target dead 2018/03/30 07:54:58 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x40000, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000003, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffffffff80000000, 0x40000) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000100)=""/131, &(0x7f0000000040)=""/127, &(0x7f00000001c0)=""/174}) 2018/03/30 07:54:58 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="00000000d1400000"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) [ 80.257796] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:58 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) finit_module(r1, &(0x7f0000000040)='/dev/loop#\x00', 0x2) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 80.361726] binder: 10542:10544 got new transaction with bad transaction stack, transaction 375 has target 10542:0 [ 80.372386] binder: 10542:10544 transaction failed 29201/-71, size 0-0 line 2875 [ 80.381929] binder: BINDER_SET_CONTEXT_MGR already set [ 80.389488] binder: 10542:10548 ioctl 40046207 0 returned -16 [ 80.403792] binder_alloc: 10542: binder_alloc_buf, no vma [ 80.409474] binder: 10542:10544 transaction failed 29189/-3, size 0-0 line 2963 [ 80.410182] binder_alloc: 10542: binder_alloc_buf, no vma [ 80.422657] binder: 10542:10548 transaction failed 29189/-3, size 0-0 line 2963 [ 80.443455] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.448997] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.454544] binder: release 10542:10544 transaction 375 out, still active 2018/03/30 07:54:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x17) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000200)={r5, 0x0, r3}) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000240), &(0x7f0000000280)=0x4) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = getuid() ioprio_set$uid(0x3, r6, 0x1000) r7 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x100000040, 0x0) r1 = syz_open_dev$midi(&(0x7f0000001dc0)='/dev/midi#\x00', 0x1, 0x20081) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000540)="2178c0726a0033127348d92d0e80523609bb636a5e6bcd3852ca285270cd1c73030d45965ffebdd14c45effe7300f60cea2194de7c9ab380b9ba9ba6a72ef93839c7006020705f7688e123d5c5ead799d3e1efcdca3258631f4be840b0b05c9ac3da470b98b6d048bfe1c7331d1aa3a7a2ec192223e97de0f7703cd18a256f2792100725723edb9de87962423feeed7290d537ae9cbd7d05ae8691917a933454a894c397c8f1f3b10050bc78b46ac654e29155ef83fff7895129dcadd11137fa7f39058168cbd7e4b742c672a0b6b1bd71", 0xd1}, {&(0x7f0000001e00)="c7a2c60db2abf3e80144271494e040a7b8206b3a1eaffcd1bcb59a10690127342f4aefbf2d1cf05e2ac0764eceff50e51d5c1a", 0x33}, {&(0x7f0000000680)="413ced7b33ed624bbd33f40e354b2e327f6fa87e17e6a420fec2554321f86cfa3b047b99bc492aed4f99be66b3b23794871d300b80acd6b2ca3d240dd32c0da30cf506db04242e2e61138a306cb336ea8bd723aaf78cec20aebfedbec23c56204292475c46d44faea11bba57cd94258741cdc0b4", 0x74}, {&(0x7f0000000700)="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", 0x1000}], 0x4, &(0x7f0000000500)=ANY=[@ANYRES64], 0x8, 0x4044000}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000001e40)=0x4, 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'syzkaller1\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x3ff, 0x1dce, 0x1, [0x4]}}) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000640)='/dev/mixer\x00', 0x610400, 0x0) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x4, 0x2, 0x0, {0xa, 0x4e22, 0x7f, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x81}}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="c5ef543d48ae27ab5ae4cf56f0b8271dee74347a3b094f41d16de821f37ea8c16b943db13653b5d299062e758738164b202dbe9c042e75b5c34a3adc8194fbc9b4df51ea4b7e051a572a2a912d8551777754a108b85610ffd014336f85953e8f02034b1d8ba8a8d9ba5261dfbcf62dc7cd6376dcbb2aabbd3793a8ed1d5be3dca2f1feb27989c5cab0e7cec8b117d5373a6bcaeceaab059c977b968abca4d93c904bdb3333a32f219ecc0abdae7e7baf25606401e9b0d7172178f07d5b7ce7fca28e4fea6adec9390d32d5028c5f720512e1beeae019ddf622296bd7cb94ec4a2873649540d512d7ae27", 0xea}, {&(0x7f0000000340)="df925b30c3ae5b5dd3e4f10e24cdd92e41692162cf2f382137fe850c21a66e59526feefdf25e3438109b9633a3a31ed446cba908cabc7c3e4616901dfc4029527be759f1e5c6671de1a1add1727e366b2cfec1e19066d792387336cbc14c624c1406b7e0c0d738d3bbe9edf2c3b31eeb49b67f1505fb90141b17978586fcd5c55e1eb186555982050cb101b0da623b", 0x8f}], 0x2, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], 0x12e, 0x4010}, 0x1) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480)='/dev/sequencer\x00', 0x80080, 0x0) pipe2(&(0x7f0000001d80), 0x80000) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f0000000180)={0x3, r1}) socket$pptp(0x18, 0x1, 0x2) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000001e80)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000007000000040000008004000000000000000000001801000098030000980300009803000004000000", @ANYPTR=&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="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"], 0x4d0) ioctl(r0, 0xc0184908, &(0x7f0000000000)) 2018/03/30 07:54:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x0, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) fsync(r0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)}, 0x0) ioctl(r0, 0xa69f, &(0x7f0000000040)="f965436d753e481a271b77e262bfc468b2621de03d13ac67eb353b0dda52c562710fe0e810febcd37fa48dc172423a0c8a663b02bd98c3098395da470889168ccbbeb3bdee1fbe9d18d75c2a08796ab325d5a393e84e27af029b86187d15eae2961af60d18ab7a2003") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x402, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x9, 0xfff}) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r0, &(0x7f00000bd000), 0x0, 0xfffffffffffffffe) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = accept4(0xffffffffffffff9c, &(0x7f0000000100)=@nfc, &(0x7f00000001c0)=0x80, 0x800) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000002c0)={0x6, 0x7f, 0x8, 0x401}, 0x8) getsockopt$inet6_udp_int(r2, 0x11, 0x66, &(0x7f0000000200), &(0x7f0000000280)=0x4) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r3, r5, &(0x7f00000000c0), 0x102000001) sync_file_range(r3, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) fstat(r1, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setfsuid(r3) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r4, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x200002) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) [ 80.461533] binder: undelivered TRANSACTION_COMPLETE [ 80.467008] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.472595] binder: send failed reply for transaction 375, target dead 2018/03/30 07:54:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="f000000000000000"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x400000, 0x0) 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0x2, &(0x7f00000002c0)="fbc54453066b9815fd2bb85a433454038ab7199e66fa303db7d74b94935c7238dba690123b523cb324db098777a11a268c7a2b99be1d9db350b278302b2539420c93db91de55c2ace3673e3fba1697d92a4a35ae1235bbbcd0881a170e10b027f0e319c01fcd891b49f566900fe7f8320100978321e19ad8914d1dd4fb85a58a8a5e21dfd66e2e463853f37a24ed09eda8cb4a13a409a95cb6226daa47368e82b6202caa024c3cf799a4afdd22f1578380284a1cd31ebdda948cf6b005ed2fe6c1fa63bdf7aec67c17206851eb0a5f332693b30190113deeac1e8d588213f4d1902ff9d58047141f8fd262b9b1063dde23aa585658f0") 2018/03/30 07:54:59 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) tee(r0, r2, 0x4, 0x8) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x410040, 0x100) getpeername$packet(r3, &(0x7f0000000100), &(0x7f0000000140)=0x14) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000180)={'erspan0\x00', {0x2, 0x4e22, @multicast1=0xe0000001}}) [ 80.531776] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:54:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = add_key$user(&(0x7f0000000280)='user\x00', &(0x7f00000003c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000400)="a03943a92c97b741810ebfb88a0f3c24748d48b4387bc4445c3c6e118f2427eea36d12501c1a8d6030b7631ee64175bebf84e142497645a16ef3db013d546ed7f6a61c8aa52256ae2c7fbb89e2bd1f28527b4671c765b8c498a8b8f4f2a8958020ba3e11fc34f175b7cb64dc161efb6aa8d2d5140b2e858a2c681b943c6f2f7af79027b804cad392d1e637aa6b998d49dce2c50adf81e2ab0ac30dde0460ddc5aebee33cd68a2637bf9fbe3b79ce8fb78f872aeba1f8eefeb3848593b7941e74ed3f8201a29b2c260b746f18c43f483aea4a23435e2131e954d67f8d1e259388e38639f5f37c50085d4370d5631baa3b63764ad996cb25d1", 0xf8, 0x0) keyctl$invalidate(0x15, r2) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x8, 0x4000) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f00000000c0)={0x7, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}]}) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r3, &(0x7f0000000100)="b910f52da1de871728aacb5e4aec4bd152b62b8b752b3e941c7d20c1e8cc0317", &(0x7f0000000140)="3a16fa809467378f6d46c718ed40bc75e0bd082a0e20f252aba68d8e864adcc897ba15e7245b9b2b5dcc2f70dfd20011e5554ec47e2d41a3aad34dd963fca4c65aa803525a545df0ad9a0ead3248a3b32a77c52a9dc51be6e7282ab80713fb244e795a494c872227d9ab6da733dd6469d9837765dbb2f404dddc43ffd4252dc454d8a111f26014f18c0afa0fdaeb279830bb91b375382250a0e899a8a27301cdd04f07adbe5f839dd647866ae8109ad201ce46b0e0db53e1576daf4203c583ee71ef5059ef3567253a65c1947178534c82ad9410087a04b14ef358f1e2b94d870357773561ed245f5757335172aaea3c", 0x2}, 0x20) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f00000005c0)=0xffffffff, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@generic={0x1f, "d56ce84fe34c40fa5afed71b852b6ad0466a353ba5962802ac7604458892ab44e041973be2b367df413226e95168922bca7f938960f36ff47c9340f88e0dc3a15f6403ab4c34197f77fbbf80745d8dcbb8f9f6edf5b8d040b1d4a4188dd63c1e7b3dc2023bc922b0c79988a0aa2c59084fbfec3a67e83a69ca08fca9fe4e"}, 0x80) lsetxattr(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)=@random={'osx.', '\x00'}, &(0x7f0000000580)='user\x00', 0x5, 0x3) 2018/03/30 07:54:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) set_robust_list(&(0x7f00000002c0)={&(0x7f0000000200)={&(0x7f0000000040)}, 0x7b, &(0x7f0000000280)={&(0x7f0000000240)}}, 0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x0, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 80.583722] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 80.609204] binder: 10583:10587 got new transaction with bad transaction stack, transaction 380 has target 10583:0 [ 80.619849] binder: 10583:10587 transaction failed 29201/-71, size 0-0 line 2875 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10020000007c36ccf0717b5d49ffffff"], 0x10}, 0x0) ioctl(r0, 0x5, &(0x7f0000000100)="455e44f21cf8b410988d657479331841f536fb3410b16b5437ece8390458fdd4795728f413fc1529de484a073aec2732292f646a2a47444f61c253d18aa6ac46ef5aefebd15ae56f74565e5da46eabbd03d6a61c167bef242841ec99ef263dc5d58d4d805cd01e10b9c3ce553103cd37de4ae4ce55809e25b203f6e6b49bb8600a13bef7d66bddfcbc3ab8c67c80e4363b7e66d6a3a3bb4fe368f5428837b6baf49009322dd2db905938") perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 80.662382] binder: BINDER_SET_CONTEXT_MGR already set [ 80.684300] binder: 10583:10599 ioctl 40046207 0 returned -16 [ 80.692661] kernel msg: ebtables bug: please report to author: Wrong len argument [ 80.714483] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 80.720825] binder_alloc: 10583: binder_alloc_buf, no vma [ 80.726679] binder: 10583:10587 transaction failed 29189/-3, size 0-0 line 2963 [ 80.727214] binder_alloc: 10583: binder_alloc_buf, no vma [ 80.739862] binder: 10583:10599 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:54:59 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)={0x49e, 0x6, 0x6a5, 0xc9, 0x9, 0x1}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x81, 0x2000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000080)=0x6, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) getsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/03/30 07:54:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x0, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={r4, 0xf398, 0x91, "94ad5ebea2973ccd4a927f0e30f7830896c3277fe52538e3ff49e66e52417292e83ab647d739b64164f52b381aeebb0bca57869f3e5eb8b88f1fc86f906e717a02b6432c3a252e0907ebc7bb0b1d24203008287a32e03de211f09dabb064bb5b5fccf48218d8c2622e953b0877b5d8756b12e48420265dda610f07240c0d4e8c210f81f79d4b80aace4e467decf6000dab"}, 0x99) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r2, 0x80000) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) syz_open_dev$midi(&(0x7f0000000600)='/dev/midi#\x00', 0xfffffffffffffff7, 0x10c40) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000140)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000e0000000400000058040000ffffffff580200000000000000000005ffffffffffffffff880300008803000088030000ffffffff04000000", @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c80000010000000000000000000000000000000000000000000000003800534554000000000000000000000000000000000000000000000000000003ddfa0201bb0001030000000001010000c023000000000000ff020000000000000000000000000001fe80000000000000000000000000000fff00000000000000ffffffff00000000c971315dffffffffffffffffffffffff766c616e300000000000000000000000766c616e300000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff00000000000000000000000000000000ff00800401000000000000000000000000000000f800580100000000000000000000000000000000000000000000000000000000000000000000000000000000000000003bff0302a9ea380002000000000000006000484d41524b0000000000000000000000000000000000000000000000000000000006000000000000000000000000ffffffffffffffffff000000ff0000004e224e244e234e240700000005000000310000006e090000373825580000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00030010000000000000000000000000000000000000000000000002800686c0000000000000000000000000000000000000000000000000000000002ff00000000000040005443504f5054535452495000000000000000000000000000000000000000030000006003000003000000cb030000030300000900000093000000bbb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) 2018/03/30 07:54:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0x5, &(0x7f000000e000)={&(0x7f00000002c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) accept4(r3, &(0x7f0000000200)=@nfc, &(0x7f0000000040)=0x80, 0x80800) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x20, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x4000006) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="100000000000000011010000000000000ddee6fadf5fbf2fa23c1994e028eedbc035ebcb6e354cc8b5e094f7663d99796b"], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 80.788808] binder: release 10583:10587 transaction 380 out, still active [ 80.795855] binder: undelivered TRANSACTION_COMPLETE [ 80.800992] binder: undelivered TRANSACTION_ERROR: 29201 [ 80.806478] binder: send failed reply for transaction 380, target dead [ 80.813665] binder: undelivered TRANSACTION_ERROR: 29189 [ 80.819176] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000001000000001161000000009cc60e7063ee1e7813f56fb0a5722361f482c1b33099c87a90c17b325f266a3fbd0bf6498009f132c900938b"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 80.862139] binder: 10620:10623 got new transaction with bad transaction stack, transaction 385 has target 10620:0 [ 80.872765] binder: 10620:10623 transaction failed 29201/-71, size 0-0 line 2875 [ 80.878947] kernel msg: ebtables bug: please report to author: Wrong len argument [ 80.904879] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:54:59 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000001101edffffff0000"], 0xffffffffffffff70}, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f00000000c0)={[{0x8, 0xafac, 0xe0, 0x6, 0x1000000000000, 0x0, 0x1, 0x80000000, 0x8, 0x7, 0x4, 0x10000, 0x80000001}, {0x3, 0x100000001, 0x7ff, 0x4, 0x7, 0xffff, 0x5, 0xfffffffffffffffd, 0x8, 0xfffffffffffff7bc, 0x3ff, 0x200000000, 0x7}, {0x289, 0x3f, 0x7fff, 0x3d65, 0x1, 0x80, 0xfffffffffffffffd, 0x4, 0xfffffffffffffffc, 0x2, 0x4, 0x4, 0x100000000}], 0x3}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 80.924434] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:54:59 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x0, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:54:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:54:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) ioctl$SNDRV_TIMER_IOCTL_TREAD(r3, 0x40045402, &(0x7f0000000040)) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) perf_event_open$cgroup(&(0x7f0000000240)={0x5, 0x70, 0x7, 0x1f, 0x7fffffff, 0x6, 0x0, 0x4, 0x80000, 0x8, 0xffffffff80000000, 0x1f, 0x4, 0x0, 0x5, 0x100000000, 0x7, 0xc0, 0x107a0, 0xa5, 0x3, 0x3f, 0x1, 0x5, 0x0, 0x4, 0x800, 0x8, 0x100000000, 0x7, 0x6, 0x7, 0x0, 0x9, 0x2, 0x7, 0x3, 0x336, 0x0, 0x19, 0x6, @perf_config_ext={0x7ff, 0xffffffffffffff81}, 0x40, 0x400, 0x1, 0x2, 0x5068, 0x18, 0x80000000}, r3, 0x4, r3, 0x9) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f0000000200)=0x14) 2018/03/30 07:54:59 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="35f87b35000000001101000000000000"], 0x10}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='pids.current\x00', 0x0, 0x0) r2 = getpgid(0xffffffffffffffff) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f00000001c0)=r2) r3 = getpgrp(0xffffffffffffffff) getpgid(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r7 = memfd_create(&(0x7f0000000100)="74086e750000000000000000008c00", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f0000000200)={0x1, 0x20}, 0x8) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r7) sendfile(r4, r7, &(0x7f00000000c0), 0x102000001) sync_file_range(r4, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 80.967501] binder_alloc: 10620: binder_alloc_buf, no vma [ 80.973201] binder: 10620:10623 transaction failed 29189/-3, size 0-0 line 2963 [ 80.973618] binder: 10620:10641 ioctl 40046207 0 returned -16 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="104e8e00000007ce11840ee2f93bac29ed01b88f1501010000008763cb705d5483fd2980c80000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000500)=""/50, &(0x7f0000000540)=0x32) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r2, 0x4, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000a00)=0x0) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000bc0)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000c00)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000d00)=0xe8) r8 = getgid() r9 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000d40)={{{@in=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000e40)=0xe8) r11 = getegid() ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000e80)=0x0) r13 = getuid() r14 = getegid() sendmmsg$unix(r2, &(0x7f0000001180)=[{&(0x7f0000000600)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000980)=[{&(0x7f0000000680)="1affd4b0647d9172c27dfc5099a859e93647b89b99ce4496ab788a5466c143536057b808161e876b876a10c63497696a0f50143783b90c6c9b4c5e4f96e9edd7d1e9bac0a9", 0x45}, {&(0x7f0000000700)}, {&(0x7f0000000740)="1a0078ea51f1a718ec40d184e2f88367179470b508c78e3ba0e4169dd54e280448384359005d8288009bda99fa02140f8681bb9fe2a7747cc0309e05bda70249ccd6b9f332508b69bd80a04c42463c3e8b86720c4af67a20744375f0e842015e8421684346cce523e78216bba4f36129ad98b58ae6fab5948383200264c41009559230b6a678828e29b4e1a98c86", 0x8e}, {&(0x7f0000000800)="bca8415f85b1dbdb0c8f7d90400c52b5e070b37b24c110fb5e4cc808ad69d79efa3182", 0x23}, {&(0x7f0000000840)="32c3d854652871e6565f0d66acdd09bf507f518c30f9c734236965b74b9872ffdd276df164aca8c3abf59955d3b00c112343796dac5bddd694d639870e1e7db0f99112420b494d2c46a10886401f56865d2163819c8de4d1a3f404ca7cf98e7b343700e2cb61de0f733ca1089dc745b543024dda8f1b981740d936f3834f3026a1013fad3ba41718683eee2eb51cadaba39c9692102541af998af54d1d3364f504e23ee54cf0caa0495b9f7cdd8126e75b174179d8f673f44a", 0xb9}, {&(0x7f0000000900)="1432b20c5c7f1005df27a265db1b833de5bd0a703990dbc6f4f91120751f8b63ad1117c02ef8639062b76be7100c3641dc44cb71bcf8e6be2e5e0e49dafc544875d6fe8c2bafea344856d86e5e4cf3caebe330e7ef338dc2dc740294cece38d2de1887a720", 0x65}], 0x6, &(0x7f0000000ec0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x30, 0x1, 0x1, [r1, r2, r1, r0, r2, r0, r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @cred={0x20, 0x1, 0x2, r12, r13, r14}, @rights={0x30, 0x1, 0x1, [r0, r1, r2, r1, r2, r1, r0, r2]}], 0xe0, 0x4000080}, {&(0x7f0000000fc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001140)=[{&(0x7f0000001040)="0710a0b9c19d67ef2b09bfa05ded17ad0d9cf793fecfc87868583967044911ba6220100204ad2e4c4bc1c84e51156836185b01a34ef78bdb5bd869de19455910d3d1b65f127d61bf75a063a06e17e1a4c81145fd776759dfd78e650ece2d20a33d92171ad0fa1a4a70cfe1209cbfcf7c4411f8ea8a28813f6b96686391a6b9abc92258730f7c3cf77b0aa3ac8fc4141c66d560298c6d1ba88449cf198c3fffdf1e055131fa342fdfa91ebd998d168010d25ce2652727db183f7588db6915abcc82110661c17ccef6bc4f52653768e02aa3f35d9c33eca4c68d89ca6cd5d363", 0xdf}], 0x1, 0x0, 0x0, 0x4000}], 0x2, 0x4000000) r15 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_PIT2(r0, 0x4070aea0, &(0x7f0000000580)={[{0x3, 0x100000001, 0x2, 0x6, 0x4, 0xfffffffffffffffd, 0x800, 0x6, 0x80000000, 0x9, 0x100000000, 0x9, 0xdd9}, {0x9, 0x6, 0xb1f4, 0x1ff, 0x8, 0x5, 0x5, 0x7, 0x6, 0x8, 0x2, 0x100, 0x2}, {0x1, 0x7, 0x1, 0x1, 0x1, 0x1ff, 0x101, 0x7fffffff, 0xc7c, 0x9, 0x0, 0x0, 0xad9a}], 0x3}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r15, 0x800448d2, &(0x7f0000000480)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) connect(r1, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:54:59 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xe6d, 0x40000) [ 81.016801] binder_alloc: 10620: binder_alloc_buf, no vma [ 81.022504] binder: 10620:10650 transaction failed 29189/-3, size 0-0 line 2963 [ 81.052733] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:54:59 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x101002, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400801, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000000000110100000040673e"], 0x10}, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f00000000c0)={@local, @dev}, &(0x7f0000000100)=0xc) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000d000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x4) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ptrace(0x420f, r1) getpeername(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x2, 0x7ff}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000280)={r3, 0xd949, 0x30}, &(0x7f00000002c0)=0xc) unshare(0x100000) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x80000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="460f2b3c3732010000000000000063afb06810738b441c573ec7fafd187faa2274cf891b23e1ca35eadea95c3c0ab7d4f3a21adb90af533c", @ANYRES64=0x0, @ANYBLOB="fdb7061b41db04b6"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:54:59 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000200)={{{@in, @in6=@ipv4={[], [], @multicast1}}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 81.084307] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 81.123603] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.129191] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:54:59 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000100)={0xa2}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:54:59 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x101) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 81.167558] binder: release 10620:10623 transaction 385 out, still active [ 81.174618] binder: undelivered TRANSACTION_COMPLETE [ 81.179773] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.185286] binder: send failed reply for transaction 385, target dead [ 81.214428] binder: 10684:10688 ioctl c0045516 20000080 returned -22 [ 81.221801] binder: 10684:10688 unknown command 1009454918 [ 81.227712] binder: 10684:10688 ioctl c0306201 20000040 returned -22 [ 81.236219] binder_alloc: 10684: binder_alloc_buf, no vma [ 81.241833] binder: 10684:10688 transaction failed 29189/-3, size 0-0 line 2963 [ 81.258992] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:55:00 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x0, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0xfffffffffffff001, 0x80) accept4$packet(r1, 0x0, &(0x7f0000000100), 0x80000) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) ioctl$DRM_IOCTL_GET_CAP(r2, 0xc010640c, &(0x7f0000000080)={0x8}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) renameat(r4, &(0x7f0000000200)='./file0\x00', r3, &(0x7f0000000280)='./file0\x00') perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x101}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r5, 0x7, 0x7fffffff}, 0xc) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r6 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r6) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r6, 0x84, 0x7, &(0x7f00000002c0)={0xfff}, 0x4) sendfile(r2, r6, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x1, r3, r4, 0x9, 0x6a8, 0x2004408) 2018/03/30 07:55:00 executing program 6: r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffff7, 0x200800) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000180)=""/86) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r2, 0x29, 0xff, &(0x7f00000000c0)="188c626f9f62512157af370097c94b8d95dde95a486485854bf0e54509f85287b22c8664bc7918a1a8c5e3862969844fedf14a36f0ff60eda1a6ecb6efda0dbb72f23ff5ed61477038bb56f815ae317a92f8ef0f7ed80b252feddb2224228598560debf4feb833603562f32b4b23c30596eb98db", 0x74) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184906, &(0x7f0000000140)) 2018/03/30 07:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x1000000000000000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x863c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x2}, &(0x7f00000001c0)=0x18) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) pipe(&(0x7f0000000280)) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000040)={r5, 0x8001, 0x7, 0x4}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r4, 0x3}, &(0x7f0000000300)=0x8) r7 = pkey_alloc(0x0, 0x3) pkey_free(r7) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0xffffffffffffffa4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f0000000240)=0x14) [ 81.274424] binder: 10684:10694 ioctl 40046207 0 returned -16 [ 81.296339] binder: 10684:10688 ioctl c0045516 20000080 returned -22 [ 81.298077] binder: 10684:10694 unknown command 1009454918 [ 81.308512] binder: 10684:10694 ioctl c0306201 20000040 returned -22 [ 81.318720] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.355841] kernel msg: ebtables bug: please report to author: Wrong len argument [ 81.392622] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 81.393692] binder: 10713:10717 got new transaction with bad transaction stack, transaction 392 has target 10713:0 [ 81.409382] binder: 10713:10717 transaction failed 29201/-71, size 0-0 line 2875 [ 81.447359] binder: BINDER_SET_CONTEXT_MGR already set [ 81.456183] binder: 10713:10721 ioctl 40046207 0 returned -16 [ 81.467278] binder_alloc: 10713: binder_alloc_buf, no vma [ 81.472920] binder_alloc: 10713: binder_alloc_buf, no vma [ 81.472947] binder: 10713:10717 transaction failed 29189/-3, size 0-0 line 2963 [ 81.478498] binder: 10713:10721 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:55:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000ff00000000001101000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/mcfilter6\x00') getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000100)={0x0, 0x7, "a7ee9a8e60b328"}, &(0x7f0000000140)=0xf) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={r3, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000240)=0x84) 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000000000001101000000000000f82a6c35b8c429288aff45b4c9fb75f21efe6b91879286e1749684551547d15eeb85e8fa900b61c75c5be3147c15877d90dd9946114b83e5b52cac95b117ae30a571eaa884f7ffba4a85042c83f0586696c168236d32cddb261e93c5ba73b754038c49ce216dd659526ce2d65ada70e330a5ba47a9932fc12d1874265d5b98070b40cf6741d107dcbe2ed1ba425c4bbf39574e4e4f4583792ff8af49a7a6fbf531ff465004f650a136dc0abd46cede812be910e3000000000000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x0, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) fcntl$getflags(r5, 0x409) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt(r1, 0x80000000, 0xfffffffffffffffe, &(0x7f00000001c0)=""/226, &(0x7f0000000140)=0xe2) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="116348400000cf0000001f9847c3ec3311151665667529e8790f9bfe77d3e67db4062c1602000000000000002fa21079aa706cbf9e01056cefcbc887d8eecd1e68784dff05f51a78adbfbeac39f3ab3274f86cf18dbeda3424d7e67314181da283517aeacf06f801a42decdf286b96d89072b9d23a75dfb7c837cb2cccfb8542b5edf1dc853dc03afc5d5f3b6173b7a79cfb29a17cef90", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1000000000000000110100002ffb89c5c4f437345b5e70e1ef0760617ed727ea9ac5bf8418e97c9516071bab37ae19f8412e0edb3db8562c89182ebd2ec858f7609257b434c63b4747135bbe2ee3403accb5e3f1ff7f430e7a13e04fed92460f1c180b13bf415d1f161087923bac3595f2ffe83cc0394fd4503ce01e095b5605c7f91db2dd7a8c4caf3c47fca495fd21dc189b30c3821bf0b40643a8ef0b85c8c0336bc192cc091dbc923e0e79c5693e0e440b6b6bb9075735fad465b1cdbdbb34a5c04b3a5b328f4a67170b665a6df2c8d802a8e3fb542fe8da79b411414096818420d711d46a4b68abfb74965f0fd8c813171e"], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = accept4$llc(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000001c0)=0x10, 0x80800) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000200)=[{0xc68, 0x80000001, 0x3, 0x1ff}, {0x4, 0x3, 0x60, 0x6c3}]}, 0x10) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r6 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$sock_inet_tcp_SIOCINQ(r6, 0x541b, &(0x7f0000000380)) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x1, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r6) sendfile(r3, r6, &(0x7f00000000c0), 0x102000001) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000100)=0x6, 0x4) sync_file_range(r3, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) getsockname$ax25(r6, &(0x7f00000002c0), &(0x7f0000000300)=0x10) 2018/03/30 07:55:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) seccomp(0x0, 0x1, &(0x7f0000000200)={0x4, &(0x7f0000000040)=[{0x1, 0x2, 0x7, 0x3d70}, {0x0, 0x7, 0x3ff, 0xb213}, {0x101, 0x6, 0x5, 0x7}, {0x1ac31537, 0x2, 0x2, 0x36e}]}) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) fcntl$getown(r0, 0x9) 2018/03/30 07:55:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = fcntl$getown(r2, 0x9) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000007740)=[@in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x2}, @in={0x2, 0x4e23, @multicast2=0xe0000002}], 0x2c) stat(&(0x7f0000003900)='./file0\x00', &(0x7f0000003940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$usbmon(&(0x7f0000005300)='/dev/usbmon#\x00', 0x7, 0x4000) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007640)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r8, &(0x7f0000007700)={&(0x7f0000007600)={0x10, 0x0, 0x0, 0x10001000}, 0xc, &(0x7f00000076c0)={&(0x7f0000007680)={0x24, r9, 0x900, 0x70bd2a, 0x25dfdbfe, {0xf}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffffa}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4761}]}, 0x24}, 0x1, 0x0, 0x0, 0x44880}, 0x40) fcntl$getownex(r1, 0x10, &(0x7f0000003a40)={0x0, 0x0}) stat(&(0x7f0000003a80)='./file0\x00', &(0x7f0000003ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000003b40)=0x0, &(0x7f0000003b80)=0x0, &(0x7f0000003bc0)=0x0) r16 = eventfd(0x3) [ 81.498913] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.504405] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.509990] binder: release 10713:10717 transaction 392 out, still active [ 81.517050] binder: undelivered TRANSACTION_COMPLETE [ 81.522189] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.527658] binder: send failed reply for transaction 392, target dead sendmmsg$unix(r1, &(0x7f00000073c0)=[{&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f00000015c0)=[{&(0x7f0000000200)="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", 0xfd}, {&(0x7f0000000300)="b8dfc897cf5356cc7ab66cbaf62bddc5eebdfcba5b2855b55963500926e665f03d7ceca5c6e0b788a444a24e31302d5313559b65c3fa90d0113c16befec03f80aef0bf87ac49cd2a7596718aaf432e3ecf26075ceb7524c0b32540c1ca173a12e2e0713084e2502cfa5a71fcbae156f311faa9f8b685a9c497712adff45b534a2879521cb18eafae9131a1285271d9d5", 0x90}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f00000013c0)="57879f831df7c108642e368ec4e5cfdf5aedd4b33bee5f571021e4e7b39cf3d60e68d998d209539508630d5e3fec", 0x2e}, {&(0x7f0000001400)="28707acc117a5162388ccfe363c1362486b7c522ffd162069ef1", 0x1a}, {&(0x7f0000001440)="66f68959a18b859699fd1721c82d705502aaa339542c15fbd5a1b46dd8040f6a6f45797aab3d6b8a4ae7e1ce9a5fb19e6526ae36fdac0f01fe163edd879256bf0812314912562c8c6ecb66d06212067496b2b5f1017b7c43ecdf628fff43ac0cf6b8189455c12c677de2fe95782483d1fdea6c24d5f7796ad0f0757b3cde3faa9d46e766472d8d1ed9013e2fb669283aeb5a2b86f8e4ecc3bcc9b1acd0fac6dd8349b6025852a2e0f86757cf82ad2d50a3af055fef6e2b40916860375aca4fadb6f8d16404b84ed02071b4e6f937949074df1f24d2c3e81f1102d8c3e46c1d717cb55ab362e13a11bc00462eadfd0747ce7093", 0xf3}, {&(0x7f0000001540)="b0eb0beda14754e71c4102b520f0efaa75ee18213a545533f24acc134a3792232bf325404a0911a611375530311b1eddef1d9c2f0a8a1cec8d25cd89c0c3eb62c367b085b8b19f26f25d8f39b226a121a6048638af77c0d1b372431a7c9eedb1d44176b1b544fb", 0x67}], 0x7, &(0x7f0000001640)=[@rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r2, r0]}], 0x48, 0x1}, {&(0x7f00000016c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000038c0)=[{&(0x7f0000001740)="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", 0x1000}, {&(0x7f0000002740)="f107894b4e493be6e97327e54124ef544dd804d2e3e2a9c10786278418a3c9c04ee5176424b261f5963d67544702af5b9c3d91c403a5492ff0d5c370ffab6d3fe6af513098cdfa5afe30db5a55aed8c4cc35551081edc88f5ab71ebb6815aa5f7c6fc34fda597ca6cddc9442473dbe72fbf73d6f3a1973421dce40988714eaa682d63a16db23ceb8f3123d2be97a54bc3d59cb9327cfe802e928c8aefe73fcb3950fae0f7367412a1ac9be30da79dbd7e913c71bda6ca92bad2d99b44839b738a6f6c705f60a514652dddb2fd31267c982a1c5e9e87d2e25", 0xd8}, {&(0x7f0000002840)="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", 0x1000}, {&(0x7f0000003840)="8c65377169f702a4fc3d62d273e7a20627e6c0b4fa4873f86df8559b4617434399efa8e789303534d929d419dbd158baa9dd2bac0a7339c74a78a3d02cf7a4aa5daf04983fc77a2d2285625bd510590ca75d", 0x52}], 0x4, &(0x7f0000003c00)=[@cred={0x20, 0x1, 0x2, r3, r4, r7}, @rights={0x38, 0x1, 0x1, [r2, r1, r2, r2, r1, r2, r2, r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r11, r14}], 0x78}, {&(0x7f0000003c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003d40)=[{&(0x7f0000003d00)="a93e6897216a99dd987132f57fa123cadb92e8cb032d", 0x16}], 0x1, 0x0, 0x0, 0x4000}, {&(0x7f0000003d80)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003ec0)=[{&(0x7f0000003e00)="3fe3199931bfef723c6d24d10e7a6e2df49d340c54dfdf9f661c51c6b88b7f319caca35e7afd8f5466d425785762cbc86f175116fdea11a5a10183d3298805385e934299fdbef95700c7ef4c6137a813daba0bb59dd433b3c71b57bb400f24f26337efcbd9fc776ea9a0daec75009d9c65b41c1cab4412d5f3214ae3b4780dfe2b40078d1d9a8a97", 0x88}], 0x1, 0x0, 0x0, 0x84}, {&(0x7f0000003f00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000005340)=[{&(0x7f0000003f80)="203dd2a9e7fe2eda49e81440a8e7806895cbd21c735295268f10071fd1b86e02ebd33d452de82534800f582be0a847494b458b5dbe42d56ad2d5f1ebeab7bcc5ad36c69c93e0095e7ae8520f5ff92be93a396b80801288fd4df31c7ad3f5d0ada1285c2998b6e1b80498e47149c05c46906990855f05e88c4e158fda2145a5caaa882eeaa3e2c38d8fa8659593e74abb3d230bc184672a0bd8f47040421dfd5b9e66e6ee871b0840b4fabb92784d6253f7ad6db1faca4bdff69b868c8ff081edc60b", 0xc2}, {&(0x7f0000004080)="f22f5fc8e1833e2600bd14", 0xffb7}, {&(0x7f00000040c0)="18ea71732a84114516e17423fb80c1a0d79dbc58db109db54f0b87a04046aeb01a26e10501d03d45f0f00e72395c437885d77f9cba0080211f7c650ff94e25b2c8245cd91d3308031d02ef1201a12945c178dd90ac19df9f33e034177563ccb1ef6b7c0ca71647bae36a2e3b39b4eea7a017", 0x72}, {&(0x7f0000004140)="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", 0x1000}, {&(0x7f0000005140)="3b659234454afd153918c48a1bae7b382f30437f927e0d13de747d438c81dbf6fd95bf16836e1234420470d581ad225cdeb87eeb6a360182fae9098aacca5862940a4d4e12038485b4f4012dfe6e81a0bf8a18ed67e2358f70a2968eed0162dd89665493df5fcc07e582abd86e3f2ab5a28a9cf2afeb13b44b5a4e", 0x7b}, {&(0x7f00000051c0)="4b10209677f1fe15cb23d65663cc3d2098697f49a751d3f08126620c5ae5786768c1a6d980212c5169826037382b83b7a21656e338d69d948782f999207b66d7d91060fd5e234693e3a984dd231c9dd21269d28b08543a7e4a11902953852e8de18441afa584c518686b917f715f3ae14134deb4e764437d509614ff5e3421972d99d58ad09d2c216b50ac56dbdf2c77dfd2c3801a8a2cd6d1c4697b58654da6fdcfb1ba6c1f2aec873699ca99457ccf436ee3ae06a54ac568b1e16e", 0xbc}, {&(0x7f0000005280)=';<', 0x2}, {&(0x7f00000052c0)="5ded81a11c11fa03b61be191963ec07cb64d1586589853c0991f52237d527abb18b046f2228136c8e89c4098468c06", 0x2f}, {&(0x7f0000005300)}], 0x9}, {&(0x7f0000005400)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000005580)=[{&(0x7f0000005480)="8b0fb7924f1661f3c95936b034bfd1d7807ff3ac265162cbe840347e5b3b959420a6cacc64192116ecf26e71136f4ed1021a45cb43aad880585e40ce67a6dfece1a0199c406f210d154ccb57199d3fa9e270666ca173aa7a7f726d662a5ecdb0b11ba8ca3f8882002454717a544ce04eba04dfedd6391f7eb2ce3ca4aa4e991ee8d6bf714d58db1d5accf0244f766ad7869f6c3db24984490ef6211bd9149e57bb30b2a4e8b810e3d2809296d855218675e15ffe2cc8c2d9dc3d8d3869ce01ddbe6421b763a0fb60f0165578b56363d6e8810e0f23f73bb71bdf4acba39568fab1e4dd3e2bcdb3eb49f4c585a18f4aa75c1a8425c768fd", 0xf7}], 0x1, &(0x7f00000055c0)=[@rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, r3, r4, r15}, @cred={0x20, 0x1, 0x2, r3, r6, r12}, @cred={0x20, 0x1, 0x2, r3, r11, r15}, @rights={0x28, 0x1, 0x1, [r2, r2, r2, r2, r0, r1]}], 0xa0}, {&(0x7f0000005680)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000005840)=[{&(0x7f0000005700)="c1d90a97930f33002f5c814680c3e3d6ad1786e688978fed9003b6886bd02b2d48333f643c974a5db9d97b7d128407f9fa47faa23d3f4f1b1c10516331a065eaa4c8ab405f3f856cfabf895745aafe44", 0x50}, {&(0x7f0000005780)="f8d51c403f60a677c140800a88ffe3003bf286b9e5fc7586318e4277e3060fb9b1c8ae86eef5bbbcd2a60c209d67fee3521732843cfb7f6d57681eb10dd8281440a2975468364bac103bd65e3fb107601d21656e1716f93bb2826f96ee5b28f2a5722ad823d85ec70b836f409b745164d9effeff6cd6c0a2684823afd229796746cffdc2bedac7c32dd0d19a0a0df930901fe76ca55d9735139416c1438372e53a", 0xa1}], 0x2, &(0x7f0000005880)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r4, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0000000020000000000000001100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r6, @ANYRES32=r13, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r7, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x4000}, {&(0x7f0000005980)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000005b00)=[{&(0x7f0000005a00)="52edeafef7062e5f9ef69fa0c31d2a0f28e99d733f2d408ec5c43fd8c80e1276e95108fa25f952321173b4824dd05f907aa6564e13d5046f0349b62e2acd1fc109962dcdc53e1cd1d582cbf4c52abbe45d50c6a7d0c1fb8c185ac16dcd07f38f788897886e331a47537ad4621e9d653f4170b8036b37e37ce175c3f1767cc9892bdc63f1b03264841c98b58c32be2000945bd53d8973a967fb5d257fbc39a2e479deb2e7104dd2356058792ee9cd9622f0d57126f96995ddaf8c65e813e9a7eeb76dc81db3acc00ba6ed77633e9ff765ee6594beb570a5f619872e6f52e009", 0xdf}], 0x1, &(0x7f0000005b40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r2, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r16, r0, r0]}, @cred={0x20, 0x1, 0x2, r10, r6, r15}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @rights={0x18, 0x1, 0x1, [r1, r0]}, @rights={0x30, 0x1, 0x1, [r2, r1, r1, r0, r0, r2, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r2, r2, r0, r0, r2]}, @cred={0x20, 0x1, 0x2, r3, r11, r12}], 0x118, 0x40}, {&(0x7f0000005c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006080)=[{&(0x7f0000005d00)="1b3211f033ab8cf0c6ef7e8af3afe839c07abf83230dbc69b73192a18b7b516f8c93b613b4de1e27f0e8185428e539fab0bb4ef2c48d3983461c72cb28b73090991a9c99c0dc2391c7012ec64e394776114f1288054ff84092596c2fe7be05130e4af4571f647bcd8cdcce8e762f", 0x6e}, {&(0x7f0000005d80)="5940031de7ce", 0x6}, {&(0x7f0000005dc0)="011e5ddb18c51c1f0a7fde54ebc92a266e2c0a9f6602df820ae48156ce55e299ac283a8efdc7d69578b6069f7a0371ade509fd0527b119dd3d880b9e51920d665227118e20e912873e965aea7f4af61d27cafc6d81a048f17ee58676d3a113f3cfa44f8c910cff9e917d0e46022041c652e0ab814e96e05ba205f0e334f50cfd3143238533b888129918a94a60909663a646db1331", 0x95}, {&(0x7f0000005e80)="380b81725361ecaff828aa6b5fffb7a15eb58904ea6087ff6d9c1cb5af3a4107842ead944b6e891ba79b9a5014b24e64f534539fc7d0777449d01852d323a1e6195e303d8d6f31021dfb5ddede53b3215a60b93ec9f5cd6cabed5265121c5f2144b206afe3bdb322313e31d2e716a49e88e763a399ff979d5feea373bb0b2c58cb50d51974a2516fe4b257c2e2d8fd6034fef6671184b3e9096b852ca589710d181cb0c26f49ae986ee8d3da54783b91fa01012adb07bb3a09a56269db476ce1d0", 0xc1}, {&(0x7f0000005f80)="2f026213cad44931d6e047a3dbba340a01e9978719006ea38c11a60d4769c5de0a28b8b8ff1c64b911bdf968b63d57186de57c5b1af380f99fcdbef3e80cf69a46eb4558be0e2e0253c8dad6f2472f07aebd1841e54ed8b1f2c030747affaaf2f5f65e619ac24847e8809ad0b95291b491c2b09bfa633e09734730f7e0890f052c97d5c5eaa0dd90d0c2323e10014c6f207038fc21c90d79e7d28e3bece2d41f3c62d7b23724dd7ff4f18d6ecfaed8691963c1dbdb131a5786fbcc4f9f4f44355567", 0xc2}], 0x5, &(0x7f0000006100)=[@cred={0x20, 0x1, 0x2, r3, r11, r12}], 0x20}, {&(0x7f0000006140)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000007340)=[{&(0x7f00000061c0)="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", 0x1000}, {&(0x7f00000071c0)="de6a4ec43e7d456d26fd761f43ffaf6d22f54b37da", 0x15}, {&(0x7f0000007200)="ae0a0c4986498049fc88881fd4ab0854ad1799c0cba80ac26375537c47c4650035d5f175d413a6f2db9eb501c411c0313d99834c16028a12cf289ee2c58e8fdb5a8898fe84900ff20322b590bdd75205d0d25f04d00bfcea723c4f3d03432f54e15fdce717ea112f3b28cb21d7e6491b13a648659adbadbe2f0beb21c825c4aaf40a9e18062e7224bab327871c9f779228db025366a6badcfc0eb7c4b954683300", 0xa1}, {&(0x7f00000072c0)="3fde63cbce8207f429e0e9da4dc6694733d3cc640a98c5e5b6d3a2e2ed325580e3e376b57f9372aa56f9057b2221423d96e85a8fcbe44e1b2ce1ce", 0x3b}, {&(0x7f0000007300)="45d724bde3", 0x5}], 0x5, 0x0, 0x0, 0x4}], 0xa, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0xfa5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40000, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) [ 81.595565] binder: 10733:10735 got transaction to invalid handle [ 81.601914] binder: 10733:10735 transaction failed 29201/-22, size 2--4653220437502680529 line 2848 [ 81.615720] kernel msg: ebtables bug: please report to author: Wrong len argument [ 81.632091] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:55:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="100000f9902300000000000000000000be0d023fc70195f4340c872255b0113b3155e1c9f3ac0eb234daacc86e9e7e0b32c07419bd51c5c306a248d8fc1253ac7272188ddfeb965bd486a8bfaaf7753fd5a934fe3f919bfaf072e8b146b387e19c064a0f92a9f5d443be7ecfe43ab23df795869ab85845391fcb7b3f94b261ed57efb7023ca03507fa8c4a545de56bc6613f02f0aafbb5af3b28249ba730f34cce0ca152363b0dfb7db9033ea7990de670baae6be64efb0a3047bf10b5f6e99df5b7bdb496a300a1933c3c7236b1e63e21c02e510e2b3bd830f9e4ae7ebd"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7, 0x418100) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x10001, 0x3, 0x400}) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0xffffffffffffff08) 2018/03/30 07:55:00 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x0, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 81.657581] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:55:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) fstatfs(r1, &(0x7f0000000280)=""/181) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) openat(r3, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x8000) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000080)=0x1) 2018/03/30 07:55:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 81.698647] binder: 10733:10749 ioctl 40046207 0 returned -16 [ 81.733635] binder_alloc: 10733: binder_alloc_buf, no vma [ 81.739290] binder: 10733:10735 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:55:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="2c0000000700000011010000007d22642836d7f6a322b522c156000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000100)=0x2, 0x4) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000000001101000000000000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 81.768426] kernel msg: ebtables bug: please report to author: Wrong len argument [ 81.798855] binder: 10733:10749 got transaction to invalid handle [ 81.805201] binder: 10733:10749 transaction failed 29201/-22, size 2--4653220437502680529 line 2848 2018/03/30 07:55:00 executing program 1: socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) ioctl$sock_ifreq(r1, 0x891b, &(0x7f0000000100)={'ip6tnl0\x00', @ifru_addrs=@nl=@unspec}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x793104) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) r3 = gettid() r4 = getuid() listen(r0, 0x8) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={r3, r4, r5}, 0xc) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:00 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x0, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:00 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) r2 = getpgid(r1) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000001c0)={0x0, 0x53b5, 0x2, 0x1, 0x9d, 0x7ad, 0xfffffffffffffff7, 0x0, 0x0}, &(0x7f0000000200)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000280)={r7, 0x20b2}, 0xc) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x2400, 0x0) kcmp(r1, r2, 0x5, r3, r0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r8 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r8, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r8) sendfile(r0, r6, &(0x7f00000000c0), 0x102000001) sync_file_range(r3, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) prctl$getname(0x10, &(0x7f0000000100)=""/77) [ 81.818583] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 81.901267] binder: undelivered TRANSACTION_ERROR: 29189 [ 81.906837] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.935386] kernel msg: ebtables bug: please report to author: Wrong len argument [ 81.944676] binder: release 10733:10735 transaction 397 out, still active [ 81.951661] binder: undelivered TRANSACTION_COMPLETE [ 81.956470] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 81.956793] binder: undelivered TRANSACTION_ERROR: 29201 [ 81.968410] binder: send failed reply for transaction 397, target dead 2018/03/30 07:55:00 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000200)={r5, @in6={{0xa, 0x4e23, 0x1ff, @local={0xfe, 0x80, [], 0xaa}, 0xeae4}}, 0x2, 0x9}, 0x90) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:00 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) r3 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000011010000000000002c6de59f64d9c0068f29295e57ce6e51e57404bf4985bb8a5d25d8ecd0dfe4ae7f7fd756a34e89aacc749213d9f3835714b041d4184fc99fbe1436dc36b40ef1c9553c5fb55ffcc7e3f326e4a772b9ab184c24fb80e26283a7cd5a1d3f7490e9cba046ebbc3e829f38d5f066bbd423d3f93b5e103b5c7842b8ecaeede2680f1d65d46e7c2762ee821a0473114518f46de12fdc0d"], 0x10}, 0x0) r4 = getpgrp(0xffffffffffffffff) getpgid(r4) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r6 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r6, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r6, 0x0) fstatfs(r3, &(0x7f0000000340)=""/209) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r7 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r7, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r7) ioctl$KVM_SMI(r7, 0xaeb7) sendfile(r6, r7, &(0x7f00000000c0), 0xff) sync_file_range(r5, 0x2, 0x100000001, 0x7) ioctl(r3, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000090100000000000038ea1905bdc41e83028469fec6a830c34734664f9a80805d9984c2bea3de1e09c04ed5139b8159f6671aa2686b5c05710e960000"], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 2018/03/30 07:55:00 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x2c, 0x0, &(0x7f0000000080)=[@increfs_done={0x40106308, r1}, @decrefs={0x40046307, 0x2}, @increfs={0x40046304, 0x4}, @decrefs={0x40046307, 0x4}], 0xb7, 0x0, &(0x7f00000000c0)="ae3356205c5e6f715106b4a0ba7d35a37791775764a83d03cf2232553fd0dddc500233ccdc9d360bc61a22ef41a6b53a2f09f62354d506da10dee4b6250460e97640eb765419a66a14b95da34d33978dc6f95e3ec21bf34643197609e7fab92eb77687bd5d9092f6591e861283c732e6778ed6c35f352daf228765a08639bbf1b5dd767a5657a11bfa06687f8916481e39c95132b230e29b090e1fed9776d35c9a90ab66eedabfcd838daeda2580a682878215f01f9618"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:00 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f0000000200)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81004) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:00 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f0000000100), 0x165, 0x10) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000000000fd00c795bbc9d9cb"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) ioctl(r1, 0x4543, &(0x7f0000000100)="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") mbind(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x8000, &(0x7f00000000c0)=0x6, 0x1, 0x2) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) getsockname$packet(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000001140)=0x14) clock_gettime(0x0, &(0x7f00000011c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f00000012c0)={&(0x7f0000001180)={0x1d, r3}, 0x10, &(0x7f0000001280)={&(0x7f0000001200)={0x3, 0x0, 0x2, {r4, r5/1000+30000}, {}, {0x2, 0x0, 0x7, 0x380000000000000}, 0x1, @canfd={{0x4, 0x4, 0x1}, 0xe, 0x1, 0x0, 0x0, "4bde061ba427c2c4b63f3805ac2f8a01c65586bdf05c41f93649c09dc9bbe96e014629ad9c9d4a72f351910338b96455d06c3eb4a15f7969a8752b285a65d83f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x10) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000001, 0x10, r2, 0x0) 2018/03/30 07:55:00 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x0, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:00 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000000006001101000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x4) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000100)=@pic={0xffff, 0x7, 0x20, 0x3f5, 0x5, 0x4, 0x3, 0x100000000, 0x3ff, 0x2, 0x6, 0x57a4, 0x40, 0x5, 0x8, 0x7}) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 82.051459] kernel msg: ebtables bug: please report to author: Wrong len argument [ 82.061386] binder: 10812:10814 BC_INCREFS_DONE u000000002000c000 no match [ 82.068494] binder: 10812:10814 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 82.076276] binder: 10812:10814 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 82.084115] binder: 10812:10814 DecRefs 0 refcount change on invalid ref 4 ret -22 2018/03/30 07:55:00 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:00 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x0, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 82.112057] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 82.178728] binder: BINDER_SET_CONTEXT_MGR already set [ 82.195506] binder: 10812:10836 ioctl 40046207 0 returned -16 [ 82.198689] kernel msg: ebtables bug: please report to author: Wrong len argument [ 82.202986] binder_alloc: binder_alloc_mmap_handler: 10812 2000c000-2000e000 already mapped failed -16 [ 82.210151] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 82.229255] binder_alloc: 10812: binder_alloc_buf, no vma [ 82.234913] binder: 10812:10836 transaction failed 29189/-3, size 0-0 line 2963 [ 82.244850] binder: 10812:10835 BC_INCREFS_DONE u000000002000c000 no match [ 82.251977] binder: 10812:10835 DecRefs 0 refcount change on invalid ref 2 ret -22 [ 82.259742] binder: 10812:10835 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 82.267483] binder: 10812:10835 DecRefs 0 refcount change on invalid ref 4 ret -22 2018/03/30 07:55:01 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000000000110100009c000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0xfffffffffffffe4c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) fanotify_mark(r3, 0x20, 0x40020028, r3, &(0x7f0000000040)='./file0\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockname$packet(r3, &(0x7f0000000200), &(0x7f0000000240)=0x14) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getresgid(&(0x7f0000000040), &(0x7f0000000200), &(0x7f0000000240)=0x0) getresgid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) setgroups(0x3, &(0x7f0000000540)=[r6, r7, r8]) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x0, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x200000) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='bbr\x00', 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000180)) r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3f, 0x7}, 0x0, 0xc945}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lseek(r0, 0x0, 0x0) connect(r3, &(0x7f0000000100)=@generic={0x10, "93770a188a5871ab8a1352c3cf44080fdd0d5d708d5dfd6d900a8c7326f826a49e7c7f159e3d2900e4fe0aa68b912b8ff9f20e143d4e0295e47ef487e008a5835bb368d7ade3f6ca069ece542fe1b8d5f243251eb2f12e1d81e0226238dcaf21219d97b2718ca1a7f97617c405e531e0b14c876c5b193ba5f4e83ecd0bac"}, 0x80) 2018/03/30 07:55:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') r2 = semget(0x0, 0x0, 0x100) semctl$GETNCNT(r2, 0x3, 0xe, &(0x7f0000000080)=""/105) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7a18fbf66adafc24370b55dce30ed784946f13c6c4fc80f00fb4dd4ad0f7f8442fa19011227ad978c71ff303fc8b29af87398d0deba0d04050e656ca752b7d1ee9125f79a479c32d3b553ab73b091de97b7966ec28615a076b9c15ff7c3c94f684c0d70e74a428911c2ebd2811075fcd9fac6c7db4d37e9ebef862ea57a8b269426021ff4383fe37331b11532d275f27880f1d55c4795c4cbb93a7c5272bc20af451adc2bd233fefbcd02ee60561ab8ff0ff1de235000000000000", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000100)=""/45) 2018/03/30 07:55:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000011010000226bbb35f756a8a4e2eb416a23ad6c453d0b820c484c4c802b3a9e5bbeac0e6ed50ea7c5a6b13e8bba708c0e738258e9252b41439121a5734e7614708ac9487ee5199c7b078191732c64420c0685c83f3b72beac0d699b051baee65aa2e1b8ebbaeabcfe4cae4d9f51b29a53e692ddff6a56062e6394aeae131a990cfb7ca322d43674f5bc99660048bfab02961b00000000"], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x404000, 0x0) gettid() r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 82.285995] binder: release 10812:10814 transaction 402 out, still active [ 82.292992] binder: undelivered TRANSACTION_COMPLETE [ 82.298133] binder: release 10812:10835 transaction 403 out, still active [ 82.305070] binder: undelivered TRANSACTION_COMPLETE [ 82.310211] binder: undelivered TRANSACTION_ERROR: 29189 [ 82.315667] binder: send failed reply for transaction 402, target dead [ 82.322337] binder: send failed reply for transaction 403, target dead 2018/03/30 07:55:01 executing program 6: ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000140)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x0}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000280)={r1, &(0x7f0000000200)=""/128}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r3 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0xfffffffffffff41f, 0x80402) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000100), 0xfffffffffffffcc9) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r2, 0xc018490a, &(0x7f00000002c0)="921d8e2c9410e9f978476351278b094d2c465be8fdc30aa1846883b8769ac311565f46db53f21d23dd3a2bd7e61f6b95aac07f30b652e987808031b0857ebd34281005220b32965ec7d88594bf678086f6ff5d6e113be744575979bdfbf4a851fb875ab7fd67c9298580dbb38b62f495ab0ec9a550fc923fca8847f622e4299222fdc3b602bbff79d5513129b50400d8562d369d02877068d876af7db7672d17145fee3000dab33e4258eca72500009ad412") 2018/03/30 07:55:01 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x40000, 0x0) getdents(r0, &(0x7f00000000c0)=""/35, 0x23) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0xffffffffffffff87, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x4044) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setstatus(r2, 0x4, 0x44800) r3 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x2) accept$alg(r3, 0x0, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) [ 82.386005] binder: 10856:10858 unknown command -151316358 [ 82.392410] kernel msg: ebtables bug: please report to author: Wrong len argument [ 82.409186] binder: 10856:10858 ioctl c0306201 20000040 returned -22 [ 82.422125] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 6: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) r1 = perf_event_open(&(0x7f000025c000)={0x0, 0xfffffffffffffebf, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x4, 0x280441) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@int=0x20f9, 0x4) 2018/03/30 07:55:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) ppoll(&(0x7f0000000100)=[{r1, 0x20}], 0x1, &(0x7f0000000140)={0x77359400}, &(0x7f0000000180)={0x963}, 0x8) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) open$dir(&(0x7f00000001c0)='./file0\x00', 0x583000, 0x94) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:01 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x0, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 82.439671] binder: BINDER_SET_CONTEXT_MGR already set [ 82.448458] binder: 10856:10866 ioctl 40046207 0 returned -16 2018/03/30 07:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)=0x3) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r0) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) setsockopt$inet6_tcp_int(r3, 0x6, 0x32, &(0x7f0000000040), 0x4) pwritev(r3, &(0x7f0000000780)=[{&(0x7f0000000200)="e74fee31e90ed6f94d02ff535ea7ab67f2061d4815e4edc4285f7182fe84222019acd06c27a7c5325b60417ce84e4076d29a24e6ad832fb99e10504c9c76b504fd580c6bc017d83e2b7817decf3198563e2c818bb2a0046c998ed89742e93c214930f422a72be2413dfe0376f3512e12b7b057e3dc36212dda6eaf1dafbef6b10c6e9925623428cb91496eb0adee5018b30fe225b401248110d209fb8384c56dff4b4da02c3157c1cd9b4cdb50f6c2d027b93a7fe9e2d4c435a259ef036e2970", 0xc0}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f00000002c0)="c42e3fab172ab74af01dc10a17ee7a65b056d3fc4d6f87b94348004a48a62d191dc040af74bb2c3a6e37690947f0d911288a470352ffb8d1d4ce1925a6514b875048eb0905498b8fa06f04e89c0c17e12c87667696db4cd22613432ed037ed21d16af5d418b73c7157418aae101d964d9330ac6a6c16d0541b95205d7ef1da4f74a76d3d6b26cda867a4ced0f177b3062602484875ea21273f8fb91d594f3d934e570aad11fcb6d623ea3e4244e84ddd85baa3fc0b14e5348706fb0754377eaae8ad908983942c7b42c272ec4b745051d7fbe483b6ef69e98587d38a4e17db8aebf4051866ad5eaa14a5b9857bdf0b565900c3493acfe59428f1014ed8", 0xfd}, {&(0x7f0000000640)="562815a809401b1be297806814b590fe4a716cdd4a2fd2b994dc83a45b04ea5804a804643a11f51c12de6ca4fc9821feacc9835fbeba8e451fb0607672c4365739af04fea4d7df6b09b389a1cabbdaa73ec2fdf35a4d4908670fc0e776381a9d4d724badcc981f7a6e50636567fb548de60fe9fc05f2241aad926aae7f66d31cd57af944c07d17c278489c5f2d6c01f5d8b10697d7acad230fb45c72b4d15935", 0xa0}, {&(0x7f0000000700)="a4d8de16c05343c10bc2e26eaf974b243676c24545ec4db77f9cd079ec6cc8ff64f198617e1a8b3f6b3486d611ad660ea9274cb62a89eb7ba134d89e69f478cc53b07e38307be63e16f7a144cc4d66de85da47ce2a85d74211b9504292ad297dcc1c4cb1de4ff87fa388f967ff", 0x6d}], 0x5, 0x0) ioctl$LOOP_CLR_FD(r0, 0x4c01) readv(r0, &(0x7f0000001a40)=[{&(0x7f0000000800)=""/76, 0x4c}, {&(0x7f0000000880)=""/10, 0xa}, {&(0x7f00000008c0)=""/18, 0x12}, {&(0x7f0000000900)=""/58, 0x3a}], 0x4) sync() ftruncate(r1, 0x1) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r7 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000940)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@broadcast}}, &(0x7f0000000540)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f0000000580)={@mcast2={0xff, 0x2, [], 0x1}, 0x58, r8}) listen(r7, 0x100000001) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000001a80)={r5, @in={{0x2, 0x4e22, @loopback=0x7f000001}}}, 0x84) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10000000121a00001101000000000000"], 0x10}, 0x0) r1 = open(&(0x7f0000000140)='./file0\x00', 0x3, 0x80) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000380)={r2, 0x10000, 0x30}, &(0x7f00000003c0)=0xc) r3 = getpgrp(0xffffffffffffffff) getpgid(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r6 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) getsockopt$inet_dccp_buf(r6, 0x21, 0xc0, &(0x7f0000000280)=""/232, &(0x7f0000000100)=0xe8) sendfile(r4, r6, &(0x7f00000000c0), 0x102000001) ioctl$TCFLSH(r1, 0x540b, 0x6) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x5, 0x101000) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) [ 82.485157] binder: 10856:10858 unknown command -151316358 [ 82.521215] binder: 10856:10858 ioctl c0306201 20000040 returned -22 2018/03/30 07:55:01 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000110100000000000091574a88121cf224f0527084d958f36c7fdb4e774a095b13ad821cbd6dd5cc78807bc224f631b12deddc717a330451df477ad7aa1ed302ee98fb3e1e240cb978ae6a780a0e2970770afed5fb239d2a518317e6e7ea9df415532514acdc9207b5a1a3c878341fc478232ae9efc6c7cb08122b73a13675b68ed18b668ce247ab55dae88aaf1bc6f6665ffc71c135184c20e5485980b8e79700524ce1a0b0d8bccd2928d5a2632aff845ba79439384de4bb18b2cd090169e03ab23467a7790000000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r2 = dup2(r1, r0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000280)={0x2, 0x10, 0x1, r2}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x10, 0xfffffffeffffffff, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x1000}, 0x2c) ioctl(r0, 0x8, &(0x7f0000002000)) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x80, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000200), &(0x7f0000000240)=0x4) 2018/03/30 07:55:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @local}, &(0x7f00000000c0)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000100)={@empty, 0x1b, r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="5b9011e3", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) 2018/03/30 07:55:01 executing program 5: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 2018/03/30 07:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 82.556947] kernel msg: ebtables bug: please report to author: Wrong len argument [ 82.566318] binder: release 10856:10866 transaction 406 out, still active [ 82.573952] binder: undelivered TRANSACTION_COMPLETE [ 82.579331] binder: send failed reply for transaction 406, target dead [ 82.592506] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 82.656909] binder: 10908:10910 unknown command -485388197 [ 82.680558] binder: 10908:10910 ioctl c0306201 20000040 returned -22 [ 82.696149] binder: BINDER_SET_CONTEXT_MGR already set [ 82.701686] binder: 10908:10916 ioctl 40046207 0 returned -16 [ 82.715114] binder: 10908:10910 unknown command -485388197 [ 82.715358] binder_alloc: 10908: binder_alloc_buf, no vma [ 82.722117] binder: 10908:10910 ioctl c0306201 20000040 returned -22 [ 82.726878] binder: 10908:10916 transaction failed 29189/-3, size 0-0 line 2963 [ 82.751564] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:55:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1000000000000000118de9168a000000"], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x10001}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000180)={r2, 0x3}, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x0, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="96000000ba9af518c6981b00daac6ebbf7d34b31ffc28f46d5f3135904a33381843ae6168cc85b312fab5c7c2e77af7a27b3dc6e940a539b000000047e7fef083d94e5fa86d57bdc72a028bbd17d3672f680a0093ea6fa4a6a2e26b5b2a2d746c492696383d706ce4ec1a378761b15a59e21a049e40408948cf463fb22955f725b3f90a6ff78d6b714da403c4e9c8431f0bb411844940d6f7a16fe2029f868e2cba040e9463db23f63a1930ffecba03218a3679646519997f7985a0acb7162b0355e5f3fc0c2aa10bb3c4207b201dc1c3bccc59e57df04c7b3108191d53a66f56f19f1874db3681829c20e8134bd20ad56be2228e30eb6387a1e3e13e03a960ca98493cf1c34dd4c6110d1ff29a1fbc4cf98c7d978b57c96a5a3b0fdf34536a7d3ba3c5fbef7f96ddf34b01b28beb774e4ed2abb888206a2970c2f677ddc587274bcff7fc54f552e23be125fa9c865e33200b9f9979edf2c868283c06acf20cfd0f68cfbb10c25680e5278b77a8dddad3070d23c256e0aafe71c3a581679ff3eec8da19aaa3a72bed321cc22bcecc167e488dba31640a7dd53a37fa09e2848318aada1700c8029e8b600000000421d7fb4571d18b8deff9b23b3b24b10789c0cbc04e6f941a880d6ec3d80ba"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept(r1, &(0x7f0000000100)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f0000000180)=0x80) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @loopback=0x7f000001}}, 0x1, 0x100000001, 0x5b3e6c60, 0x101, 0x80}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000002c0)={r3, 0xfffffffffffffe9c, 0x20}, &(0x7f0000000300)=0xc) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x9) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000040)=[{0x3, 0x2}, {0x4, 0x2}, {0x7, 0x2}, {0x0, 0x4}, {0x3, 0x3}, {0x4, 0xfff}, {0x6, 0x1}], 0x7) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 82.762397] binder: release 10908:10910 transaction 408 out, still active [ 82.769371] binder: undelivered TRANSACTION_COMPLETE [ 82.774515] binder: send failed reply for transaction 408, target dead 2018/03/30 07:55:01 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="100000000000000011010000000000009a7244dcfc8e4212d8ffe0d8438fcbc7c0e525e3fbdc0f7f3ef591aee5b9c92d4f6c58e2691d4c897f02954b4599c415df428ef565f32f14b3fdaeff2324e27662ab65cb11a683af5ad3e9"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) ioctl$KVM_GET_SREGS(r2, 0x8138ae83, &(0x7f0000000100)) [ 82.825300] binder: 10932:10933 transaction failed 29189/-22, size 0-0 line 2848 [ 82.826272] kernel msg: ebtables bug: please report to author: Wrong len argument [ 82.846534] binder: 10932:10939 transaction failed 29189/-22, size 0-0 line 2848 [ 82.856597] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:55:01 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x0, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) read(r1, &(0x7f0000000100)=""/4096, 0x1000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000001100)="ab3648d48fc81c5fd48038da892bae29b0c1f3cf77b4a381c89afc9acd290e84708e50b467ad863c9865b5e5b9819077fe8f352a4a49b908f8160490feee5270f376b41e9a83f98ead2c884dc696ccd1f039e087cb1d3703dce21c2078972130d6a7a08610f285e2c911f6db9794a52147239a1390c2908c5ed5c6d80bb2c2e589eef4ed47e93958c2056381b19c117a201df005d5be4a325ad092ee7f69ceab3cb8266535568904c74c3abc3b29c4106f02198dc7c2791acc908689bf99aea8ea994a4e") connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ftruncate(r3, 0x6) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 82.907905] binder_alloc: binder_alloc_mmap_handler: 10932 2000c000-2000e000 already mapped failed -16 [ 82.913275] QAT: Invalid ioctl [ 82.972467] kernel msg: ebtables bug: please report to author: Wrong len argument [ 82.989375] binder: 10932:10939 transaction failed 29189/-22, size 0-0 line 2848 [ 83.004759] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 83.039104] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.045512] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.051056] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:55:01 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000015c0)=0x0) r3 = getuid() getgroups(0xa, &(0x7f0000001600)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0]) r8 = getpid() getresuid(&(0x7f0000001640), &(0x7f0000001680)=0x0, &(0x7f00000016c0)=0x0) stat(&(0x7f0000001700)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = getuid() sendmmsg$unix(r1, &(0x7f0000002240)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="c74e8d82cb9004eba18d225066aa88828cdd19c28c984b4b000d205291c27eb465cd4e50028b82cd7deb36828cf097ad04eb6f496147f9c742b41218680cd527828536dd037e16ce337ee5cfff9d5700c84b741c2ad61ccf154a7cee355aff3489d65eb066dd453dd438bac7b7690cf6d1754e4bda8743", 0x77}, {&(0x7f0000001300)="50554807beaf9b06341385403674e72a0122dcb0b3479cd364984db96d8835cd5fdbe104d5fa738c543d69b2b1619432adac034182534cd2684fb32549b8a64643f7b3b757d26dfa5b8e4b6b3a85ffb327996537930da41bfb3c00763dd3d25fca90840c622afbfa4aece4871d8960b839ae866205c5d02cd098322fdbaf126f63dcde63d0ff9a9f596dfb8914d387c6dd6108a8cdd2fcef5ee2d2732cae551381", 0xa1}, {&(0x7f00000013c0)="7da1e46906f31af7c0cf68234c527e8db58de298aa02816619c92287ab2bbd5a0d843d772a5d8b7628f690aa7f9374152adc1b7a7ef41862d065b81bd1f3192edf5fcab189f48838e5fcf8dbbe98fca20668420d8d68df", 0x57}, {&(0x7f0000001440)="e1981584b73ceff2cce1a3fdf5e1f5b7df7b3631786a58ba40294e98b2bee38920d34828f5bbfe92dace8eb00c17308748834e4da941edaddd9d057f29faad762e8bdbb9a4bc3f23ce2d045d3d9b2e2bf527e2f8237db40f825aa5", 0x5b}, {&(0x7f00000014c0)="5bd86b294e1972d039982d58ad9ecccc131995e672174634cd20c14b54a88270111277d2e65460c80b79ed64d328d1b653ffd4ded868a6c9b7063bc8d5f253149401a2d00ea7174568779ee960c3f035b7634e6cad34d8", 0x57}], 0x6, &(0x7f00000017c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r11}], 0xecddaccfdc1c2486, 0x12e420b71271a2ac}, {&(0x7f0000001800)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002340)=[{&(0x7f0000001880)="a7dadcb9e1d7ddae1600bb39c8df8979e58e6d3e433db1a7beea4490", 0x1c}, {&(0x7f00000018c0)="8f67abd3ce90c2629fee07c60dc4ba9ce9da97d924294207a3179899c9977747ad1126dcddda608abb6c6014736b73a92fc4ff79ac8976b56e6cc8324d6b8572bf1e60dad5dc9c0fe011791b94adea4b75f48102641acc861e1c3f772116d2f5bbbfe1fdbf", 0x65}, {&(0x7f0000001940)="c3d86718010ccb4cfc41b1a590216a79488d851fab9d7d6f5e0d36d04de160003c27d0c1cfb0aa9f0aab8e7bbe2c352da1223f0dff684b5eb6bff9c8b16069efdbdb14cd7c5d2980ab594927a979bf90999b1ed992618a2cbd8af25aa010a36cb32f264e5659472269fadd4340abdeeb11a12a64db474bc121bdd2e84aa99a77e43954934c676ca01b471dc7a95c42d2abfa655a42be15464d1c00a4421ae36639cd5b27525f59bbaf8009e6a0ec3061271abac0fbe03ba319669b648c625d0e3e007f", 0xc3}, {&(0x7f0000001a40)="966c9ddf89ba9f8fbc29354223d1f11750635d3f8ad3c2f45aa1415631a59e419da625c59c0db61398b965bce329396ed6", 0xfffffe47}], 0x4, &(0x7f0000001ac0)=[@rights={0x30, 0x1, 0x1, [r1, r1, r0, r1, r0, r0, r1]}, @rights={0x20, 0x1, 0x1, [r1, r0, r0, r1]}, @rights={0x20, 0x1, 0x1, [r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r12, r5}, @cred={0x20, 0x1, 0x2, r2, r10, r7}], 0xb0, 0x40440c1}, {&(0x7f0000001b80)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001f80)=[{&(0x7f0000001c00)="bfd5022c2d9be1bff023456cb367ec2bf97c03366a0d001a1620fe540b1a2dde1528ea060baba09e0963a34c25b93f05c1465466cbfb829c0363d2f218d02335787463b43f5f140bfabd2a0743782e3f85f967b61c25d122", 0x58}, {&(0x7f0000001c80)="957b489e0113f13ad1ac511942e7b970622f339edef2fdef8fe2d2710cb52d47e185a35a1b05abeaf04632912f299eb1dd", 0x31}, {&(0x7f0000001cc0)="5c9d452da2073280305670c2b89e1ce658f70c5eaec8942931f41edf28bfba6da20504db37a2cbadadc54b10198dcd0344c9ac3a035dd640f3954eed394cbf639fccea3053b0a758a07dc969ec653b138536b929da318061d5d2589524123d4875c121f491ae621fb9c6d32a63ca27d0354e6d0d83a6ed3e5edb919a467cfaae25b04f98ccd56a788c51a1b8b8d5a6d6a243c740c7f96060ebb95a643dc978139bb3c9fceeba4c9038682b906404b3f0916c6f2b109cae", 0x394}, {&(0x7f0000001d80)="657d7946a47dd104e1c460dd4fabff0181d2dde208d3a2ba5c67941945cf23bd401940c3dbf2bd1b4afb794c7c90c298675fe75db37c139ad7ac4e2542ef3c8d208dbe13e8cdb5048236c06be5d082d6aa96c4023e4027c59b9dc404d49e9f1d0fdf2a61475a451c9a1add4fc619f786717ff1a11d1a5caff836a979784072d3736159c62d26866901acd57371336a80b7af5192c7665405b4d657993c69b61b510f8ba7f85da86378846d4a98efcc50f0fc9ea4083e8ddee4309172d3d7b4acac7f86228a72e19b5fd8af4f16af37175693dbf58e4f407a3ac4891e0ea3f385365d0a34f29719b66505f7b45c", 0xed}, {&(0x7f0000002380)="77d038db801bc6f0a8f025ccc19004b4562cfca8d5d43ac516ce2d4768a45b7fd8d20c47b5910801d693f9303b47bf306e59a06f84445e8f0fe59c8dfe5ca0d063097d47e1c171f6234fbba9ecb675108309fa50ba4d27f94fd648", 0x37}, {&(0x7f0000001ec0)="e656e39750b0dd24d757393e18e60cebf95f246352873b633670c28baad835539f99f2a38b0debbe2a24f19106019ed93afaaa241f253097e1a554ef0a81b8550521972cbaf0c370400c11c0dd90f846308c54affc1733396e2aef53d150b83ba1f626395c4bb17e88a1a83a4bd181a16fac97c5baa4c49aa956612f5c7ec3f24ae1785fccbc990c8b13c829c4de", 0x8e}], 0x6, &(0x7f0000002000), 0x58, 0x800}, {&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000002180)=[{&(0x7f0000002100)="6f6f051d4f6f8edf2935be560ad0655dedbd643bb2c900b67b24b0be7b29575f72fca47013a3dbb1ed56e2b95a259476b8426ec23d4ef56d70ce82099883792acbc9255e7e56261ddc", 0x49}], 0x1, &(0x7f0000002400)=[@cred={0x20, 0x1, 0x2, r8, r3, r4}, @cred={0x20, 0x1, 0x2, r8, r3}, @cred={0x20, 0x1, 0x2, r8, r10, r6}, @cred={0x20, 0x1, 0x2, r8, r9, r7}], 0x80, 0x4000000}], 0x4, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) r13 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r14 = getpgid(0x0) perf_event_open(&(0x7f0000000140)={0x0, 0x70, 0x0, 0xfff, 0x4, 0x0, 0x0, 0x2, 0x20000, 0x5, 0x10000, 0x0, 0xa5, 0x1, 0xfffffffffffffffb, 0x6, 0x2, 0xd1f, 0x2, 0x2, 0x3, 0x2, 0x64f, 0x7, 0x6, 0x0, 0x7fff, 0x7fffffff, 0x1ff, 0x80000000, 0x1000, 0x7, 0x80000001, 0x0, 0x0, 0x4, 0x8fe, 0x3, 0x0, 0x2, 0x7, @perf_bp={&(0x7f0000000100), 0xa}, 0x2600, 0x10000, 0x2bb7729d, 0x7, 0x7, 0x5, 0x6}, r14, 0x2, r13, 0x2) connect(r0, &(0x7f0000000000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x80) 2018/03/30 07:55:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) ioctl(r0, 0xbd47, &(0x7f0000000100)="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") r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x4572aae7500a3c4e) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x0, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) connect$pppoe(r3, &(0x7f0000000040)={0x18, 0x0, {0x4, @empty, 'erspan0\x00'}}, 0x1e) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) sendto(r5, &(0x7f0000000200)="93c64bc3feb7e79128de942f9e6e2abe49552361b6d6be46b5c19a07dbe549ac6d365a0547ca3c22fc673ee0d4c63c316b837e694d47019848e3962c223abd8f6c9debd7e9d35de8dc38da47e8abc998e6b8dfb584c562388f181b31d9f046abf497787906679ab4366dbd0cba857ff39526388e17ab7dc59daf57725ce81eee8dd58550e9a4d504c2c061f4a915bb1f74b536556ca586d2", 0x98, 0x4000000, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0xfffffffffffff001}, &(0x7f00000001c0)=0x86) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) ioctl$KVM_GET_DIRTY_LOG(r3, 0x4010ae42, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000ffb000/0x2000)=nil}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) fcntl$getown(r2, 0x9) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000200)={0x3, 0x4, 0xf60, {0x0, 0x989680}, 0xfff, 0x1000}) 2018/03/30 07:55:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348000000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:01 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) setns(r0, 0x40000000) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) r4 = perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x40000000, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) sendfile(r2, r5, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x354, &(0x7f0000000000), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0xc}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:01 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x1, 0x8000) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ioctl$DRM_IOCTL_GET_MAP(r3, 0xc0286404, &(0x7f0000000040)={&(0x7f0000ffb000/0x3000)=nil, 0x1, 0x5, 0xc0, &(0x7f0000ffc000/0x1000)=nil, 0x1000000}) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:01 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r6, 0x84, 0x8, &(0x7f0000000240), &(0x7f0000000280)=0x4) 2018/03/30 07:55:01 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x0, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 83.143977] binder: 10988:10989 unknown command 4743953 [ 83.151469] kernel msg: ebtables bug: please report to author: Wrong len argument [ 83.162706] binder: 10988:10989 ioctl c0306201 20000340 returned -22 [ 83.170612] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 83.181420] binder: BINDER_SET_CONTEXT_MGR already set [ 83.188086] binder: 10988:10993 ioctl 40046207 0 returned -16 2018/03/30 07:55:01 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000065fc8)={&(0x7f0000d4eff4)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000a1cfe0)=ANY=[@ANYBLOB="14000000070a01000000000c0000000000000000"], 0x14}, 0x1}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:01 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 83.227007] binder_alloc: 10988: binder_alloc_buf, no vma [ 83.232837] binder: 10988:10989 transaction failed 29189/-3, size 0-0 line 2963 [ 83.255908] binder: 10988:10993 unknown command 4743953 2018/03/30 07:55:01 executing program 6: alarm(0x6) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000e1f70011f0000000000000c751c428d28277490ad423215b0e17186628de7317482abb3cde3f57781049eb5a50058d0bfd91ed4db9fcf2f0c2ee37550945b9673ae31839685accabe4c973777d9de2f80e5216d94b94e0da132f63e131159002b4302e2a73326d21083aed2aed25b8b4552605e90c235ad95e7b4a5e9bf57c67dca87877bd2eae23008823718250c008055955470e51729b945676ee7f7b88c545632a319830846c"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) accept4$unix(r4, &(0x7f0000000280), &(0x7f0000000300)=0x6e, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) syz_emit_ethernet(0x7c, &(0x7f00000001c0)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @random="eaa6ae19eca2", [{[{0x9100, 0xfffffffffffffff8, 0x3ff}], {0x8100, 0x81, 0x73, 0x2}}], {@llc_tr={0x11, {@llc={0x4, 0xaa, "02cb", "bb39afc953724c7006e9daab8a7b1afd017e371cb419622ae20ea4ccbe386391ed024bdc0b8c1c77c36cb6e545212ed3c1039013fb356ede93c7604322fd23946e9663d015dfb55e56e05695a48bba38907cce8b1f1991d971733b7e38aaa8ec2606"}}}}}, &(0x7f0000000140)={0x1, 0x2, [0x7f7, 0x156, 0xcee, 0x992]}) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x4, 0x20000) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) sendfile(r2, r5, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x48000, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 83.273534] kernel msg: ebtables bug: please report to author: Wrong len argument [ 83.277637] binder: 10988:10993 ioctl c0306201 20000340 returned -22 2018/03/30 07:55:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) 2018/03/30 07:55:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) 2018/03/30 07:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) r4 = socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xbe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r6 = getpgid(0x0) r7 = syz_open_procfs(r6, &(0x7f00000002c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513") setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32], 0x1) r8 = request_key(&(0x7f00000003c0)='trusted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000540)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798007439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a36dca30d55e4fda59435fe1fd4262d165a6ccb3f75372e1842ce015e10aad2f3479389f8ec7abe08a38776073709fb20b39b17e9fec21147cdd6390442436826385cb97f04dadc3393024b97b203b3e121d3c67c593ee9f0787a405a1d3ec1935bee8a24cb2123e4a0b98b88796b1311ea4c0dc94e61fcf4a1090f4c360818abd0dd134ae391fe99cf200991798d0cc90367c4ee08ae49075dd74dad19937e51e0812cefa80333d3ad38d5cf07a63513", 0xffffffffffffffff) keyctl$invalidate(0x15, r8) ioctl$EVIOCGVERSION(r4, 0x80044501, &(0x7f00000000c0)=""/54) setsockopt$netrom_NETROM_T2(r7, 0x103, 0x2, &(0x7f0000000440)=0x20, 0x4) ioctl$DRM_IOCTL_RES_CTX(r7, 0xc0c0583b, &(0x7f0000000080)={0x0, &(0x7f0000000040)}) getsockopt$EBT_SO_GET_ENTRIES(r7, 0x0, 0x81, &(0x7f0000000480)={'broute\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, 0x0, 0xcf, [], 0x1, &(0x7f0000000500)=[{}], &(0x7f0000000640)=""/207}, &(0x7f0000000280)=0x78) getsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000001d80)={@empty, @remote, 0x0}, &(0x7f0000001dc0)=0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001e00)={'teql0\x00', r9}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x10242, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r10, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0x7, 0x4) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) 2018/03/30 07:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r4 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 83.332212] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.341192] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 83.346682] binder: release 10988:10989 transaction 414 out, still active [ 83.354603] binder: undelivered TRANSACTION_COMPLETE [ 83.359803] binder: send failed reply for transaction 414, target dead 2018/03/30 07:55:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x101000, 0x0) sendmsg$kcm(r1, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f00000000c0)=[{0x10, 0x111, 0x0, "89a89197152997f037251335f540a44cb5c9f1eb2395a8cb31ff498c374443ebb3c5d77686a6a2060c3a62"}], 0xfffffffffffffef3, 0x2}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000140)=0x9, 0x4) 2018/03/30 07:55:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) r2 = getpgid(0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = fcntl$getown(r0, 0x9) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r9 = getegid() r10 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r10, &(0x7f00000006c0)={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmmsg$unix(r0, &(0x7f0000000640)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000180)="0782e8fc02", 0x5}, {&(0x7f00000001c0)="7b13c10840f58dad1c62e3dcc3834ddb7a5e2f", 0x13}], 0x2, &(0x7f00000003c0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r7, r9}, @rights={0x18, 0x1, 0x1, [r1, r0]}], 0x58, 0x4000}, {&(0x7f0000000440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000580)=[{&(0x7f00000004c0)="e8d3be86a5a1660d2a587a21e60b5be1327a06378a29da93a676135702f6fdd9bb92a6db11fe825338a2c6d45b15845d642127da497f273ba03dc0dc1bb5fd7653a07c502adc0ffd23118310b6bc30b4439330f7c7cfefc5962c252ede9a838ccf98bc186765eee2c8f2042a80b1dee6331351fb41855b1cd0103d890da848030c2083b6d96c0713b73939c27e162ccd6adc0cdd25e14b8fb00bd952552795c46a789c89876ac85e511e415a5f54ba273ef6f68e4d661911dae1573257e03f", 0xbf}], 0x1, &(0x7f00000005c0)=[@cred={0x20, 0x1, 0x2, r6, r3, r8}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r0, r1, r1, r0, r0]}], 0x68, 0x41}], 0x2, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) sysfs$3(0x3) [ 83.404694] binder: 11030:11031 got new transaction with bad transaction stack, transaction 417 has target 11030:0 [ 83.415440] binder: 11030:11031 transaction failed 29201/-71, size 0-0 line 2875 [ 83.515653] binder: BINDER_SET_CONTEXT_MGR already set [ 83.538907] binder: 11030:11053 ioctl 40046207 0 returned -16 [ 83.551460] binder_alloc: 11030: binder_alloc_buf, no vma [ 83.557332] binder: 11030:11031 transaction failed 29189/-3, size 0-0 line 2963 [ 83.557741] binder_alloc: 11030: binder_alloc_buf, no vma [ 83.570676] binder: 11030:11053 transaction failed 29189/-3, size 0-0 line 2963 [ 83.576973] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.583694] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.591901] binder: release 11030:11031 transaction 417 out, still active [ 83.598879] binder: undelivered TRANSACTION_COMPLETE [ 83.604228] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 07:55:02 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$PIO_CMAP(r3, 0x4b71, &(0x7f0000000200)={0x3ff, 0x6, 0x2240, 0x2, 0xcf}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000240)={r4, @in={{0x2, 0x4e22, @rand_addr=0xffffffffffff7fff}}}, 0x84) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) 2018/03/30 07:55:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="10040000000000000000000000080000353d1eefd24f860d2c1f04b682a3c09508b738265d9152b80739c9d6ababd4e4c0937280d5b7fe0f6811ebdd17bbc74212e09eeda0"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x2000, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0xb, &(0x7f0000000100), 0x4) 2018/03/30 07:55:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r0, 0x4, 0x6800) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) pivot_root(&(0x7f0000000200)='./file0\x00', &(0x7f00000001c0)='./file0\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x105000, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, &(0x7f0000000180)='&.&md5sumself\x00') r3 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) fdatasync(r0) bind(0xffffffffffffffff, &(0x7f0000000240)=@in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x35b) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000100)) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6d7bc493, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x81ec, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) poll(&(0x7f0000000040)=[{r0, 0x200}, {r3, 0x1000}, {r3, 0x2000}], 0x3, 0x2) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:02 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f0000000100)=0x6, 0x2) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11634840ea050d2e0816a2260b8922c601d497aecf874887d0cc587150b5b9fa71383e", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) [ 83.609719] binder: send failed reply for transaction 417, target dead [ 83.658812] binder: 11070:11071 got transaction to invalid handle [ 83.665156] binder: 11070:11071 transaction failed 29201/-22, size 0-0 line 2848 [ 83.665789] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:55:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x110, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=[{0x0, 0x10d, 0xffff, "32aaa73f5a0abf3e279d786275948823cdb192d899c000c10d03f2c48d37d9c13774a26766cf38e09217fb14b41d5d57b6746ecc22a26b91a5066cda1145a17ce42d8de192fdc8896a298f3000f2cfdf4c17c3f9279b3874b9fda5fc4b82f8c80af86f2a132d816c63a984890dbcb6adeded2dc8cf9e0671e4fdf04e2aba9b4ae1a3f01d26455a5418ff23c4dead4e68da2d9f8b9a381d96a4e45cbc87f879275eb39a97716e74aceee4142fb06b773cf44d349cf160203ef4f0065b22edf3ce5081d11f24adce70e76c8d437ab6fcde9f56bfdaee42f9f2210ad9c70179097b489293b18edcb6e42ebd7b975bfb663e4cf667ff"}, {0x0, 0x104, 0x5, "77118e0c8529c9c010f4b964a68fb05670b2a8b0d9dbbcd05cbff06c5211aacf979c201788c314f0e2434a0f3374c7158e7427a212cb91f03b454b1dded3fa"}, {0x0, 0x114, 0x82, "80928a10f79ba9ce490d7c42b6798334ee9ca01ecfd44da898d1383a59a1f3cd37bd4635e93f3735bd9f807f15cd1939bbcf91e5f9b3099947ee845cef5d2a05f0390150da8894922417c342c6443a45b7e003c69f28df95357ac7ee174f0b17dc67f0d28c2a0fa465acf15d4c52a3dc8912542004001a9156fbf5cb0f7a90c2a6e537469dd512c07fa6078037064e0b92b56df3c28198a5ce"}, {0x0, 0x10a, 0x7, "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"}]}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000180)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) read(r0, &(0x7f0000000040)=""/68, 0x44) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) listen(r2, 0x1) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) [ 83.713982] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 83.770234] binder: BINDER_SET_CONTEXT_MGR already set [ 83.777933] binder: 11070:11071 got transaction to invalid handle [ 83.784312] binder: 11070:11071 transaction failed 29201/-22, size 0-0 line 2848 [ 83.804689] binder_alloc: 11070: binder_alloc_buf, no vma [ 83.804859] binder: 11070:11083 ioctl 40046207 0 returned -16 2018/03/30 07:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r0, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) ioctl$sock_inet_SIOCDARP(r5, 0x8953, &(0x7f0000000200)={{0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x8, {0x2, 0x4e22, @multicast2=0xe0000002}, 'ipddp0\x00'}) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) ioctl$KVM_ASSIGN_DEV_IRQ(r6, 0x4040ae70, &(0x7f0000000040)={0x2, 0x5, 0x1f, 0x1}) 2018/03/30 07:55:02 executing program 0: openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1000000000c29bb16c110123071b599fd0b38666313cbe0000000000"], 0x10}, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f00002b8ff6), 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'ip6_vti0\x00'}) r4 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077c32cf6d22b4c4f8d", 0x0) ftruncate(r3, 0x40001) fchdir(0xffffffffffffffff) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x40, 0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="1d000000e62c9849247e754f41033a87018006d614e046af0096920e0000000000"], &(0x7f00000001c0)=0x25) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000003c0)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}}, 0x84) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@rand_addr}}, &(0x7f0000000340)=0xe8) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f0000000140)="8c25e2c6a2c3c728253871e02f52006b84fd4b75511e0c8b7064e8cb2d18209efe3234cea80892b69a6d9f45c5d53cf0d826f6c45f6a", 0x36) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000380)=r5) sendfile(r1, r4, &(0x7f000000a000), 0x7ffff) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/autofs\x00', 0x0, 0x0) ioctl$KDSETKEYCODE(r6, 0x4b4d, &(0x7f0000000140)={0x3, 0xd39}) getpgid(r0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r7 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r7, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r7, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x2400, 0x4) syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8, 0x40000) gettid() 2018/03/30 07:55:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x42000) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:02 executing program 6: r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x1, 0x8000) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x6, 0x4002) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0xcb2321c, &(0x7f0000000200)=0x4) getpeername(r1, &(0x7f0000000100)=@ax25, &(0x7f0000000180)=0x80) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x10}, 0x0) fcntl$dupfd(r1, 0x406, r1) ioctl(r1, 0x0, &(0x7f0000000240)="a04e0ba59d51ed2118dd32ecadcc982bea59a7ce8b6b8763c0d4a9fe327e6578ab2a3bd2d8fb2296cf99aca786b734718e69bb6120") r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0xc0184908, &(0x7f0000002000)) getsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000300)={'raw\x00', 0x2, [{}, {}]}, 0x48) 2018/03/30 07:55:02 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000480)) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f000000d000)=[{&(0x7f0000008000)="4c0000001200ff09fffefd956fa283b724a6008000000000000000683540150024001d001fc41180b598bc593ab6821148a730de33a49868c62b2ca654a6613b6aabf35d4c1cbc882b079881", 0x4c}], 0x1}, 0x0) recvmsg(r2, &(0x7f0000000040)={&(0x7f0000001fc0)=ANY=[], 0x0, &(0x7f0000000200), 0x0, &(0x7f0000001640)=""/183, 0xb7}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x9110}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x5, 0x52}, 0x8) readv(r2, &(0x7f0000001b80), 0x0) recvmsg(r2, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001700), 0x0, &(0x7f00000001c0)=""/254, 0xfe}, 0x0) recvmsg(r2, &(0x7f000001cfc8)={&(0x7f0000000080)=@l2, 0x80, &(0x7f0000022fe0)}, 0x0) recvfrom(r2, &(0x7f0000000440)=""/55, 0x34, 0x0, 0x0, 0x0) r4 = inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x1) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) inotify_rm_watch(r1, r4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="116148400000000000a77eee9c65c6cf76b6d26411eab9b7320e08509aba0f24079c33a0bbc71bb25ef19527b1bf7f526a95fbcd33ac881770d90091c580a0f13708becb02a6f1cbeb7d0e3d1986e5f9b1fe901de8a508e7c282c592638957554e50b235bc20adb23fa0daff2859a94b95a94b54", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000080)=0x8, 0x4) 2018/03/30 07:55:02 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:02 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10440, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000280)={@loopback={0x0, 0x1}, 0x13, r1}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r5 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r5, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x73, &(0x7f0000000180)={r6, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r3, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) sendfile(r2, r2, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r2, 0x4c01) sync() ftruncate(r3, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r7 = dup2(r5, r2) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r4, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r5, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_ADDRFORM(r6, 0x29, 0x1, &(0x7f0000000200)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) [ 83.810483] binder: 11070:11086 transaction failed 29189/-3, size 0-0 line 2963 [ 83.830374] binder: undelivered TRANSACTION_ERROR: 29201 [ 83.835907] binder: undelivered TRANSACTION_ERROR: 29189 [ 83.842222] binder: undelivered TRANSACTION_ERROR: 29201 2018/03/30 07:55:02 executing program 6: r0 = memfd_create(&(0x7f00000000c0)='/dev/ion\x00', 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x80}, @in6={0xa, 0x4e21, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x31dd}, @in={0x2, 0x4e21}], 0x48) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r1, 0xc0184908, &(0x7f0000002000)) [ 83.903162] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:55:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) 2018/03/30 07:55:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="f800000000000000110100000000000043be149da1600cd980d8972c7aca233accf0baaf82de9ff040f1adfbe0f859094514c041002be82f324397cffdc52ba69a234b057795f43d334fdf74222de5906213763065d000ea8d4150c9333e85b7da4c8d3cded342517073f5ec8eaaf3f738baf285f69ea70e6ac0c20b7f346b62ad5d30050a23472bf7416f2134882ad2523af3f4a4fe436a0738a552702cd7a682dcfdaa4f27f60000000003ad3284ba1771ab1b6781d48ee1c1607fd75433304b1e1281be3279c1404ca9fbeb4e587c36380e5c0b407e68fa9c1c55beda7905d04049561eb86721d3c86c1d22ca679cd39de7236075dc61"], 0xf8}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x101, @mcast2={0xff, 0x2, [], 0x1}, 0xf04}}, [0x7f, 0x101, 0x5, 0x2, 0xc9e3, 0x5, 0xde, 0x1, 0x8, 0xffffffffb91a29a9, 0x80, 0x7ff, 0x69, 0xffffffffffffff7f]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000280)={r2}, &(0x7f00000002c0)=0x8) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:02 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 83.946803] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc 2018/03/30 07:55:02 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @remote}, &(0x7f0000000140)=0xc) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000180)=0x0) sched_setattr(r3, &(0x7f00000001c0)={0x30, 0x1, 0x1, 0x6, 0x0, 0x1f, 0x100, 0x2}, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x101000, 0x0) getsockopt(r5, 0x8, 0x7, &(0x7f0000000200), &(0x7f0000000240)) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f000000e000)={&(0x7f0000000380)=ANY=[@ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYPTR64=&(0x7f0000000340)=ANY=[@ANYRES32=r2], @ANYPTR=&(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYRES64=r0, @ANYBLOB="da3ebd11d985c4f70bf45f6918d804754bfa11c121cfe667cac5cc828b757d598726ef39fa9e94e80ab6c9796e53d263961b11250143707a55d155ab36982b280f6e645e75ee6e719d1cf6437232783a589ea0e9afdd372bd0cde743d3a9304c5f51913a4589a6b2b6ab1b0aa1cc318b0f6a529a872a8daeafff2f54bbe7da0aa88dce5023413812cbb107fc18cfb91e0d55fbbd3708da3536190ceb9c80f6ceeef1285dbc5dcf042cdf971f521c58a0e38c2549946ad9abda1075ec3395eff69c1eac5c55d55238603ca4be73925d049f01f2dc618cbd8ef2a8dfa2a30ecbe7a526225fe4ef542c0f8e70dc3fe7e9fc8b5b45abb6c618765105838f8fbdf8fc3d7db93319d4a50251ca3f574b227ee6b076e1d3619fe39dfe9f7297737ec205dbb7c049a10a119102be16ec6251a4feb650bdcbf291b21dc0175b02abb1183b8bc824053204cc788d6e94e6433176f0d7a7a3f2c11f4470fca1bf7d3c89dadb321e3d52779bc015ce01e35c365e22e8e235e27bb592ab4a7e24dd2bab8ed58989070d974ecb08562d58cb325697187d2f3e1c35e88a69214553e574692d75a54d5f2c16a898530f8ab3a1f21d31f8b6374aa1826400eabcd5e15c029a076d7c3dbd7949fb5dd02c6df871567f73005bc785030dc0a064d1d5d8d60a2b4a9e1ab779a1cf935c05472d405888af9ea0d433ca0838463d529ade7600d6b11b693d93bbd47eab71597df7a6c09f781ebe61722d1682cbccb5ef11e905449ca444ba3bdc81fb3407739df0cabc307ab64ee365793abcf4b85f7f8c29c6a969ba562d21b1276a4046af4d4966cd1ba45c3f9c468b1018b1a3e222fe3833c01b1e24502f95b87d78861650655c0ad75540fe25d643e05f225e028bda9a836ed2b4b8aa0ed16fdc19497bb600489e4b7e7ef16ba49b2c0fdbbe465e27830402ca82c027eb949d922356fb063d3b9657a6e167cd44ee48dcf4e0c423dc71f6749b4e7d5808c985e70b0ab3a167f0ecfececc927ce690570174890c802c9d4c2d3e5a7da9e896d6274ff9b32f83dcd5efd9e569ac6fb236d8d86e923b60392cf509a66d8fc55c27c59616417f79759552f30abc4dc9b80569e9851c348e6c93f43567155a801e8a6b571e05152bb5a878d7faa8e3bc2eb8e287f1966645cf6d603f459df30a87d91eac48e46e0dfc06069053b7e189665dde3159bd0152cdf55dd89c587d1a00bf2aec57a633ed3d8f7ee29904d4c710681a1d5b2314efd7f47d561746dadc978d826a33ef0549f187e6bf77b26ffbcc9d616dcb663bce5c4b4afd96b97d34c8a15f13a737d3ccbc6a4833407397cf8f875fb168c7f8a7fcb9d3e180bc9aec8241c077b4f59224bfcd2dd3be365f8dea443a79b75532c6451c978ca4551b83f427a6cd7de039d8f7cfa3c456d8ace705cbbeb1b91af88368503e1d4f8ab60b9bc9de712b7d1cee012c4a26025da5da67de8cc681d21761d67830596086f90a430101c6bab28a2c00c3136736c2dde0842c4b0cbcefdaee02bfd3c37614605d5dfe4c3e8d39c4a79e581dffdf19d1bd12c0205cfee3c3e50ed3b721f9904a9d5de5084f8bd7b5a8136d6d7c97fecbaa30828bf7a246b71cf2822c22275440b1480c9c2291f913dfac086e34a5fbab531753823ac9b37c2e109af1a115a4d3202237dda81d18b0a29b78efa63c33000945e15202f6ca350b007c85665891a22c870dffe5c8b82d55b2d40e14e0a693decde1631e7a40d02ca82ea0e18b684530fcc75d84f56d567b65909a167e10fab7af03036513db07bddcfa9a25857dc3418597ef14adbf58341ac0f71f841dcfa45477bebe354f598ee576c898a35a656e5f4ee9967a233a084dd447fcecdc6d896145768bd23ade27792d016de4dfab73b6ab7c44bfeb73b7c3f298b92c2283139336d6bad1c899fed49361c36c6fdf2de5d856369e7e5c387b61c6c2dd465a03a2c6ce8d6bbf66213b07a2d591f27eea349bdaa9fcb7716cc46b5926cb0a106f6a2b948eb8f73fe34d0c47b4d19805332d36ffca1f38c17934162b4458f62e3a7e006837661e6b7e97f9518cffba4d00c96fcea9a929b7739b7e5f1f6b2d59b395a22b5b09dda80449302b265aba822a6b4f4c970e7f89c2b38fed1794fa6311cd5e3529eb303cb3c6af8e31cffc44c3580e17aa9ce7a8c427252ddb991c4c53c8e44957dca66754ededa177dc1f0a51e615ef73b4c774195c124986cf02e850b39ac8a1ecace97f24e561ec52085f62b10812f36b0c13d5f71cf2574591c7b13f745d355fb86fdb07020fe843e32e1fdd72a70237eeb79b2a1eba63201249460c719fd809b6df33b1abbb2749d6509d05a48d8840f6eb66e54e6fd8986ed203177fa79699d7a6742c982ecf3b2c676d6db66921c77d9fdd3c6a0b27cea25618f34d92feaee21dcf4dec3724d5a2948b1f864ff40e1bc67feb0576e88aca657d82546670ef6145aaf5c8a18673acdfa2c031c4bc541dbd540db864d022050e9a7eed8a154a8bad995ca53003bc681b8649ab0752429bd2d82bb556cb64cf0689a5aa110d75d1f3a840ad8b866c3b49d461c8c9121009fb1a29fc01821d6ffdd733493369b384f31c47fcf4d5ef1433e518111ebd0e43274f10bffbe0fc4dbf0f66b46d26ce72caf0d0914278d509d24c482e890bf4b7ec899bff219405138882979b31dc51917d9d11f2b75dbe8580a995f60819fb43be2d07f9a8a703b660b2e37b2f60c31e1e6594e6bc53b844e189ae93c467820c8e6a66c4515bf1bf3ffba443713bea617b73719d2d7896add03cf14a83317d0a1b983013af146b2fa63652ee14bbb3743c02878dda07da09b49a195dfe632861ce0a154eef6d91831b49cd54c07db493000a61546c366927393bd07eb8aa4d0b04e2af88e988f9eaa39987b2e26d71ae1a6ad17c425585b2cfcff97354bb372c458f27a0ccf7b3c6efde768c23d3efb80e454b55225c3ca09a68277fe042e83c46a7ac351389cf532601434d3a0aee4bf6eeff9ef0cbdd4111171e7d5f0a0d7637f215fd6cdb94225d9a30918666b15c0bda763d76fdb30f646e97860fe5a4c6aad9b05b788660a6d634435d97f5c6e5c2e31269e5fbaf631812bbf66e9a6dd6f41581873e02e47ff521fd0cc8231ff1e8966c76ac953f1fde1d6d4b46a82aa1fca5922b014d8ae0f3dcad90228ce75c3ecd44eb3af8ebbccdabdae07754b19fdb2150f6667376ac0ccb1ac0f4973bced5faa2441e2a99f9f18800377588fa53713d756d7c3ad9c0402c89627d668d6bda51cfe7acbe2b8e76c220d7a6f188382e056f4765cd1fea2f522460e3431d7cd63a57c8273fa39368af103b4978f0ad0d1bfdaf2644624b3a1956b2952acd96d6a34ddc38cff2ebd96fad4aa07da5c02322a35569559ae3cab6c2308bd4dc011e789fa184d917def7be63faa3966fad7635d678c0946db0e798b7cbf0c26a98e3f2d6a430689b948bee45621aa638ed35d2a30e49e1486e737fc7281c3d0d37c7c4a7c4ff130bb7cb3d4f8718bdda0c7b83958d0ab2a8c7a276b99e289739a73f0e974a89bfd30b8988d2b6aa1ed0a68945c7ec933eae4b6fb02609413a72d00470080c4a1eb75835bb5fde2876a4ca393cbff4a010e9d9f495cc71735fe975c7e3dba2e513e7a9fc31760c94fa71a9030b657efb18eed1c4c9b134925965c53ab5934a4f3fd7d48448b022c40ca5eb87ec894636b8c3bfdc3603d1b9fe0cf1b76f7069e6906c9b870b970f5ce336d278862b366532ba9584612190b7122bc02bf49fe6abee076ab3c42916ecc301219046186b98389f07bd6e4a86ce934f7ef2c28af9d4fc3507190e17980ed8ffb0408f27e92e00bbc195ce3c806c08f12edb347194d92622598691fd26322ab3442adcc1139f94366851fccfd5edca1ae6e6f2c10c8bbdc20d353afdc884cc5de480ef6910d1e966aa3fcde669ab7004928a9caface842a2c75d2aa695a4af1166e586f7460e2f9ead7933c8270248688c60a5b26c89df30c7f662e112199d01e61b5a0fdcef70f3db86aac299997b57af7648f7a076e6d5bb7d9fa9288944f841e68aacf9bec6ece4a09f09a4baffda7be62a30a870cfb1b448dc6d7959b3517e2e2cdceda3bf50acc7106e1476ea4e1124476dd8f590c03057a438c8813f4a5ac59a3c04b3cad937bdd7240d5a093fd85ce70f40ab3ccb08b6cea994ffbe405d9aef72b13e3648702070c1adc3dc6fd6548d6b5fb920eb95314219ddfd12c914517f8adae9730aed1048c288fb0e2cd2bcc97d46edb6732d27b5f7736c5d77911cbd6a81a1f96ea9a6ed06ed8bee6540d656949a786c7ef198842f000fe35d39652daaf88e31b115462453c3d2b1e7d82a8c4af75a1ae66aeac8bbe0e5dc54e310f633bd1e32a7d23eaf000aaa534440f4b3a4999cc37b7d6459616cb76922e0f53d358ade2532446ca3a9eb63fc14fdb1ef97f718751e229fff7d321b5fc914b7a51ed1b859a8a64a144de0d94329196209cfc1008b694dde3e1d020ee893521c89c669f0e46284f908d9cb21e605840f58e58c438a9f5e806dfae819fff5c7c4e52e45f86efba73fba9f63920caff8cc0b595841aad1cf7bb87f1d90f9aee75c7fc4d09173b56ff653d2d1ef29d2f409f06635c9f0debdb1395fae4bfc30bc18d435167e8dbd309b723cc507bcdc6953a7b63f7ed70187b8be8614c68a9ea5d0fd40c29a342e13c0d5059c090112396dd6c1831fb18b37a7444b85ed85f511b4eca0e98b90833867ba9ea9abffc33bd5d103bf7be040dc0d3b7784d70837c42f5ec37583026dbb4b4ac30cdcbcfcac7da4ea1dcd80ed906f12384d9a7463fa83a835a626b62298556827807a83eb2ab96a11a8b0e8219f082c27677dda29457371e6bf31f466f0f8a0d7b77e65970a9a142a3c4fc69fdf24a33162101a28ec0ebc52a352306e40fd8911b5e8f47adbf1f58d9e14aa234484ac34f916e48add25a8f8fc17925799dfe9ccf608df0ad22fca58b96151a40d142f1b54113983978f46f51900a2289b95d646b9b78bd48ca42715e052499574fe45063b84481a7659c558f476c64722f7796b49f03560f3323b5cfae385c96056dab302aed21564b9f7b0aaf72a9e9b8069cc46941957b1da32338da0ffbeabed5e2e0b072290dff94052a4b8e98ae6ca132802733c490e1bc4f83ce201f406407a4bd3f03af562d9279d784e7e9634b5c2d50afe814d8e87cda08fc10c210d6111490c5dcf67fb21ec282fdb57bb604e0937d1bac21a1ef8170a8282ad72cb49590d8f20a0468d48cf9f0862820a0b83ce8e945f2517d9dba6b36b1971520e3f7bbc2d14b208328010c646f8bd516e58d28d0d3c40fdece7f56af88881df35d7fcebdbde9c31275cf533499ec4d69e15edfa3d3b16bd93f075d239a49f01a80890be60b9ac539972d26c0d4f4ef1d42f9ea898473440e681b21d999f4895c3da7797fb439f1dbd72f60cee6e98f5bfb429aba22c81c71e541f2d7a9bd5e850d4df181843c5d670860f48b11b5e2f591d292435c7e38ce387b080d17bb97042a45028ef8d12e1190b5b8692701014b5dc451754d4037463389babbd29d9b53d780048c390f492027a27b62c20454588c8ffbaf40c200b3dcd24aba3101b34c89bc68e0ed9f2864a7cbb8d8d85f069bd150d66e94b1d4cc33232ec6c894f12791ebc1b2909c21f9a82104dda223c09a77767fb36b100dcc19d91b9772f1a5c599b7f390be76585715ecdb49cedef71d8d6afb3694176a6cb3c8632830f3da4fa41", @ANYPTR, @ANYBLOB="02cc4f4319246912e0ff321945a6543488458eff7181b8739276816397bf7cd211668f7aaf352bf6e175ada76e9fda4d724c87cbb06d3f12a609efcf7dbcdcaf19566549392d1cc3707d271b99cfa418517a979bf09bfbb0d22e9f2365a97de25ae5a8", @ANYRES64=r0, @ANYRES64=r2, @ANYRES64=r1], @ANYBLOB="5468556a183a716bcf8f47c626ea672e5be946a2"], 0x6}, 0x1, 0x0, 0x0, 0xfffffffffffffffd}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r5, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x7c, r7, 0x4, 0x70bd26, 0x25dfdbfb, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10000}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xffffffff}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4b67a330}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3f}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xac9}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x7c}, 0x1}, 0x8000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 84.004225] binder: 11106:11124 unknown command 1078485265 [ 84.043451] binder: 11106:11124 ioctl c0306201 20000340 returned -22 2018/03/30 07:55:02 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000140)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f00000001c0)=r1) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r3 = getpgrp(0xffffffffffffffff) getpgid(r3) r4 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r5, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r6 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$LOOP_CHANGE_FD(r4, 0x4c00, r6) sendfile(r4, r6, &(0x7f00000000c0), 0x102000001) sync_file_range(r4, 0x2, 0x100000001, 0x7) ioctl(r2, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:02 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x9806, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 84.048931] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:55:02 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) dup2(r3, r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) 2018/03/30 07:55:02 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r3, 0x1f) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:02 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000040)='cpuset\x00', 0x2) getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000200)=0xed4e, &(0x7f0000000240)=0x4) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r4 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r4, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000180)={r5, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r4) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r4, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 84.090510] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 84.122517] binder: BINDER_SET_CONTEXT_MGR already set [ 84.159148] binder: 11106:11143 ioctl 40046207 0 returned -16 [ 84.190759] binder_alloc: binder_alloc_mmap_handler: 11106 2000c000-2000e000 already mapped failed -16 [ 84.213387] binder_alloc: 11106: binder_alloc_buf, no vma [ 84.219094] binder: 11106:11124 transaction failed 29189/-3, size 0-0 line 2963 [ 84.258579] binder: 11106:11168 unknown command 1078485265 [ 84.264815] binder: 11106:11168 ioctl c0306201 20000340 returned -22 [ 84.289379] binder: release 11106:11107 transaction 426 out, still active [ 84.296366] binder: undelivered TRANSACTION_COMPLETE [ 84.301520] binder: undelivered TRANSACTION_ERROR: 29189 2018/03/30 07:55:03 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x0, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e09192f0065746c696e6b00") ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000000)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000011f9d)}) sysfs$3(0x3) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x40000008}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000140)=@req={0x200, 0x2049, 0x80000001, 0x3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="10002d82226f7baf0c974e3751110000"], 0x10}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0xa76, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10000003, 0x0, 0x863, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000180)=0x1, 0x4) r4 = dup(r3) setsockopt$nfc_llcp_NFC_LLCP_RW(r4, 0x118, 0x0, &(0x7f00000000c0)=0x7, 0x4) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) ioctl(r0, 0x4000000c0184908, &(0x7f0000000100)) 2018/03/30 07:55:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) 2018/03/30 07:55:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000080)=""/59, 0x2d) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) accept4$unix(r1, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80800) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x6000, 0x0) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1000000082400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000200)=""/174) ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r1, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0xddf, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) [ 84.307048] binder: send failed reply for transaction 426, target dead 2018/03/30 07:55:03 executing program 0: r0 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x3, 0x101002) ioctl$KVM_PPC_GET_PVINFO(r0, 0x4080aea1, &(0x7f0000000280)=""/245) r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000001600)=ANY=[@ANYBLOB="06432950aefb147e8a3176b90a7f6a1f38b2639ce20e4385af8952575009c345b0dd2c6fd18acb870c3830fc6f06e05498fa0e17f92cbe8a47bc30a1525506a68066881d855197197b890539c74d24c8e1e38b4e49887c9a3b15b95774b7e5dadc6285cdf0a149cdb8cff0dbf3d3b508c1", @ANYPTR64, @ANYPTR64=&(0x7f0000000500)=ANY=[@ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB="60ed52c4b60dc79719dc4bd9184870676cd58325ed648ac762d5b46daf169e5fa7beab1e18278148c8ef0af19d76e668878cd40d8cdf1ae58fae06191a049c906e6b018b4daed53959a08afbcc82fb770f23", @ANYBLOB="82bb0f5fec799da49bbc0f1a91f4da82a71430292ccedbf5603dc792df1880dbb064353ae4955dc1fc742473f8ffffb8dff25943bdd1d64e9b18a5ea6a98957c805124abfdc8d6c0441d104a3c7e48cd6a8fe7b5917db05f7e3f11c15ecfd2b4e841e52793671444f88eb3183ec271f3bea4414b873259a6ce9013e7aaca6f5e5dd905f85933dc682e48d9fa964a40fc0a6c910060c33b5f3a4b01c5308a7b54a9ed4a9cde0c101f74b196c95417eca53a8a6c763e1eb6788f262d553daa992804289c45e906ee67c37e8a7c66b809222c6ccf4744d73a74881451655d24c2204a861ec9637f7834e0f7adf97e18c673e8d0cbea1ec0", @ANYBLOB="b13e0958aa2c73faf085e489bd301cd8bcbd70323493871f20bbd1fa9ee6"], @ANYRES64, @ANYRES64=r0, @ANYPTR64=&(0x7f0000000140)=ANY=[@ANYPTR64, @ANYRES16=r0, @ANYPTR], @ANYBLOB="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", @ANYPTR64, @ANYBLOB="54b715", @ANYPTR64], @ANYPTR64=&(0x7f0000001540)=ANY=[@ANYPTR64=&(0x7f0000002040)=ANY=[@ANYRES64, @ANYRES64=r0, @ANYBLOB="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"], @ANYRES32=r1, @ANYBLOB="2d465775e52be5bbf4633c3ff5f3d7374785cef68462ea6325ec90ee90ef792178409fe380e63d0299c6c9cf72c57ac3121c942c46e866ef7c5ea62e5517770fc5e86bd4d767283fbb3d26bd45d7bf10209cb4294519a84a9e708eca92bebd972936554cb302ffd09e499588abdb590000000000000000000000"], @ANYRES16], 0x8b}, 0x0) r2 = getpgrp(0xffffffffffffffff) getpgid(r2) r3 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r4 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r4, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r4, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000001c0)={0x5, 0x7}) ioctl$LOOP_CHANGE_FD(r3, 0x4c00, r5) sendfile(r3, r5, &(0x7f00000000c0), 0x102000001) prctl$setfpexc(0xc, 0x20000) sync_file_range(r3, 0x2, 0x100000001, 0x7) ioctl(r1, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0xfffffffffffffef4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) [ 84.364166] binder: 11173:11188 got new transaction with bad transaction stack, transaction 429 has target 11173:0 [ 84.374772] binder: 11173:11188 transaction failed 29201/-71, size 0-0 line 2875 [ 84.392735] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/03/30 07:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_inet_SIOCSIFPFLAGS(r3, 0x8934, &(0x7f0000000040)={'sit0\x00', 0xffff}) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1000000000000000110100aa551b0c004d30eb7d652883e97a61303ea030d66f1d10c7421819a4b1ef7488ed06d059ac94ea66f88b6d1f8cf5bc11619ed577198be3f35c96615baa9968afa8fc76f8dca74c0584d3c71354662a686d503cdfaa81f6e16585a44eb4e53c82c400003ec71f79d725edef0c293e686d228bd93471e277c87b400f98b159cb2931da3c72181682a2b4be9585"], 0x10, 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x111000, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000002c0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x1, 0x6, 0x8}) 2018/03/30 07:55:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) dup2(r3, r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) 2018/03/30 07:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000040)=0x6, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:03 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x0, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 84.445749] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 84.464628] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/30 07:55:03 executing program 1: socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() dup2(r3, r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) [ 84.509191] binder_alloc: 11173: binder_alloc_buf, no vma [ 84.511438] binder: 11173:11204 ioctl 40046207 0 returned -16 [ 84.514867] binder: 11173:11188 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:55:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="100000000000000011010000000000003cf963b54d8a4642e6db9cafc917bad6641b475596f9d695c6773620ea11a475ca3d7253bbe5238b13386bf9c65126252ed37fc0ebe7802649445c68598b2d5b9a8c2ec216a9497964c353d3fa948e357e96cbfab60d183711041c140206247d44fa740d0e1cca7d9ea824c0c1d4501c23ca2ba1d9debd7d04b0a103c9656749e6794588057110cb85dc2c227eecd0f18470ee9ca54721743ccb588a2ad42b631d31d7a050d1400d04f4c025c7250bd698a9a9aa8184522dc929d9a29770b62be05e7771b84dab2177f8afbe68f081ebf8fe1080f7"], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r5 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r5, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x8, 0x2}) ioctl$DRM_IOCTL_CONTROL(r4, 0x40086414, &(0x7f0000000140)={0x0, 0x3}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r5) sendfile(r2, r5, &(0x7f00000000c0), 0x102000001) syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x521, 0x80) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x200, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@sack_info={0x0, 0x3f, 0x1}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000180)=r3, 0x4) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000340)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f0000000300)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)=0xfffffffffffffffe) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f0000000040)={0x4}) sync() ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000007c0)={0x18, 0x0, &(0x7f0000000680)=[@clear_death={0x400c630f, 0x0, 0x4}, @release={0x40046306, 0x2}], 0xce, 0x0, &(0x7f00000006c0)="1f4ec1532ccb136a73b480791156c9225a68d1b003b31672f0e12be7544d003a16f6d526b31cd0c899cd8af2564c3622884719e4189368e4e4f9e4724f0abeeec0ddd0709f6398877625f75a351e049a0ecc75849c637d6b821b593986eb1dc61096602728e303682602c4c3e2d8b155753e238cd610f20347f4641bd567934de55cecf0ad1d9e92538ccf86043d40c3be8662b37d6406666407397fef25585547fca43b20a3345e4ef3e62b2b8e3243bbce96d6a917e9f411f60d2460456e0687b680a5e74d4164ae8e02a3f32e"}) ftruncate(r1, 0x1) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r2, r5) getsockopt$inet6_dccp_buf(r5, 0x21, 0xe, &(0x7f0000000240)=""/71, &(0x7f00000002c0)=0x47) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) setsockopt$ax25_int(r5, 0x101, 0xc, &(0x7f0000000300)=0x80000001, 0x4) getsockopt$inet6_opts(r5, 0x29, 0x3f, &(0x7f0000000540)=""/86, &(0x7f0000000640)=0x56) 2018/03/30 07:55:03 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x0, 0x805, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001b000000000000000000626373663000000000000000000000007465716c30000000000000000000000069705f7674693000000000000000000065727370616e30000000000000000000000000000000000000000000c8992de4105a00000000000000007000000070000000c00000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000062c098214fa213efc6be4aa8906e604ba476bae920c936d703fc68d30f08"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) [ 84.575593] kernel msg: ebtables bug: please report to author: Wrong len argument [ 84.585314] binder_alloc: 11173: binder_alloc_buf, no vma [ 84.588323] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 84.590971] binder: 11173:11204 transaction failed 29189/-3, size 0-0 line 2963 2018/03/30 07:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) write$cgroup_pid(r3, &(0x7f0000000240)={[0x30, 0x33, 0x35, 0x37, 0x31]}, 0x5) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) getsockname$llc(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x10) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x3) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000100)=""/59, 0xfffffffffffffe39) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@file={0x0, './file0\x00'}, 0xa) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) [ 84.662957] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.668569] binder: undelivered TRANSACTION_ERROR: 29189 [ 84.698424] kernel msg: ebtables bug: please report to author: Wrong len argument [ 84.715148] binder: release 11173:11188 transaction 429 out, still active [ 84.722238] binder: undelivered TRANSACTION_COMPLETE [ 84.726291] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 84.727409] binder: undelivered TRANSACTION_ERROR: 29201 [ 84.739079] binder: send failed reply for transaction 429, target dead 2018/03/30 07:55:03 executing program 3: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) socketpair$inet(0x2, 0x80801, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000380)={'mangle\x00', 0x2, [{}, {}]}, 0x48) r2 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3ff, 0x20000) accept(0xffffffffffffff9c, &(0x7f00000000c0)=@can={0x0, 0x0}, &(0x7f0000000140)=0x80) r4 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@local={0xfe, 0x80, [], 0xaa}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0x4e23, 0x4, 0x4e24, 0x0, 0xa, 0x20, 0x0, 0x67, r3, r4}, {0x1, 0x8, 0x0, 0x7f, 0x0, 0x4, 0x84bd00000000000, 0x5}, {0x6d43, 0x8, 0x1ff, 0x1}, 0x4, 0x6e6bb3, 0x2, 0x0, 0x2, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, [], 0xb}, 0x3503, 0x0, 0x3, 0x7f, 0x1, 0x8000, 0x1ff}}, 0xe8) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') ioctl$TIOCGSID(r5, 0x5429, &(0x7f0000000400)=0x0) r7 = gettid() kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r2, &(0x7f0000000440)={r5, r0, 0x21}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="11634840", @ANYRES64=0x0, @ANYBLOB="000000c562ffff00eaddffefd46a4b1ae185e415d07ced4c6e266072e4545892028dcde01df22615"], 0x0, 0x0, &(0x7f0000011f9d)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x11, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="116348400000000000", @ANYPTR=&(0x7f0000000440)=ANY=[]], 0x0, 0x0, &(0x7f00000000c0)}) 2018/03/30 07:55:03 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000740)=ANY=[@ANYBLOB="020000008904e9b046b8d44bc30000000000055889f5f3f17d9c04287fef4ca300000000000070293ece949764a75414030ee2938ec4922f5022f0dfcd738f0d7b483c671f5627312d549f1315bab631e75e3da9be3e8a7cec6d94ccb1acafb530ed6399fdf3fbd5ffee5cd13ee2bebcc26973de", @ANYPTR=&(0x7f0000000300)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000000000000000000df00000000000000", @ANYPTR=&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) r6 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) ioctl(0xffffffffffffff9c, 0x1f58, &(0x7f0000000200)="8909fa6598b7ea1dd8441840907553ff20a4f00ebe613615dc9fc2c600a10738759e88d604410f619540b5ab8d79847679a0435fb2097534cb1d7915d4e9ecbef46cb3028fda3bf22c4ee8f65b75328585501d5d5430a8f0f1cb717d3706cdc3323968dfd05cabffa43ac2f672e08fcec413ba091c58fbce2b105634cdc95ba39b60ff48c550bc76e95bbd0474861646e0bfe1e316e7a6fb0d4cc7d1738de50a443dd6fed9c2def724d457b2da96fb18f2a711cd988cd9ade52ced0d92960927c56c9568ac16d73807b43ee88052c87fb3af68d915cde19a2ef2a1fad1ed570a00ab86650ed302c9c9a8676a11a58864839e115f") setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000040)={r5, 0x8}, 0x8) getsockopt$inet6_mreq(r6, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:03 executing program 7: r0 = socket$inet6(0xa, 0x3, 0x10000000033) r1 = socket$inet(0x2, 0x0, 0x886) getsockopt$IP_VS_SO_GET_DESTS(r1, 0x0, 0x484, &(0x7f0000000240)=""/103, &(0x7f0000000200)=0xfd0cd22b19f82754) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000100)=0x79, 0x4) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = socket$inet(0x2, 0x802, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000580)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000280), &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x0, 0x0, 'dummy0\x00', 'vlan0\x00', 'ip6gre0\x00', 'vcan0\x00', @empty, [], @empty, [0xfffffffffffffffd, 0xff, 0x0, 0x0, 0x0, 0x10], 0x70, 0xa0, 0xe8}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x9}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}, {{{0x1d, 0x0, 0xfffffffffffffffc, 'teql0\x00', 'vcan0\x00', 'vlan0\x00', 'ifb0\x00', @random="56190635f233", [0x0, 0x0, 0x0, 0x1], @random="d238742a69de", [], 0x70, 0x70, 0xb8}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x3}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x2a8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f00000002c0)={0x0, @in={{0x2, 0x0, @multicast1=0xe0000001}}, [0x9, 0x8001, 0x0, 0x0, 0x2, 0x1f, 0x3, 0x0, 0x3, 0x800, 0x5, 0x6, 0x0, 0x886, 0x1]}, &(0x7f0000000000)=0x100) r4 = socket(0x2, 0x0, 0x0) bind$inet(r4, &(0x7f0000ce6ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000218000)="fd", 0x1, 0x0, &(0x7f0000af3ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000003c0)={r3, 0x5}, &(0x7f0000000400)=0x8) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000880)=@broute={'broute\x00', 0x20, 0x1, 0x150, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000700], 0x0, &(0x7f00000006c0), &(0x7f0000000fc0)=ANY=[@ANYBLOB="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"]}, 0x1e6) socket$pppoe(0x18, 0x1, 0x0) readv(r4, &(0x7f0000000e00)=[{&(0x7f00000004c0)=""/121, 0x79}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f0000000900)=""/193, 0xc1}, {&(0x7f0000000600)=""/142, 0x8e}, {&(0x7f0000000a00)=""/133, 0x85}, {&(0x7f0000000ac0)=""/152, 0x98}, {&(0x7f0000000b80)=""/108, 0x6c}, {&(0x7f0000000c00)=""/105, 0x69}, {&(0x7f0000000c80)=""/205, 0xcd}, {&(0x7f0000000d80)=""/79, 0x4f}], 0xa) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000f00)={'raw\x00', 0x2, [{}, {}]}, 0x48) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000440)={{0x62, @rand_addr=0x6, 0x4e20, 0x2, 'lc\x00', 0x20, 0x8, 0x2b}, {@empty, 0x4e21, 0x0, 0x9af9, 0xf29, 0x1}}, 0x44) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas\x00', 0xffffff82) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000f53fff), 0xfffffffffffffc64, 0x20000802, &(0x7f000006d000)={0x2, 0x4e23}, 0x10) shutdown(r1, 0x1) getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000004040), 0x4) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001880)={r1}) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000018c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000000c0)=0x2) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000300), &(0x7f0000000340)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xe}, 0x9}, 0x1c) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/loop-control\x00', 0x309480, 0x0) sendto$inet6(r0, &(0x7f0000000040)='\x009', 0x2, 0x0, 0x0, 0x0) 2018/03/30 07:55:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup2(r3, r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) 2018/03/30 07:55:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="1001000080000000e900000000000000"], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000080)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:03 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00007e5000)={0xffffffffffffffff, 0xffffffffffffffff}) read(0xffffffffffffffff, &(0x7f0000000080)=""/59, 0x3b) fcntl$setstatus(r1, 0x4, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000f70000)=@un=@file={0x0, './file0\x00'}, 0xa) connect$unix(0xffffffffffffffff, &(0x7f0000c8e000)=@abs={0x0, 0x0, 0x4e20}, 0x6e) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect(r0, &(0x7f0000000000)=@nl=@unspec, 0x80) 2018/03/30 07:55:03 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x10000000001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = getpgrp(0xffffffffffffffff) getpgid(r1) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x82) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000080)='{\x00', 0x3) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0xffffffffffffffff, r3, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r3, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) gettid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000040)) r4 = memfd_create(&(0x7f0000000240)="74086e750000000000000000008c00", 0x0) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x81003) ioctl$KVM_DIRTY_TLB(0xffffffffffffffff, 0x4010aeaa, &(0x7f0000000180)={0x2ab7, 0x800000000000003}) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r4) sendfile(r2, r4, &(0x7f00000000c0), 0x102000001) sync_file_range(r2, 0x2, 0x100000001, 0x7) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:03 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) lseek(r1, 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) sync() ftruncate(r1, 0x1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x82400, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e20, 0x100, @mcast1={0xff, 0x1, [], 0x1}, 0x6}}, 0x6, 0x0, 0x4, 0xc000000000000000, 0x20}, 0x98) r5 = dup2(r3, r0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) listen(r2, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000005c0)=0x3, 0x8) getsockopt$inet6_mreq(r5, 0x29, 0x14, &(0x7f0000000480), &(0x7f00000004c0)=0x14) 2018/03/30 07:55:03 executing program 6: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000002000)=[{0x10, 0x111}], 0x10}, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = dup3(r1, r1, 0x80000) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0xfffffffffffffff8}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={r3, 0x94, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xbed, @loopback={0x0, 0x1}, 0x96dd}, @in={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e23, 0x5023, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0xf08, @mcast1={0xff, 0x1, [], 0x1}, 0x5}]}, &(0x7f0000000240)=0x10) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000300)={0x0, 0x1}) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @ipv4={[], [], @multicast1}}, &(0x7f0000000380)=0x1c) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000002000)) 2018/03/30 07:55:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sendfile(r0, r0, &(0x7f0000000080)=0x5f, 0x102000004) sync() dup2(r3, r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) [ 84.949190] kernel msg: ebtables bug: please report to author: Wrong len argument [ 84.970470] binder_alloc: 11268: binder_alloc_buf size -6377300472022322312 failed, no address space [ 84.979909] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 84.988670] binder: 11268:11280 transaction failed 29201/-28, size -7901472206073354642-1524171734051032322 line 2963 2018/03/30 07:55:03 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f000074ffc8)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f00000000c0)=ANY=[]}, 0x1}, 0x0) r3 = memfd_create(&(0x7f00000000c0)="74086e750000000000000000008c00", 0x2) pwritev(r3, &(0x7f00000003c0)=[{&(0x7f0000000440)='H', 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000100)={0x8, 0x0, 0x2, 0x2, 0x0}, &(0x7f0000000140)=0x51) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000180)={r4, 0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x18) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000500)={0x0, 0x3ff, 0x2c}) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, &(0x7f0000000600)) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000340)={{0x8}, {0x3294, 0x8}, 0x8, 0x6, 0x7}) lseek(r1, 0x0, 0x0) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f00000002c0)=""/122) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r3) sync() dup2(r3, r0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x3}, 0x8) [ 85.026398] IPVS: set_ctl: invalid protocol: 98 0.0.0.6:20000 lc [ 85.034580] binder: BINDER_SET_CONTEXT_MGR already set [ 85.058149] binder_alloc: binder_alloc_mmap_handler: 11268 2000c000-2000e000 already mapped failed -16 [ 85.079886] binder: 11268:11293 ioctl 40046207 0 returned -16 [ 85.113182] binder_alloc: 11268: binder_alloc_buf, no vma [ 85.118862] binder: 11268:11293 transaction failed 29189/-3, size -7901472206073354642-1524171734051032322 line 2963 [ 85.136679] binder: undelivered TRANSACTION_ERROR: 29201 [ 85.142204] binder: undelivered TRANSACTION_ERROR: 29189 [ 246.751163] INFO: task syz-executor0:11286 blocked for more than 120 seconds. [ 246.758636] Not tainted 4.16.0-rc7+ #371 [ 246.763249] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 246.771236] syz-executor0 D23120 11286 4412 0x00000004 [ 246.776896] Call Trace: [ 246.779496] __schedule+0x8fb/0x1ec0 [ 246.783242] ? __sched_text_start+0x8/0x8 [ 246.787398] ? perf_trace_lock+0x900/0x900 [ 246.791646] ? perf_trace_lock+0x900/0x900 [ 246.795896] ? trace_hardirqs_off+0x10/0x10 [ 246.800237] ? trace_hardirqs_off+0x10/0x10 [ 246.804568] ? event_function_local.constprop.101+0x560/0x560 [ 246.810489] ? find_held_lock+0x35/0x1d0 [ 246.814569] schedule+0xf5/0x430 [ 246.817946] ? __mutex_lock+0xaa8/0x1a80 [ 246.822036] ? __schedule+0x1ec0/0x1ec0 [ 246.826028] ? lock_release+0xa40/0xa40 [ 246.830005] ? memset+0x31/0x40 [ 246.833309] ? do_raw_spin_trylock+0x190/0x190 [ 246.837893] ? debug_mutex_free_waiter+0x1b0/0x1b0 [ 246.842815] ? mutex_destroy+0x1d0/0x1d0 [ 246.846888] schedule_preempt_disabled+0x10/0x20 [ 246.851928] __mutex_lock+0xaad/0x1a80 [ 246.855831] ? lo_ioctl+0x8b/0x1b70 [ 246.859462] ? mutex_lock_io_nested+0x1900/0x1900 [ 246.864310] ? futex_wake+0x680/0x680 [ 246.868111] ? __lock_acquire+0x664/0x3e00 [ 246.872344] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 246.877463] ? perf_trace_run_bpf_submit+0x206/0x330 [ 246.882582] ? perf_trace_run_bpf_submit+0x206/0x330 [ 246.887691] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 246.892799] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 246.897996] ? perf_tp_event+0xae0/0xae0 [ 246.902064] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 246.907170] ? futex_wake+0x2ca/0x680 [ 246.910974] ? perf_trace_run_bpf_submit+0x20d/0x330 [ 246.916083] ? memset+0x31/0x40 [ 246.919381] ? perf_trace_lock+0x4d6/0x900 [ 246.923631] ? trace_event_raw_event_lock+0x340/0x340 [ 246.928830] ? perf_trace_lock+0x900/0x900 [ 246.933077] ? trace_hardirqs_off+0x10/0x10 [ 246.937411] ? trace_event_raw_event_lock+0x340/0x340 [ 246.942617] mutex_lock_nested+0x16/0x20 [ 246.946685] ? mutex_lock_nested+0x16/0x20 [ 246.950931] lo_ioctl+0x8b/0x1b70 [ 246.954408] ? loop_clr_fd+0xb50/0xb50 [ 246.958309] blkdev_ioctl+0x1759/0x1e00 [ 246.962301] ? blkpg_ioctl+0xb40/0xb40 [ 246.966195] ? lock_downgrade+0x980/0x980 [ 246.970369] ? lock_release+0xa40/0xa40 [ 246.974359] ? __lock_is_held+0xb6/0x140 [ 246.978454] ? __fget+0x36b/0x5b0 [ 246.981922] ? iterate_fd+0x3f0/0x3f0 [ 246.985743] ? vfs_writev+0x215/0x340 [ 246.989555] block_ioctl+0xde/0x120 [ 246.993199] ? blkdev_fallocate+0x3b0/0x3b0 [ 246.997523] do_vfs_ioctl+0x1b1/0x1520 [ 247.001431] ? ioctl_preallocate+0x2b0/0x2b0 [ 247.005845] ? fget_raw+0x20/0x20 [ 247.009321] ? SyS_futex+0x269/0x390 [ 247.013051] ? do_futex+0x22a0/0x22a0 [ 247.016860] ? fput+0xd2/0x140 [ 247.020054] ? security_file_ioctl+0x89/0xb0 [ 247.024481] SyS_ioctl+0x8f/0xc0 [ 247.027844] ? do_vfs_ioctl+0x1520/0x1520 [ 247.031995] do_syscall_64+0x281/0x940 [ 247.035875] ? __do_page_fault+0xc90/0xc90 [ 247.040112] ? _raw_spin_unlock_irq+0x27/0x70 [ 247.044607] ? finish_task_switch+0x1c1/0x7e0 [ 247.049112] ? syscall_return_slowpath+0x550/0x550 [ 247.054039] ? syscall_return_slowpath+0x2ac/0x550 [ 247.058972] ? prepare_exit_to_usermode+0x350/0x350 [ 247.063996] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 247.069389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 247.074245] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 247.079446] RIP: 0033:0x4548b9 [ 247.082636] RSP: 002b:00007fdb0eb92c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.090365] RAX: ffffffffffffffda RBX: 00007fdb0eb936d4 RCX: 00000000004548b9 [ 247.097644] RDX: 0000000000000019 RSI: 0000000000004c00 RDI: 0000000000000014 [ 247.104947] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 247.112240] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 247.119531] R13: 000000000000027b R14: 00000000006f5c28 R15: 0000000000000000 [ 247.126825] [ 247.126825] Showing all locks held in the system: [ 247.133176] 2 locks held by khungtaskd/868: [ 247.137590] #0: (rcu_read_lock){....}, at: [<000000002bf6d072>] watchdog+0x1c5/0xd60 [ 247.145681] #1: (tasklist_lock){.+.+}, at: [<000000009c65a8a1>] debug_show_all_locks+0xd3/0x3d0 [ 247.154739] 1 lock held by rsyslogd/4251: [ 247.158888] #0: (&f->f_pos_lock){+.+.}, at: [<00000000e5c8317e>] __fdget_pos+0x12b/0x190 [ 247.167319] 2 locks held by getty/4342: [ 247.171299] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.179993] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.189317] 2 locks held by getty/4343: [ 247.193297] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.201980] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.211288] 2 locks held by getty/4344: [ 247.215251] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.223935] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.233225] 2 locks held by getty/4345: [ 247.237204] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.245885] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.255173] 2 locks held by getty/4346: [ 247.259140] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.267827] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.277117] 2 locks held by getty/4347: [ 247.281087] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.289757] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.299062] 2 locks held by getty/4348: [ 247.303027] #0: (&tty->ldisc_sem){++++}, at: [<000000006dd14830>] ldsem_down_read+0x37/0x40 [ 247.311709] #1: (&ldata->atomic_read_lock){+.+.}, at: [<000000003924c406>] n_tty_read+0x2ef/0x1a40 [ 247.321034] 1 lock held by syz-executor0/11286: [ 247.325696] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000e3a30f63>] lo_ioctl+0x8b/0x1b70 [ 247.334295] 1 lock held by syz-executor0/11306: [ 247.338955] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000e3a30f63>] lo_ioctl+0x8b/0x1b70 [ 247.347554] 1 lock held by syz-executor5/11301: [ 247.352212] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000e3a30f63>] lo_ioctl+0x8b/0x1b70 [ 247.360809] 1 lock held by syz-executor5/11304: [ 247.365473] #0: (&lo->lo_ctl_mutex/1){+.+.}, at: [<00000000e3a30f63>] lo_ioctl+0x8b/0x1b70 [ 247.374074] [ 247.375694] ============================================= [ 247.375694] [ 247.382718] NMI backtrace for cpu 1 [ 247.386337] CPU: 1 PID: 868 Comm: khungtaskd Not tainted 4.16.0-rc7+ #371 [ 247.393232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.402555] Call Trace: [ 247.405120] dump_stack+0x194/0x24d [ 247.408722] ? arch_local_irq_restore+0x53/0x53 [ 247.413361] ? debug_show_all_locks+0x2f3/0x3d0 [ 247.418011] ? nmi_cpu_backtrace+0x1be/0x210 [ 247.422406] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 247.426870] nmi_cpu_backtrace+0x1d2/0x210 [ 247.431082] ? lapic_can_unplug_cpu+0xa0/0xa0 [ 247.435548] nmi_trigger_cpumask_backtrace+0x123/0x180 [ 247.440801] arch_trigger_cpumask_backtrace+0x14/0x20 [ 247.445963] watchdog+0x90c/0xd60 [ 247.449403] ? reset_hung_task_detector+0xa0/0xa0 [ 247.454216] ? complete+0x62/0x80 [ 247.457655] ? __schedule+0x1ec0/0x1ec0 [ 247.461601] ? do_wait_intr_irq+0x3e0/0x3e0 [ 247.465895] ? __lockdep_init_map+0xe4/0x650 [ 247.470278] ? do_raw_spin_trylock+0x190/0x190 [ 247.474834] ? lockdep_init_map+0x9/0x10 [ 247.478868] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 247.483943] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 247.488932] ? trace_hardirqs_on+0xd/0x10 [ 247.493051] ? __kthread_parkme+0x176/0x240 [ 247.497349] kthread+0x33c/0x400 [ 247.500693] ? reset_hung_task_detector+0xa0/0xa0 [ 247.505505] ? kthread_stop+0x7a0/0x7a0 [ 247.509458] ret_from_fork+0x3a/0x50 [ 247.513226] Sending NMI from CPU 1 to CPUs 0: [ 247.517737] NMI backtrace for cpu 0 [ 247.517743] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 4.16.0-rc7+ #371 [ 247.517745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.517754] RIP: 0010:reschedule_interrupt+0x0/0x20 [ 247.517756] RSP: 0018:ffffffff87a07c08 EFLAGS: 00000082 [ 247.517759] RAX: dffffc0000000000 RBX: 1ffffffff0f40f8a RCX: 0000000000000000 [ 247.517761] RDX: 1ffffffff0f59580 RSI: 0000000000000001 RDI: ffffffff87acac00 [ 247.517763] RBP: ffffffff87a07c38 R08: 0000000000000000 R09: 0000000000000000 [ 247.517765] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 247.517767] R13: ffffffff87a07cf0 R14: ffffffff883b4820 R15: 0000000000000000 [ 247.517770] FS: 0000000000000000(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 247.517772] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.517774] CR2: ffffffffff600400 CR3: 0000000007a22002 CR4: 00000000001606f0 [ 247.517779] DR0: 0000000020000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 247.517781] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 247.517782] Call Trace: [ 247.517787] ? native_safe_halt+0x6/0x10 [ 247.517793] ? trace_hardirqs_on+0xd/0x10 [ 247.517796] default_idle+0xbf/0x430 [ 247.517800] ? __sched_text_end+0x2/0x2 [ 247.517805] ? rcu_eqs_special_set+0x1e0/0x1e0 [ 247.517809] ? tsc_verify_tsc_adjust+0x1e4/0x3e0 [ 247.517815] ? set_cpu_sd_state_idle+0x1dc/0x2d0 [ 247.517818] ? mark_tsc_async_resets+0x30/0x30 [ 247.517824] arch_cpu_idle+0xa/0x10 [ 247.517827] default_idle_call+0x36/0x90 [ 247.517831] do_idle+0x24a/0x3b0 [ 247.517835] cpu_startup_entry+0x104/0x120 [ 247.517839] ? cpu_in_idle+0x20/0x20 [ 247.517841] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 247.517844] ? trace_hardirqs_on+0xd/0x10 [ 247.517849] rest_init+0xed/0xf0 [ 247.517855] start_kernel+0x7f1/0x819 [ 247.517859] ? mem_encrypt_init+0xb/0xb [ 247.517862] ? early_idt_handler_common+0x3b/0x60 [ 247.517868] ? x86_family+0x32/0x40 [ 247.517873] x86_64_start_reservations+0x2a/0x2c [ 247.517876] x86_64_start_kernel+0x77/0x7a [ 247.517882] secondary_startup_64+0xa5/0xb0 [ 247.517886] Code: 90 66 2e 0f 1f 84 00 00 00 00 00 68 03 ff ff ff e8 e6 ef ff ff e8 11 29 00 00 e9 cb f0 ff ff 66 90 66 2e 0f 1f 84 00 00 00 00 00 <68> 02 ff ff ff e8 c6 ef ff ff e8 a1 22 00 00 e9 ab f0 ff ff 66 [ 247.518737] Kernel panic - not syncing: hung_task: blocked tasks [ 247.742233] CPU: 1 PID: 868 Comm: khungtaskd Not tainted 4.16.0-rc7+ #371 [ 247.749126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 247.758447] Call Trace: [ 247.761010] dump_stack+0x194/0x24d [ 247.764612] ? arch_local_irq_restore+0x53/0x53 [ 247.769259] ? vsnprintf+0x1ed/0x1900 [ 247.773037] panic+0x1e4/0x41c [ 247.776204] ? refcount_error_report+0x214/0x214 [ 247.780943] ? nmi_trigger_cpumask_backtrace+0xf0/0x180 [ 247.786284] watchdog+0x91d/0xd60 [ 247.789722] ? reset_hung_task_detector+0xa0/0xa0 [ 247.794536] ? complete+0x62/0x80 [ 247.797972] ? __schedule+0x1ec0/0x1ec0 [ 247.801914] ? do_wait_intr_irq+0x3e0/0x3e0 [ 247.806205] ? __lockdep_init_map+0xe4/0x650 [ 247.810586] ? do_raw_spin_trylock+0x190/0x190 [ 247.815138] ? lockdep_init_map+0x9/0x10 [ 247.819170] ? _raw_spin_unlock_irqrestore+0x31/0xc0 [ 247.824245] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 247.829235] ? trace_hardirqs_on+0xd/0x10 [ 247.833354] ? __kthread_parkme+0x176/0x240 [ 247.837653] kthread+0x33c/0x400 [ 247.840992] ? reset_hung_task_detector+0xa0/0xa0 [ 247.845806] ? kthread_stop+0x7a0/0x7a0 [ 247.849755] ret_from_fork+0x3a/0x50 [ 247.854305] Dumping ftrace buffer: [ 247.857932] (ftrace buffer empty) [ 247.861612] Kernel Offset: disabled [ 247.865215] Rebooting in 86400 seconds..