00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000040000000000000000000008000100000000000fc64c0cace778b2dd0f46b60006596f56f0b2aa199181a9d42ec41296895433bab7548187c5019bd9179016cc4aea1c60e730cea8e066defd45068f873659c13d2341de0b670d6047524bd4bb7ed668027123d7144d77e22161121ef180b363e594d102a82bea4a27a06c9682ffc707f92e4f81467438f5c322abd6160d6740a94ff71cbb89e45036b0f6801c53539117317f0adfa1c6"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x2004c000) [ 565.951992] binder: 2707:2709 transaction failed 29201/-14, size 72-8 line 2999 [ 565.961279] binder_alloc: binder_alloc_mmap_handler: 2707 20001000-20004000 already mapped failed -16 [ 565.974291] binder: BINDER_SET_CONTEXT_MGR already set [ 565.989443] binder: 2707:2709 ioctl 40046207 0 returned -16 [ 565.992290] binder_alloc: 2707: binder_alloc_buf, no vma [ 566.000774] binder: 2707:2710 transaction failed 29189/-3, size 72-8 line 2971 [ 566.045659] binder: undelivered TRANSACTION_ERROR: 29189 [ 566.062761] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:33 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x7, 0x0, 0x1, 0x18}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/29 01:53:33 executing program 1: r0 = epoll_create1(0x80002) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x2e0000) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x1}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000180)) 2018/05/29 01:53:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:33 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net\x00') timer_create(0x7, &(0x7f0000000000)={0x0, 0x4, 0x1, @tid=r0}, &(0x7f0000000100)=0x0) timer_settime(r2, 0x1, &(0x7f0000000140)={{0x0, 0x989680}}, &(0x7f0000000180)) exit(0x0) fstat(r1, &(0x7f0000000080)) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000040)={0x6719, 0x2, 0x2, 0x6, 0x100, 0x1}) 2018/05/29 01:53:33 executing program 3: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=""/193, &(0x7f0000000700)=""/97, &(0x7f00000009c0)=""/127}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000700)=ANY=[]) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x0, &(0x7f0000000380)=""/115, &(0x7f0000000580)=""/156, &(0x7f0000000b80)=""/185}) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000100)=0x14, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x2, 0x1, &(0x7f0000000c40)=""/4096, &(0x7f0000000280)=""/74, &(0x7f00000004c0)=""/135, 0x5000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x10000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000300)={0x5000, 0x8000}) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000480)) 2018/05/29 01:53:33 executing program 1: r0 = socket(0x11, 0x802, 0x100) setsockopt$IP_VS_SO_SET_EDITDEST(r0, 0x0, 0x489, &(0x7f0000000180)={{0x3c, @empty, 0x4e21, 0x2, 'none\x00', 0x22, 0x8, 0x43}, {@multicast1=0xe0000001, 0x4e21, 0x3, 0x4, 0x4, 0x197}}, 0x44) write(r0, &(0x7f0000000000)="826175ade39b355599205ab6d8c71abea8250ba3f1d96e1469b0800dd1debdd447d8eb4dc86669729204a3fec11c757858e1894e7da72c12b1bfcebd8e8403a42c9449b4c8b7df1e0302b3c978313f618de20192300543aa7fe22532854623a06b7a37cb571a233b326d295bea465f48a463610f71cd8ff300e1625d08e2115d6bbcfd30b51d2b49533978e6bf0ad7dc121b3ddeb5614eabc51127f3394610f02a7fe4db58b98e37bc2af10c49210ee4a3dbb322e3bc02c399d9264d21c5447629fd63ea60da0f837fd3f4a7050ae978e7c07a19d7a6ce184a65af2ec2510e4aaa471dc8f71665ad59", 0xe9) write(r0, &(0x7f0000000280)="220000002100070700be875d09001c010a00001e0001090000000800050003800010", 0x22) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x10400, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getpeername$unix(r1, &(0x7f00000002c0), &(0x7f0000000240)=0x6e) accept4$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0xffffffff, @hyper}, 0x10, 0x80800) ftruncate(r0, 0x401) [ 566.729485] binder: 2734:2740 got transaction with invalid offsets ptr [ 566.738725] binder: 2734:2740 transaction failed 29201/-14, size 72-8 line 2999 [ 566.758441] binder_alloc: binder_alloc_mmap_handler: 2734 20001000-20004000 already mapped failed -16 [ 566.773364] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:33 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000100)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x6, 0x1, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000, 0x3, 0x0}, &(0x7f0000000200)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240), &(0x7f0000000280)=0xc) r3 = syz_open_dev$sndseq(&(0x7f0000923000)='/dev/snd/seq\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r3}], 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080), 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x1, 0x0) close(r0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x6, 0xfffffffffffffffb, 0x200, 0xffffffffffffff00, 0x401, 0x9, 0xffffffffffff6669, 0x59f, r2}, &(0x7f0000000380)=0x20) close(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) [ 566.783307] binder: 2734:2740 ioctl 40046207 0 returned -16 2018/05/29 01:53:33 executing program 7: r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x1, 0x9}) mq_timedsend(r0, &(0x7f0000e71fff), 0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x40000, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x460) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0xffffffffffffffff) mq_timedsend(r0, &(0x7f000066c000), 0x0, 0x0, &(0x7f000058eff0)={0x77359400}) 2018/05/29 01:53:33 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019ff8)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000100)=0x4, 0x8) fcntl$lock(r1, 0x8000000000000007, &(0x7f0000000000)) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x420002, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000080)=0xd5, 0x4) fcntl$lock(r1, 0x26, &(0x7f000001d000)={0x8000000000000001}) dup3(r0, r1, 0x0) [ 566.851600] binder_alloc: 2734: binder_alloc_buf, no vma [ 566.857812] binder: 2734:2748 transaction failed 29189/-3, size 72-8 line 2971 [ 566.938302] binder: undelivered TRANSACTION_ERROR: 29189 [ 566.944749] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:34 executing program 4: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f00000000c0)=0x10000020d, 0x80000) fcntl$setownex(r0, 0xf, &(0x7f0000000200)={0x3}) r1 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f02acc7edbcd7a071fb35331ce39c5a") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f00000001c0)=0x7) getpeername$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000240)=0x14) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x19}, @loopback={0x0, 0x1}, 0xca, 0x1, 0x3, 0x500, 0x9, 0x0, r2}) fsetxattr(r1, &(0x7f0000000000)=@known='user.syz\x00', &(0x7f0000000100)="8d125db147732684aac6aef626f38ee90d981182b673d913b1fc3c076ad937afc51e483a26911705d723449097434257b9505e204f7a5418b72385eb3f8652545cbf095a472b7c7b245b0ae00ae00e91d1cde46454ece69e871e5697f5af2ca5dd9ff7403bd1944694e1c66e9efc3bac59d9580c2d49cb5ddd2dc5", 0x7b, 0x0) 2018/05/29 01:53:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000009300000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:34 executing program 2: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000008ff7)='/dev/dsp\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@ipv4_newrule={0x34, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth0\x00'}]}, 0x34}, 0x1}, 0x0) ioctl$int_in(r0, 0x800000800c5011, &(0x7f000082448b)) 2018/05/29 01:53:34 executing program 7: mmap(&(0x7f0000000000/0xfd4000)=nil, 0xfd4000, 0x2000001, 0x40000000000031, 0xffffffffffffffff, 0x0) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x564, 0x10000) mmap(&(0x7f0000000000/0xfc1000)=nil, 0xfc1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fc1000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000a20000)={0x8, 0x0, &(0x7f0000fc1ffc)=[@acquire={0x40086310}], 0x0, 0x0, &(0x7f00000000c0)}) 2018/05/29 01:53:34 executing program 1: syslog(0x3, &(0x7f0000000280)=""/4096, 0x10073) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10040, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000002640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000002680)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000002780)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000027c0)={0x0, 0x0, 0x0}, &(0x7f0000002800)=0xc) sendmmsg$unix(r0, &(0x7f0000002880)=[{&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002380)=[{&(0x7f0000001280)="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", 0x1000}, {&(0x7f00000000c0)="414a3009531a07ff4d6d54d2bf609d946a90506a9e04ab1a1ebc5d5b092c1b3e9f2c4239e1e096a9ec443b5661642140987b7f5bf864d3d1e8da5502c1abf3d41fbcc7e111ce26094031caf04e471d9e67faaa56020aaadc955cd6df8232db9ed34da8a7eb4c4d4ea1fc38f25fe06e269d93f29caafe666937f78381d77add7311f290e2acc3cefe4670debff78a4cfe1b2d241f542ee7a135d24c6bbd6ada554d15660e9a4c458b7d988d48b68ae7a03b9cf56a4ce74f3f1b753edb92f9054279065832a9518f31cb4c8df0f9fc63842f2a6f7ba854a01b40f27f6362c305a1e7bd50918a3bbda17b", 0xe9}, {&(0x7f0000002280)="2ac7166022735e1f1b3fa99dba4de90e3b1901a004bd7d31d6d495b9426bdbb9fe36b9e06b6af5d2d0df61be53e7c10d1807f33507e24a725e224738eac4f24bcfb09e3da822fc6a4ca0b1e941cd1ef546744ee044ae48451292a71a817e0d8b3e4d69f60b7385de0e9fe59dfa945cd99cd69a9930a9907bd9fc648d2178d61d6cf068b82c26837cf5671f84bb3d772c0952708caa4a0a607c5e45c8decbc1f843b820ea4c4d711709402d445a1158a3656c0035b42358b214900df87a313eb4c3400fbdbb67609f1b5850c38b6c3af879657082e98a92abf2278341192f0fc50c072b1ba0", 0xe5}, {&(0x7f00000001c0)="537ee702e81009f684df54001ce73c221b0cfafb51f1599865e175633261615068b0a1", 0x23}, {&(0x7f0000000200)="4763c89e6e1f5afd7073fd7f10a20b8f5755f5a5e5a7a4b2314e684681555249711e24778169244bc33210db673731af18c71d3369bc19faa4a0ae380d1c25", 0x3f}], 0x5, 0x0, 0x0, 0x44}, {&(0x7f0000002400)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000002480)="98d259c99ddda1adea2f9fe88a93307ad212d77ad9523856a38f3128a6e4ea68e92f99fc742f04c1fafa1adea87facddd53127980ca6575968bd5dd5fec9700078ce8e6e74b12525ca6559e13117b0b920c4b9efabf50908155229d86636858bdb48f1ad899e9cafcdafb41f3be98dd7071d36f51cad91080f078b67a59e6487a42c585ad4961f7d7c2e55f08ded7911b2909d87e49e2d927d06ff41b5002e81e7b67b69a0ff381460426f3ae29c87c3a504224b4fb87f77c85e03fce7ccbcdff11054f906fb380d6868ccf8f24aaacc93d138dface62c38a69af0d3", 0xdc}, {&(0x7f0000002580)="14beab15707dcca97beea28b84bcd74def0b4680952dc1bae261f040c349dac7522147dd952bb610e01bd852bd5383497312ead3ec5b69a29a1edfc10335a2cdfe0c34d049915b44bc2d28746f93e7faccac7501378d317b114e33581c621692439f28a4e2c5d6b4c854c3b55d0ebf40968ef6be42dc4eb85f6e6bdcf700fcb395be445f", 0x84}], 0x2, &(0x7f0000002840)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20, 0x4}], 0x2, 0x8000) 2018/05/29 01:53:34 executing program 3: r0 = socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100), 0x8) 2018/05/29 01:53:34 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(blowfish))\x00'}, 0x58) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00', 0x0, 0x8}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b0", 0x4) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0), 0x304, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvmmsg(r1, &(0x7f00000118c0)=[{{&(0x7f000000b480)=@l2, 0x80, &(0x7f000000c640)=[{&(0x7f000000b500)=""/4096, 0x1000}], 0x1, &(0x7f000000c680)=""/115, 0x73}}, {{&(0x7f000000fe00)=@pptp={0x0, 0x0, {0x0, @multicast2}}, 0x80, &(0x7f0000010200)=[{&(0x7f0000010180)=""/118, 0x76}], 0x1}}, {{&(0x7f0000011540)=@can, 0x80, &(0x7f0000011840)=[{&(0x7f00000115c0)=""/82, 0x52}, {&(0x7f0000011640)=""/45, 0x2d}, {&(0x7f0000011680)=""/219, 0xdb}, {&(0x7f0000011780)=""/163, 0xa3}], 0x4, &(0x7f0000011880)=""/34, 0x22}}], 0x3, 0x0, 0x0) 2018/05/29 01:53:34 executing program 6: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYPTR=&(0x7f0000000100)=ANY=[@ANYPTR, @ANYRES64=r0, @ANYBLOB="85b48499bc101cb33543235ddf1894e90226953f116013b36c99032a67e808db5bcd81e1cd9bdf99d00cb2305fb3ce00246243b1985e8575534cf77f8f9a43207b0ae44ba4035c55958fd05bef74354a3de13a9e5a2d819c3a1633df7cf3316596cc634b89f9383c1873c2b2147dfe1be855310440591ee151c7427ef4a3c1faf8d41f60c0a887390a3a07d8c4dd1e23f63110b6788ad6897caff132d813d1eddeaec49fb9905afe755920f9d704971988467084e5431fb75a5dac04f6a89caa7faf7083c2a4cfbd1f75476e7bc4d8", @ANYPTR], @ANYRES16=r0, @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYPTR64], @ANYPTR=&(0x7f0000000240)=ANY=[@ANYRES64=r0, @ANYPTR], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES64=r0, @ANYPTR, @ANYBLOB="cd9e33a11053468e4ddb982fb9f88306cf10f15fc41bd296d812f90cca123391c1cdc71ac56d33d1c96c2ff03c53e41b06726a22a6dc986891b6878409ab1576616ec45588e8afca6e443ed60cd6fc846795e4f73b077b2e7f96bec42075811f0606c5ad7b6437befddd500ba4c9754ddbc2010e1b9ba2f9cf966ef8240a4b47b33fc97d83d9d78e6824032b280c6d462a8be779a3ddf46ddbfc42012559b68c9d7e64a76cf79815a4235fc4cbe57c6385bc40baa09fa97c248d439bdc5613d5e3ee648d2058f43effb87ed7bf2f7a10bb43eb54af717600c5c9", @ANYRES32=r0, @ANYPTR64, @ANYPTR64]]]) 2018/05/29 01:53:34 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x6000, 0x0) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000080)=0x1000) madvise(&(0x7f00001f2000/0x4000)=nil, 0x4000, 0x10000000e) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 567.857226] binder: 2790:2792 got transaction with invalid offsets ptr [ 567.865566] binder: 2788:2789 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 567.882729] binder: 2790:2792 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:53:34 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x0, 0x400000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @remote, @multicast1}, &(0x7f0000000080)=0xc) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@mcast2={0xff, 0x2, [], 0x1}, 0x58, r1}) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f0000000140)={0xf9d, 0x4}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x28, 0x0, 0x0, 0xffffffffffeff010}, {0x6}]}, 0x10) 2018/05/29 01:53:34 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x5, 0x0) sendmsg(r0, &(0x7f00003bbfc8)={&(0x7f0000fdbf80)=@generic={0x10000000001e, "02ff0100000001000000000000000ae77f5bf86c48020002000000f1ffffff009a480075e6a50000de010300000000e4ff064b3f013a000000080000008f00000000ac50d5fe32c4000000007fffffff6a008356edb9a6341c1fd45624281e00070ecddd0206c39750c40000fd00000900000000000b0000db000004da36"}, 0x64, &(0x7f0000d1b000), 0x0, &(0x7f000012e000)}, 0x0) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46000000000000000000000000400000000000000000000000380000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x58) [ 567.902583] binder_alloc: binder_alloc_mmap_handler: 2790 20001000-20004000 already mapped failed -16 [ 567.946613] binder: BINDER_SET_CONTEXT_MGR already set [ 568.021303] binder_alloc: 2790: binder_alloc_buf, no vma [ 568.027006] binder: 2790:2823 transaction failed 29189/-3, size 72-8 line 2971 [ 568.043376] binder: 2790:2792 ioctl 40046207 0 returned -16 2018/05/29 01:53:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x10000009, 0x84) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x95, 0x200) getsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0), &(0x7f0000000100)=0x1) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000380)={{0x3ff, 0x3}, 0x1, 0x7234e242, 0x7, {0x6, 0x200}, 0xfd63, 0x100000001}) r2 = socket(0x400000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipx_SIOCIPXNCPCONN(r3, 0x89e3, &(0x7f00000001c0)=0x40) ioctl$KDSETLED(r1, 0x4b32, 0x0) getsockname$netrom(r2, &(0x7f00000002c0), &(0x7f0000000340)=0xfffffe2f) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000240)=0x6, &(0x7f0000000280)=0x4) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000000)="17", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x1f}, 0x1c) 2018/05/29 01:53:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000ffffffff0000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x70003}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2000, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000040)={{0x0, 0xfffffffffffffba2}, {0x4, 0x5370}, 0x100000001, 0x3, 0x5}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, &(0x7f0000000180)="c744240000500000c74424020a000000c7442406000000000f011c240f0134120f20e035020000000f22e0e193ea2c010000e6000f00520ec4e1be5f7cd4a266ba400066b8f4ac66efdeb7eadb7cc866bad10466b8dd0566ef", 0x59}], 0x1, 0x22, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:34 executing program 7: r0 = socket$inet6(0xa, 0x40000080806, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) listen(r0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000000c0)={0x31c4, 0x3, 0x5, 0x5, 0x0, 0x7, 0xaa}, 0xc) 2018/05/29 01:53:34 executing program 6: write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="73797a30a58ce53bdcb162dbad14702625d154868a21324900000000000000001065c795a6fb9df28c28679f3e238c62f33afbed084490d44b1298934eeb80adfcca7bfbd1ab6137cab9883288ac5b8ad7e3df4ca152fd2fef7d887728fde6ef4c2cbe8db73ce795ee89"], 0x6a) r0 = socket(0x10, 0x3, 0x0) stat(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, r1, r2, 0x7f, 0x8, 0x1) ioctl$sock_ifreq(r0, 0x2000000089f1, &(0x7f0000000080)={'sit0\x00\x00\x00\x00\x008\n\x00', @ifru_data=&(0x7f0000000180)="adf985b8d39b968aa06e6dd52a129c452bddaf7c073a95c48fa9ec914bfd6758"}) 2018/05/29 01:53:34 executing program 5: r0 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffbe6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0x0, 0x4011, r0, 0x400000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000100)={0x1000}) fcntl$setlease(r0, 0x400, 0x2) r2 = socket(0xa, 0x2, 0x0) fadvise64(r2, 0x0, 0x6, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f00001c0000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10281, 0x0) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000040)=0x0) write$binfmt_misc(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xcd) fcntl$lock(r2, 0x7, &(0x7f0000000080)={0x2, 0x4, 0x3ff, 0x4, r4}) mmap(&(0x7f00001bf000/0x3000)=nil, 0x3000, 0xa, 0x20010, r2, 0x0) 2018/05/29 01:53:34 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x880, 0x0) ioctl$VT_WAITACTIVE(r0, 0x5607) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3000000) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(r0, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000240)="440f20c0350e000000440f22c036410f01c80f4da60f00000066b8b5000f00d072050f2022430f090f01cb66bad104b8e84cffffef0f20c035000004000f22c0", 0x40}], 0x1, 0x48, &(0x7f00000002c0), 0x0) getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0x0, 0x200) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r1 = gettid() munlockall() rt_sigqueueinfo(r1, 0x2000000000003, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x3, 0x400000000000000}) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'ah\x00'}, &(0x7f00000001c0)=0x1e) 2018/05/29 01:53:34 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x10000, 0x0) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000080)=0x5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x1}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000580)=ANY=[@ANYBLOB="4ae30000000000000000000000000000000000000000000003000000000000000002000000000000b1ee00000000000000000000000000000000000000000000000084dc0f7860"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 568.083205] binder: undelivered TRANSACTION_ERROR: 29189 [ 568.089478] binder: undelivered TRANSACTION_ERROR: 29201 [ 568.128368] binder: 2833:2835 got transaction with invalid offsets ptr 2018/05/29 01:53:34 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) accept(r1, &(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000200)={0x0, 0x73, 0x8, 0x80000000}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r4, 0x3}, &(0x7f0000000340)=0x8) r5 = dup3(r0, r2, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_NMI(r2, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB="000d5a66cf"], 0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 568.185726] binder: 2833:2835 transaction failed 29201/-14, size 72-8 line 2999 [ 568.255876] binder_alloc: binder_alloc_mmap_handler: 2833 20001000-20004000 already mapped failed -16 [ 568.311312] binder: BINDER_SET_CONTEXT_MGR already set [ 568.339274] binder_alloc: 2833: binder_alloc_buf, no vma [ 568.344864] binder: 2833:2857 transaction failed 29189/-3, size 72-8 line 2971 [ 568.365517] binder: 2833:2835 ioctl 40046207 0 returned -16 2018/05/29 01:53:34 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000060000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:34 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000000000)=""/40, &(0x7f0000000040)=0x28) close(r2) close(r2) 2018/05/29 01:53:34 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd128-generic)\x00'}, 0x58) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0xd6, &(0x7f0000000180)=0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="64eb5d2482355153e1d9bf0a3423bb0b4330cea3670c67f976bc090000009e2fbc42cd1df37341a1443e731e7794fb559418e709891261a796c854a9fb09b7ba015f812964cbe0d1c58495dc8634f13287fffbee6b4a6d545148ecf71ba6e3e1fd2f428dc1492b3c4a6b50eb1af7e796159d96b707b83e71", 0x78) 2018/05/29 01:53:34 executing program 7: prctl$intptr(0x1c, 0x64) faccessat(0xffffffffffffffff, &(0x7f0000000040)='/\x00', 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) faccessat(r0, &(0x7f0000000080)='./file0\x00', 0x8, 0x1d00) 2018/05/29 01:53:34 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r0, &(0x7f0000000040)=@abs={0x0, 0x0, 0x4e20}, 0xffffff31) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/unix\x00') sendfile(r0, r2, &(0x7f0000000340), 0x800009) 2018/05/29 01:53:34 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8931, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0x9) r2 = syz_open_procfs(0x0, &(0x7f0000000080)="2f657865000000d400042a004bddd9de91be10eebf00f5e94aae22e89bb36cc7457accc3320c67a90f79805843e901d2da75af1f0000000000000000") sendfile(r1, r2, &(0x7f0000000000), 0x80000002) 2018/05/29 01:53:34 executing program 5: r0 = socket(0x9, 0x3, 0x4) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000180), &(0x7f00000001c0)) pread64(r0, &(0x7f0000000000)=""/106, 0x6a, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @rand_addr}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@multicast2}}, &(0x7f0000000440)=0xe8) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="08032bbd7000fddbdf250000000008000100", @ANYRES32=r2, @ANYBLOB="b400020040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e100000080004000101000008000600", @ANYRES32=r3, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000200000038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040001000000"], 0xd0}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) 2018/05/29 01:53:34 executing program 6: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r1]}], 0x18}, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") dup2(r2, r1) close(r0) [ 568.396654] binder: undelivered TRANSACTION_ERROR: 29189 [ 568.402688] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:34 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xf000, 0x1000, &(0x7f0000ff9000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) munmap(&(0x7f0000ff8000/0x8000)=nil, 0x8000) ioctl$KVM_SET_GUEST_DEBUG(r3, 0xc018ae85, &(0x7f0000000100)) 2018/05/29 01:53:34 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) ioprio_get$uid(0x3, r1) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000001000)={0x1, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/mcfilter6\x00') r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8911, &(0x7f0000000240)="c626262c8523bf012cf66f") preadv(r2, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/35, 0x23}], 0x1, 0x4000000) [ 568.473877] binder: 2890:2891 got transaction with invalid offsets ptr 2018/05/29 01:53:34 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000200)={0x3, 'gretap0\x00', 0x3}, 0x18) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x181002, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000440)={0x101}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000400)={0x8, 0x5a0, 0x4}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) r2 = socket(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/fib_triestat\x00') ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f00000001c0)) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x0, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000000)={0x40, 0x9, 0xb, 0x6, 0xb1, 0x6, 0xa3e0, 0x7, 0x0}, &(0x7f00000000c0)=0x20) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={r4}, &(0x7f0000000140)=0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000280)={r5, @in6={{0xa, 0x4e24, 0x5, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x3}}, [0x6, 0x2, 0x0, 0x401, 0x6, 0x5, 0x637e, 0x8, 0x5, 0x80000000, 0x2, 0x0, 0x66876846, 0x3, 0x8a]}, &(0x7f0000000380)=0x100) shutdown(r0, 0x1) 2018/05/29 01:53:34 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getitimer(0x3, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [0x40000100]}) [ 568.522158] binder: 2890:2891 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:53:34 executing program 3: syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x4000000004002) mmap(&(0x7f0000000000/0xff7000)=nil, 0xff7000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40, 0x0) open_by_handle_at(r0, &(0x7f0000000080)={0x4c, 0x4, "e1b5a66f27162ef864bda5fd2eb00e54fbae453520ca16c47b0d6d7351a6aa069df8383514ae790b92d141eab3fcbf8dc1e8ba2fefb517125d93210f7915214a6632e513"}, 0x4c00) ioctl$VT_GETMODE(r0, 0x5601, &(0x7f0000000040)) [ 568.567956] binder_alloc: binder_alloc_mmap_handler: 2890 20001000-20004000 already mapped failed -16 2018/05/29 01:53:35 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="314c2799ca792f37c5c45e140000ff2600000000ffff0000"], 0x1}, 0x1, 0x0, 0x0, 0x4}, 0x40) fcntl$setflags(0xffffffffffffffff, 0x2, 0x0) [ 568.617742] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:35 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000065ffa8)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14}}}, 0x80, &(0x7f0000002680)=[{&(0x7f0000000140)='q', 0x1}], 0x1, &(0x7f00000004c0)}, 0x0) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x21}, 0xffff, 0x0, 0xff, 0x8, 0x1d74, 0x2fcf4465, 0x7}, &(0x7f0000000180)=0x20) 2018/05/29 01:53:35 executing program 6: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2040, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000080)={[], 0x20, 0x3916, 0xffffffffffffffff, 0x0, 0xc83, 0x5000, 0x4, [], 0x8}) sendmmsg(r0, &(0x7f0000573000)=[{{&(0x7f0000db5ff0)=@in={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f0000542000), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="100000000000004d14010000018e00183140655a8bdc00"], 0x10}}], 0x1, 0x0) socket(0x1, 0x5, 0x7fffffff) [ 568.652236] binder: 2890:2891 ioctl 40046207 0 returned -16 [ 568.661821] binder_alloc: 2890: binder_alloc_buf, no vma [ 568.667392] binder: 2890:2905 transaction failed 29189/-3, size 72-8 line 2971 [ 568.817625] binder: undelivered TRANSACTION_ERROR: 29189 [ 568.829659] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:35 executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x6}, 0x1c) recvmsg(r0, &(0x7f0000001480)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @loopback}}}, 0x80, &(0x7f0000001380), 0x0, &(0x7f0000001400)=""/109, 0x6d}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0xc000000a, 0x1, 0x3, 0x2, 0x6, 0x8, 0x77a6}]}) shutdown(r0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x1, 0x1, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) read$eventfd(r2, &(0x7f0000000140), 0x8) 2018/05/29 01:53:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, &(0x7f00000007c0)="420f01c8c422692e9201000000c7442400dc000000c7442402fa000000ff1c24b9c1000000b87ca7ffffbaffffffff0f3048b800000000000000000f23c80f21f8350c0070000f23f866410f7cd20f20d835080000000f22d8b9600a0000b876ce0000ba000000000f30440f017483d70fc72d55e80000", 0x77}], 0x1, 0x0, &(0x7f00000008c0), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socketpair(0x4, 0x804, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000040)={0xffffffff00000001, 0x3, 0x6, 0x100000000, "91e2dba2246d51e578f3ca2e4442f21dfa7f95ff20677bc2861531521406318af28679d808e1bb4276d77fea", 0x800}) 2018/05/29 01:53:35 executing program 3: r0 = memfd_create(&(0x7f00000004c0)='\x00', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000001400)='/dev/snd/seq\x00', 0x0, 0x20005) sendto$inet6(r0, &(0x7f00000002c0)="5980bf43a55f9b9948d8f6af1c947f7fc9446b2a5c932afad49f90e25e5d619c8f09a22590380083d681804654aae80813db34d3f19917d1709d59dd65d06b63c6b0e35330bdbda901338e1467876b86afd42b668ff4dbe545766c96043f66bf1bf16b6002b05f5bcb639379c7b1d857aa2edafa0f4527ad7d1010ae5d6da6720a92126fe3bfa6df3f02a32171a48286a91f433a22b2d09d1f97c1246072ef0dfc13983c44a12a902b657ee1064b44bf", 0xb0, 0x20040840, &(0x7f0000000200)={0xa, 0x4e21, 0x8, @local={0xfe, 0x80, [], 0xaa}, 0x6}, 0x1c) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48008000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$evdev(r0, &(0x7f0000000040)=[{}, {{0x0, 0x7530}}, {}, {{0x77359400}}, {{}, 0x0, 0x8, 0xad01}, {{0x77359400}, 0x0, 0x0, 0x5}, {{}, 0x0, 0xff}], 0xa8) chdir(&(0x7f0000000380)='./file0\x00') r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9de, 0x208000) ioctl$LOOP_GET_STATUS(r3, 0x4c03, &(0x7f0000000100)) ioctl$sock_ipx_SIOCSIFADDR(r3, 0x8916, &(0x7f00000001c0)={'sit0\x00', {0x4, 0x10000, 0x80, "fab45997869e", 0x9}}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0x222, @time}) 2018/05/29 01:53:35 executing program 6: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x0, 0x4) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) read(r0, &(0x7f00000001c0)=""/11, 0x10) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f00000000c0)) 2018/05/29 01:53:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000800000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:35 executing program 7: mlock(&(0x7f0000002000/0x3000)=nil, 0x3000) r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mbind(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, &(0x7f0000000000), 0x0, 0x2) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x0, &(0x7f0000000480)={@ipv4={[], [], @loopback}}, &(0x7f00000004c0)=0x14) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600), 0xffffffad) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$int_in(r1, 0x5421, &(0x7f0000000900)=0x6) sendto$inet(r1, &(0x7f0000000000)="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", 0x481, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000580)=0x1, 0xf1) sendto$inet(r1, &(0x7f00004b3fff), 0x0, 0x0, &(0x7f00002b4000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$unix(r1, &(0x7f00000006c0)=""/242, 0x104, 0x0, &(0x7f0000000500)=@file={0x0, './file0\x00'}, 0xfffffffffffffdd7) recvmmsg(r1, &(0x7f0000002040)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)}, {&(0x7f00000007c0)=""/184}, {&(0x7f0000000a40)=""/4096}, {&(0x7f0000001a40)=""/249}, {&(0x7f0000000880)=""/44}], 0x0, &(0x7f0000001b40)=""/219}, 0x8}, {{&(0x7f0000001c40)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001cc0)=""/235}, {&(0x7f0000001dc0)=""/224}, {&(0x7f00000009c0)=""/22}, {&(0x7f0000001ec0)=""/3}, {&(0x7f0000001f00)=""/94}, {&(0x7f0000002b40)=""/4096}, {&(0x7f0000001f80)=""/64}], 0x0, 0x0, 0x0, 0x80000001}, 0x98e}], 0xe9, 0x0, 0x0) 2018/05/29 01:53:35 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) fcntl$getown(r0, 0x9) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x801) write(r1, &(0x7f0000c34fff), 0xffffff0b) r3 = socket(0x10, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = dup(r2) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7f}) write$binfmt_elf64(r4, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0), 0x8) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/05/29 01:53:35 executing program 4: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000180)={{{@in=@multicast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={[], [], @dev}}}, &(0x7f0000000080)=0xe8) getgroups(0x1, &(0x7f00000000c0)=[0x0]) lchown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = socket(0x1e, 0x805, 0x0) r3 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$restrict_keyring(0x1d, r3, &(0x7f00000002c0)='blacklist\x00', &(0x7f0000000300)='\x00') setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) sendmsg(r2, &(0x7f0000000140)={&(0x7f00004f5000)=@generic={0x10000000001e, "03000009000101d0000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000447ff0), 0x0, &(0x7f00006e9c68)}, 0x0) [ 569.522497] binder: 2949:2950 got transaction with invalid offsets ptr 2018/05/29 01:53:35 executing program 4: r0 = mq_open(&(0x7f0000000040)='wlan1lo\x00', 0x800, 0x102, &(0x7f0000000080)={0x1000, 0x6, 0x100000000, 0x4, 0x49, 0x7fffffff, 0x10001, 0xbaec}) r1 = accept$nfc_llcp(0xffffffffffffff9c, &(0x7f00000000c0), &(0x7f0000000140)=0x60) sendfile(r0, r1, 0x0, 0x3) r2 = semget(0x2, 0x4, 0xa3) semctl$GETZCNT(r2, 0x4, 0xf, &(0x7f0000000400)=""/117) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="cd3997030f00aaaaaaaaaaaa0800ffffffff440807000000000000009078ff00000100000000000000000000000000000000"], 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000480)={'veth1_to_bridge\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$llc(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000380), &(0x7f00000003c0)=0x4) getsockopt$inet6_udp_int(r4, 0x11, 0x64, &(0x7f00000001c0), &(0x7f0000000200)=0x4) time(&(0x7f0000000300)) mq_open(&(0x7f00000002c0)='wlan1lo\x00', 0x802, 0x2, &(0x7f0000000340)={0x8, 0xffffffffffffff7f, 0x101, 0x101, 0x9, 0x5, 0x3900000000000, 0x8000}) 2018/05/29 01:53:35 executing program 3: truncate(&(0x7f0000000080)='./file0/file0\x00', 0xffff) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) symlink(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') rename(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000140)='./file0/file1\x00') r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x100, 0x0) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f00000002c0)) [ 569.580923] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c [ 569.583226] binder: 2949:2950 transaction failed 29201/-14, size 72-8 line 2999 [ 569.592443] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c 2018/05/29 01:53:36 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="284d04456c47ef9d12fc990ab1e4121ec106006d", @ANYRES32=0x0, @ANYBLOB="10e748430200000000000000eedef77b37c9db459322822eb400000000000000c2c057af4d8239351c0b770000007acabb872a678e02212851f1b4f908f1fc538a0c63fc928b771592a6d1cfc5242ce77e71d3606e7face73cd97d7a1c771d55f5641dd6f2dddffba435b35ff59dc4281455b2d83fdf8f3876e747417c7ab61f718a2d377e6c5d9ee43002cecbdb92473ddcd767411537121af7b02f7ede4178c20b7e4c18b879647815f637484facfcf492af68b6f8e846df16ed5cbbdc448c2bb8dddb86"], 0x28}, 0x1}, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) [ 569.636211] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c [ 569.665732] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c 2018/05/29 01:53:36 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup2(r0, r0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x100000001, 0x4a, "39730aaec444d65cebb91b4f494171069b93e29eb75d9da24310488033ce100e4009d8cec1c85e32d2108751403e9fa6d5268104a4cf12c83d55ad86459d86ff124ac2b5899e54e37504"}}) [ 569.683350] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c [ 569.695127] binder_alloc: binder_alloc_mmap_handler: 2949 20001000-20004000 already mapped failed -16 [ 569.708491] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c [ 569.711123] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:36 executing program 7: r0 = socket$inet6_udp(0xa, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) setsockopt$inet_int(r0, 0x0, 0x15, &(0x7f0000000000), 0x0) 2018/05/29 01:53:36 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000200)={0x7, {{0x2, 0x0, @multicast2=0xe0000002}}, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x108) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x802, 0x0) [ 569.733939] binder_alloc: 2949: binder_alloc_buf, no vma [ 569.739569] binder: 2949:2975 transaction failed 29189/-3, size 72-8 line 2971 [ 569.747790] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c 2018/05/29 01:53:36 executing program 4: getpid() getpgrp(0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0xcb2e, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x3f, 0xffffffff, 0x5, 0x2, 0x1000, 0x2, 0xfffffffffffffffc, 0xc2, 0x7fffffff, 0x3, 0x2}, 0xb) [ 569.783730] binder: 2949:2950 ioctl 40046207 0 returned -16 2018/05/29 01:53:36 executing program 4: lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@random={'security.', 'vboxnet0procbdevvboxnet0\x00'}, &(0x7f0000000080)=""/180, 0xb4) r0 = socket$netlink(0x10, 0x3, 0x0) lseek(r0, 0x0, 0x4) r1 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x3, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000280)={0x0, 0xffffffff, 0x2, [0x401, 0x0]}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000300)={r2, @in6={{0xa, 0x4e23, 0xffffffffffff2fc7, @mcast1={0xff, 0x1, [], 0x1}, 0x8000}}}, 0x84) writev(r0, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060a00000000e80001040000040d000300ea1100000005000000", 0x29}], 0x1) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x9, 0x92080) getpeername$unix(r3, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) [ 569.847918] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c [ 569.856619] binder: undelivered TRANSACTION_ERROR: 29189 [ 569.867295] binder: undelivered TRANSACTION_ERROR: 29201 [ 569.897992] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c [ 569.933223] kvm [2946]: vcpu1, guest rIP: 0x912f disabled perfctr wrmsr: 0xc1 data 0xffffffffffffa77c 2018/05/29 01:53:36 executing program 7: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$alg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="bc38c416d1ce37f228daed82b2a9770ef1499a31e2eb787871a4acbb471c4fce73078d6d4079308d62292bc620225f13c328837008767523c9742d15cde4ce0b0c44598337e31a423c10eb273c6a227e9da88ea89552050400dc2fff174e3384ccc78b79291eb877a23b6b9f2c5dbd86ba8976709542f76a1acc1b4990717d3df31bfd155fee3d70c14c92d11c9f1c876cdaf91ac60b89a7fa922fb4f79f085b9c478ac3f88d4c08aa51cc5a61d918a1b73c71bbb793e4d2edb4790d59807c35233431347fc8bee0c11026219b0400c7", 0xd0}, {&(0x7f0000000200)="73e0146dc9717b9945a3017f5c80cf44f44d1747f9b2880d2d5fe746703230fe95a92c43fe5406dbdef12d35d83776f961771240b859e1e85593e3287358a18bfde843b94ca9c588486d2e9ae6508b6c66114e38e1dd964797899a42c18582d3fc2b31698d86403a680b565898465a05a5fe2628e7ff5101f399c139ac90c462011064b930a79198f249c6219b254d698321f0d32fdc6b41f266113146e3b34aa5cdf2ec2a37", 0xa6}], 0x2, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4, 0xa9}, @iv={0xe8, 0x117, 0x2, 0xd1, "c404906f886b9aaff841a18aa61b4b4704a54b1598ac3c51a2062c975c53abbd52876444214290b8530172e7fc2b265fcbef4ca08a7a712b3d0d197e1dc2542c2b3006abeebfcfbcb27eeee6c0cbd6f99d172411bdd807914f0f383429a8f17b2f11d132257465a1534d3f558caa979a2bef28e8b3586eab36ef6a00f50bdf8c3ce336997dc7d588f6fa81b006d16702e9060596c264a87229ef4e3cc55969f3b5a57e9c955ea4994c0b89921bd4401df49049ff9103589985766dff4400d62e4675929c1a999fe11a922c73a6d2c2596c"}, @op={0x18, 0x117, 0x3, 0x1}], 0x130, 0x4000}, 0x4008010) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000400)) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140), 0x0, 0x400906e, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendmmsg(r2, &(0x7f0000007f00)=[{{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f00000001c0)}}, {{&(0x7f00000023c0)=@un=@file={0x0, './file0\x00'}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000003600)}}], 0x2, 0x0) 2018/05/29 01:53:36 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x0, 0x400) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x10001, 0x400302) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000280)={0x40, 0x4}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x0, 0x8000}, &(0x7f0000000240)=0x8) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000500)={0x0, {0x2, 0x0, @rand_addr}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2, 0x0, @loopback=0x7f000001}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)='bridge_slave_1\x00', 0x0, 0x0, 0x100000000}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000380)=@sack_info={r2, 0x3, 0x5}, &(0x7f00000003c0)=0xc) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000300), &(0x7f0000000340)=0x8) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) 2018/05/29 01:53:36 executing program 5: syz_open_dev$evdev(&(0x7f0000000140)='/dev/input/event#\x00', 0x0, 0x0) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.type\x00', 0x2, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', r3}) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000200)={@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, r4}, 0xc) socket$bt_cmtp(0x1f, 0x3, 0x5) r5 = socket$l2tp(0x18, 0x1, 0x1) sendfile(r5, r1, &(0x7f0000000100), 0x20e500000000) r6 = socket(0xa, 0x1, 0x0) ioctl(r6, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_mreq(r6, 0x0, 0x24, &(0x7f0000000080)={@dev, @dev}, &(0x7f00000000c0)=0x8) mincore(&(0x7f0000001000/0x1000)=nil, 0x1000, &(0x7f0000000000)=""/6) userfaultfd(0x80800) 2018/05/29 01:53:36 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) fstatfs(r1, &(0x7f00000000c0)=""/14) 2018/05/29 01:53:36 executing program 6: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000380)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) r2 = socket(0xa, 0x4, 0x0) openat(r0, &(0x7f0000000000)='./file0\x00', 0x4000, 0x2) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c) fcntl$setpipe(r0, 0x407, 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x3, 0xf8, 0x10001, 0x1000, [], [], [], 0xfffffffffffff000, 0x70, 0x1436c0, 0xb89, "cab3f0592e102b905dda152b48571337"}) 2018/05/29 01:53:36 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha1\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) socket$inet_icmp(0x2, 0x2, 0x1) r1 = accept$alg(r0, 0x0, 0x0) poll(&(0x7f00000012c0)=[{r1}], 0x1, 0x318000000) sendto(r1, &(0x7f0000000000)="95", 0x1, 0x0, &(0x7f0000000140)=@un=@file={0x0, './file0\x00'}, 0x80) 2018/05/29 01:53:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000004000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:36 executing program 3: r0 = socket(0xa, 0x3, 0x2) ioctl(r0, 0x8912, &(0x7f0000000180)="c626262c8523bf012cf66f") r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f000026b000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000100)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)="c1f8dc58da6f3687c90d5f428377783a3f443273893aa14d8223abded36bcc7f9c9be6c3b3a36a5ea665f50df09f556bb43fa877821ddcf9b8b022945caf685583cae7b8d1d6409594f87e0c08edc5c36a96cccf14fc2612fce906186db2d187a18055aa84bc7067a7314e8e2f392906ab20825dfdcee1c07d377d2a8481ae57c2868ca2eb203e39a48c45ddb8402fae722ba4db266ca5b652d2d0b8ecdce5fbdcc813e88805fb2aaf4823d40b35c436239cabda98783922f747d6ce50728b74c2b446bf5f32a8139c82e499a20bbd14e6e6010f15d06722c35e4d6e034c", 0xde, 0x0) keyctl$update(0x2, r2, &(0x7f00000002c0)="19330207fc0462fc9c94f21104a2e72dda0a88bafd2326291a28072d342fc1f283345d9211d4799e0cf4cf5a10aec877c814ed9a78c309345acc6afd02dc75bcc9b6b5", 0x43) [ 570.626988] binder: 3021:3023 got transaction with invalid offsets ptr [ 570.649147] binder: 3021:3023 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:53:37 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffff2ab, 0x20000) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000000c0)={0x5, 0x47, "e3c66203f2684fee1700fd1787fd98bbc4ec0c8f2dcaf3dd08f77cf2b319d60a81ed01f25b7134774a58e510a260542474003a755b26afbfe84250424868f4d16050d7f14cd501"}) ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0xff, 0x0, 0x1, r1}) prctl$intptr(0x18, 0x80000001) 2018/05/29 01:53:37 executing program 2: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000080)={r2}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x40086303}], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/05/29 01:53:37 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='btrfs\x00', 0x400, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socket$key(0xf, 0x3, 0x2) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getgid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup/syz1\x00', 0x200002, 0x0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)='./file0\x00', 0x7000, r0, r1, 0x4, 0x2, 0x11000) mkdir(&(0x7f0000000100)='./file0\x00', 0x22) 2018/05/29 01:53:37 executing program 7: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000000700000025000000000004869400000000000000"], &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/29 01:53:37 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0), 0xc) socket$alg(0x26, 0x5, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x0, 0x6, 0x2, 'queue1\x00', 0x7fffffff}) [ 570.674901] binder_alloc: binder_alloc_mmap_handler: 3021 20001000-20004000 already mapped failed -16 [ 570.706333] binder_alloc: 3021: binder_alloc_buf, no vma [ 570.708222] binder: BINDER_SET_CONTEXT_MGR already set [ 570.711952] binder: 3021:3033 transaction failed 29189/-3, size 72-8 line 2971 [ 570.757656] QAT: Invalid ioctl [ 570.775077] binder: 3041:3046 BC_FREE_BUFFER u0000000000000000 no match [ 570.785614] binder: 3021:3023 ioctl 40046207 0 returned -16 [ 570.794382] QAT: Invalid ioctl 2018/05/29 01:53:37 executing program 4: recvmmsg(0xffffffffffffff9c, &(0x7f0000005200)=[{{&(0x7f0000002700)=@can, 0x80, &(0x7f0000004b80)=[{&(0x7f0000002780)=""/152, 0x98}, {&(0x7f0000002840)=""/49, 0x31}, {&(0x7f0000002880)=""/4096, 0x1000}, {&(0x7f0000003880)=""/4096, 0x1000}, {&(0x7f0000004880)=""/34, 0x22}, {&(0x7f00000048c0)=""/150, 0x96}, {&(0x7f0000000180)=""/21, 0x15}], 0x7, &(0x7f0000004c40)=""/65, 0x41, 0x4}}], 0x1, 0x0, &(0x7f0000005440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup2(r1, r1) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmsg$netlink(r2, &(0x7f0000028fc8)={0x0, 0x0, &(0x7f0000019000)=[{&(0x7f00000001c0)=ANY=[@ANYRES64], 0x1}], 0x1, &(0x7f0000000040)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x7900000, 0x30}, &(0x7f00000000c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={r4, 0x200}, &(0x7f0000000140)=0x8) recvmmsg(r0, &(0x7f0000000b80)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f00000005c0), 0x0, &(0x7f0000000600)=""/84, 0x54}}, {{&(0x7f0000000680)=@l2, 0x80, &(0x7f0000000a40), 0x0, &(0x7f0000000ac0)=""/147, 0x93}}], 0x4000000000002ce, 0x62, 0x0) 2018/05/29 01:53:37 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xf4, 0x0) preadv(r0, &(0x7f0000001580)=[{&(0x7f0000000440)=""/130, 0x82}, {&(0x7f0000001500)=""/111, 0x6f}], 0x2, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0xa2000, 0x0) 2018/05/29 01:53:37 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 570.873787] binder: undelivered TRANSACTION_ERROR: 29189 [ 570.879791] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:37 executing program 7: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x1000000000000005, 0x0) r1 = gettid() epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, 0xffffffffffffffff) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) rt_sigqueueinfo(r1, 0x0, &(0x7f0000000040)={0x1}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x400140, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xbd, &(0x7f00000014c0)}, &(0x7f0000000100)=0x10) [ 571.037331] binder: 3058:3062 got transaction to invalid handle [ 571.043658] binder: 3058:3062 transaction failed 29201/-22, size 72-8 line 2856 [ 571.090125] binder_alloc: binder_alloc_mmap_handler: 3058 20001000-20004000 already mapped failed -16 [ 571.121399] binder: 3058:3067 got transaction to invalid handle [ 571.127569] binder: 3058:3067 transaction failed 29201/-22, size 72-8 line 2856 [ 571.198009] binder: BINDER_SET_CONTEXT_MGR already set [ 571.203687] binder: 3058:3062 ioctl 40046207 0 returned -16 [ 571.243428] binder: undelivered TRANSACTION_ERROR: 29201 [ 571.249616] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:38 executing program 5: poll(&(0x7f0000000080)=[{}], 0x2000006c, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x280200, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x20, 0x3}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000001c0)={r1, 0x5}, 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x6, 0x101000) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0x4) 2018/05/29 01:53:38 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x1, 0x2, 0x2, 0x0, 0x2, 0x0, 0x0, 0x2b}) r1 = syz_open_pts(r0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x8, 0x5b, 0xfffffffffffff6e1}) r2 = dup3(r1, r0, 0x0) inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x24a) fcntl$setstatus(r1, 0x4, 0x42800) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) 2018/05/29 01:53:38 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x2, 0x1, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x9, 0x2100) openat(r2, &(0x7f0000000040)='./file0\x00', 0x800, 0x5fb19e63760a6e5b) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00\x00\x00\x00`\x00', 0x20, 0x2, 0x480, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001040], 0x0, &(0x7f0000000080), &(0x7f0000001040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0xd, 0xffffffffffffffff, 0x0, 'veth1_to_bond\x00', 'ipddp0\x00', 'bridge_slave_0\x00', "7465616d5f73ff5e76655f30004000", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x1e8, 0x218}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00'}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}]}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'gre0\x00', 'veth1_to_bridge\x00', 'syz_tun\x00', 'eql\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xa8, 0xa8, 0x1d8, [@mac={'mac\x00', 0x10}]}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x0, 0x0, 'system_u:object_r:bsdpty_device_t:s0\x00'}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}]}, 0x4f8) 2018/05/29 01:53:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x310, 0x0, 0x0, 0x1, 0x400000, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x5c81) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) syz_open_procfs(r1, &(0x7f0000000100)='net/ip_vs_stats\x00') 2018/05/29 01:53:38 executing program 3: bind$inet6(0xffffffffffffffff, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(0xffffffffffffffff, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, &(0x7f0000000080)=""/18, &(0x7f0000000040)=0x12) r1 = memfd_create(&(0x7f0000000000)='[/\x00', 0x3) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000000c0)={0x45d, 0x5, 0x2}) 2018/05/29 01:53:38 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000100)={0x0, 0x100000000}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r1, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) write$cgroup_type(r0, &(0x7f0000000080)='threaded\x00', 0x9) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(0xffffffffffffffff, &(0x7f0000000480)={@void, @val={0x11}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1002, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) 2018/05/29 01:53:38 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x1) faccessat(r0, &(0x7f0000000040)='./file0\x00', 0x20, 0x1c00) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x80}, "706f72ff070000000000000000000000000b000000000000000000001f0000ffffff03000000ef000003ff02000000000012000000000000000000000600", 0xc7, 0x80003}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r2) [ 571.706914] binder: 3087:3091 got transaction to invalid handle [ 571.713125] binder: 3087:3091 transaction failed 29201/-22, size 72-8 line 2856 [ 571.720880] Unknown ioctl 21530 [ 571.723154] kernel msg: ebtables bug: please report to author: Unknown flag for inv bitmask [ 571.738852] Unknown ioctl 35076 2018/05/29 01:53:38 executing program 4: syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008000800000000f3c75bb13d930014ca51466d00000000009078ac1414bbac1414aa440407f0000000000401907800e5704400cd98e8"], &(0x7f0000000100)) 2018/05/29 01:53:38 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) r1 = open(&(0x7f0000103ff8)='./file0\x00', 0x141042, 0x0) ftruncate(r1, 0x7ffe) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000a61000)='/dev/ptmx\x00', 0x802, 0x0) sendfile(r2, r1, &(0x7f0000335ff8), 0xffffffff) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000469ffc)=0x7fe, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f0, 0x4) [ 571.754397] Unknown ioctl 21530 2018/05/29 01:53:38 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='clear_refs\x00') ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f00000000c0)=[0x8, 0x9]) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000000c0), 0x0) 2018/05/29 01:53:38 executing program 6: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[0xfeffffff], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet_mreqn(r0, 0x0, 0x18, &(0x7f00000002c0)={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff}, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bcsf0\x00', 0x4002}) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) [ 571.783489] Unknown ioctl 35076 2018/05/29 01:53:38 executing program 1: r0 = socket(0x4000000000000a, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(blowfish)\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) r3 = request_key(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000005c0)='vmac(blowfish)\x00', 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x4e22, 0xffffffffffff05b8, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x1}, 0x1c) r4 = add_key$user(&(0x7f0000000140)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000280)="6092628ebbb2f51ac5e95b05b6d2c37c51d2c0b1c848215c3b0b3bd886a0d92bf4712ced47d6b61bf38d473ad31453aa744b895ebc1f47eff0689f1522a366cdbafcf616c7de0c5a4c95ba7c30606f6ca2279c02ace24f116f34a655f3d0f390d764f0492f4757a3fad412b1d77fdeb88c725773a621f8bf7b3ab7bd1873878a54a6ff54c62b2fee3353abed1d7499147c298e", 0x93, 0xfffffffffffffffc) r5 = request_key(&(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000340)=')\x00', 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000380)={r3, r4, r5}, &(0x7f00000003c0)=""/216, 0xd8, &(0x7f0000000540)={&(0x7f00000004c0)={'wp512-generic\x00'}, &(0x7f0000000500)="4d08cd03a0b0f88514fc5be9ba272939707bd636d6e2ff01d981", 0x1a}) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000580)={0x3, &(0x7f0000000100)=[{0x401, 0xffff, 0x9, 0xfffffffffffffff9}, {0x0, 0x10001, 0xfffffffffffffff9, 0x4}, {0x0, 0x2, 0x4a2}]}, 0x10) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) sendmmsg$alg(r2, &(0x7f0000004540)=[{0x0, 0x0, &(0x7f0000004480), 0x276, &(0x7f00000044c0)}], 0x1500, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2018/05/29 01:53:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-vsock\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x3, r1}) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x101000, 0x88) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000080)={0x53, 0x10001, 0x1}) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_OWNER(r0, 0x4008af24, 0x707000) 2018/05/29 01:53:38 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x0, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x7, 0x80000000000002a3, [0x8f2, 0xde8, 0x20, 0x4, 0x2]}, &(0x7f00000000c0)=0x12) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x5, 0x0, 0x3, 0x3, 0x20}, 0x14) [ 571.842409] binder_alloc: binder_alloc_mmap_handler: 3087 20001000-20004000 already mapped failed -16 2018/05/29 01:53:38 executing program 7: socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000040)=[{0x45, 0x0, 0x0, 0xfffffffffffffffc}, {0x6}]}, 0x10) r2 = syz_open_dev$vcsn(&(0x7f0000000200)='/dev/vcs#\x00', 0x6, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000002c0)) connect$l2tp(r2, &(0x7f0000000280)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x1, 0x4, 0x4, {0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x81}}}, 0x3a) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r0, &(0x7f0000003040)=[{{&(0x7f00000012c0)=@ethernet={0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000001840)}}, {{&(0x7f00000018c0)=@ipx={0x4, 0x0, 0x0, "982a5c276750"}, 0x80, &(0x7f0000002f80)}}], 0x2, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000080)="233a213026b1d98dc1bcf0654bdb8c5d37fb63f48dc940896a94df66ed834ed2e3bf58999564b3cfa0fc06bc75c24090c7e18d24850b065e520b1c523d5c17ae41f3af97b724db1d65a399e664538244a4e26d7cdbd7b931c101ed42b1ba6c544bdbb41f73aa6ad3919301592cd3e5cc87bb17ec4f2eedcbaaf4c672bc8c2b4570e1caec4940d98ebbf9d6f9e99eed46e3e719a1977c45e6828de86bea4fd3a9bac7c9fcd86ca0aa133b823f990a80e1fe9f0e9aa7cb95ef40f6b20397e955635f7b1e803563ab93e19fd8eceb0b880e079e2242ce9b1c7b7c38afe9", 0xdc) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000000180)={0x7fff, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e20}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x22a, 0x6, 0x100000001, 0x2, 0x9, &(0x7f0000000000)='ip_vti0\x00', 0x8000, 0x1, 0x100000000}) [ 571.909596] binder: BINDER_SET_CONTEXT_MGR already set [ 571.934838] binder: 3087:3091 ioctl 40046207 0 returned -16 [ 571.979275] binder: 3087:3113 got transaction to invalid handle [ 571.985469] binder: 3087:3113 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:38 executing program 2: r0 = socket(0x40000000000a, 0x1, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x2) fcntl$notify(r1, 0x402, 0x24) dup3(r0, r1, 0x0) 2018/05/29 01:53:38 executing program 3: r0 = socket(0x10, 0x8000000000002, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000b34ff8)={0x0, 0x0}, &(0x7f0000b34ffc)=0xc) keyctl$get_persistent(0x16, r1, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {}]}) 2018/05/29 01:53:38 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000140)={{0x80000001, 0x1}, {0x5, 0x401}, 0xff, 0x2}) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000080)='vcan0\x00') r2 = syz_open_procfs(0x0, &(0x7f00000000c0)="6e756d615f6d61707300b5c62e9e8de9f243640adf803c64577aa9e4e33f9f72e5185191246f8fe224c3925050e2a9e57dbf6b530a5ebbec861baf4dc4f84bb1df13f0b152aa3b6e780781b6a8d091f88658ef4f16a21417d83d000000000000000000000000000000") mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000000)=0x2, 0x7, 0x0) pread64(r2, &(0x7f0000df6000), 0x0, 0x800000000000) 2018/05/29 01:53:38 executing program 1: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x16907a, 0x0) sendfile(r1, r1, &(0x7f0000000000), 0x40c007) r2 = gettid() perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x7, 0x20, 0x5, 0x5, 0x0, 0x2, 0x4000, 0x0, 0x2, 0x9, 0x2, 0x4, 0x50a, 0x6, 0x7fffffff, 0x8, 0x7fff, 0x8, 0x1, 0x3ff, 0x1, 0xacd, 0x9, 0x1ff, 0x7, 0xc3da, 0x101, 0x5, 0x32, 0x5, 0x8, 0x4df, 0x6f1, 0x100000001, 0x7ff, 0x8, 0x0, 0xf, 0x3, @perf_config_ext={0xfffffffffffffffa, 0xf78}, 0x2004, 0x6, 0x1ff, 0x6, 0x30, 0x7f, 0x8}, r2, 0x5, r0, 0x2) writev(0xffffffffffffffff, &(0x7f0000000040), 0x0) 2018/05/29 01:53:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x800, 0x400000) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) writev(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)="ff8c90aef74000004800000000000000000000000000000000000000831710ff6b777287e24b7ee1a0eb99bfffffff3f765e6bd176470605", 0x38}], 0x1) connect$pppoe(r1, &(0x7f0000000200)={0x18, 0x0, {0x4, @empty, 'bond0\x00'}}, 0x1e) socket$bt_hidp(0x1f, 0x3, 0x6) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000140)={'broute\x00'}, &(0x7f00000001c0)=0x78) 2018/05/29 01:53:38 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) get_thread_area(&(0x7f0000000040)={0x0, 0x100000, 0x0, 0x1, 0x9dc, 0x7ff, 0x5, 0x20, 0x5, 0x8000}) io_setup(0x9, &(0x7f0000000240)=0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r0}]) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="10000000f0ffffffff00000000855da0", 0x10}]) 2018/05/29 01:53:38 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000001bb8000000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:38 executing program 6: r0 = memfd_create(&(0x7f0000000100)='#em1#+\x00', 0x2) r1 = gettid() getsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f0000000080)=""/64, &(0x7f00000000c0)=0x40) getitimer(0x0, &(0x7f0000000040)) ptrace(0x11, r1) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x2, 0x4) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x800000000000, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x0, 0x11, r0, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000140)={0x4a}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f000001a000)) [ 572.052562] binder: undelivered TRANSACTION_ERROR: 29201 [ 572.085465] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:38 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x40000000000074, 0x315) r1 = socket(0xa, 0x1, 0x0) io_setup(0x4, &(0x7f0000000040)=0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140)='/dev/admmidi#\x00', 0x7, 0x0) r4 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0xff, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x8) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480)='/dev/audio\x00', 0x2, 0x0) r6 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000600)='/dev/urandom\x00', 0x40000, 0x0) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/snapshot\x00', 0x2480, 0x0) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000840)='/dev/autofs\x00', 0x5056c0, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000009c0)={0x0}, &(0x7f0000000a00)=0xc) sched_setaffinity(r9, 0x8, &(0x7f0000000a40)=0x1000) r10 = openat$full(0xffffffffffffff9c, &(0x7f0000000900)='/dev/full\x00', 0x4000, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a80)=0x7, 0x4) io_submit(r2, 0x7, &(0x7f0000000980)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x8, r0, &(0x7f0000000080)="00f0833b2d4c13586e03b0a70a980e3891580b9525eb62a807b5e1f14a59f00c6c1badf2fa23a0f8dbc917e1caa2a2ebddf9104f7a983d0b285d07d284ebd2a58aad5e5a40740fb295f45c2848a01d0ec5e6831646b0ff452ec31d1ed34b4831e912baf5ade9ccd9ff96f63c29785681e776f5a72dabe3b006fc4e7639d927961b11441ae0a81eb5b5a4af20822cc51dc67760b030a17871e3f6c1a1273cf6eebbd9140d7491d8befd4602e24744", 0xae, 0xffffffffffffff23, 0x0, 0x0, r3}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x8, 0x6, r1, &(0x7f0000000280)="ca12f9a5a58effe0b5c4fed13f061d7c01e4e4b9a2fa2db8d6fc37f48b563d3e03e636aa218416c5c66e41087ee94e86dbb6a0784ce3b6b88f479839ed5deb916d3bf0c42ca7e2f13de295070516063b84be79d7263aa1fe9f4d9f5393218de6f2c7a9ba29f03e6ddf5ec3e6a0f0bbf03bf6feffed95f4bc38948e20e395f9468bb4588eb18e962e67f1bffa154acb9c83828990fa4f972f285ae43ef069431f8803cf5df9a6dca794af268863649b0efb5ab600ef9937547b84a035f936bcd882519dd53986632450dd79eede879eeeb87d14db9c3345639c52cd1827b286b4f7f2af2bafa1faf3720521aa3b7138eb768610ae26", 0xf5, 0x7, 0x0, 0x1, r4}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0xf, 0x7, r0, &(0x7f00000003c0)="f4c76013585646ad6c83781effa9b5de5f3003ed2885332cf7306fb076b2ac2cc37d55d70b33326e64931b1004802f7f3fcde15d30175204292c556c5050c07ca1a40da80061d7b58172c01f804734cacd0045ee0bdd68459f10438f1166d126939e0cc6926136a1c67529505220dff087e62a9046dc40e188186751599e5c3e4229fcaa261087a749369a048174b415a63866de5df66cbc3f4e", 0x9a, 0x100000001, 0x0, 0x0, r5}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x3, 0x7e2b, r1, &(0x7f0000000500)="aec2a6dd236cc986082031186697593616aa74af67d31c61dcd874553a520f357b3ff156bd83664494b7d413fd1af376943097532befffe6cdf9cb8459460d2b1198e8df7f98f71ea98d565ae9af8b80c73aff7f270543937de10b7e20b50e825225d3d8579f42c097d5b8a7763ebd22fa660b14e83362655a1721fc3064238783575ed029016120e0c38e8ec462d74e2f2d16279e23c27a3e09cece10806d7991d1c196f88d374930ecfcf73e628363396e755374835c7d2f67585c64af00be50cae7dbe02f286bfa73e685", 0xcc, 0x2, 0x0, 0x1, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x2, 0xe6, r0, &(0x7f0000000680)="9d836801899ffd22672849be9136e97a73932374216d00", 0x17, 0x0, 0x0, 0x0, r7}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x8, 0xd8, r0, &(0x7f0000000740)="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", 0xfc, 0x4, 0x0, 0x0, r8}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x4, r0, &(0x7f00000008c0)="18a4fa818fb5491b0bc1c28b332cda2aa7d6e51bb1cecb9053a2e3380e76087ed5f5eab5de1daddfc3013a090ea04b17f2842891ff97ae1cc6137ae756561d3f", 0x40, 0x0, 0x0, 0x0, r10}]) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0x2f0c, 0x20008001, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) 2018/05/29 01:53:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x80000000000001, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x8, [0x6000000000, 0x8001, 0x8, 0x40, 0x6, 0x8, 0x80000001, 0x2]}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r2, @in={{0x2, 0x4e20}}, 0x1, 0xbb, 0xffff, 0x8f}, &(0x7f0000000140)=0x98) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = dup2(r0, r1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0xf, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000480)=0x98) [ 572.117569] binder: 3162:3164 got transaction to invalid handle [ 572.123718] binder: 3162:3164 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:38 executing program 5: semget$private(0x0, 0x4, 0x200) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$int_out(r0, 0x545d, &(0x7f00000000c0)) 2018/05/29 01:53:38 executing program 7: r0 = socket(0xa, 0x1, 0x0) r1 = openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x40300, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) sendto$ipx(r0, &(0x7f0000000180)="a04b5598bee231a43c9055d89f9686a72a2529354f6b2ec0f1d7b20525cf8d395c8930f292678f71454c4eaafac1ed497241770b0c736c42c2b21717293f339c25e54ef5a780d32561fb8493378c71adfb0adcc82eafd6ffbe1c6ea198c2ae2a29f945435d90705b13d7a893785efb4e9546043bdbcc3caa3505c05ea5f47cb781a3c8cf4a2c5ec319463ee0af330881eaf94818cc4a4d82e751da370eba445b4302e680f37e3b2c120e78068fafcae0044d014e32d9c323dce69b3b10aac0", 0xbf, 0x20048851, &(0x7f00000000c0)={0x4, 0x800, 0x7, "56e7b5547a5b", 0x81}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f0000000080)={{&(0x7f0000000000)=""/9, 0x9}, &(0x7f0000000040), 0x3a}, 0x20) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000400)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, {{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x108) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x88000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r2, 0x10, 0x70bd2b, 0x25dfdbff, {0xe}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd5f}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1=0xe0000001}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x14}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000805}, 0x40000) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)="2f70726f63bea176c404332f2f7379732f09000000697076342f76732f73796e635f72", 0x2, 0x0) 2018/05/29 01:53:38 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x400, 0x200000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x442, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x18}}, @in6={0xa, 0x4e21, 0x8, @dev={0xfe, 0x80, [], 0x1d}, 0x8}, @in={0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e22, 0x101, @empty, 0xb29d}], 0x84) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x9, &(0x7f0000000000)='\x00') r2 = socket$rds(0xa, 0x2, 0x11) sendmsg$rds(r2, &(0x7f000000afc8)={&(0x7f0000004ff0)={0xa, 0x1}, 0xe8, &(0x7f0000010000)=[{&(0x7f000000c000)=""/4096}, {&(0x7f000000e000)=""/79}, {&(0x7f000000f000)=""/255}], 0x0, &(0x7f0000002000)=[@rdma_dest={0x14, 0x29, 0x8}, @mask_fadd={0x0, 0x114, 0x8, {{}, &(0x7f0000015ff8), &(0x7f0000008ff8)}}], 0x24}, 0x0) setsockopt$sock_void(r1, 0x1, 0x1b, 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x98, "4b7ca7ebe6436737183fc4da5850156b9af5f97facb7756037372a076fff345e0f3e6a213f3a2d18375de0fd01057fdd2baa5ac4307980f81a2f9a4d077a8bd66dcd6f07d606efd1bb8101f1980c94f293b58fab5d26bacd791322d8502c4d3cf4696a09abdbcb2d618fa157bce951512f814d0c0a09e9dd70461c188fb564fcb5674c60caa860cce5684fe640efdd928d8e4a721baa12cb"}, &(0x7f0000000300)=0xa0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0x3ff}}, [0xfffffffffffffffe, 0xb637, 0x5b7, 0x5, 0x200, 0x4, 0x81, 0x9a5a, 0x6, 0x9, 0x0, 0x1, 0x8, 0x8000, 0xff]}, &(0x7f0000000440)=0x100) syz_open_procfs$namespace(r3, &(0x7f0000000180)='ns/ipc\x00') 2018/05/29 01:53:38 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0xb, 0x3ff, 0x10000000000001, 0x1}, 0x2c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r0, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) [ 572.181191] binder_alloc: binder_alloc_mmap_handler: 3162 20001000-20004000 already mapped failed -16 2018/05/29 01:53:38 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)={0x0, 0xcf3}) 2018/05/29 01:53:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x0, 0x3}) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x22001) write(r1, &(0x7f0000000440)="e5c7f3ab811543004b4653ea6272de2467f508910bf1340573854d4499064c671be8c8c3b3ece5d56773b95d29e4847eba6ec9f629d76f1b7998a12c0234af0a", 0x40) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)) [ 572.278567] binder: BINDER_SET_CONTEXT_MGR already set [ 572.313641] binder: 3162:3164 ioctl 40046207 0 returned -16 2018/05/29 01:53:38 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) syz_open_pts(r0, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000000080)={0x50, "1ff9990d672c22f878dcdb63f4311ba27bbec7140fca0d3cf262f4931819349ad8778635ed6dfbb3dabb8c77d29696cd1bb7e271bb8acec513fd0b775d995b8d186fb4a81336a625e22ea8be7a0b1ac1"}) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000100)) write(r0, &(0x7f0000c34fff), 0xffffff0b) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000140)={0x8, 0x0, 0x80000000, 0x3, "ae7a3bb11ab099826fcc952a3f09cd20d263e77056705096bde489b0575690a01ffa2bbdeee4488082161544", 0x3}) 2018/05/29 01:53:38 executing program 6: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000000), 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x141000, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000080)={{0xfffffffffffffffa, 0x80000000, 0x1, 0x0, 0x3, 0x5}}) timer_create(0x1, &(0x7f0000001980)={0x0, 0x2e, 0x0, @thr={&(0x7f00000017c0)="d02d51719c6c4a9a7cc4400654a88ec8443db276ec25002cf2264fe2cc30f8300ab5fad9b5bca22d090dfa1b5074dfeb43d5b6c233cbb94e0017904ca265afa520379776e4b5edc6f8582a746aa51c457f617825c8f006de4891c4e9b050eba3a2af20d47c05566480331fd9d9417ae12a47ef4cebb2720cc62456d7d7af81cf16ea3618e7a95b598b371a21e5d96bf0b5646e98c0cc82c55275ffa782c21805b52abf729f93f5fa759eca4e859f13dcbd989b400809780e35f69eca9ceeee76ec3870f3c485c5f58fa4a4b2ebd139d2dc16323790af9980f467df79cbde", &(0x7f00000018c0)="bed183630e49758a3de44ec6baad4f0cfd994f846c0c246b12914dfdd1a675073e4656d55a841ef05b36048e96d551b5f63a1dae500df5e926a4540f33970911a50733d2cbb766af28220f16d77a3916a523cf0a2054a2738d24c965303b2e0af003141cdfb6edd47af4a810b38ab167d84aad0adfd4a26afc82ea4cd745d3da57690affee0c49f79e786840a7e6c21eafd536d1d0f5fba6d34209ade1adff0c5f9028d6d917c7cf59a47e68165d5879e5c86071"}}, &(0x7f00000019c0)=0x0) timer_getoverrun(r2) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f00000000c0)=@nfc_llcp={0x27, 0x1, 0x2, 0x7, 0x7, 0x1, "9e8f8f238a55e501ea4eb3076544cc4d6e242f93388a1e0800753612515dcdc99d7531bc5c31f03b1a94576e3e0e38aa0dba215d7616a370b8df20c2b314ff", 0xa}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="791cf2debeb487057e891972b3518e7e44eda52cbd504d8e475b6a9843c5e9ad629dc45742ce64dd45dd2dc8d5bfe0b84793eeaaaa48a581075d309fc0acb2fdf3fbd372baa7ebaeedc250f8391e1402b70fc7cc44cf245952c053fb14df0e47c5d318a00992ca33864432af60a82f2b8a9eee9ed74502696be7f1a86243d7ad5482fa2fae8f32fd1e29b3c6e1f8b827fc85583b3eac183c87f7b8e1af7170556c0e91b8aeaf6a03b5790c1759c00d62aee138fe2b3372babb1b041150c6b35328e9da4fbf8fe8b9696ddd91be2013cbb059b4", 0xd3}, {&(0x7f0000000240)="ff3ba89c2cf61a57bbde9e7f379431f0a6d8e9cb7cbc796c82dec13324bd0ba517009c8d83a63b450f82238eb9265effb8fcee36f5358157ab365049ce79", 0x3e}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x160, 0x44}, 0x4000) sendmsg$netrom(r1, &(0x7f0000001780)={&(0x7f0000000480)=@full={{0x3, {"eb1bcfa41a11d4"}, 0x4}, [{"33a7befb4da38a"}, {"9384c7880e9592"}, {"4dd1bdc7883de8"}, {"ff0f141f9c9d35"}, {"b1ab5d2d850a58"}, {"d3a966782dfb84"}, {"45c6e4de6ca4c1"}, {"699633f6552746"}]}, 0x48, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0x1000}], 0x1, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x230, 0x20040801}, 0x15) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000001a40)={0x2, &(0x7f0000001a00)=[{}, {}]}) 2018/05/29 01:53:38 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x140, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x200}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0xffffffffffffff80, 0x7, 0x8000, 0x8, 0x2, 0x3ff, 0x4, 0x0, r2}, &(0x7f00000001c0)=0x20) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'salsa20-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a933d66593ae164c990a0028e", 0x10) r4 = accept$alg(r3, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000c40)=ANY=[], 0x30c) recvmsg(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000140)=""/81, 0x51}, {&(0x7f00000005c0)=""/175, 0x2000066f}], 0x29, &(0x7f0000002900)=""/4096, 0x1000}, 0x0) [ 572.344147] binder: 3162:3171 got transaction to invalid handle [ 572.350343] binder: 3162:3171 transaction failed 29201/-22, size 72-8 line 2856 [ 572.521146] binder: undelivered TRANSACTION_ERROR: 29201 [ 572.527580] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:39 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f01c826650f0966b831010f00d8440f20c03509000000440f22c0260f30b805000000b90b0000000f01c10f22240f22c3b9230800000f3266baf80cb8f09c3c8aef66bafc0cb83d000000ef", 0x4c}], 0x38d, 0x200000000005d, &(0x7f0000000580), 0x0) r3 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x40) ioctl$TCFLSH(r3, 0x540b, 0x7fffffff) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:39 executing program 2: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000040)) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) bind$netrom(r0, &(0x7f00000000c0)=@full={{0x3, {"0546b9ebcd2d26"}, 0x55}, [{"79d2fe3cd67fdd"}, {"e0a068dbfa531d"}, {"ad8a5870d85d2d"}, {"5c9b88cc817ade"}, {"26964500e58614"}, {"42735d8389e8e8"}, {"4233d9a2d0edf3"}, {"0dfa0cfa6bf455"}]}, 0x48) r1 = socket(0xa, 0x1, 0x1003) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000340)={0x9, 0x8100000000000, 0xfff, 0xf3b5, 0x4, 0x9, 0x5, 0x80000000, 0x100, 0x6, 0x1, 0x400}) r2 = gettid() ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000200)={{0x9, 0x0, 0x40000000000000, 0x0, "bfbec4c322e225c8542011cf612bb619f4002f20c8ab7ca1227584356898ee15817b00ab3f5ddf115555b432", 0x7}, 0x0, 0x0, 0x0, r2, 0x3855, 0x4, "f57441554f51b29415553beaa267ee57d1dd1660580a2052921d1149a9dca49840e55e6bd7ca306059e955d1672d35c218e176c2bcae8313bab77325cd557bd0", &(0x7f00000001c0)='veth1_to_bridge\x00', 0x10, [], [0x9, 0x3, 0x14, 0x7]}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000140)=@nat={"6e61748800", 0x19, 0x4, 0x478, [0x20000700, 0x0, 0x0, 0x200008f8, 0x20000b48], 0x0, &(0x7f0000000080), &(0x7f0000000700)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x3, 0x0, 0x0, 'gre0\x00', 'veth1_to_team\x00', 'vlan0\x00', 'team0\x00', @empty, [], @empty, [], 0x70, 0x70, 0xa8}}, @common=@dnat={'dnat\x00', 0x10}}, {{{0xd, 0x20, 0x0, 'syzkaller0\x00', 'bpq0\x00', 'veth1_to_bridge\x00', 'veth0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xe8, 0xe8, 0x120, [@mac={'mac\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}, @quota={'quota\x00', 0x18}]}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x11, 0x200, 0x0, '\x00', "73957a6b416c6c65723000", 'eql\x00', 'ip6tnl0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [0x0, 0xfffffffffffffffc], @empty, [], 0x108, 0x140, 0x178, [@arp={'arp\x00', 0x38, {{0x0, 0x201, 0x2, @loopback=0x7f000001, 0xff, @loopback=0x7f000001, 0xff000000, @random="99cbb12f3e5a", [0x0, 0xff, 0xff, 0x0, 0x0, 0x42d1124bb7a088d], @empty, [0xff, 0x0, 0xff, 0x0, 0xff, 0xff], 0x0, 0xc0}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}, {{{0x5, 0x0, 0x0, 'eql\x00', 'veth1_to_team\x00', 'bcsf0\x00', 'gre0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x70, 0x70, 0xa8}}, @common=@mark={'mark\x00', 0x10}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x4f0) 2018/05/29 01:53:39 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x87) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000001}, 0xc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffffffffdf7, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x2b}, 0x0, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x0, 0x0, 0x0, 0xa2f}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) 2018/05/29 01:53:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@nat={'nat\x00', 0x19, 0x2, 0x368, [0x20000840, 0x0, 0x0, 0x20000870, 0x200008a0], 0x0, &(0x7f0000000040), &(0x7f0000000840)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0200000003000000000000000000697036677265746170300000000000007369743000000000000000000000000067726574617030000000000000000000626f6e645f736c6176655f3000000000aaaaaaaaaaaa000000000000aaaaaaaaaabb00000000000000002801000098010000c801000073747000000000000000000000000000000000000000000000000000000000004800000000000000000000000000000000000180c200000000000000000000000000000000000000000000007521bb9710eb0000000000000000000000000000000000000000000000000000e2c600006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaaaa00000000000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000ffffffffffff000000000000000000004e4651554555450000000000000000000000000000000000000000000000000008000000000000000000000000000000110000000000000000007465616d5f736c6176655f310000000079616d30000000000000000000000000626f6e64300000000000000000000000693536746e6c30000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaaaa000000000000000070000000a8000000e00000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb000000000000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000aada10b1275900000000000000000000"]}, 0x3e0) 2018/05/29 01:53:39 executing program 6: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r4 = getgid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={r2, r3, r4}, 0xc) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffff93}, {0xffffffa0}}) 2018/05/29 01:53:39 executing program 1: socketpair$inet(0x1e, 0x80f, 0x0, &(0x7f0000000080)={0x0, 0x0}) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380), 0x217, &(0x7f0000000180)}, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x8a800, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)=""/95) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000500)={{0x80000000, 0x3f}, 'port0\x00', 0x2a, 0x400, 0x2, 0x100, 0x9, 0x4ec, 0x7f, 0x0, 0x2}) truncate(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$PERF_EVENT_IOC_ID(r2, 0x80082407, &(0x7f00000005c0)) recvmsg(r1, &(0x7f0000000340)={&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, &(0x7f0000000240)=""/253, 0xfd, 0xffffffffffffffff}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x6}}, [0x6, 0x6, 0x7fffffff, 0x4, 0x5, 0x6, 0x81, 0x80000001, 0x1f, 0x1f, 0x3, 0x2, 0xffffffff, 0x4, 0x5]}, &(0x7f0000000480)=0x100) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000004c0)={r3, 0x9}, 0x8) 2018/05/29 01:53:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000006000000000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:39 executing program 4: clone(0x200, &(0x7f0000fbf000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000804000)) mknod(&(0x7f0000000000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) recvmsg(0xffffffffffffffff, &(0x7f0000001580)={&(0x7f0000000040)=ANY=[], 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000400)=""/17, 0x11}, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/fscreate\x00') pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040), 0xfffffffffffffc40}, {&(0x7f0000000340)="b42809b649fef3cbfdedf839eec2edb4bd8a619a1eb4a4fb8ca246a9d0a0875ba5d011e0ce56500f2b8d71e220a044dccca32ee623fdced6249477ed37c31cf64a0aadb4b37d3a3fcd9ae0f943b1d67b31b242c0230ed4bea3738c869c386f64d36975e077a1cb85c4d1dbb58d6546844e4ccda243935b0eff4893d833df8e2bf79a9a6f98acd3601bf220a128fdf365b50b6d90ac", 0x95}, {&(0x7f0000000500)="4183ba7506d035e4a9cc5d8bade5c0db1882bb00d7c9d108e5be8df72b636b19630f51b418161e126b12716379c035af2d5d6e26ddb743b35eeae93f816e6e38335618ed3429d14524fc5b5fd091cd8b9349edcbdbd4b97337887a471e52afea94802202aac051b7b1ab0412e484a720efbe0917e5786e72f1816d110c9a40e6bcbd7b35df769a1882d549cff90c10f8b24f9092289f937e906922c51f2cd5ae6ad24e1f1c488bf8df65128bb06268", 0xaf}], 0x22c, 0x0) execve(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000001c0)=[&(0x7f0000000180)='attr/fscreate\x00'], &(0x7f0000000600)=[&(0x7f0000000440)='security]\x00', &(0x7f0000000480)=',](\x00', &(0x7f00000004c0)=',.vboxnet0security\x00', &(0x7f00000005c0)='attr/fscreate\x00']) recvfrom(r0, &(0x7f0000000200)=""/177, 0xfffffebf, 0x2, &(0x7f00000002c0)=@can={0x1d}, 0x80) execve(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000480)) creat(&(0x7f00000000c0)='./file0/file0\x00', 0x0) [ 573.524075] QAT: Invalid ioctl [ 573.530142] binder: 3241:3243 got transaction to invalid handle [ 573.536324] binder: 3241:3243 transaction failed 29201/-22, size 72-8 line 2856 [ 573.541896] QAT: Invalid ioctl 2018/05/29 01:53:39 executing program 6: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) r1 = socket(0x10, 0x80002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000180)={0x0, 0x3, 0x1, 0x1, 0x100000000}) ioctl$DRM_IOCTL_VERSION(r2, 0x80044dff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xc7, &(0x7f0000000040)=""/199, 0x88, &(0x7f0000000200)=""/136, 0xc8, &(0x7f00000003c0)=""/200}) 2018/05/29 01:53:39 executing program 1: io_setup(0x8000, &(0x7f00000000c0)=0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) io_getevents(r0, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], &(0x7f0000000180)={r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000340)='\x00', 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000001c0)="6b87b80c5fd11caf090731b6e07504a628d8ba94d02acafc5e2bb8e53480e6a7018bf1551c10ea24d834f59cc48145b66a9331a06cf68d9d4db6d44bfc0b87ee79bc9b43b54f58bbc8da368c018926a8b22d3c9d5016e7f2c3aec078d304087288ee57a97e148daa60785c88f1f977df250894c46181727839938eb5a47cc460df599cc5810bd17778181958387db8cdd24acf67f198533d68d2bd6e8581b0817024f7c3498f307a4753b9694bc24247d5ba07e37f7a749ab8aef1c20ba1ce02e8769d3b9009f7457c965fe739fd87efb874d00e19adfa9efceff7f32abef2a7bd80ab67c94a34e83c5c94c4821a", 0xee, r3) io_submit(r0, 0x1, &(0x7f0000002cc0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2}]) r4 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ptrace$pokeuser(0x6, r4, 0xea5, 0x80) tkill(r4, 0x1000000000016) 2018/05/29 01:53:39 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae89, &(0x7f0000000080)={0xaa}) 2018/05/29 01:53:39 executing program 3: r0 = syz_open_dev$sndtimer(&(0x7f0000000180)='/dev/snd/timer\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000240)='/dev/dsp#\x00', 0x1, 0x40000) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f0000000280)={0x6, 0x8001}) r2 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x20000) connect(r2, &(0x7f00000001c0)=@sco={0x1f, {0x8, 0x1f, 0x8, 0x7, 0x8001, 0x5}}, 0x80) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x1) poll(&(0x7f0000000100)=[{r0}], 0x1, 0x80000001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000040)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) [ 573.585211] QAT: Invalid ioctl [ 573.604181] QAT: Invalid ioctl [ 573.617336] binder_alloc: binder_alloc_mmap_handler: 3241 20001000-20004000 already mapped failed -16 [ 573.668862] *** Guest State *** [ 573.672283] CR0: actual=0x0000000080000031, shadow=0x00000000e0000011, gh_mask=fffffffffffffff7 [ 573.677264] binder: BINDER_SET_CONTEXT_MGR already set [ 573.681224] CR4: actual=0x00000000000027fa, shadow=0x00000000000007fa, gh_mask=ffffffffffffe871 [ 573.695348] CR3 = 0x0000000000004000 [ 573.699098] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 573.704149] binder: 3241:3249 got transaction to invalid handle [ 573.705617] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 573.705626] RSP = 0x00000000000007fa RIP = 0x000000000000912e [ 573.705635] RFLAGS=0x00000012 DR7 = 0x0000000000000400 [ 573.705648] Sysenter RSP=0000000000000f80 CS:RIP=0030:0000000000002810 [ 573.705661] CS: sel=0x0010, attr=0x0009b, limit=0x0000ffff, base=0x0000000000000000 [ 573.705683] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 573.711767] binder: 3241:3249 transaction failed 29201/-22, size 72-8 line 2856 [ 573.718252] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 573.718268] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 573.726122] binder: 3241:3243 ioctl 40046207 0 returned -16 [ 573.730245] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 573.730262] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 573.730275] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 573.730291] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 573.730303] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 573.730318] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 573.730328] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 573.730338] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 573.730346] Interruptibility = 00000000 ActivityState = 00000000 [ 573.730349] *** Host State *** [ 573.730359] RIP = 0xffffffff811f744c RSP = 0xffff8801b3f5f390 [ 573.730383] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 573.771767] binder: undelivered TRANSACTION_ERROR: 29201 [ 573.776572] FSBase=00007f6ab69ed700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 573.776584] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 573.776597] CR0=0000000080050033 CR3=0000000185bbc000 CR4=00000000001426e0 [ 573.776612] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 573.776622] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 573.776627] *** Control State *** [ 573.776638] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000ca [ 573.776646] EntryControls=0000d1ff ExitControls=0023efff [ 573.776661] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 573.782716] binder: undelivered TRANSACTION_ERROR: 29201 [ 573.790363] VMEntry: intr_info=00000b0d errcode=00000000 ilen=00000000 [ 573.790373] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 573.790381] reason=80000021 qualification=0000000000000002 [ 573.790389] IDTVectoring: info=00000000 errcode=00000000 [ 573.790395] TSC Offset = 0xfffffec9ec0d8ba2 [ 573.790403] EPT pointer = 0x00000001c122b01e 2018/05/29 01:53:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x100, 0x0) ioctl$KVM_SET_TSC_KHZ(r2, 0xaea2, 0x7ff) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x2ff, 0x5d, &(0x7f0000000580), 0x17d) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="c4e32d7d0b02dff40f22e70f01d165660f3881ab00000000650f01591bc4c3715cd700c4e3314ca9897e0000ba3e0fc76ec88fc9d89ade", 0x37}], 0x1, 0x0, &(0x7f0000000100), 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000), &(0x7f0000000100)=0x18) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/29 01:53:41 executing program 2: r0 = memfd_create(&(0x7f0000000540)="617474720032f4534aa55d4ae0c3c4972ab3769c8865ee53d31d9c59cb60b9a9930af9f5ba44ee339f4e6820549bc9b4681b2f43049725a0dd6a19a4db5e22af4c0a67e452896735037de4cf", 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000400)=[@in6={0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x1}], 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='attr\x00') r2 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001440)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast2}}, &(0x7f0000001540)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001600)=0xc) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001640)=0x0) r7 = geteuid() r8 = getgid() r9 = fcntl$getown(r2, 0x9) r10 = getuid() fstat(r0, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r12 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001700)='/dev/mixer\x00', 0x100, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000001740)=0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001780)={{{@in6=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6}}, &(0x7f0000001880)=0xe8) r15 = getegid() r16 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@rand_addr, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000001b80)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001bc0)={0x0, 0x0, 0x0}, &(0x7f0000001d40)=0xc) r19 = getpid() fstat(r0, &(0x7f0000003dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000003e40)={0x0, 0x0, 0x0}, &(0x7f0000003e80)=0xc) sendmmsg$unix(r1, &(0x7f0000005580)=[{&(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x91}, {&(0x7f0000000640)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000c00)=[{&(0x7f00000006c0)="bb7148c00e093d6e8e45c136027756a71463e46fced103a50a01168e7b565cf9b668b0dfc12aa05795b9f8e25febf8e403ae6ec08701e0a454e00acc43fada8d949cc881af8d79d8", 0x48}, {&(0x7f0000000740)="7fcd1416ec191483ba200f64f457941302f844dac5f60f413bce33014d6f4f153841f6d20b41106916c993231e60ae414d7a70e0a0d4a07d31a3f3feae06abebe7009d36081e1ba3c5f11b58382738a679daca4fa3e2e67febb59a812f841eb95c6fd7661c475f", 0x67}, {&(0x7f00000007c0)="37e5df48ffd003d8f6951c70c87218fc09c9c4c2d6da3d348dc7e86c4ec0ee26e497495c2891444687a66210c21a062bf954d5804312bd30437cd674781295a77e13df1abe3052b153a290f8e7ee88391079e3cbe5c87ff7a7173599808f8c64279414aa200d5f", 0x67}, {&(0x7f0000000840)="947b97b3e54e3cb238853d10066860f8cbef3c3ad29265596eea68d2eae2c41518421e62ab80e2ba345e81d83df4e297ba03b189b0a131f99b3c0f5da515159f1a9e014591e650390c543fb7539299129ada396767f8c83dbe724aa68a59710125690db79b0847f1bb840b423b25984dcd0245cbe292b4986ab4be0811df4df0f7e86d339aa5bca1d50b051b5579f75deba7473b3225caadca41590604c6e4d07357bf8de0a33a6e61cb711ba1c94981a21ee29a091108e9e2daf60327085c88e7391abd421439cc41e22a20ed296ff9fd42eb75b16eda49", 0xd8}, {&(0x7f0000000940)="a0e1fcbc513a3d7191b9674634f6e73433b587e4bbcd83e594900c8f66a4291ebf290778cc020efb8822e8c490e10b649ed9c1ac37120c832bbd26999f194d7e2d4ab2d2d944aa7bb3e9c31fb6e1e802d1223c172854991571e909d0a98550d22f995d81aaaef8b34b6cfaf8613f02d8ab9da2674c1816704515a975551e0b10f949b969201569f7d4efd018d78a685ec9e05f823bd0ec1d4e11650ac8cef29c29602246f2db47a88fda68ab14", 0xad}, {&(0x7f0000000500)="e48c186f91ad6107e30281b754c6cb05c9629a2f57723b38b19d567c6ef3feaf17b1a81c3c08", 0x26}, {&(0x7f0000001dc0)="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", 0x1000}, {&(0x7f0000000a00)="00de3c688d38e5616db3dd050684278da3", 0x11}, {&(0x7f0000000a40)="7bb562cf5ef878a53e4b43e42288168e608d11eee924a9295dde72c9c50da4a0c306a748b6313bea67d318388eb02c923c0404c81e2ec00d3e2bbf90835e3f6b03c37cd4e9a8bc94b511f3c860f9d6c914721cfd0033512d14787d302af80998a6ed116cbc811bd816ecbe84274ac29cc0addeeee861563dc26f9a6408e601a90286a62e3e89f1d92382f5a1cc354aacd9ffc2b3c4347625ff040cb3e456a02e31991feb20dc11939bdebbeb951e721d9a3ba45cc338b195fd4d14bfe761e9ccaebc99d8a10aa02ad9e438312057da206999ca623890f5712a97fb8ce9b0e093ade01690db9fe2c55fc9b7a6d3f76f1dd97209887caaec62", 0xf8}, {&(0x7f0000000b40)="815046add7978c0af4165a36b25854b378ac37eb9e57abc55ae8cad7e50f02d8eff0038ec0205df5b999748230b835e79ec6203a2509f60c615e3d4cbd24d03eebbf198916c2beb0bab66fad630b9f0ef26da41e3eeef88f278fb5f9ab27c1314198351390ffd68a13f5c397c1cb7b295842cdfffd0288842d5c1658119652309e989de77c4d2b14a1e8b2305bc8582501129876a14477c698192e0f9502a9651c2de8335156372f8d775b9ada09266de662441a6363f5cbfbe989", 0xbb}], 0xa, 0x0, 0x0, 0x880}, {&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000000d40)="231ac820413a079bbc5c44a02baad621f49750b9e283930a6c5f306cc43a8c6f376086547bcdf6d4a8f1eaa82956ebf21a75b74fc0ac1777b98e538453e5fd62f2b6f881a6336702865acff9ac39c3caa2fdf6aa0fcd6424dcbe6af3011f86b19685d1a914d0423b2d5dc5e12c1db2bcf24fda80ae0f98c00ba9057145d058419ffdbff8c57f50f6951b24238b681124357f113b17baa45b5f85872e9eea72041564214ca2f18ce878fc196cc01faaedf31d4f729fc1092fcce38d524278696b682d49ca7ab9512fddbf17723e99f318b58471d7e2a408f49b81c2eba34b139c2d7d26befd66c9542c8eaaadc7ef82a39d11", 0xf2}, {&(0x7f0000000e40)="b209510637b86aa531d5f5cada112be5f43b97256fdb5e5ba32505db572b01c9c943c0adcafbe6357a4e2ccbc2c1cc9a65bb8356be3193a792c33e99221bb72782ad6615c0c9cdfc3cc434a6de", 0x4d}, {&(0x7f0000000ec0)="296d5ae7bcd47cc7041a50321122da17e14e55f000db27647024851dfcfcc254d0cb78672e87144e5f652cb6823e8035b23cc2b058cb08fda7a78be66963c5464a9e8881a2498853f1d3e28cda92e6aa968f5189450cf051d67bdf1b8ad06d6aaf92c27fff432a5d6d3da1c362f418f2e26cffe64681ec7f4a25f60648b41358757b96cd6a8e09304a7712b7552a82b65f8c38", 0x93}, {&(0x7f0000000f80)="e54c6d7a7ddda8e5855aa2", 0xb}, {&(0x7f0000000fc0)="db332f83517a6d13657c55356391b7bdd4f0dc49f0256c784318dae66b10594f3a8d7e624e117b3b8306946277f9a7321f50380d210bb924fb4b06edefa2a20e410a58c7f80a7b3723b449f8abf41df19deb10cd19cb6eb0b83025fc66361a8a777962ff49228c05471a1d8700070f13b4dbd9b9d9e22a9b5b43562ceafa591b55f0ad5d1fc7901afaa612934c7b37545f83d48eb780139af19beee2c4d4b17f33965949b6b026fd927d01de1a1507f6b5003b309c0da7d7d0457e908a6851caf6530f9fdce9", 0xc6}, {&(0x7f00000010c0)}, {&(0x7f0000001100)="be87c6187a7df7e75cbdae1d5f8dc4525ae7c6c207b2ae3a14a447ceab67d7b2f8978f9406841357d813937a751bd0545652e97a7bdedd2eff270a70f8e28f01de649795b96b6b3692b50b7f1958866991b956af33a94abc68d9635de68b22310bf836ddaf1a596a5a62f0a154f4a5ef6fc1ab417361844f2df824934a531814008a5ec784461635a6da89e4aec64bc0e2c61f6af284baf1189e78c7925d335cce3657b3e924db7eb1", 0xa9}], 0x7, 0x0, 0x0, 0x4000010}, {&(0x7f0000001240)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001400)=[{&(0x7f00000012c0)="9a812db4c39cdc03baa8435541df46c669d360e7e1f2d7b54105225e13d6d98abd0999ec575fe548562217b2edeb32395cb172438262", 0x36}, {&(0x7f0000001300)="d4b8f7a127f809e26758a86bb6a6baf72f37034c0e832d3ca681dc97e3f2e4256e710c0d838b434690da1d79fec96207061ca1ef75364e4116beded9338f05b5a06167854d58a7abe63dfd7f09cc68223bef78e0ecd7fe1ad24bcf47287ceb6a79bd1378bdba1be85eaaac381c3290913e", 0x71}, {&(0x7f0000001380)="ad83dc926be51f50ab5946e8c3f963923a1867acfb19f1770aceabca90357a669f1127fbfe9a5b2d0e8d607a46b8f754f6f71342a0f54557d728c674973a08c4e43fd6760d423946b10323b15ae1ff2ce62ad7688f736c28", 0x58}, {&(0x7f0000002dc0)="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", 0x1000}], 0x4, &(0x7f00000018c0)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @cred={0x20, 0x1, 0x2, r9, r10, r11}, @rights={0x38, 0x1, 0x1, [r1, r2, r0, r1, r0, r1, r1, r0, r0]}, @rights={0x28, 0x1, 0x1, [r1, r2, r0, r12, r1]}, @rights={0x38, 0x1, 0x1, [r0, r0, r2, r0, r2, r1, r1, r2, r2, r2]}, @cred={0x20, 0x1, 0x2, r13, r14, r15}], 0x118, 0x20004800}, {&(0x7f0000001a00)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000001b40)=[{&(0x7f0000001a80)="66869cbfafecd80f51b5e0be63fd4936539fa815f3f5a6c402f0b7ae9263d0c2c20ff57aa71e6412222760f371b39c0f5d23857ecd9aff73343e52ddd3b1ee46d715a536609dd2bc0f5115e7867ff12e05a805b61637fa1a39fa486dbb11e01924866b48de83b85b50ddad9dc4ba44eebed71936e8d79b96e72f4f0a8908409c65ea0fcda2f1d6416c03285f4d8b8219127c791e24fc9374be10767a436a36f4d8cf1e4f17e29a8f78818a1ab116265b56dfff74858e19", 0xb7}], 0x1, &(0x7f0000003ec0)=[@rights={0x20, 0x1, 0x1, [r1, r2, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @cred={0x20, 0x1, 0x2, r16, r17, r18}, @rights={0x18, 0x1, 0x1, [r2, r1]}, @cred={0x20, 0x1, 0x2, r19, r20, r21}], 0x90, 0x80}, {&(0x7f0000003f80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000054c0)=[{&(0x7f0000004000)="76e1484fb5ebc902b18d75d58fbd071a7348307b0da1af0fabc24aaabe7ad09fa12e04315895d3d7cba8ac36f45d2a1f18b484f29c9789cfe4cb5c6772c631f41dc8a9bf0730581242aca193dacee95f9455db81be4060f102c7f78430655065c4c79fc16681faa76f1cc9500e2ea8066c48f81584e5f05cffc653dc32f851d421decf39af5eaec903b12c7b978926dcd64baf004ef7e393e7e93dd3b50f1da5659d1827d16ed45cd7", 0xa9}, {&(0x7f00000040c0)="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", 0x1000}, {&(0x7f00000050c0)="e41e8410f5546e7d92b134be1ea9aa3e776705707e3c6c7ea0f843009f35f9cb750062109239c71ba295d0f2f17211fb612b60162af0033c2409a618eeaa33381ac1d9a93989aa5303d4fe0cb1c4c1fc9506e10258a17f883c3c791fbe10cf2e7a2530ac1da2a9e7098d25adaab6f4caeb0a942e7e617fc258f18fb68550aa704fcc479c38af0965e93a9738d42f9070e03362c23d8276220e33f400e9", 0x9d}, {&(0x7f0000005180)="4e7ea49c281ae7302b751e68c7d25e66bfa8d17853795519551b70b1", 0x1c}, {&(0x7f00000051c0)="5495115138436a8a84c4191eba1b95c4b10b48fa7265d58ba7e4d8d28b0917088dc7", 0x22}, {&(0x7f0000005200)="486a1421127f9e44977ee1535034a7638c13ace13bcdb84ee5aec5348c00c50020cdb886bae99664ef1b34b90d35b2c8240d72442e25682e04b61d3b40e0cdb16cde60409109423eb7d154d33051f094fb092cde8fcc65335e3f89cc2731d241659c67a181027eb973cf2b0e6729b8db61b3ef941d2ce5b73ea3116538b9774c49cd6c72d599461b08a0fbc28c868d138255affcb9e49b3bcc7f2739f61795180e4335", 0xa3}, {&(0x7f00000052c0)="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", 0xfd}, {&(0x7f00000053c0)="c3d587310cbe709a4af278c078256e263b3a4937ce01f18b00d12cf5ba2e921760410bc0dbfef47d53ec646d05281c0930f119b0ab5780aff2d540513ca29a6aa4fb8fe89d4d230bfd50af611e38da70650ce90fe9fe132e6356a3df5066310f47ef68995235b9b099933e7e83e8b91fd06b5a4fa5c733194b6a3930425c7ee537d1865de6671c2a84afb4a340ae945e6ebff71560b05406cb5c6b333095267f030888fb138effa63fb2d59699af6f5bf7c93ae9c41c271365c3f28149548507b79141c56d66a71e6c329fbf55dfc1f66ca153b8b3a7b8f45b869e7e99b00bf318cc67d29a772d31", 0xe8}], 0x8, &(0x7f0000005540), 0x0, 0x40}], 0x6, 0x4080) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xaf, "93cc78580716a5e8ceb9dcd46ae0b84604f8e5fd6baf8f770bf2c3c84ee81e32ef628c2a499948275cff73e9bfbd91ea51413546f8687162616a388747d1f3dfd405a1e39fd024165d791f5d3e3ad8cec8b76b0c605e5ee23c73e6ddd8dbfca88f293e32934d0b1d35e3336ac67d344b74d67ff798a0028cedc0b6ae220c9430198d81e3cdbbae1f4d8aeb5977d2cc7feb45dac3fcfd8510a2965ea270e88602ef3f49591a095bc9e3733aac59f7dd"}, &(0x7f0000000080)=0xb7) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r22, 0xfffffffffffffff7}, 0x8) fstat(r1, &(0x7f00000001c0)) r23 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ptmx\x00', 0xa83, 0x0) ioctl$TIOCSETD(r23, 0x5423, &(0x7f0000001580)=0x1b) writev(r23, &(0x7f0000001d80)=[{&(0x7f0000001c00)=';', 0x1}], 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x9, 0x30, 0xb, 0xff}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000240)=ANY=[@ANYRES32=r24, @ANYBLOB="6b0000001186ce7351c6ac73487fc604bd0300000000000000983d5fab6e4a2af9988eac16c9d4078704c225c27ad923e00c61f47b5357091d29096d9d015217602f3e1990f645d66357c640f6758d1d234bd6d30003214000000000000000eeb36cbc2f56ebfa87fb2f72ba8f7826040310d6f679aa96d27ee1aeabe951d19ed0b3dbdd57e2b5429f9b2d465d19fc62c663922b5258a3c6435b2251a47c790346"], &(0x7f0000000100)=0x73) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x0, 0x0) 2018/05/29 01:53:41 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r0 = socket(0x20000000000000a, 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic\x00', 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0xfffff014}, {0x6}]}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=@flushsa={0x25c, 0x1c, 0x1, 0x70bd2a, 0x25dfdbfb, {0x33}, [@lifetime_val={0x24, 0x9, {0x81, 0xfffffffffffffffd, 0x4, 0x3ff}}, @algo_auth_trunc={0x11c, 0x14, {{'sha224-ssse3\x00'}, 0x678, 0x180, "d0d867f57a13b7248b28acd1c7fc912c06a1fc296e2fbaa7e474cf716790a7392980eab0e80581d032a87845061088b245b133bf20125e2cbd1da9e4e7daab412aca40371883cde6549e25590d474da5ef51c380f1e56a13b72901481c4392093de492a4afeaa2fbae1476157b2d5cdbd04f7706cb015de80fa86b07f95df5fe2a75c7686ada5a9f08560544ce62a0d070dd02308878b1eb0e6d47d3cef80b856675b47bcb156001e022f04c5ff54d17b8a4d54f91b69e81973ac748035a86a48e2eb698727c25a5ab0a1a223bb084"}}, @srcaddr={0x14, 0xd, @in=@local={0xac, 0x14, 0x14, 0xaa}}, @proto={0x8, 0x19, 0xff}, @algo_comp={0xec, 0x3, {{'lzs\x00'}, 0x520, "35f4d381366d522d2154303f9d76b24ad76095c450570a76d2b4d764c32d131b88c3c4ef22b2ef0f84fa27678a594b61c80c9ee7163464906f22857363c542b453d535460eb88ab80210df9512865998fe55f4049ed4aabae10141e00e94c95af2fa19f71d092cf9bb9d4bb89d954ec54af060f5fb2a7861159083935a6ef7f85352821f47beaaf3ce1b74c098d7014570be61f2890f8017dc4e6d441af0a6148dd65563"}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 2018/05/29 01:53:41 executing program 5: pipe2(&(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket(0x10, 0x80002, 0x0) recvmsg(r1, &(0x7f0000000600)={&(0x7f0000000340), 0x80, &(0x7f0000000840), 0x0, &(0x7f00000008c0)=""/4096, 0x1000}, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000240)=0x40, 0x4) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x0, 0x304, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) sendmmsg$alg(r1, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) splice(r0, &(0x7f0000000100), r0, &(0x7f0000000080), 0xd, 0x0) 2018/05/29 01:53:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00l\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:41 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x101181, 0x10) sendmsg$rds(r1, &(0x7f0000000880)={&(0x7f00000003c0)={0x2, 0x4e23, @rand_addr=0x3}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000400)=""/102, 0x66}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)}, {&(0x7f0000000500)=""/232, 0xe8}, {&(0x7f0000000600)=""/193, 0xc1}, {&(0x7f0000000700)=""/36, 0x24}, {&(0x7f0000000740)=""/91, 0x5b}], 0x7, &(0x7f0000000840), 0x0, 0x40000}, 0x840) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="57e815b99097bf9c0c0775b090c90f8437691f85f68889cf", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000ce36e356ccdd5186995320a00000017010000020000000000200000000000"], 0x18}], 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f00000008c0)={{0x3, 0x3, 0x0, 0x2, 0x8}, 0x3, 0xffff, 0xfffffffffffffffd}) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f0000000240)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000100)) getpeername$netrom(r2, &(0x7f0000000080), &(0x7f00000000c0)=0x10) 2018/05/29 01:53:41 executing program 1: r0 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f00000002c0)={0x5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @remote}]}) r1 = open(&(0x7f0000f9aff8)='./file0\x00', 0x8000000000141046, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={0x0, 0x80, 0x9, 0x401, 0x1bd, 0x80000000}, &(0x7f0000000340)=0x14) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000380)={r2, 0x101, 0x30, 0x9, 0x1}, &(0x7f00000003c0)=0x18) mount(&(0x7f0000ae2d7d)='./file0/file0\x00', &(0x7f0000851000)='./file0\x00', &(0x7f0000a6f000)='nfs4\x00', 0x0, &(0x7f0000000000)='v3') clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimensat(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r3, r4/1000+10000}}, 0x100) getsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f0000000140), &(0x7f0000000100)=0x3) linkat(r1, &(0x7f0000000040)='./file0/file0\x00', r1, &(0x7f0000000080)='./file0/file0\x00', 0x1000) 2018/05/29 01:53:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') accept4$inet6(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, &(0x7f00000001c0)=0x1c, 0x80000) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000020280001000000000000000000010000007b6c6e6605000000"], 0x1c}, 0x1}, 0x0) getsockopt$inet6_int(r1, 0x29, 0x35, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 574.677830] binder: 3285:3288 got transaction to invalid handle [ 574.684117] binder: 3285:3288 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:41 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x20000, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000000000000000aa"], 0x18) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000100)=0x7fff, 0x4) writev(r2, &(0x7f0000fdbff8)=[{&(0x7f0000ac9000)="290000002000190000003fffffffda060200000000e80001040000040d001400ea1100000005000000", 0x29}], 0x1) 2018/05/29 01:53:41 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffffff) getsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x6, &(0x7f0000000140)=0x2) setsockopt$ax25_int(r0, 0x101, 0xf, &(0x7f0000000040)=0x8000, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000180)={0x5, 0x5, 0xa6, 0x7}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@loopback, @in=@rand_addr}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@mcast1}}, &(0x7f00000004c0)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', r2}) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000024000100000000000000000500000000000000006c7a6a6800000000000000000000000000000000000000000000008cc4e0a70000000000000000000000000000000000000000000000"], 0x5c}, 0x1}, 0x0) [ 574.723477] binder_alloc: binder_alloc_mmap_handler: 3285 20001000-20004000 already mapped failed -16 [ 574.754769] binder: BINDER_SET_CONTEXT_MGR already set [ 574.762199] binder: 3285:3288 ioctl 40046207 0 returned -16 2018/05/29 01:53:41 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x3, 0x1) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f00000001c0)={0x3, 'vlan0\x00', 0x1}, 0x18) getpeername$packet(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000240)=0x14) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="ba6100ecf3af0f8aa100baf80c66b8f65b3e8466efbafc0cb000eeb800008ed00f5eae2bd90fc79f0100260f01cbdb4a0e2e0f525a00", 0x36}], 0x1, 0x0, &(0x7f00000000c0), 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:41 executing program 3: r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000480)=@broute={'broute\x00', 0x20, 0x2, 0x310, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x388) [ 574.772141] binder: 3285:3303 got transaction to invalid handle [ 574.778408] binder: 3285:3303 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:41 executing program 6: r0 = socket$inet6(0x10, 0x80003, 0x20000000000000) sendmsg(r0, &(0x7f0000002fc8)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f000000dfaa)="5500000019007f5300fe01b2a4a280930a06000000a84308910000003900090020000c00060000001900a30700000000000000dc1338d54400009b84136ef75a1500de448daa7227c43ab8220000060cec4fab91d4", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 2018/05/29 01:53:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000001c0)="66b871000f00d865460f09440f01d1460f080fc7690b66b882008ed0c441fc513a4e0fc72bb9c90b00000f329f", 0x2d}], 0x1, 0x7, &(0x7f0000000200)=[@cstype0={0x4, 0x4}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x109000, 0x0) getsockname$ax25(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10) ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, &(0x7f0000000140)={0x0, 0x5, 0x80000000, &(0x7f0000000100)=0x2}) [ 574.820770] netlink: 72 bytes leftover after parsing attributes in process `syz-executor1'. 2018/05/29 01:53:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:41 executing program 3: socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@dev}}, &(0x7f0000000080)=0xe8) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000280)={@empty, @remote={0xac, 0x14, 0x14, 0xbb}, r2}, 0xc) ftruncate(r1, 0x81) r3 = memfd_create(&(0x7f00000000c0)=',cpuset\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000040)=0x4) preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000000)=""/40, 0xd}], 0x1, 0x0) [ 574.903573] binder: undelivered TRANSACTION_ERROR: 29201 [ 574.909593] binder: undelivered TRANSACTION_ERROR: 29201 [ 574.921948] netlink: 72 bytes leftover after parsing attributes in process `syz-executor1'. [ 574.978898] binder: 3328:3331 got transaction to invalid handle [ 574.985175] binder: 3328:3331 transaction failed 29201/-22, size 72-8 line 2856 [ 575.042135] binder_alloc: binder_alloc_mmap_handler: 3328 20001000-20004000 already mapped failed -16 [ 575.061714] binder: BINDER_SET_CONTEXT_MGR already set [ 575.080123] binder: 3328:3331 ioctl 40046207 0 returned -16 [ 575.086514] binder: 3328:3340 got transaction to invalid handle [ 575.092692] binder: 3328:3340 transaction failed 29201/-22, size 72-8 line 2856 [ 575.122253] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.135732] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:41 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000400)=@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000000580)="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", 0xa84}], 0x1, &(0x7f00000016c0)}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000012000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 2018/05/29 01:53:41 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) recvmsg(r0, &(0x7f0000002680)={&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000002600)=[{&(0x7f0000001400)=""/142, 0x8e}, {&(0x7f0000000200)}, {&(0x7f0000003440)=""/4096, 0x1000}], 0x3, &(0x7f00000014c0)=""/251, 0xfb}, 0x0) bind$inet(r0, &(0x7f0000eed000)={0x2, 0x4e21}, 0x10) syz_emit_ethernet(0x423, &(0x7f000018f000)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x415, 0x0, 0x0, 0x0, 0x11, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @dccp={{0x0, 0x4e21, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d73cde", 0x0, "f53475"}, "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"}}}}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x800, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000180)) sendmsg(r0, &(0x7f0000000140)={&(0x7f0000000040)=@in={0x2, 0x4e21}, 0x10, &(0x7f0000000100)}, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000001c0)=0x3, 0x4) 2018/05/29 01:53:41 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = accept4(r0, &(0x7f00000002c0)=@hci={0x0, 0x0}, &(0x7f0000000180)=0x80, 0x80800) connect$packet(r0, &(0x7f0000000340)={0x11, 0x0, r2, 0x1, 0x15, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x11}}, 0x14) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='ns\x00') clone(0xffffffffffffffff, &(0x7f00000004c0)="85f850e9b02c42ffc40ee316a3429d0b1802f2869fcdb5e71b474ae688c9ffe6cd01724b7a39b9a42032b684849bc2f3fb9a6771139c4a99e6a9ac9cb298ebf0bfc7e08f26f93fc751f79afe69f44054e28b8d16173b85b04806e604b207edc7b07ae235e1634e73f853bcfdfdf351412200d19236922902233afda7619f5a", &(0x7f00000003c0), &(0x7f0000000200), &(0x7f0000000400)) accept$ax25(r1, &(0x7f00000001c0), &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e24, 0x100000000, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1f}}, 0x1f}}, 0x1, 0xfff, 0x1, 0x10001, 0x4}, &(0x7f00000000c0)=0x98) chdir(&(0x7f0000000400)='./file0\x00') setsockopt$inet_sctp_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r4, 0x4) fstat(r3, &(0x7f0000000240)) 2018/05/29 01:53:41 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_void(r0, 0x29, 0x3f, 0x0, 0x0) 2018/05/29 01:53:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x0, 0x80000) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)="70475debd186b5a402000000", 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:41 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106-gcm-aesni)\x00'}, 0x58) r1 = inotify_init1(0x80000) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000580)={"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"}) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') recvmsg(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000280)=@sco, 0x80, &(0x7f0000000000), 0x0, &(0x7f0000001400)=""/6, 0x6}, 0x0) socket$alg(0x26, 0x5, 0x0) 2018/05/29 01:53:41 executing program 5: setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000b86000)={0x0, &(0x7f0000f40ff8)}, 0x10) madvise(&(0x7f0000b40000/0x3000)=nil, 0x3000, 0x4000000000000009) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ptrace$getsig(0x4202, r0, 0xffff, &(0x7f0000000200)) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x200000, 0x0) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000140)={0x1000, 0x2000}) r2 = getpgrp(0x0) r3 = getpgrp(r2) r4 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x3f, 0x4000) r5 = perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x0, 0x94c, 0xffff, 0x6, 0x0, 0xffffffffffffffe6, 0x2, 0x2, 0x1be, 0x9, 0x101, 0xbb, 0x3, 0x4, 0x4, 0x48, 0x0, 0x8001, 0x7, 0x4, 0x10001, 0x0, 0x2, 0x2, 0x2, 0xffffffff, 0x0, 0xffffffffffffd634, 0x0, 0x4, 0x8, 0x0, 0x9030, 0x3, 0x800000, 0x8a03, 0x0, 0x400, 0x4, @perf_bp={&(0x7f0000000000), 0x3}, 0x10, 0x1648d4c2, 0x0, 0x5, 0x517, 0x8, 0xf00}, r3, 0xe, r4, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000100)=0xffffffffffffff00, 0x4) madvise(&(0x7f0000b40000/0x1000)=nil, 0x1000, 0x10200000008) fcntl$setpipe(r5, 0x407, 0x3) membarrier(0x22, 0x0) 2018/05/29 01:53:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000050000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:42 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) r0 = shmget(0x3, 0x2000, 0x1, &(0x7f0000ffe000/0x2000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000080)=""/144) r1 = socket(0x11, 0x8, 0x5) r2 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0, 0x42) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x80000000}) sendto(r2, &(0x7f0000000140)="95e46ebc8d60f4c81317f449e991f3dcb11fc9b2d24674fb8ef979", 0x1b, 0x8001, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e22}, 0x3, 0x4, 0x3, 0x2}}, 0x80) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x2, @mcast1={0xff, 0x1, [], 0x1}, 0x80}}}, &(0x7f0000000000)=0x84) ioctl$PIO_UNIMAPCLR(r2, 0x4b68, &(0x7f0000000480)={0x8001, 0x4, 0x7fff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r3, 0x4}, &(0x7f0000000400)=0x8) syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0x61a3, 0x180) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write$cgroup_pid(r2, &(0x7f0000000200)={[0x39, 0x33]}, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='ip_vti0\x00', 0x10) socket$inet_smc(0x2b, 0x1, 0x0) [ 575.634492] binder: 3349:3359 got transaction with invalid offsets ptr [ 575.666866] binder: 3349:3359 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:53:42 executing program 1: syz_extract_tcp_res(&(0x7f0000000000)={0x41424344}, 0x1, 0x96) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x42a, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="00800800907800080402050e000000060000000600000000050600000001fe06e2d4c3d900220b1094b492e80ad4de3a0303fb002e1ca3bfb3bdab37d670c4a07f717ff971a73fc39f9d91bc95926d5eec7fc6691a7e36fbc6e48f07b5289b65a8c110506f1bd99ded2f7055e85a64ad77effccc227bfb72402724c6a5984cd40b1d0ddd64414f398f2f6b717219bcf3b0da004aa65e512de04752984dd42f60c3a9662e7f4052612aa239d22f7676d2b2a4035a962f53a25f5679579937acfcaf5e521eb7307354ed00000000000000"], 0x0) 2018/05/29 01:53:42 executing program 5: getrandom(&(0x7f0000d85000), 0x0, 0x3) clock_adjtime(0x6, &(0x7f0000000000)={0x6, 0xf6, 0xe4e3, 0x4, 0xb6, 0x2000000000000005, 0x8000, 0x6e20, 0xffffffffffff8000, 0x20, 0xfffffffffffffff8, 0x6, 0x1000, 0x7, 0x0, 0x1, 0x2, 0x8, 0x3, 0x5, 0x26b, 0xff, 0x1, 0xfffffffffffffffe, 0x7f, 0x1}) r0 = msgget$private(0x0, 0x200) msgrcv(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0071fc4868000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d000025c1644e732d7afe0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c14d926d00000000000000000000000000000000000000000000"], 0x92, 0x2, 0x0) [ 575.713330] binder_alloc: binder_alloc_mmap_handler: 3349 20001000-20004000 already mapped failed -16 [ 575.743358] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:42 executing program 6: r0 = socket(0x440000000002, 0x3, 0x2) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") socketpair(0x1e, 0x1, 0x1, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)=""/49, 0x31}], 0x10000023, &(0x7f00000002c0)=""/77, 0x4d}, 0x0) recvmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0x2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0xffffff77}], 0x1, &(0x7f00000001c0)=""/17, 0xffda}, 0x3f00) sendmsg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), 0x28a, &(0x7f0000000000)}, 0x0) 2018/05/29 01:53:42 executing program 1: recvmsg(0xffffffffffffff9c, &(0x7f0000000580)={&(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f00000002c0)=""/1, 0x1}, {&(0x7f0000000300)=""/16, 0x10}, {&(0x7f0000000340)=""/68, 0x44}, {&(0x7f00000003c0)=""/27, 0x1b}, {&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/122, 0x7a}], 0x7, 0x0, 0x0, 0x8001}, 0x2020) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000005c0)=0x10001, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000180)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0xa0040028, 0x0, 0x0, 0x0, 0x0, 0x8100}) 2018/05/29 01:53:42 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b630f09"], 0x0, 0x0, &(0x7f0000000300)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r2 = dup2(r1, r0) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f00000001c0)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000240)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000280)={r3, r4}) getsockopt$packet_int(r2, 0x107, 0xe, &(0x7f0000000000), &(0x7f0000000100)=0x4) getuid() ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x10, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0e630c4000000000ebafe36f54f4545902fb590000000000000000654eb5b28e2d4efc9199b7081f02"], 0x0, 0x0, &(0x7f0000000280)}) [ 575.769837] binder: 3349:3359 ioctl 40046207 0 returned -16 [ 575.803288] binder_alloc: 3349: binder_alloc_buf, no vma [ 575.808972] binder: 3349:3379 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:53:42 executing program 2: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x80000, 0x0) write$binfmt_elf32(r0, &(0x7f00000008c0)=ANY=[], 0xffffffffffffffb3) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000140)=ANY=[@ANYBLOB="52001c0101000400ffff3f00070000150000000009009f6304b2"]) r2 = dup2(r1, r1) socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000200)) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0x7c, &(0x7f0000000000)=@assoc_value={r3, 0xfffffffffffffffe}, &(0x7f0000000080)=0x8) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000180)={0x1, 0x1, [@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f00000001c0)=""/37) [ 575.863787] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000005000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:42 executing program 6: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000880)=@broute={"62726f7574650d0100", 0x20, 0x1, 0x278, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x0, &(0x7f00000000c0), &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000001c00000000000000feffffff0000000000000000000000001c6a000000000000000000000000000000000000000000000000000000000000feffffff01000000090000000000000000006772657461703000000000000000000065716c0000000000000000000000000064756d6d7930000000000000000000006e723000000000000000000000000000aaaaaaaaaaaa00000000000000000000000000000000000000000001000098010000e80100006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000030000000000000000000000000000000000000000000000000000006c696d6974000000000000000000000000000000000000000000000000000000200000000000000000000000080000000000000000000000000000000000000000000000000000005241544545535400000000000000000000000000000000000000000000000000200000000000000073797a300000000000000000000000000000000000000000000000000000000049444c4554494d455200000000000000000000000000000000000000000000002800000000000000ffff010000000000000000000000000000000000000000000000000000000000000000000000000049444c4554494d4552000000000000000000000000000000000000000000000028000000000000000500000073797a300000000000000000000000000000000000000000000000000000000000000000"]}, 0x2f0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x22000) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000040)=0x5, 0x4) [ 575.913152] binder: undelivered TRANSACTION_ERROR: 29189 [ 575.913613] binder: 3391:3393 ioctl 40046207 0 returned -16 [ 575.942652] binder: undelivered TRANSACTION_ERROR: 29201 [ 575.971855] binder: 3402:3404 got transaction with invalid offsets ptr [ 575.993196] binder: 3391:3393 unknown command 152003355 [ 576.000885] binder: 3391:3393 ioctl c0306201 20000080 returned -22 [ 576.007703] binder: 3402:3404 transaction failed 29201/-14, size 72-8 line 2999 [ 576.016936] binder: 3391:3393 ioctl c00c642d 200001c0 returned -22 [ 576.029261] binder_alloc: binder_alloc_mmap_handler: 3402 20001000-20004000 already mapped failed -16 [ 576.038198] binder: 3391:3393 ioctl c008640a 20000240 returned -22 [ 576.058471] binder: BINDER_SET_CONTEXT_MGR already set [ 576.071748] binder: 3391:3393 ioctl c008640a 20000280 returned -22 [ 576.078571] binder: 3402:3404 ioctl 40046207 0 returned -16 [ 576.086405] binder: BINDER_SET_CONTEXT_MGR already set [ 576.092385] binder_alloc: 3402: binder_alloc_buf, no vma [ 576.097958] binder: 3402:3412 transaction failed 29189/-3, size 72-8 line 2971 [ 576.106386] binder: 3391:3413 ioctl 40046207 0 returned -16 [ 576.113832] binder: 3391:3413 unknown command 152003355 [ 576.120362] binder: 3391:3413 ioctl c0306201 20000080 returned -22 [ 576.138782] binder: 3391:3413 ioctl c00c642d 200001c0 returned -22 [ 576.146737] binder: 3391:3393 ioctl c008640a 20000240 returned -22 [ 576.149473] binder: undelivered TRANSACTION_ERROR: 29189 [ 576.153361] binder: 3391:3413 ioctl c008640a 20000280 returned -22 [ 576.164117] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:42 executing program 1: socketpair$unix(0x1, 0x8000000000000005, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000040)='s', 0x1}], 0x1) r2 = dup3(r0, r1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ppoll(&(0x7f00000001c0)=[{r0}], 0x1, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240), 0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000000)={0x8, 0xffffffff, 0x6}, 0xc) 2018/05/29 01:53:42 executing program 2: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1}, 0x8) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x40, 0x0) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000140)) ioctl(r0, 0x8912, &(0x7f0000000780)="c626262c8523bf012cf66f") r3 = socket(0x10, 0x80803, 0x0) ioctl$sock_ifreq(r3, 0x89f0, &(0x7f00000000c0)={'tunl0\x00', @ifru_addrs=@in={0x2, 0x4e20, @rand_addr}}) 2018/05/29 01:53:42 executing program 6: r0 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f0000fb5ff0)=[{&(0x7f0000000000)="1f00000002031900000007000000068100022b0509000100010100ff3ffe58", 0x1f}], 0x1) r1 = socket$netlink(0x10, 0x3, 0xc) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) r2 = socket$netlink(0x10, 0x3, 0xc) writev(r2, &(0x7f0000fb5ff0)=[{&(0x7f0000fb4000)="1f00000002031900000007000000068100023b0509000100010100ff3ffe58", 0x1f}], 0x1) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000080)={{0x2, 0x4e24}, {0x307, @random="04102bb3aa9b"}, 0x8, {0x2, 0x4e24, @rand_addr=0x20}, 'veth1_to_team\x00'}) 2018/05/29 01:53:42 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000007fffffff000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:42 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x3ffffe) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x2, 0x0, [0x4d0]}) 2018/05/29 01:53:42 executing program 3: r0 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x0, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x2000400) r1 = perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x4011, r1, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r1) 2018/05/29 01:53:42 executing program 5: r0 = memfd_create(&(0x7f00000000c0)='#em1#+\x00', 0x0) write(r0, &(0x7f0000000100)="b278d18aa7dbc626192ab39ee9d3debc698e9251f8f417e635c86e773c98ecbcdf1000cfa2394f610d45d964981946ca421ff6652def5fd7cc8cbc1c9052cb14bc10205ef9ee45601176276c73d19c2bd2e1c33df894ffe473803975f90f46d62f3dd34afdf491bb9c6a255af4e19e6fe13755744d4074c791782454c69084fd76fb111d4b20820e3a3d9bc4", 0x8c) userfaultfd(0x80000) userfaultfd(0x0) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) semtimedop(0x0, &(0x7f0000000040)=[{}], 0x1, &(0x7f0000000080)) 2018/05/29 01:53:42 executing program 4: r0 = socket$kcm(0xa, 0x7, 0x11) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) socket$kcm(0x29, 0x7, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r2) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000100), 0x4) sendmsg$kcm(r0, &(0x7f0000000380)={&(0x7f0000000040)=@nl=@unspec={0x5000000}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000200)="235db874f80e004a36422016c7d846ed2fa163e11483ff4fff60e4059829b85eca00000000800000", 0x28}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={0x0, 0x2, 0xf734, 0x120, 0x4, 0x401, 0x9ec, 0x4, {0x0, @in6={{0xa, 0x4e24, 0x3, @mcast2={0xff, 0x2, [], 0x1}}}, 0x1f1, 0x7, 0x80, 0x2, 0x2}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r3, 0xfffffffffffffffc, 0xe4f4, 0x4, 0x400, 0x100}, &(0x7f00000003c0)=0x14) sendfile(r0, r0, 0x0, 0xaa) 2018/05/29 01:53:43 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000004}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000031140b000000f8"], 0x14}, 0x1}, 0x0) ioctl(r0, 0xc0184908, &(0x7f0000000080)) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)) [ 576.645693] binder: 3435:3440 got transaction to invalid handle [ 576.651900] binder: 3435:3440 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:43 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000000340), 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendmmsg$inet_sctp(r0, &(0x7f0000000100), 0x285, 0x20040080) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) r2 = syz_open_procfs(r1, &(0x7f0000000380)='net/nfsfs\x00') r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000080)={'mangle\x00', 0x27, "7edd1b34020c19345b98261621b69e85574c15e2694a6ec3f2f58ba29d8e0ae0c5fc323353f1f8"}, &(0x7f0000000100)=0x4b) fadvise64(r2, 0x0, 0x7fffffff, 0x4) 2018/05/29 01:53:43 executing program 2: socket$inet6_icmp(0xa, 0x2, 0x3a) r0 = socket$inet_dccp(0x2, 0x6, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, {0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x17}}, 0x4, {0x2, 0x4e23, @rand_addr=0x1}, 'veth1_to_bridge\x00'}) getsockopt$inet_mreq(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast1}, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0xa, &(0x7f0000000240)={0x7}, 0xc) 2018/05/29 01:53:43 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x303401, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0xc5, 0xffffffffffff8000, 0x0, {}, 0x9, 0x3f5e}) syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x40) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [0xff, 0xff]}, 0x1}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000015c0)=ANY=[@ANYRES32=r1, @ANYBLOB="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"], 0x1008) perf_event_open(&(0x7f0000000500)={0x1, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) 2018/05/29 01:53:43 executing program 1: ustat(0xe, &(0x7f0000000080)) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x64, "72ed3cd44e3186ead09ebfbf16b478427f5cd9147e8ce6172a768f0f0e0a22863e463f541f371c6f47401c8ee46d97445729f81ec660db360d1991853164ce22af0bf8ed9f17f714377af209d8809be851163e8b04645d28a799c2e01eebfef706b29575"}, &(0x7f0000000040)=0x6c) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)={0xedc1598b730d491, 0x2, [@dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}]}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x100000000, 0x4, 0x8000, 0x4, 0x3ff, 0x8, 0x81, 0x46ae9a26, r1}, &(0x7f0000000180)=0x20) 2018/05/29 01:53:43 executing program 3: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2bbd, 0x2480) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000000180)={0x0, @rand_addr, @multicast2}, &(0x7f00000001c0)=0xc) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={r1, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x16}}, 0xc) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r2, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x0, 0x20}, 0xc) write$binfmt_misc(r3, &(0x7f0000000240)={'syz1'}, 0x34000) write$binfmt_misc(r3, &(0x7f0000000040)={'syz1'}, 0x4) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(0xffffffffffffffff) [ 576.736018] binder_alloc: binder_alloc_mmap_handler: 3435 20001000-20004000 already mapped failed -16 2018/05/29 01:53:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000080)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0x6, @loopback={0x0, 0x1}, 0x32}, @in6={0xa, 0x4e24, 0x1000, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x94db}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffffffffffff8}, @in6={0xa, 0x4e21, 0x7, @remote={0xfe, 0x80, [], 0xbb}, 0xb6}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x999, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x607}, @in6={0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, [], 0x10}}], 0xd8) ioctl$KVM_SET_GSI_ROUTING(r2, 0x4008ae6a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000340a00000100000002000000000000000100000000000000435f00000000000000000000000000000000"]) syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xcc8, 0x141140) [ 576.804198] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:43 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000480)={0x1d}, 0x10) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f00000001c0)={0x0, 0x1, 'o'}, &(0x7f0000000200)=0x9) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000240)={r2, 0x0, 0x7, [0x3674, 0xff, 0x800, 0x9, 0x400, 0x800, 0x5]}, &(0x7f0000000280)=0x16) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000017ff0)={&(0x7f0000007000)=@canfd={{0x4}, 0x0, 0x0, 0x0, 0x0, "0327e19a2b010000037dc1250200000008990039966a7d5cb2bd00000000000000000007496e6866856b76b5010000000000000000060000000118fa1efd9b0b"}, 0x48}, 0x1}, 0x0) [ 576.859508] binder: 3435:3440 ioctl 40046207 0 returned -16 [ 576.895332] binder: 3435:3453 got transaction to invalid handle [ 576.901525] binder: 3435:3453 transaction failed 29201/-22, size 72-8 line 2856 [ 577.001664] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.007571] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:43 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2, 0x100) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)=0x3) sendto(r0, &(0x7f0000000200), 0x0, 0x0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x4, 0x2, 0x0, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x80) 2018/05/29 01:53:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000001e00fb034d564b00000000015fc5cc1946d5b5f61852dea0f3ff7d50c9796afdffb57905409a6bcbe5953cedb9e7f815c6a0d9208a5062b66b6f87670e9202ee590800000000000000ad6d5dddfe9b9ac9e6897b33201ccf57f923e279bf803314442d43de5bb7c6c2d0c3c94a8deb16a821c7fc3e0185eecd85630bb6bb0256b75db986ddfc59a733ba6183bec20f969611bb440784315f7406e9b5f95a6384ee51e2b269df503769601cb6b866855f70f27580fba04a9a0e402586d230c1e7f53a5727aab175b82c8119"]) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f00000001c0)={0x2, 0x0, [0x40000070]}) 2018/05/29 01:53:43 executing program 7: r0 = inotify_init() syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000280)) inotify_add_watch(r0, &(0x7f00000009c0)='./file0\x00', 0x4000000) 2018/05/29 01:53:43 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000000000/0xc1f000)=nil, 0xc1f000, 0x2, 0x400071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x1b, 0x0) get_mempolicy(&(0x7f0000000040), &(0x7f0000000000), 0x800, &(0x7f00004aa000/0x4000)=nil, 0x2) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f0000000080)=""/241, 0xf1}, &(0x7f0000000180), 0xe}, 0x20) 2018/05/29 01:53:43 executing program 6: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede825e45a90f3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b2921ea4c8fa86a91c8275dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000002200000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[]}, 0x1}, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_pts(r0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0)=0x1, 0x4) syz_open_pts(r2, 0x0) ioctl$TCXONC(r2, 0x540a, 0x3) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000280)) 2018/05/29 01:53:43 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSF(r0, 0x40045109, &(0x7f0000000000)={0x0, 0x8b2, 0x0, 0x0, 0x0, 0x0, 0x3}) 2018/05/29 01:53:43 executing program 4: r0 = syz_open_dev$usbmon(&(0x7f0000000400)='/dev/usbmon#\x00', 0x8bdca, 0x4000) timerfd_create(0x7, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000000080)={&(0x7f0000a65ff8), 0x8}) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000100)={0x7, {{0xa, 0x4e22, 0x78, @loopback={0x0, 0x1}, 0x3}}}, 0x88) 2018/05/29 01:53:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 577.234327] binder: 3493:3494 got transaction to invalid handle [ 577.240522] binder: 3493:3494 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:43 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x100000001) read(r0, &(0x7f0000001cc0)=""/225, 0xe1) fcntl$notify(r0, 0x402, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x90000000}) sendmmsg(r0, &(0x7f00000038c0)=[{{&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000180), 0x0, &(0x7f0000000400)}}], 0x1, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x24800) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) [ 577.288017] binder_alloc: binder_alloc_mmap_handler: 3493 20001000-20004000 already mapped failed -16 [ 577.316856] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:43 executing program 5: r0 = socket(0xa, 0x1, 0x0) munlock(&(0x7f00003ea000/0x3000)=nil, 0x3000) mlock(&(0x7f000061b000/0x2000)=nil, 0x2000) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) 2018/05/29 01:53:43 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000016b000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(tgr128-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="9703dd7d565e33596e33cdabb45e8a015f9cbaacf8860d67fe6375a724f79276ee9ca21b0000006837ac737be512f4d0c9154396b4e2b2a4d9db859b3dee9eec58", 0x41) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x800, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={0x32, {0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e22, @multicast1=0xe0000001}, {0x2, 0x4e22, @multicast1=0xe0000001}, 0x2c, 0x2, 0x1, 0x3, 0xfffffffffffffff9, 0x0, 0x22d, 0xf4a, 0x6d}) 2018/05/29 01:53:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x101000, 0x0) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0x8, 0x4) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000), 0x19) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='gretap0\x00', 0x10) [ 577.337298] binder: 3493:3494 ioctl 40046207 0 returned -16 2018/05/29 01:53:43 executing program 3: r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1f00000000007400050000000000000000000000000000000000000000000000000000000000000000000000"]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x101100, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x2, 0x1, &(0x7f00000000c0)=""/188, &(0x7f0000000180)=""/58, &(0x7f00000001c0)=""/38, 0x7001}) [ 577.364322] binder: 3493:3512 got transaction to invalid handle [ 577.370531] binder: 3493:3512 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:43 executing program 6: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x569800, 0x0) write$cgroup_int(r0, &(0x7f0000000040)={[0x32, 0x3f, 0x3a]}, 0x3) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x4000000) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x7fff, 0x208, 0x1, 0x80, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={r1, 0x3}, 0x8) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000180)={'security\x00'}, &(0x7f0000000200)=0x54) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x7f, 0x411, 0x5, 0x2, 0x7f}, 0x14) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000280)=0x0) move_pages(r2, 0x2, &(0x7f00000002c0)=[&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil], 0x0, &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x6) shmget$private(0x0, 0x4000, 0xc, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000340)={0x5, 0x4, 0xfffffffffffffffe}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@rand_addr, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@rand_addr}}, &(0x7f0000000500)=0xe8) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_fuseblk_mount(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)='./file0\x00', 0x4000, r3, r4, 0x0, 0x100000000, 0x210000) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000600)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x1, 0x4) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000640)={{0xa, 0x4e20, 0x7ff, @loopback={0x0, 0x1}, 0x6}, {0xa, 0x4e20, 0x7fff, @dev={0xfe, 0x80, [], 0xc}, 0x7ff}, 0x5e22, [0x2d00, 0x7f, 0x7, 0x7fffffff, 0x8, 0x5, 0x8, 0x8]}, 0x5c) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000006c0)={0x9f14, {{0xa, 0x4e21, 0x0, @loopback={0x0, 0x1}, 0x6}}}, 0x88) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000780)) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000800)='fou\x00') sendmsg$FOU_CMD_ADD(r0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r6, 0x200, 0x70bd28, 0x25dfdbfd, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x5e}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e22}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4000) getsockopt$inet_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000900)=""/4096, &(0x7f0000001900)=0x1000) r7 = semget(0x1, 0x1, 0x201) semctl$GETALL(r7, 0x0, 0xd, &(0x7f0000001940)=""/47) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000001980)=[@in={0x2, 0x4e21, @rand_addr=0x800}, @in={0x2, 0x4e21}, @in6={0xa, 0x4e22, 0x3b5, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x4}], 0x3c) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) pipe2(&(0x7f00000019c0)={0xffffffffffffffff}, 0x4800) flock(r8, 0x1) syz_open_dev$usbmon(&(0x7f0000001a00)='/dev/usbmon#\x00', 0x80000001, 0x0) 2018/05/29 01:53:43 executing program 5: r0 = socket$inet6(0xa, 0x40000080806, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xa6c2, 0x1) ioctl$EVIOCSABS20(r2, 0x401845e0, &(0x7f0000000040)={0xc2, 0x8, 0x2, 0x5, 0x6, 0x80000001}) listen(r0, 0x1) r3 = socket$inet6(0xa, 0x80006, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x1) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/29 01:53:43 executing program 2: mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c832, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/l2cap\x00') ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x177, 0x2, 0x80000001, 0x5, 0x401, 0x9, 0x9, 0x2000000000000, 0xff, 0x1, 0x7, 0xffffffffffffff05}) [ 577.521572] binder: undelivered TRANSACTION_ERROR: 29201 [ 577.527727] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:44 executing program 1: ioctl$BLKTRACETEARDOWN(0xffffffffffffffff, 0x1276, 0x0) unshare(0x8000000) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) unshare(0x28020400) 2018/05/29 01:53:44 executing program 3: r0 = memfd_create(&(0x7f0000403000)='\x00', 0x80000000000006) fcntl$addseals(r0, 0x409, 0x4) ftruncate(r0, 0x800000) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2018/05/29 01:53:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000000001bb80000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:44 executing program 7: mmap(&(0x7f0000000000/0xf82000)=nil, 0xf82000, 0x80000003, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$int_in(r0, 0x200000005405, &(0x7f00009fbff8)) 2018/05/29 01:53:44 executing program 6: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000911000)={{&(0x7f00003e3000/0x1000)=nil, 0x1000}, 0x1}) modify_ldt$write(0x1, &(0x7f0000000000)={0x3ff}, 0x10) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = userfaultfd(0x0) close(r1) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000001000)) read(r0, &(0x7f0000000400)=""/100, 0x64) socket$inet6(0xa, 0x0, 0x0) dup3(r0, r2, 0x0) 2018/05/29 01:53:44 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000100)={0x1, {{0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}}, 0x88) socket$inet_dccp(0x2, 0x6, 0x0) accept4$netrom(r0, &(0x7f0000000080), &(0x7f00000001c0)=0x10, 0x80000) socket$inet_dccp(0x2, 0x6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440)='/dev/snd/controlC#\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000000040), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00000000c0), 0x8}) 2018/05/29 01:53:44 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000094000)=[@in={0x2, 0x0, @loopback=0x7f000001}], 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x11000000000b) accept(r0, &(0x7f00000011c0)=ANY=[], &(0x7f0000123000)) listen(r0, 0x0) sendto$inet(r0, &(0x7f00000000c0)="cf", 0x1, 0x0, &(0x7f0000a04000)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/29 01:53:44 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x0, 0xfdfdffff, 0x0, 0x0, 0x2}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x9, 0x52b}) 2018/05/29 01:53:44 executing program 7: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) alarm(0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)) 2018/05/29 01:53:44 executing program 3: r0 = socket(0x11, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000200)='/dev/net/tun\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000100)=0x1) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={"6966623000faffffffffffffff00", 0x1202}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f0000000040)) 2018/05/29 01:53:44 executing program 2: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0)=0x2, 0x0) [ 578.214896] binder: 3561:3573 got transaction with invalid offsets ptr [ 578.250360] binder: 3561:3573 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:53:44 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x4000, 0x0) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000300)=0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x38}, [{}]}, 0x78) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000080)) recvfrom$unix(r1, &(0x7f0000000140)=""/58, 0x3a, 0x10120, 0x0, 0x0) memfd_create(&(0x7f0000000000)='\x00', 0x2) [ 578.302321] binder_alloc: binder_alloc_mmap_handler: 3561 20001000-20004000 already mapped failed -16 2018/05/29 01:53:44 executing program 5: r0 = syz_open_dev$random(&(0x7f0000000040)='/dev/random\x00', 0x0, 0x200000) pwrite64(r0, &(0x7f0000000000), 0x0, 0x0) 2018/05/29 01:53:44 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x103080, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000140)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) ioctl$TIOCGPTPEER(r1, 0x5441, 0x7) read(r0, &(0x7f0000000040)=""/11, 0xffed) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000200)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000280)=r2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000440)) r3 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f00000001c0)={0xbe08, 0x3, 0xcb1}) fsetxattr(r3, &(0x7f0000000000)=@known='security.ima\x00', &(0x7f00000000c0)='/dev/ptmx\x00', 0xa, 0x0) 2018/05/29 01:53:44 executing program 7: syz_emit_ethernet(0x36, &(0x7f0000000080)={@random="8db482075da1", @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x28, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, @tcp={{0x2000, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f00000001c0)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x100) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000200)=[{0x6, 0xfffffffffffffffd, 0x5, 0x800, @tick=0xfffffffffffffffe, {0x20, 0x4}, {0x7, 0xffffffff}, @queue={0x4, {0x5, 0x400}}}, {0x0, 0x3, 0x80, 0x8000, @tick=0x1ff, {0x3, 0x4}, {0x1, 0x13c}, @quote={{0x9, 0x2}, 0x3, &(0x7f0000000040)={0x3ff, 0xcc, 0x5, 0x7fff, @tick=0x7, {0x3, 0x1}, {0x40, 0x400}, @addr={0x0, 0xffffffffffffffe0}}}}, {0x7, 0xffffffffffffffff, 0x7, 0x9, @tick=0x6988eda0, {0x9, 0x7}, {0x4, 0x9}, @queue={0x10000}}, {0x800, 0x3ff, 0x7, 0xffffffffffffff7f, @time={0x0, 0x1c9c380}, {0x7ed0, 0x100000000}, {0x9, 0x5}, @raw32={[0x6, 0xff, 0x17e]}}, {0x6, 0x1, 0x5ca, 0x100000001, @time={r1, r2+30000000}, {0x400, 0x64}, {0x5, 0xfffffffffffffffb}, @raw32={[0x1, 0x7f, 0x8]}}], 0xf0) [ 578.350107] binder: BINDER_SET_CONTEXT_MGR already set [ 578.363716] binder: 3561:3573 ioctl 40046207 0 returned -16 [ 578.378629] binder_alloc: 3561: binder_alloc_buf, no vma [ 578.384268] binder: 3561:3587 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:53:44 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20000, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=""/117, &(0x7f00000000c0)=""/74, &(0x7f0000000140)=""/70, 0x5000}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f00008a5ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom$ax25(r1, &(0x7f00000004c0)=""/87, 0x57, 0x0, &(0x7f0000000540)={0x3, {"b0e9b527204877"}}, 0x707000) sendto$inet(r1, &(0x7f0000f7db7f)="ba", 0x1, 0x0, &(0x7f000069affb)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) 2018/05/29 01:53:44 executing program 5: r0 = socket$inet(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000017000)=0xfffff7fffffffffd, 0x4) bind$inet(r1, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x401, &(0x7f0000000080)=0x4) listen(r1, 0x0) listen(r0, 0x0) connect$netlink(r0, &(0x7f0000000680)=@unspec, 0xc) [ 578.416066] QAT: Invalid ioctl [ 578.434202] QAT: Invalid ioctl 2018/05/29 01:53:44 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000003000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:44 executing program 5: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000940)={'yam0\x00', {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x7ec, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000980)={0x8, 0x7, 0x1000}, 0x4) ioctl$int_out(r1, 0x4148, &(0x7f0000000040)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x70, 0x80, 0x0, 0x1f, 0x6, 0x0, 0x1, 0x100, 0x1, 0x9, 0x5, 0xfffffffffffff1f0, 0x1, 0x8, 0x40, 0x985f, 0x3ff, 0x7fffffff, 0x5, 0x7fffffff, 0xff, 0x1d1f, 0x4, 0x10001, 0x8, 0x5, 0x9, 0x1, 0x9c, 0x6, 0xfff, 0x80, 0xffffffff, 0x0, 0x8, 0x6, 0x8, 0x0, 0x0, 0x4, @perf_config_ext={0xfffffffffffffffb, 0x7}, 0x10040, 0x6, 0x80000001, 0x5, 0x8, 0x9, 0x101}, r3, 0xc, r1, 0x8) recvmmsg(r2, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/30, 0x1e}, {&(0x7f0000000200)=""/59, 0x3b}, {&(0x7f0000000280)=""/204, 0xcc}, {&(0x7f0000000380)=""/218, 0xda}, {&(0x7f0000000480)=""/212, 0xd4}, {&(0x7f0000000580)=""/177, 0xb1}, {&(0x7f0000000640)=""/21, 0x15}, {&(0x7f0000000680)=""/26, 0x1a}, {&(0x7f00000006c0)=""/106, 0x6a}], 0x9, &(0x7f0000000800)=""/219, 0xdb, 0x7ff}, 0x2}], 0x1, 0x21, 0x0) 2018/05/29 01:53:44 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000002c0)={0x7b, 0x0, [0x11e]}) getpeername$unix(r1, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) r4 = open(&(0x7f0000000100)='./file0\x00', 0x2000, 0x8) openat$cgroup_int(r4, &(0x7f0000000180)='memory.swap.max\x00', 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2282, &(0x7f0000000140)) [ 578.480834] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.486571] binder: undelivered TRANSACTION_ERROR: 29201 [ 578.513672] binder: 3612:3613 got transaction with invalid offsets ptr [ 578.539638] binder: 3612:3613 transaction failed 29201/-14, size 72-8 line 2999 [ 578.560868] binder_alloc: binder_alloc_mmap_handler: 3612 20001000-20004000 already mapped failed -16 [ 578.572681] binder: BINDER_SET_CONTEXT_MGR already set [ 578.579606] binder_alloc: 3612: binder_alloc_buf, no vma [ 578.585170] binder: 3612:3622 transaction failed 29189/-3, size 72-8 line 2971 [ 578.593167] binder: 3612:3613 ioctl 40046207 0 returned -16 [ 578.616383] binder: undelivered TRANSACTION_ERROR: 29189 [ 578.622576] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:45 executing program 6: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) clone(0x0, &(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) exit(0x0) r0 = semget$private(0x0, 0x1, 0x400) semctl$IPC_INFO(r0, 0x6, 0x3, &(0x7f0000000000)=""/172) 2018/05/29 01:53:45 executing program 7: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xc}}, 0xb) sendto$inet(r0, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) 2018/05/29 01:53:45 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:45 executing program 4: r0 = inotify_init() r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x2) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x94, 0x7, 0x8, 0x8, 0x0, 0x4, 0x3, 0x2, r2}, 0x20) creat(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) 2018/05/29 01:53:45 executing program 7: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getpeername(r0, &(0x7f0000000000)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001e0001040000000000000600000000000000000000000000000000010000000000000000e000000200000000000008000b00000000000000000000000000000000000000"], 0x48}, 0x1}, 0x0) [ 579.210972] QAT: Invalid ioctl [ 579.245299] binder: 3642:3643 got transaction with invalid offsets ptr [ 579.260954] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. [ 579.273984] binder: 3642:3643 transaction failed 29201/-14, size 72-8 line 2999 [ 579.280090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/29 01:53:45 executing program 4: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x44, 0x100) setsockopt$RDS_GET_MR(r0, 0x114, 0x2, &(0x7f00000001c0)={{&(0x7f00000000c0)=""/157, 0x9d}, &(0x7f0000000180), 0x50}, 0x20) r1 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000001280)=@assoc_id=0x0, &(0x7f00000012c0)=0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000001300)={r2, 0x8}, &(0x7f0000001340)=0x8) r3 = socket(0xa, 0x1, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000040)) r5 = shmat(r4, &(0x7f0000ffc000/0x4000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) shmdt(r5) 2018/05/29 01:53:45 executing program 7: r0 = socket(0xa, 0x5, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x0) ppoll(&(0x7f0000000100)=[{r1}], 0x1, &(0x7f0000000180)={0x77359400}, &(0x7f00000001c0), 0x8) r2 = signalfd(r1, &(0x7f0000000240), 0x8) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000080)=0x4) dup2(r0, r2) [ 579.290744] binder_alloc: binder_alloc_mmap_handler: 3642 20001000-20004000 already mapped failed -16 [ 579.306130] QAT: Invalid ioctl [ 579.320162] binder: BINDER_SET_CONTEXT_MGR already set [ 579.328161] binder: 3642:3643 ioctl 40046207 0 returned -16 [ 579.330150] QAT: Invalid ioctl [ 579.337925] binder_alloc: 3642: binder_alloc_buf, no vma [ 579.343501] binder: 3642:3655 transaction failed 29189/-3, size 72-8 line 2971 [ 579.364494] QAT: Invalid ioctl [ 579.388544] binder: undelivered TRANSACTION_ERROR: 29189 [ 579.394380] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:46 executing program 1: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x8, 0x80002, 0x7) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000007340)=[{&(0x7f0000000600)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000640)="c6", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) 2018/05/29 01:53:46 executing program 4: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x10, 0x3, 0xc) getsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000008061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) 2018/05/29 01:53:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) shutdown(r0, 0x0) r1 = syz_open_pts(r0, 0x2) write(r0, &(0x7f0000000000)="c143ef79e3c0629e115d50ee", 0xc) ioctl$TIOCNXCL(r1, 0x540d) 2018/05/29 01:53:46 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e23}, 0x184) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) 2018/05/29 01:53:46 executing program 7: r0 = socket(0x3, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000200)="c63c443df5f0ddc664f28d346494358d0f") r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1, 0x10001) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000180)) r3 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3, 0x400001) ioctl$TIOCLINUX7(r3, 0x541c, &(0x7f00000000c0)={0x7, 0x800}) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000140)='844Y$'}) 2018/05/29 01:53:46 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x11, 0x100000803, 0x0) r2 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00000000c0)={@remote, @broadcast, @rand_addr}, &(0x7f0000000100)=0xc) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x6202}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'bond_slave_1\x00', {0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}) getitimer(0x3, &(0x7f0000000080)) 2018/05/29 01:53:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:46 executing program 3: r0 = socket$inet(0x10, 0x8000a, 0xc3) sendmsg(r0, &(0x7f0000000000)={0x0, 0x33, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000020207031dfffd946fa2830020200a0009000200001d85680c1b01000400ff7e", 0x85e8dc491340a9f3}], 0x1ad, 0x0, 0x135}, 0x0) 2018/05/29 01:53:46 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000080)=@ethtool_drvinfo={0x3, "9764a17fc629774ab03b6e05e33cc6cce839cfbac4e51b21de2c87acc0bfc799", "8d39b1605d73e717c0a66aadbd2c462558c29c891669692cf41dd5c71e6301d9", "433d968ad5e28883b2a568ff6032068a7a0b5dafaa8ce119d0a36e26ccf71376", "7f5cdfc531f49dbba18a14d2e6409a3a4924c03cc8ab24c1c0188fe9bf9d1a8c", "be17706325dde31176b0cb2e9bfa31f064e132687265cfc86f7705b94c943936", "6dc0b1d2cc76511e89e786dc"}}) r1 = accept$unix(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000140)=0x6e) lseek(r1, 0x0, 0x2) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x11, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x28, 0x6, &(0x7f0000581000)={{{@in=@rand_addr, @in6=@mcast2}}, {{}, 0x0, @in=@rand_addr}}, &(0x7f0000000000)=0xe8) [ 580.391486] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 580.392458] binder: 3700:3701 got transaction with invalid offsets ptr [ 580.398894] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 580.473908] binder: 3700:3701 transaction failed 29201/-14, size 72-8 line 2999 [ 580.517030] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 580.524823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 580.526649] binder_alloc: binder_alloc_mmap_handler: 3700 20001000-20004000 already mapped failed -16 [ 580.551870] binder: BINDER_SET_CONTEXT_MGR already set [ 580.557376] binder: 3700:3701 ioctl 40046207 0 returned -16 [ 580.558287] binder_alloc: 3700: binder_alloc_buf, no vma [ 580.565197] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 580.568641] binder: 3700:3717 transaction failed 29189/-3, size 72-8 line 2971 [ 580.583385] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 580.592145] netlink: 'syz-executor4': attribute type 1 has an invalid length. [ 580.599478] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 580.606946] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/29 01:53:46 executing program 1: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00') readv(r1, &(0x7f0000002480)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) 2018/05/29 01:53:46 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r1, 0x4400ae8f, &(0x7f0000000500)={"ee44f6c4462ead07ba4b32701c283f44b42a4da119ed420e3deab8a69deb514b60b4363a3329d9d5bac37ac5524bc2218f6aa1d2ae323266ba9c4bbc1af65be12509893321b9296ead9262139eebb18833c543805df08837c9dcce7784d6e4e919e37ecca29a2b008c2f2e918bf8c7c6c75372ca459e25f18cc3e06ab93636d7468bce84fad46dff7efdb3968d59a2687a3e8c06362d6f847e25cd6b551c5a52eadd875f51894442522a829c4bef59a57df780ddf95a217cf7226390193fb5e98386359e8c20b220ecf23f7dd707d88450cbd9647f8b48b33b74ecc4a2b8018435fd0bf01c03d554203f63407f36a47250c11cd9f2bb2a4cc19d4494bed1b0080520130c49a11a642455fd6f334232045427951ae28773093daec7c2a98ab732c6897a948ce4d90b0b600bdd206e0347aaf4f936ce68c5ceb70e9e29bbb1a5719d3b0c453d4c15c8f985ae6e301c16838dbf323001c22f88ca2c860c829b7a628f961cb30feba5b491c99010aa0f1f78a708ebd8f8ffba5614dfa080dc89400ed6ab59f47eb55aaa2b1119843fda043abac90d1a0c5dd199c195f6f66ec20b9b78b0e5638ebba8f5bf9b3a43bf574ddb0a6fad5743574cfda8ce45c5ddcf447db60007bdebfdef06245952ed45d02c6f74c06761100a004c49b90c76e02de27ea86d9d4d4ab9832f7a4f8ec9f6360ca5eab3babe11195209a878f2d99de91bd02f5813db33f9b42caefc0e489a097ce63155f5cf7fd06cd232bbdb6ef14762df2793ad9e866bf5a0013c3a79287ca60737e50a873b7d43ab165ce370c133d8cacb563de4c13ed665635d74cf940ef83b8a0aa4d5b71b0cf9e42fa64ff6643d05c88484795fafcaead4fd9ca234c1df2e8ddd3836a152f9e39f4a702efbfc5b7f2cde421f02d1d575198ea4f2cb9eabd079777e0827b11b154677cd337a9bbc294343fc2fd435cb7e2b24a994e1204b3f61bb31435317f272d28e13bf1aa34166be883c50f26e58d92dd760d1bda4950bd029cb4c5b10ef7bca05c40b247ca872fb434561367e0a7f4afc4f9acf83955cbc3573d47ab93e015447bbe3e55188f68372130b48555ba4342a153ec9f78e98c7b0360d365575ac4f118c278850f3006d66f381ef31f158c57238b375caccb2ab01f72d29cf1e3015ed00dd312900db0443d6268a11d264ea7a9d63a765a6288be8302f9fec8b9702a7f233a14417fd5c9d17ed77d27f314ee29eda912968922c5e9f6600d3b907999bc0462debf3a6b80771c41b7a5d0543ab27909cff43067426141187c89f8c84b7b760a37110490c85bcbb543d7a159af5e5fe50911e4ae97674fef103be96abb2302b305c82dad57e6f412ef9cb843b639ebecf391ce96eaa613550adc46cb9cd573c5afeb36cb72a1e4902b6ba1a8de38903e628b6623b085d51bf0817cc1541f3bd5cdb1f0d"}) ioctl$KVM_SET_SREGS(r1, 0x4138ae84, &(0x7f00000003c0)) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x4, 0x80401) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000040)={0xb1, 0x28, [0x400, 0x8, 0x4, 0x100000000, 0x4, 0x0, 0x8, 0x3, 0xb664, 0x4fc]}) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x1b73, 0x0, 0x5, 0x69, 0x3, 0x400, 0x4, 0x9, 0x6, 0x2, 0x7, 0x3, 0x101}, {0xff, 0x40, 0x4, 0x2e26, 0x4, 0x100000000, 0x5, 0x8001, 0x3f, 0x1ff, 0x2dcf, 0x74ee, 0x6}, {0x6, 0xffffffffffffffda, 0x400, 0x1f, 0x2, 0x9, 0x81, 0x5, 0x1, 0x40, 0xfff, 0x2, 0xffffffffffffffe0}], 0x5}) 2018/05/29 01:53:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000280)=""/28, 0x58) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc0605345, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000380)) r1 = syz_open_dev$amidi(&(0x7f00000000c0)='/dev/amidi#\x00', 0x8, 0x100) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000100)={0x0, 0xffffffffffff6006}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/29 01:53:46 executing program 3: r0 = socket(0x13, 0x1, 0x0) socketpair$ax25(0x3, 0x5, 0xcb, &(0x7f00000000c0)) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040), &(0x7f0000000080)=0x8) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semctl$IPC_SET(0x0, 0x0, 0xf, &(0x7f00000001c0)) set_tid_address(&(0x7f0000000000)) ioctl$sock_inet_SIOCGIFPFLAGS(r0, 0x8935, &(0x7f0000000100)={'syzkaller0\x00', 0x7ff}) 2018/05/29 01:53:46 executing program 6: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f000000b000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f00005a6ff0)={&(0x7f0000451ccc)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6}, {@in=@loopback=0x7f000001, 0x0, 0x6c}, @in6=@loopback={0x0, 0x1}, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffff9c, 0x84, 0xd, &(0x7f0000000040)=@assoc_id=0x0, &(0x7f0000000080)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000100)={r0, 0x2c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0xfffffffffffffffa, @loopback={0x0, 0x1}, 0xe000000000000000}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x100000001}}]}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x100000000, 0x80000) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000001c0)={0x9, 0x100, 0x0, 0x6, 0x101, 0x10001, 0xff, 0x1, r0}, 0x20) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) 2018/05/29 01:53:46 executing program 7: syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000009c0)='/dev/input/event#\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)) unshare(0x2000400) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xe8, 0x11, 0xb, 0x8, 0x70bd26, 0xd8, {0xc, 0x0, 0x1}, [@nested={0xcc, 0x8d, [@generic="87c7b0a2b9ea75cc95bea7fc1096cc27b2cf1f7c325ff09a0db86839c7d289b0be", @typed={0x8, 0x57, @ipv4=@loopback=0x7f000001}, @typed={0x4, 0x5}, @typed={0x4, 0x17}, @generic="d77fab1a9a88318a40e6b9bdd1c63e98b270b474386f62f3e4d1bbafacbd96381cf088151582db14311206ef0251f7845cef08503b607d082bc410336749300b2cb9712d", @generic="ae95931b6683319afd0d05c0b9a2b2bae2c2026324483bfca2dba7d4430345fbb05564999210d6452649bbcbee619276d3f441c755b42819c9fb177e4fca27", @typed={0x14, 0x85, @str='/dev/usbmon#\x00'}]}, @typed={0x8, 0x44, @ipv4=@broadcast=0xffffffff}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x800) 2018/05/29 01:53:46 executing program 4: r0 = epoll_create1(0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa2000, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000040)) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=""/194, 0xc2) fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000d36ff4)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000000c0)={0x1}) 2018/05/29 01:53:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 580.617120] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.655509] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:47 executing program 1: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r0, &(0x7f00000003c0)=""/59, 0x3b, 0x40000020, &(0x7f0000000400)={0xa, 0x4e22, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000440)='/dev/vcs#\x00', 0x80, 0x10000) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x8) r2 = socket(0xa, 0x5, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value, 0x8) unshare(0x400) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) execveat(r3, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=[&(0x7f0000000080)='*+security(\x00', &(0x7f00000000c0)='cgroup\x00'], &(0x7f0000000300)=[&(0x7f0000000180)='wlan0\x00', &(0x7f00000001c0)='nodev.\x00', &(0x7f0000000200)='\x00', &(0x7f0000000280)="252e5b6d696d655f747970658347504c00", &(0x7f00000002c0)='\x00'], 0x1000) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000340), &(0x7f0000000380)=0xc) 2018/05/29 01:53:47 executing program 2: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x0, 'queue0\x00'}) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)={0x303, 0x33}, 0x4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f00000001c0)={{0x0, @empty, 0x0, 0x0, 'lblc\x00'}, {@empty, 0x0, 0x10000, 0x0, 0x4}}, 0x44) write$binfmt_elf64(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x648) r2 = creat(&(0x7f0000000400)='./file0\x00', 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000040)={0x2, 0x1}) dup3(r0, r1, 0x0) 2018/05/29 01:53:47 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") pipe(&(0x7f0000000040)={0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000080)=[{&(0x7f0000000300)='W', 0x1}], 0x1, 0x0) syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x5, 0x105000) r2 = dup3(r0, r1, 0x0) write(r2, &(0x7f0000000100)='vN', 0x1d0) [ 580.693318] binder: 3724:3730 ioctl 40046207 0 returned -16 [ 580.703519] binder: 3724:3730 got transaction to invalid handle [ 580.709798] binder: 3724:3730 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:47 executing program 4: r0 = socket$unix(0x1, 0x2, 0x0) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x800) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000140)={0x3, &(0x7f0000000100)=[{0x8000, 0x5, 0x1000, 0x800}, {0x0, 0x1, 0x44e, 0x2}, {0x9, 0x5, 0x10000, 0x2}]}) recvfrom$inet6(r2, &(0x7f0000000180), 0x0, 0x40000040, &(0x7f00000001c0)={0xa, 0x4e22, 0xcca, @loopback={0x0, 0x1}, 0xbc}, 0x1c) recvfrom$llc(r2, &(0x7f0000000200)=""/203, 0xcb, 0x2001, &(0x7f0000000300)={0x1a, 0x0, 0x0, 0x8000, 0x2, 0x7a44b6e7}, 0x10) getsockname$packet(r2, &(0x7f0000000340), &(0x7f0000000380)=0x14) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f00000003c0)=0x9) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000540)={0x2, [0x0, 0x0]}, &(0x7f0000000580)=0xc) sendmsg$inet_sctp(r2, &(0x7f0000000640)={&(0x7f0000000400)=@in={0x2, 0x4e21, @loopback=0x7f000001}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000440)="55e99b5a5104608423f4eb4a3fb1d2c287bf030ca3c591692b6ef20f1060ab42da07fdc149ee878b72c1e9b06749c62250ed0c692e1b5620322b817c670a191e559e35893929a7fe091d3b2fdb98776ca5cd95ed7974e7cf438b9d695b519a98734e47dc13150ec0c65b9037ec33bdcd43d2003640d5eee0af0bbf4a30a92e0aa3845485825e0ccd61c90fb766b83ee2833f0555fc706c", 0x97}], 0x1, &(0x7f00000005c0)=[@authinfo={0x18, 0x84, 0x6, {0x8c}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x3990}}, @sndrcv={0x30, 0x84, 0x1, {0x37, 0x3, 0x0, 0x401, 0x8000, 0x5, 0x800, 0xfc, r3}}, @init={0x18, 0x84, 0x0, {0x0, 0x6, 0x80, 0x81}}], 0x78, 0x20000000}, 0x4d478b9d52e7d8a7) inotify_init() setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000680)=@req={0x0, 0x4, 0x8000, 0x1ff}, 0x10) r4 = semget(0x1, 0x2, 0x1) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000006c0)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f00000007c0)=0xe8) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@broadcast}}, &(0x7f00000009c0)=0xe8) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000ac0)={{0x4bc, r5, r6, r7, r8, 0x81}, 0x400, 0x79, 0x2}) r9 = memfd_create(&(0x7f0000000b40)='\x00', 0x1) socket(0x19, 0x5, 0x7) uname(&(0x7f0000000b80)=""/226) ioctl$LOOP_SET_STATUS64(r9, 0x4c04, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x100, 0x78b, 0x0, 0x7, 0x1c, 0xc, "7fc56f1dd344f0ae951b2a16e3b3d5c8944f5bc041c09314c1be81a26e4d617c1ce6760556b5148c4da6c90b3a1cda73ba5563ad2f034015205c1f3454ea2235", "50f89be907bd9a07f8c17c15f6cc4638ff006da6ea140b880811b622a809e21a884dd5e2970b0387b432d698b50e758cdf16e4fbdf9aede885d1bba605f9235c", "34e0d7e8565b529dba2fe5f2539959d47bd9ded8edc301bc9b749a0d41ce3279", [0x0, 0x3]}) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, &(0x7f0000000d80)={{{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x1c}}, @in=@rand_addr=0x3, 0x4e20, 0x4, 0x4e21, 0xd1, 0xa, 0x20, 0xa0, 0x29, 0x0, r5}, {0x2, 0x6, 0x3, 0x4, 0x4, 0x8001, 0x1, 0x6}, {0x4, 0xffffffffffffff1d, 0xffffffffffff0001, 0x200}, 0x7, 0x6e6bb8, 0x0, 0x1, 0x2, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d6, 0x2b}, 0x2, @in=@multicast1=0xe0000001, 0x3502, 0x2, 0x2, 0x401, 0x3, 0xfffffffffffffffe, 0xff}}, 0xe8) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000e80)={r3, 0x366}, &(0x7f0000000ec0)=0x8) ioctl$VT_RESIZEX(r2, 0x560a, &(0x7f0000000f00)={0x10000, 0x0, 0x1, 0x80000001, 0x7fff, 0x100000000}) write$binfmt_script(r0, &(0x7f0000000f40)={'#! ', './file0', [{0x20}, {0x20, 'self'}, {0x20, '\x00'}, {0x20, '/dev/null\x00'}], 0xa, "4113ca83f2f616973ee94269820cb6cef54896ab72cfabebdea3d6c36c2f0dc979cabec57c2cc99c170bdc108823f5beebca941fd843c22ce92c3c30568af5b4f52535557ce2d492b23fc2922837a4f34f2ac3c9bc4fc51845f63e85965ed4"}, 0x7d) rename(&(0x7f0000000fc0)='./file0\x00', &(0x7f0000001000)='./file0\x00') connect$bt_rfcomm(r9, &(0x7f0000001040)={0x1f, {0x2, 0x7, 0xffffffffffffffe0, 0x6d71, 0x101, 0x5}, 0x4}, 0xa) r10 = request_key(&(0x7f0000001080)='logon\x00', &(0x7f00000010c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001100)='&\x00', 0xfffffffffffffff9) r11 = add_key(&(0x7f0000001140)='dns_resolver\x00', &(0x7f0000001180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000011c0)="bd920d8c06b8e8ef6b41cd68525db297b0bf51f2872e728ca10b3f7df7ec202a39d43463144756b05b4730df80348d0a67526ea213d6f460696820063ef6d8aa76b031e48c5c5266e8eea11cab7cbbc83e6273d7e6531849d11728a76fd6479fd57f08db88bbf1d14f316e2b4d817d251dd8e6318c9bd2667d7e1ad2eff66a8cc66a56f13f9b371005e04bdf0fb4bc486fbe409fd9c804cd8af44661d54a9f615a8cbda874e6cb639144e5d4", 0xac, 0xfffffffffffffffc) r12 = add_key(&(0x7f0000001280)='id_legacy\x00', &(0x7f00000012c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000001300)="7536ccec78b2448d487c4a1aba0c48703981946e510ceb54ec16e8ce2102434ed527e33a6aa05f706ee6a5a9b7fcbe6dbf09faa153", 0x35, 0xfffffffffffffffc) keyctl$dh_compute(0x17, &(0x7f0000001340)={r10, r11, r12}, &(0x7f0000001380)=""/200, 0xc8, 0x0) 2018/05/29 01:53:47 executing program 7: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x7, 0x9}, 0x2c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x100000001, 0x0, r0}, 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x28, &(0x7f00000000c0)}, 0xffffffffffffffe7) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000040)}, 0x10) [ 580.759171] binder_alloc: binder_alloc_mmap_handler: 3724 20001000-20004000 already mapped failed -16 [ 580.771403] sctp: [Deprecated]: syz-executor1 (pid 3754) Use of struct sctp_assoc_value in delayed_ack socket option. [ 580.771403] Use struct sctp_sack_info instead [ 580.812384] binder: 3724:3755 got transaction to invalid handle [ 580.818616] binder: 3724:3755 transaction failed 29201/-22, size 72-8 line 2856 [ 580.848216] sctp: [Deprecated]: syz-executor1 (pid 3768) Use of struct sctp_assoc_value in delayed_ack socket option. 2018/05/29 01:53:47 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioperm(0xd, 0xc5e, 0x2) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='system.advise\x00') sendmsg$alg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000001701000002000000000000000000000011de6da48e42b329f802b12b41e668ae590400ff34473ddc3c3411296a4584478fe835e27e31fb7c1e1a3e8834c8391c3a940bf383e1684f31f2adf082235b8b3f0b6d8e5d6f8020000800003f1c074cb64008c7eb3b25cf4c0418fba6e622a5432c69252315879cf3a145eb606365a77992839393fd8485d34e4e3f1f9704b999ae1194a5940bb1de166069f5f570d30058339a1f9304601e270b2f9102d1d49b5fe3358a27ffc1c6d859a53e98e5c37c0fbde0f4fabd"], 0x2ae}, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000200)={0x1, 0x6, 0x7, 0x4b9bb427}, 0x6) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDENABIO(r1, 0x4b36) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) sched_getaffinity(r2, 0x8, &(0x7f0000000140)) sched_getaffinity(r2, 0x8, &(0x7f0000000280)) 2018/05/29 01:53:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000600)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'user.', '/dev/kvm\x00'}, &(0x7f0000000100)='/dev/kvm\x00', 0x9, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f000000c000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000080)="f20f2d7e00c4e3bd40ce630f07f7cd0c000000660f01c90ff8cd0fc7588ab8ad6e00000f23d80f21f835000000c00f23f8c4e3cd6971f500f20f08", 0x3b}], 0x1, 0x0, &(0x7f0000000100), 0x0) 2018/05/29 01:53:47 executing program 7: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x80080, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000080)={{0x33, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e27, 0x4, 'none\x00', 0x20, 0x2, 0x6a}, {@empty, 0x4e22, 0x2, 0x8, 0x40, 0x6}}, 0x44) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000380)=""/242) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f7379732f0000000e000000000000072f6578706972655f6e6f646573745f636f6e6e00", 0x2, 0x0) mprotect(&(0x7f0000125000/0x4000)=nil, 0x4000, 0x200004) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000100)=""/111, 0x18) [ 580.848216] Use struct sctp_sack_info instead [ 580.910135] binder: undelivered TRANSACTION_ERROR: 29201 [ 580.916229] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000120000000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:48 executing program 4: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x0, 0x0) syz_extract_tcp_res(&(0x7f0000000000), 0x1, 0xb9f) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000180)) sync_file_range(r0, 0x7, 0xf8, 0x3) 2018/05/29 01:53:48 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="05000000000000000000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x7530, @ANYBLOB="00000000010000000000bba2b150d1760000000000000000"], 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x38}, 0x1}, 0x0) 2018/05/29 01:53:48 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x3) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4}, 0x68) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x9, 0x200) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x401, 0x4) 2018/05/29 01:53:48 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x88) recvfrom$inet6(r0, &(0x7f0000fbef6d)=""/185, 0xfffffffffffffe1f, 0x0, 0x0, 0x171c073b150b2817) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x7ff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) ioctl$KVM_GET_FPU(r1, 0x81a0ae8c, &(0x7f0000000280)) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x3}, 0x1c) r2 = socket$inet6(0xa, 0x8000000000000802, 0x88) sendmsg$inet_sctp(r2, &(0x7f0000a29000)={&(0x7f00006d8fe4)=@in6={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000200)="d0a19da02bcb652c5675c868437d752e8f3b58514571e374a21e1842d5cc0da055aa38828e8f4f881bc4f99199c959bfeecd4f44a421511ec604b01d20842e15ca586c58ee", 0x45}], 0x1}, 0x0) 2018/05/29 01:53:48 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x3c, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0xfe56) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x1d}, 0xec}, {0xa, 0x4e24, 0xffffffff}, 0x7d40000000000000, [0x5, 0x9, 0x10000, 0x3, 0x86, 0x49, 0x1, 0x101]}, 0x5c) 2018/05/29 01:53:48 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0xc004743e, &(0x7f0000001000)=""/246) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0xc004743e, &(0x7f00000003c0)=""/246) close(r0) 2018/05/29 01:53:48 executing program 6: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x40, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000080)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) clock_adjtime(0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) [ 581.725969] binder: 3810:3814 got transaction to invalid handle [ 581.732194] binder: 3810:3814 transaction failed 29201/-22, size 72-8 line 2856 [ 581.794207] binder_alloc: binder_alloc_mmap_handler: 3810 20001000-20004000 already mapped failed -16 [ 581.827377] binder: 3810:3821 got transaction to invalid handle [ 581.827399] binder: BINDER_SET_CONTEXT_MGR already set [ 581.833552] binder: 3810:3821 transaction failed 29201/-22, size 72-8 line 2856 [ 581.856275] binder: 3810:3814 ioctl 40046207 0 returned -16 [ 581.886799] binder: undelivered TRANSACTION_ERROR: 29201 [ 581.892474] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:48 executing program 6: r0 = socket$kcm(0x29, 0x2, 0x0) getpeername(r0, &(0x7f00000000c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast1}}}, &(0x7f0000000140)=0x80) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f00000001c0)={0x25, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e20, @multicast1=0xe0000001}, 0x40, 0xc11, 0xfffffffffffffffd, 0x5, 0x6, &(0x7f0000000180)='veth0_to_bridge\x00', 0x10000, 0x8, 0x81}) r2 = dup(r0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000000)={0x4, 0x0, [{0xc0000007, 0x8, 0x0, 0x3, 0x900}, {0x80000000, 0x7bf, 0x2, 0x8, 0x81}, {0x40000000, 0x1, 0x2, 0xc8b, 0x9}, {0x4000000f, 0x7, 0x4, 0x5, 0x6}]}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={0xffffffffffffffff, r2}) 2018/05/29 01:53:48 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) epoll_wait(r1, &(0x7f0000000040)=[{}, {}, {}, {}], 0x4, 0x23) sendmsg$nl_generic(r0, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb7f, 0x358010000000000}, 0xc, &(0x7f0000000440)={&(0x7f00000000c0)={0x18, 0x22, 0x1, 0x0, 0x0, {0x4}, [@nested={0x4, 0xf}]}, 0x18}, 0x1}, 0x0) 2018/05/29 01:53:48 executing program 7: chmod(&(0x7f0000000000)='./file0\x00', 0x100) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x880, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000080)=0x401) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000000c0)=""/104) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x42000, 0x0) listen(r1, 0x7) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000180)=0x100) ioctl$KVM_NMI(r0, 0xae9a) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000001c0)={'nat\x00'}, &(0x7f0000000240)=0x54) write$tun(r1, &(0x7f0000000280)={@val={0x0, 0x6017}, @void, @arp=@ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x9, @empty, @loopback={0x0, 0x1}, @link_local={0x1, 0x80, 0xc2}, @remote={0xfe, 0x80, [], 0xbb}}}, 0x38) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000002c0)={r1, 0x3, 0x7, "9d137b3f156c1929d518cb6f3cd1652707509294cc01f43320b1acad2fa0c81d3d9776f3148772c22ca08829192dad24c89ef5ef70d255a8241adbda2ef4791545efdf69211e2864f13bc32c2841e714"}) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f0000000340)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000400)) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000440)=""/72) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000004c0)={0x0, {{0x2, 0x4e23, @rand_addr=0x2}}}, 0x88) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000580)='/dev/qat_adf_ctl\x00', 0x10400, 0x0) r3 = socket(0x2, 0x80b, 0x10000) fdatasync(r0) sendfile(r1, r0, &(0x7f00000005c0), 0x3) getresuid(&(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)=0x0) ioctl$TUNSETOWNER(r1, 0x400454cc, r4) prctl$setendian(0x14, 0x0) ioctl$KDADDIO(r2, 0x4b34, 0x4) write(r2, &(0x7f00000006c0)="3c9143bc603bfab055875f48264ac7d4", 0x10) fadvise64(r0, 0x0, 0x6, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000700)={0x4, 0x0, [0x0, 0x0, 0x0, 0x0]}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000780)={0x6, &(0x7f0000000740)=[{0x80a1, 0x5, 0x80000000, 0x100}, {0x81, 0xffffffffffff0911, 0x5, 0x9}, {0x1, 0x4, 0x0, 0x5}, {0x6, 0x5, 0x1, 0x2}, {0xff, 0x1, 0x401, 0x4000000000}, {0xd69, 0x8, 0x0, 0x5}]}, 0x10) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f00000007c0), &(0x7f0000000800)=0xc) getsockname$llc(r2, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000880)=0x10) ioctl$sock_inet_tcp_SIOCATMARK(r3, 0x8905, &(0x7f00000008c0)) 2018/05/29 01:53:48 executing program 1: r0 = socket(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lookup_dcookie(0x100, &(0x7f00000000c0)=""/68, 0x44) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ip6gretap0\x00'}, 0x18) r1 = accept4$netrom(r0, &(0x7f00000001c0), &(0x7f0000000280)=0xb, 0x40080000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl(r0, 0x8, &(0x7f0000000340)) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000002c0)=0x7, 0x4) r2 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40000, 0x2) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000300)={0x9, 0x1, 0x10000, 0x40, 0x6, 0x2, 0x5, 0x3, 0xe51e, 0x1}) ioctl$IOC_PR_RELEASE(r2, 0x401070ca, &(0x7f0000000180)={0xf444, 0x7}) 2018/05/29 01:53:48 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000003b40)={'broute\x00', 0x0, 0x4, 0xb9, [], 0x5, &(0x7f0000003a00)=[{}, {}, {}, {}, {}], &(0x7f0000003a80)=""/185}, &(0x7f0000003bc0)=0x78) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x251, r1, 0x0) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$sock_timeval(r2, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x7530}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(r3, 0x0, 0x27, &(0x7f00000000c0)={@empty, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x4) r4 = syz_open_dev$mice(&(0x7f0000003c40)='/dev/input/mice\x00', 0x0, 0x200602) ioctl$KDGKBSENT(r4, 0x4b48, &(0x7f0000003c80)={0xa8, 0x9, 0x7}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xe0c9, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000002c0)=0x10, 0x4) ioctl$TIOCEXCL(r5, 0x540c) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f00000004c0)={&(0x7f0000000300)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="d0a04000", @ANYRES16=r6, @ANYBLOB="06042dbd7000fbdbdf2504000000080005001f0000000800040071b4000008000500090000000800060004000000040001000800040099e1000008000400000000800800060005000000"], 0x50}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x6, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0xa0, 0xff, 0x0, r8}, {0x1fffc000, 0xc5a, 0x4, 0x9, 0x3, 0x8, 0x7}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f000099bf26), 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) sendto$inet(r3, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 2018/05/29 01:53:48 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) r1 = socket(0xa, 0x1, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcs\x00', 0x80, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000003c0)={0x0, 0x1000, 0x8}) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x68) socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) getpeername$packet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0xfffffffffffffece) listxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000280)=""/198, 0xc6) recvfrom$ipx(r0, &(0x7f00000004c0)=""/133, 0x85, 0x20, 0x0, 0xff5f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gretap0\x00', r3}) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80247009, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4e22, 0x11, @loopback={0x0, 0x1}, 0x7}}, 0x81, 0xffffffff, 0x4, "1e6b4f9d0f82421336a89ad1b686ce38e7e21249e1d1f58ce735c7c439650e01d2d76bdbc2cd00958830ee6e6c752dd1ba46e53d5c603351906bfc38698262d8189e87df0c14f97de792c38d7d9fa988"}, 0xd8) socket(0x17, 0x4, 0x7) 2018/05/29 01:53:48 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = dup(r0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt(r0, 0x65, 0x10000000004, &(0x7f0000000040)="f0000003", 0x4) 2018/05/29 01:53:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 582.574228] QAT: Invalid ioctl [ 582.591664] binder: 3830:3836 got transaction to invalid handle [ 582.597900] binder: 3830:3836 transaction failed 29201/-22, size 72-8 line 2856 [ 582.613563] QAT: Invalid ioctl [ 582.621203] QAT: Invalid ioctl 2018/05/29 01:53:49 executing program 6: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x200000000000011, 0x3, 0x0) clock_gettime(0x0, &(0x7f00000040c0)={0x0, 0x0}) rmdir(&(0x7f0000003ac0)='./file0\x00') recvmmsg(r0, &(0x7f0000003ec0)=[{{&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/193, 0xc1}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000100)=""/49, 0x31}], 0x4, &(0x7f0000000200)=""/83, 0x53, 0x7}, 0xfffffffffffffffc}, {{&(0x7f00000013c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001580)=[{&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/58, 0x3a}, {&(0x7f0000001500)=""/120, 0x78}], 0x3, &(0x7f00000015c0)=""/14, 0xe, 0x1}, 0x1b7}, {{&(0x7f0000001600)=@in6={0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001680)=""/87, 0x57}], 0x1, 0x0, 0x0, 0x2}, 0x6}, {{&(0x7f0000001740)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, 0x80, &(0x7f0000001d80)=[{&(0x7f00000017c0)=""/176, 0xb0}, {&(0x7f0000001880)=""/122, 0x7a}, {&(0x7f0000001900)=""/42, 0x2a}, {&(0x7f0000001940)=""/235, 0xeb}, {&(0x7f0000001a40)=""/82, 0x52}, {&(0x7f0000001ac0)=""/192, 0xc0}, {&(0x7f0000001b80)=""/194, 0xc2}, {&(0x7f0000001c80)=""/203, 0xcb}], 0x8, &(0x7f0000001e00)=""/162, 0xa2, 0x7}, 0xd0}, {{&(0x7f0000001ec0)=@rc, 0x80, &(0x7f0000002380)=[{&(0x7f0000001f40)=""/220, 0xdc}, {&(0x7f0000002040)=""/125, 0x7d}, {&(0x7f00000020c0)=""/82, 0x52}, {&(0x7f0000002140)=""/118, 0x76}, {&(0x7f00000021c0)=""/238, 0xee}, {&(0x7f00000022c0)=""/139, 0x8b}], 0x6, &(0x7f0000002400)=""/166, 0xa6, 0x6}, 0x1}, {{&(0x7f00000024c0)=@ipx, 0x80, &(0x7f0000002740)=[{&(0x7f0000002540)=""/167, 0xa7}, {&(0x7f0000002600)=""/14, 0xe}, {&(0x7f0000002640)=""/168, 0xa8}, {&(0x7f0000002700)=""/23, 0x17}], 0x4, &(0x7f0000002780)=""/154, 0x9a}, 0x3}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000002840)=""/169, 0xa9}, {&(0x7f0000002900)=""/1, 0x1}, {&(0x7f0000002940)=""/181, 0xb5}, {&(0x7f0000002a00)=""/4096, 0x1000}, {&(0x7f0000003a00)=""/139, 0x8b}, {&(0x7f0000003ac0)}, {&(0x7f0000003b00)=""/133, 0x85}], 0x7, &(0x7f0000003c40)=""/7, 0x7, 0x3}, 0xe7a}, {{&(0x7f0000003c80)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000003d80)=[{&(0x7f0000003d00)=""/96, 0x60}], 0x1, &(0x7f0000003dc0)=""/249, 0xf9, 0x5ba}, 0x7}], 0x8, 0x0, &(0x7f0000004100)={r2, r3+30000000}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000004140)={r4, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in={0x2, 0x4e23, @multicast1=0xe0000001}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000dda000), 0x1d0}], 0x492492492492510, 0x0) accept4$unix(r1, 0x0, &(0x7f0000000000), 0xfd0b73bc4feb4a3a) unlink(&(0x7f0000000280)='./file0\x00') [ 582.646452] QAT: Invalid ioctl [ 582.654110] binder_alloc: binder_alloc_mmap_handler: 3830 20001000-20004000 already mapped failed -16 2018/05/29 01:53:49 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x9, &(0x7f0000000000)="c626262c6b23bf012cf66f") getsockopt$sock_cred(r0, 0x1, 0x27, &(0x7f0000000100), &(0x7f0000000140)=0xc) 2018/05/29 01:53:49 executing program 5: r0 = socket(0x1, 0xa, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000002000080100000000000000000200200000000000000000001100000008000100ac14140008000e000000000008000200ffffffff"], 0x38}, 0x1}, 0x0) 2018/05/29 01:53:49 executing program 4: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000001c0)={r2, r3, 0x4}) r4 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000200)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) setsockopt$inet6_mreq(r4, 0x29, 0x1f, &(0x7f0000000340)={@mcast2={0xff, 0x2, [], 0x1}, r5}, 0x14) r6 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x1, 0x40000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f0000000040)=0x9) close(r4) 2018/05/29 01:53:49 executing program 1: r0 = socket(0x40000000001e, 0x1, 0x0) setsockopt(r0, 0x10f, 0x81, &(0x7f0000000000)="00210300", 0x4) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/143) [ 582.697933] QAT: Invalid ioctl [ 582.706955] binder: BINDER_SET_CONTEXT_MGR already set [ 582.718315] binder: 3830:3836 ioctl 40046207 0 returned -16 [ 582.733508] QAT: Invalid ioctl [ 582.741586] QAT: Invalid ioctl 2018/05/29 01:53:49 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = eventfd2(0x0, 0x80000) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x81, 0x200) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f00000000c0)=0x6) write$eventfd(r0, &(0x7f0000000040), 0x8) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000100)={@loopback, @multicast1, 0x0}, &(0x7f0000000140)=0xc) getresuid(&(0x7f0000000180), &(0x7f00000001c0)=0x0, &(0x7f0000000280)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@multicast2=0xe0000002, @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4e22, 0x7, 0x4e20, 0x5, 0x2, 0x0, 0x80, 0x33, r2, r3}, {0x7f, 0x3ff, 0x50, 0x3ff, 0x9, 0x8, 0x10000, 0xfffffffffffffff8}, {0xfffffffffffffff9, 0x3f, 0x8, 0x1}, 0x80000000, 0x6e6bbc, 0x3, 0x1, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0x17}, 0x4d4, 0xff}, 0xa, @in6=@mcast2={0xff, 0x2, [], 0x1}, 0x0, 0x4, 0x1, 0x5, 0xb, 0x7}}, 0xe8) openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.threads\x00', 0x2, 0x0) [ 582.756689] binder: 3830:3856 got transaction to invalid handle [ 582.762930] binder: 3830:3856 transaction failed 29201/-22, size 72-8 line 2856 [ 582.773880] QAT: Invalid ioctl 2018/05/29 01:53:49 executing program 2: keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}) 2018/05/29 01:53:49 executing program 5: sched_setparam(0x0, &(0x7f0000000040)=0x3ff) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000180)='/dev/urandom\x00', 0x200, 0x0) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f00000001c0)) r1 = socket(0xffffffffffffffff, 0x1, 0x0) r2 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x5001}) io_setup(0x461, &(0x7f0000000000)=0x0) io_submit(r3, 0x1, &(0x7f00000016c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000040), 0x2f3}]) connect$bt_rfcomm(r1, &(0x7f0000000140)={0x1f, {0x7, 0x2, 0xae8, 0x2, 0x3, 0x919}, 0x1f}, 0xa) [ 582.804198] QAT: Invalid ioctl [ 582.820408] QAT: Invalid ioctl 2018/05/29 01:53:49 executing program 7: ioctl(0xffffffffffffffff, 0x890f, &(0x7f00000000c0)="8100756994094bd7f1586f") getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x8) 2018/05/29 01:53:49 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000000c0)={0xffffffffffffffff, {{0x2, 0x4e23, @loopback=0x7f000001}}}, 0x88) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, 0x0, 0x4000000000000020, [@dev={0xac, 0x14, 0x14}, @loopback=0x7f000001]}, 0x18) 2018/05/29 01:53:49 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x480880, 0x0) readlinkat(r0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/164, 0xa4) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x4000, 0x0) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x1, 0x6, 0xfffffffffffffff9, "516af92550b0c83d2c050dcba11146c1df8b4b8d88f7dec2c35a42a2f2d1e2b2a6069f9bba7d6f3210bdfa71e681a447c3d9171647ac35e3fe65ac3e281ec1", 0x3a}, 0x60) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000002c0), &(0x7f0000000300)=0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1e, 0x4) socket$pptp(0x18, 0x1, 0x2) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x9, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000380)=0xb, 0x4) 2018/05/29 01:53:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00z\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:49 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r0, &(0x7f00000000c0)=[{{}, 0x1, 0x7e, 0x2}, {}], 0x30) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400080, 0x0) 2018/05/29 01:53:49 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000440)={0xffffffffffffffff}, 0x4000) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000480)=0x20800001d) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) io_setup(0x4, &(0x7f0000000000)=0x0) io_getevents(r3, 0x8e24, 0x6, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}], &(0x7f00000002c0)={0x0, 0x1c9c380}) r4 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0) lseek(r2, 0x56, 0x0) lseek(r4, 0x4, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e21, 0xcbd, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, {0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0x3}, 0x3, [0xe8, 0x1f, 0x8, 0x2, 0x0, 0x9, 0x7, 0x5b]}, 0x5c) r5 = add_key$user(&(0x7f0000000300)='user\x00', &(0x7f0000000340)={0x73, 0x79, 0x7a}, &(0x7f0000000380)="998ab1f4f14055e5659a6488bcbe6924e9c80b1da042d63e1d03fa1b7a07027325f5a29d8c57e364a605d4fea790c2345c5f8306159b991679d9f0e4a79d4421a349689a2c1ec20ded8748749390a339f47ca1839536f4a34ff7a5681d57b427f166b5256fae925caba32c81cc693812a7c544259d454622ba28df81f0af0e986a39e47d784989f162", 0x89, 0xfffffffffffffffc) keyctl$setperm(0x5, r5, 0x10000001) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-des3_ede-asm\x00'}, 0x58) r6 = accept4(r0, 0x0, &(0x7f0000000100), 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$binfmt_misc(r6, &(0x7f0000002580)=ANY=[@ANYBLOB="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"], 0xec8) recvfrom$ipx(r6, &(0x7f0000000140)=""/220, 0xffffffffffffffbd, 0x0, 0x0, 0x3d1) writev(r0, &(0x7f0000000580)=[{&(0x7f00000004c0)="f41ab178fb79cf074e21e345a9f7ed14df2addce1969d63d6aacc55137bbb1a3f6406c79875b7e99c68657ebc247063026d2e0af5e35570812ab13af7024813dfc03f0596dfa0fb33f93f129b4815c4a4bac2379ba6eb9a1a1e96e4aa0cb5bfa85c609b5e0be1769df77e9d5fee38b2da58aa32a704cc92fb4786d4ed13db2506fdf67abf8d58eb97431d8be584f", 0x8e}], 0x1) 2018/05/29 01:53:49 executing program 2: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/route\x00') sendfile(r0, r1, &(0x7f0000000140)=0x2ff, 0x1000000000043f) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r2) [ 582.940576] binder: undelivered TRANSACTION_ERROR: 29201 [ 582.946534] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.031936] binder: 3901:3906 got transaction to invalid handle [ 583.038127] binder: 3901:3906 transaction failed 29201/-22, size 72-8 line 2856 [ 583.108777] binder_alloc: binder_alloc_mmap_handler: 3901 20001000-20004000 already mapped failed -16 [ 583.134183] binder: BINDER_SET_CONTEXT_MGR already set [ 583.154657] binder: 3901:3906 ioctl 40046207 0 returned -16 [ 583.165242] binder: 3901:3916 got transaction to invalid handle [ 583.171401] binder: 3901:3916 transaction failed 29201/-22, size 72-8 line 2856 [ 583.187998] binder: undelivered TRANSACTION_ERROR: 29201 [ 583.193628] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:50 executing program 5: r0 = socket(0xa, 0x80806, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) clock_getres(0x7, &(0x7f0000000000)) 2018/05/29 01:53:50 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000080)="6766c7442400000000006766c74424024a0000006766c744240600000000670f0114240f0fe9bb0f70e4e12e67650f7e821d7300000f7f1464670f01cb660fef26e9170f3803800040baf80c66b85261dd8166efbafc0cedb81c000f00d0", 0x5e}], 0x1, 0x0, &(0x7f0000000580), 0x0) getsockopt$nfc_llcp(r1, 0x118, 0x2, &(0x7f0000000100)=""/22, 0x16) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x491}]}) 2018/05/29 01:53:50 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x80002, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYPTR=&(0x7f0000000080)=ANY=[]], 0x8) mmap$binder(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x1000003, 0x1013, r0, 0x0) 2018/05/29 01:53:50 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x4, 0x8010, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000100)={'lo\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "4797f6772dce4c01149a5f492df68d4803fd8fd4152bfd1e325c8e09506d7399", "68229d869755275b15c684065df8f9b3d5c07cb43e84ab45d6bd49fab9fac351", "dd562c7b83f903bab3fab3f53b067f9970c932d7e04d80315a95c3172e63243e", "36798fbeb9a6cca6f843d5dec0fce203589b3ae52c87664514db6f7b1ff64df4", "39bee5eb7c81e2c7f27bc57d5dce878659cc81a10a8cb57561008622ee9becf1", "ab674b27a3305f654c0b4252"}}) close(r2) close(r1) 2018/05/29 01:53:50 executing program 7: fanotify_init(0x42, 0x101000) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = socket(0xb, 0xf, 0x8) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_fuseblk_mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vga_arbiter\x00', 0x0, 0x0) unlinkat(0xffffffffffffffff, &(0x7f00000002c0)='/\x00', 0x0) accept$ax25(r1, &(0x7f0000000280), &(0x7f0000000300)=0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x3, 0x4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) getsockopt$inet6_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000640)=""/4096, &(0x7f0000000500)=0x1000) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f0000000140)={0x5}) syz_fuseblk_mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0xc000, 0x0, r2, 0x2, 0x3, 0x2000000) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f00000004c0)=0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000540)={0x0, 0x8a}, &(0x7f0000000580)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000005c0)=r3, 0x4) 2018/05/29 01:53:50 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) lookup_dcookie(0x100, &(0x7f00000000c0)=""/68, 0x44) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x40000000000020, "69703e677265c44e01010000621600"}, 0x18) r2 = accept4$netrom(r0, &(0x7f00000001c0), &(0x7f0000000280)=0x10, 0x80000) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) ioctl(r1, 0x800000000008982, &(0x7f0000000080)) setsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000002c0)=0x7, 0x4) r3 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x40000, 0x2) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, &(0x7f0000000180)={0xf444, 0x7}) 2018/05/29 01:53:50 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3f1f, 0x220002) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000001c0)={r1}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x7, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f00005befdc)={0x80000000}) r4 = semget(0x1, 0x200000, 0x100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) chown(&(0x7f00000002c0)='./file0\x00', r5, r6) semctl$GETVAL(r4, 0x3, 0xc, &(0x7f0000000000)=""/94) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x9, 0x708, 0xffffffff, 0x4, 0x1}, &(0x7f0000000100)=0x14) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000280)=0x5, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000240)={0x1, 'team0\x00', 0x4}, 0x18) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="00040600ed96000b98fe2c97e91f667f970000017c99d6fd330700242b0000000000151be21607708b4baecaa64617b2a2faa01e2d377f55847640bd91e4a7dd5edc4ba5a92e6cb8ee22a46e265bd7dc99ec9fc02d"], 0xe) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000480)={r8, &(0x7f0000000440)=""/32}) 2018/05/29 01:53:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000012000000000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 583.695402] binder: 3923:3924 got transaction to invalid handle [ 583.701568] binder: 3923:3924 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:50 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x7, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket(0x2000000011, 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x23}, {r1}, {r0, 0xa000}, {r1, 0x2}, {r1, 0x20}, {r1, 0xc}], 0x6, 0x3f) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x3ff, 0x408000) ioctl$KDSETMODE(r2, 0x4b3a, 0xffffffff80000001) sendto$inet6(r1, &(0x7f00000004c0), 0x0, 0x0, &(0x7f0000000580)={0xa, 0x20008864, 0x5}, 0x1c) 2018/05/29 01:53:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$fiemap(0xffffffffffffffff, 0xc020660b, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x40, 0x3, [{0x200, 0xeeb1}, {0x3118, 0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x104}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:50 executing program 6: r0 = shmget(0x2, 0x4000, 0x8, &(0x7f0000ffb000/0x4000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000340)=""/4096) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d}, 0x10, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="010000000091010000006c40c7c305dd6065110080901fa9e92706dd2922095ab2b2a500cef85c104c4173948876a9aeb85e667a4d4aac236c34605271e0bd7e6987de4cdba30200ec63c9afa200ffe531e93b3d91569d88", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000600000000000000000000005e401380a30678fe"], 0x200002c8}, 0x1}, 0x0) [ 583.762708] binder_alloc: binder_alloc_mmap_handler: 3923 20001000-20004000 already mapped failed -16 [ 583.790963] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:50 executing program 3: openat$cgroup(0xffffffffffffffff, &(0x7f000000e780)='syz1\x00', 0x200002, 0x0) syz_open_dev$midi(&(0x7f000000e7c0)='/dev/midi#\x00', 0x3f, 0x800) socket$key(0xf, 0x3, 0x2) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f000000e800)={0x0, 0x0, 0x0, @local}, &(0x7f0000010e40)=0x1c, 0x800) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000010e80)='/dev/audio\x00', 0x2300, 0x0) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000b80)={{{@in=@multicast2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000c80)=0xe8) sendmmsg(r2, &(0x7f0000005000)=[{{&(0x7f0000000580)=@nfc={0x27, 0x1, 0x1, 0x5}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000600)="f32be0f33e10562cf712afe3adfa6a7de5f1a0741d7707c4cefdf2ac20b7ce719f94134c062f55c5980318f38b1289c27f9f31786eb4b696394c3bea529822037b2dc9c4b410b0cdeef5d2dd0df941b2e866becebe7322a89b", 0x59}, {&(0x7f0000000680)="2a47e20cd2500402b69fbe033c33cf23e6705010e1cde95036c302a60d4767a79c17334150271ed935f7fa10633d8d354eec9b47f6bef307c472774ea23a52b34c5914eee4b81f", 0x47}, {&(0x7f0000000700)="f3cb6fa559645800ba6870a93795b20fe98c37775c73d576781ffed0eed7eff0d7c0092095034defb19ad370b3d281d3b248e4cf0815d0fee0013c19e19fff14d1e21473ab1be630a52cdb3dbfe956e2faf942668ccd7109293d4a137397beb90dfca8c16d34f9fbc29d8500299003a8268a3412bad0a1bfad56b0d6e1a0ed11e7013524810e01a06550d304e3ebb1e25b4a9b8c8085303d15e4f9ff0085c043ea536fe4659afa558dedcde2c1ca6169884b31e69947e18089802836e11ee7b59502362c16f80b660bd5", 0xca}, {&(0x7f0000000800)="f80cf9c251c78418b839ca87172f5d9af35755b10ebacef21f104167889d6ba70785aa4acf5ff15072ad4407e6268f3686b1a9dcadf9afbf35fc0f73a6ac8d21cc17c3a2dfd80ecc0203b8e172ea1053400ff26dfd780849e5df541f91298094f321150456d221eb352acb55b10d5a82779016f54be2557e24184376adc75e5cf3faa6392b0da47c2408a69624f1a11ff3fdd28b953363d6c4bb3290560c820bedc03bf63bbf3b7ceb5f06e3de0c6a0dca5cbcaae763a74642", 0xb9}, {&(0x7f00000008c0)="6458c8c2c18d0771171710a2432d53c5a0d227bfe8d54366dfb6c2184a414516d6037f56a8ef4310c1e4ab6f1347bcc49f535447c00ea2be9f7ade7828f8492a8e7bf4fe0d288192042d9cc7052909a42c1dda47be4e0b5900f2a68c1d1bd02c5599a0f2dc3924cfc465c550083f5bfa94ffaba0e7d5d1495f5a802cdf45458b520128d8789d4480684fd0a14a947c265656b37fdd25cfce6360e215419c26ea293283ccde3c9046b670a3864fb18c7b6c52d3", 0xb3}], 0x5, 0x0, 0x0, 0x24000010}, 0x390}, {{&(0x7f0000000a00)=@in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a80)="8a9cab167b34c59a049ab2fee17d0961ff959bd9b4a60cbb18ccabbf4a9a32abaf54dd70e3dcb013b744dfd07f384fb77db27c1edf4c306ff2cc32b05c1223946594e1a3608c1b43f92c844e5e14836bcdad647ed12c2660d9f928a418b34f40134d92c940aefd1ebe8c6ddc4840b8873dd8547051124ae42aaef133f89a08d8e52bcadfae15937a0663c148132ba90a7df1de2aaaffeeb44b8d320da2", 0x9d}], 0x1, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x10d8, 0x40045}, 0x3ff}, {{&(0x7f0000000cc0)=@ll={0x11, 0x0, r3, 0x1, 0x6, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d40)="deb49848a61a732aab55807008405b0cfd69f41972ebac545e17c11a374c0e03c5bf4e31bd6126ca", 0x28}, {&(0x7f0000000d80)="a30c738d19dfffe022ba5d80f14f9a1ed6199e19650c201d91570c23a4cbac79d3b1b8e65891e70a89306dbfcd2665e942bb8289e43b03468545fb7b01302c0b75b0f6fc95e54a9cfabbc870e84f", 0x4e}], 0x2, &(0x7f0000001fc0)=ANY=[@ANYBLOB="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"], 0x2268}, 0x7}, {{0x0, 0x0, &(0x7f0000004440)=[{&(0x7f0000004240)="f0eb78afc2509206205e215ea50aa001f9c1f83a3e0b38574a5fe02470c86da181ce59a0d78836d89294ea2aa0400058120e19b843be3cd4cb63277ca482b9801de31d9ddb76a92766c6f16f4cab7c7dd60e7c81a3b24dab747d23c798e4d633be7715d5d3c0e7c3ebc6c6f282fc935f0d7af7c278dd99e3ffbe1371388e5f9e646b038bd8f2a433557bba18fe125a9d3030002eafce83", 0x97}, {&(0x7f0000000e40)="14737ec03a1b73f4a4ea273aef74f45cfc03fa8d2dba9f6654fa5d", 0x1b}, {&(0x7f0000004300)="00f2f18a7bc757a39a5944e36b692e3eefc905287f311cd9d8390dfa4d5d08a1adaaa9249312d42ba1a1460f906de937b9edcd8b9a9446bcce5754c5245e5ec437092b8ab77813dcc914954cd6684cd076038f23d3b85f0b7a30be82e707a6ea95f71b49e58faca90d8dfe64dc7f65668a69b2a9a49fdaf193a75bc841bc4d3e4f0876958932b7bc14c669f706", 0x8d}, {&(0x7f00000043c0)="a50d98f1758e3d99aa119b61c6bf9c11f45290dad94ec76290d8dc2ce2caae0c1153d65a897438c00dfa33c294b3dc10", 0x30}, {&(0x7f0000010ec0)="f384204872355f5988f1054d597cb44508ff34e63369ab54a0cb7441a3299fdfa81940210545dd81ebaf965671c9bbaff43c75d5f50210f999cabec3c095", 0x3e}], 0x5, &(0x7f00000044c0)=[{0x50, 0x10f, 0x5, "a0493c5670be30e249eb74bfca1952ef09ff08c716aa78462cc6cd11e6096aa9c8a6c98f59d678c4cfdf5cbd82892a68f3a3d3e664f7ebd86b12"}], 0x50, 0x800}, 0x7fffffff}, {{&(0x7f0000004540)=@l2={0x1f, 0x1000, {0x100000001, 0x7, 0x0, 0x400, 0x400000000000, 0x5}, 0x7, 0xee6}, 0x80, &(0x7f0000004640)=[{&(0x7f00000045c0)="fabc2c5faf710d956085771790eff2a4790fcb14a9fad1e9020ee3d859bf80968b70ee8014420286da7581eca3fb73eefb38f3d20292d19e241c08ba44699d353baee5002dae7c011c35", 0x4a}], 0x1, &(0x7f0000004680)=[{0x80, 0x13d, 0x2, "970bbd9118b888116c26b08ab6232c7284e8121c19d3c6456f0bb06db0c15b58f92b18fa24166623725f3c6edad943b710df9396807d4424a13c4c1ee0e0972b78d7fd1927d53a707d4354817ad35e2f85567be1f2adfa6b26335e2ad927ae163a6ad778754d8c75ebec43"}, {0xa8, 0x13f, 0x69f2, "99284bd0a68dfeee6fee882f08b4bb0c019ba16b4d34bbdf31d8281211737f4e5e0a10c54df81c353e38c6fddae0241ccdb5107bed6681976be58f02e92e07c5d3b9bee33c4e9a1b7c5cf222a7ddbd8f1dbf6a5bb44e5c4ea36943d0f9fa4400846ee11c6c829b16bcd48be59ddf9091367aa4816f44ad1b47dadb89d694d40a4443d883cab44e7e6612a103a5c8fc21639eadee37"}, {0xa0, 0x88, 0x100, "39438523116c63a11fbdd313fe899e873ac4da240c78edc1ade797fd7cd50d064bc4bca3c4bf70c845e9af817d39688930c6317acd6ddd39a46376bd2dcf7429a3c6faa581d15614ac4738a3085a135ead91dca0332442c8ebc1e245a01310fb35f0d526aecb23501a8fd31e305de84bd03a718727164b2fd0b8dafcefd3ce0dfb0b9ba93263df34265d9ff523f7"}, {0xe0, 0x29, 0x5, "95fa0d1822bb5c694f85c058e461525e6c6fd6f7bfcd177434b352d24bf039340ddb54c10c836ffceec75aceaf4d8e58b44699a1de163a5e01b3421a2d8ff89c40cae582ca67739cb534c73051153924f81603063a3948a2696acabbef14b9a7f3f776ddb5ac9f99e62371818647f6a6e705f7e8e55e77c94568aec571c70cdf529d58b1a515905a3dac56cd9568751622fc5bcc982b2a510f23814f21eacc90f93790d262b735a50094ed574933567e496055ee2de15941f811b5e313784817c5205db5e96563b30c89c58b01b79a"}, {0xf0, 0x3a, 0xaf, "c98756a3f3f0c48d66adb3fec8886022cd53985d6187c972243a54d04d02546476ed8d572dce05688588781dd20eb754cf9f2528e11dba823d9d339aecd4976415eeeb2c3c12515b42cf37ab38ad0d5cfe2378d8ef27a3fb6383c9c03e7bfd8969c51be4096e898d6fabb3529689bd0bc4076825ac2eda7990e35daa8b8f696a45421eb796d190dda505ef69400e752329adf73eaed4244fe99985936a2fb7a68ecc35d5a445495149c8e2dfa3774eb44acb31f362229c26283d4e85a62290b750d83cda16915dfcd7e4a32d00349652fb0419d6384bf70bd89378"}, {0x58, 0x18b, 0x8, "c59f23f4a0e87a3c97d9f480dce93782f370b37204eaedd163e99779a55bf59cc025ac922bea17e6976d4c1514bc35ae3ce72bed6752b827544821063b9b2c2ce9e26724"}, {0xc0, 0x10a, 0x8, "417b4da02990d33030bb493070d34a6aaa087b64823d47abe80988393b9db74f8d2ce02e61009493837d48ce864b8f241ef85cd560729c8f4c77092413f77ec33d95e72c65cfabcf7f81e3bb9e5c0ff44128e892b39eba14da152ac32aa47116034166d465d307dd75c1c8f6749d3072bbb07810f51cf48f58f711743e1ac42d588be3f228df1d3ea42a90cf775a2a8fa3ed82a9f3a5c1225c5758e8a1ed75ff0ea76003121debcf6a9f600deb"}, {0xd8, 0x1ff, 0x6, "9a7b7a20c82385156cd6fc2daafe9bbee551290108a000602e868f33988644cd4196439ef9520d8fc75751685951d7e33b0d9836b95718a60df3c6809f9f619268e6a67e9e7b788485fb811a16c4c1653d885bfe7293b6767261d8028a8ef3863db981d431286d921fd330ab21a12212cdc3d30f90de91a8141a928ee260c91df4a64b9c67e4ad17ed901c962930bf9fe3b1edf6b16a244dc9a61a6fa582a1b987d35183e1c73e2cafc46585c64e8b8eac3f2a19af56e083675e83360b100cb4ebd1c0ec"}, {0xf0, 0x0, 0x2, "b65b708de260d68f222332b7e6fa8fa67a75a7fbb0ef97379d06596a1d7d65069d31518cc69d9a075984478feb4d66f37b5efa458dc90d0529c7a8a17c2c066d21ab467b400946569ec8ca5fbe20c5108aa1120c9a9bf533fc0323fc55afcd821e2d665df9e61bdad3689eecc42f360b87510c798d099c509090639d18cb5af8ca53b89b0728820c0eff4989c9c0213e0b64a9e0791f35f2f270a0adf55549b5fd93de730e1d6b6cabcdc988bc945658b3cd0c29b35b405ba6f24dddc2577abacfc81bd61bfb93be6d1f48431979fffe4e753645fe0f09641017"}], 0x678, 0x4000}, 0x6}, {{&(0x7f0000004d00)=@pppoe={0x18, 0x0, {0x4, @random="c30df9739835", 'bridge_slave_1\x00'}}, 0x80, &(0x7f0000004f00)=[{&(0x7f0000004d80)="a56db0488de536a0a48f3233a04738fe71ab50738c756e7746a8e7960673ce0ee661c79e13605e514af529df6c8ef44791488152af3104c0b20c66b68ac73f786f8888f5c0b33afa59d3bc0e843eab359c82591a8c222362b0033e8cb547601bcc205643b048a4", 0x67}, {&(0x7f0000004e00)="463d9d69134f5d8ca7107ffea272434089bdb6e2880950d277454dc74254f757bbacd99bf5b5240dbca60b00599b108eed331528f1a691236c2086f76b1fd9c949fa0a7a28d6f3529e263d29edcff9cad574b7ac17bd793a9520d924eea82f97081ac2e91597744cff41a443f6191b6230017c9a990e36f1a444c53490c3bfb3b2bea1fd819d1a878ac8a118d1d2f3fff18cf6a536ebc4bf52bc66d64b89e620c6376b450944480fb98843d76f45ffbd99367ecf072be5155e3b6d0ab6a62e162a59d48cb8def35b", 0xc8}], 0x2, &(0x7f0000004f40)=[{0x90, 0x115, 0x7, "634d553374410de7d8757f8f4f5e4b91d0391d1ffcd7e60c2ccbc446af44a57dfbf38b388eb2396e1667d97fd23de59e63446a834d830751d256c319d5c4f62c35a1b056b6f7c48ee50540a394cc4f5a50eae18e97616293b3babdb2f19c4975e7a01e7ccdaf38d3126e7a4657092d3c5c7e906e5c832a404b07f5"}], 0x90, 0x1}}], 0x6, 0x80) r4 = socket(0x40000000015, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket$inet(0x10, 0x3, 0xc) sendmsg(r5, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000040a07031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) bind$inet(r4, &(0x7f0000fc4ff0)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmmsg$alg(r4, &(0x7f000000f980)=[{0x0, 0x0, &(0x7f00000072c0)=[{&(0x7f0000005180)="5950103075f93b1095245f3aa528d8e9180cff3cc06cd3fd372affa6a70e807b6e04e6739b2869", 0x27}, {&(0x7f00000051c0)="ded6ef740dba347f1deacdce66d173ffaa6111e1b88d470e51bc2eff56f34a7993aba0af3796ed7cdfbd913e", 0x2c}, {&(0x7f0000005200)="94b431118d754b2d5978b56d08041c645b2869def0c9f55a24c64e", 0x1b}, {&(0x7f0000005240)="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", 0x1000}, {&(0x7f0000006240)="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", 0x1000}, {&(0x7f0000007240)="354a6f9b59bc840fbecfa50e2d525c7751853d240a47d5a911297afccfc5f1dce58f4d7477be5dbf8e58171638624347f45f31af6b8ea37f99614c6734c9e65457a10be49f8f3c986c24a8b2f907fe9e678f6e5516b3b604b5f088bc8f692961d64a344fca15b29bf7e8aa9a8cc25b3d727e91b2192832c0e83cd6", 0x7b}], 0x6, &(0x7f0000007340)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}, @iv={0x38, 0x117, 0x2, 0x22, "f21fb48965c99eb847c42cfcc5cb8358e11d7a773e899368a668b6461e06c97ade4a"}, @iv={0x98, 0x117, 0x2, 0x83, "f0000b1b5b376a1f525fe7d52e26230d6897c5e1770a77c99ac7195f6229d6805ed702110b85c2d030ff60e7fc3c0499173b38537122ddfd84be38f6f0c7665cb97ea1b8bf85601136668b296c17b46bdaaa60373dc3a1df3ca1f9c6baf12a6e485a59026431b320be4b82b967c12c4b9949f3293b7d03a182051d04be3c22411a87c2"}, @iv={0x100, 0x117, 0x2, 0xe8, "e764bdc7594e64bdd103cb9ed636d196126ed06b8dd7012d2c75f5eaf8959032cdc8939a3579fc2770c8736e0526af071ed12bc574bbdf397d1f2f1b5c7747a7aa1dcaaf81185d44618eea5bca70139c24dbe453f09850a397f4a866e39e41cd6c9924d329656e2eb3f44962f1622f4dbc2f2985fc928b25b4cc62d8aefafa00506411d0fd12a8aedaef10368a0e6449a3a1425e324ef5a8dd034db8debb19766633da13f5a25735b9b6c2ffc46fd45856dc99902c4e7dbfc43d8a6bdebf85c732ad37d7b58bfa7807807ee0a3096216daaddc61db2bbbb9b5d4b424b69e672c1748397627a7388a"}, @op={0x18, 0x117, 0x3}, @assoc={0x18, 0x117, 0x4}, @iv={0x90, 0x117, 0x2, 0x77, "41ea6dbdc5df2b53e26130048e805d1bc9453e94af6eabf1a2af41b6c92469579239ac7aa82c758a7faaa882f7519ae1a6ef7ef66c3e86701f42042c8c894ca258051f0a54c224ebc08a64d41265a6d5d79d36dc0842100b00ebc4bb1f697b893dd92f747cc3d2314f29a1c207b37f64ec52e4b8d860db"}, @op={0x18, 0x117, 0x3, 0x1}], 0x2d8, 0x80}, {0x0, 0x0, &(0x7f0000008840)=[{&(0x7f0000007640)="e7ca80d084646fe62e3aec1b48b41df5c3aff92f4acb6617acc7e5bc433b9d4b4da808a01763cbd302466e25d9bd80e3b85a222aef7a5fd4fd061556e19a82557b46889cd11d2260f17149c9f5fe4ed1f3114775cbe53977b2b6002703fcf8818afcff41cc352d0dc4370951dec71e6b79052ea8dff5b21053d68ad10f0aaa1da291233923d18a07435f3e267257dc1b63a753830e02123f9611ba0ca4f169ec4da96234a1c7008af580ff5161e683d6d6c2bc6d496234f394a860e0a965b598df738473b84c4bd5ce5bbfc64b55ee0c1814fc086875946bc4d996da581d23cad371d5d4ac20dc30d4d8a19701774862a86820", 0xf3}, {&(0x7f0000007740)="31d71f0d3bee7f112dcd4ad3914eb776ed00960b363c757ee89b29f80e7a88ef5590355ae91a259867e338523af6a1da68961598c525291dd125f816bdbba5c5f2471ec49b9711bcce65e6c6569cef96889e32fd62754309d5e4e547dd75d6580147a75d84fd6e7dc160267fee0c48c630f60974c45eae02f30c2e0c996049e46d778b3f132cb22ee215d649351fa50f12d0c605f52ebf8ac6cdaae212667b90006b1a3491ddfdebafe148fa232d1ab6bc39ea", 0xb3}, {&(0x7f0000007800)="0b321425704990560b780f4fa46166203cb906359aa78d752ae884929baa1b3be0eb", 0x22}, {&(0x7f0000007840)="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", 0x1000}], 0x4, &(0x7f0000008880)=[@op={0x18, 0x117, 0x3}, @iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @iv={0x20, 0x117, 0x2, 0x8, "25f5e23605584f81"}, @assoc={0x18, 0x117, 0x4, 0x100}, @iv={0x40, 0x117, 0x2, 0x25, "4e41be8c28ec619b827279a8fed249e717341ac3e181d2335cfd028e65f757a77ee371e716"}, @iv={0xe0, 0x117, 0x2, 0xc6, "9d77d9089b3e6b4f99e3c8ea1923aad0340be657387250b99b006f21ee5077e9d2c23560ab5900001752269d4acca2be9e11b9afa1d6a2874c8087a23689301d52b0417d6655f275f3523539315e51331d09308e41d035b6f27cc65a930a3cfeffae9f00321f134a1c91801fd867701d78d59964b06c436cacbd417d449214377fea2d96e513f80627b221922faf1005a1b8c2cdbec40e5ae7210553a2fc72a9aa9b9c617f6d1a6520af275aaabd24dbd1c58979009e02838c1499344fd607c5352e64b424a9"}, @op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x11b8}, {0x0, 0x0, &(0x7f0000009e80)=[{&(0x7f000000a000)="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", 0x1000}, {&(0x7f0000009a40)="c7913c8ff8514f2f219443bb804576e39ac518ab4e6a41ca45", 0x19}, {&(0x7f0000009a80)="3308b8aaa0b8d10acdcbb3f8dd4b8c4f9611c638edfc1d93cb185c3e9dce49f117e44743c3fe31850b7930fa284b27b70def2088f68906d4e61dcb9acf3141d9943c9f40efb9b0b22c", 0x49}, {&(0x7f0000009b00)="309db152cc46faa5b33de1cf33727a17fc096e0b414a184ea98a20625a9077328f191eadf4a6afbf7b9c9556ea19205762c6483f6fc9f93f1beaa66d215623f8084cc94b8f765baba89f0c852971d740c82001321a356d2e1dd9212479e52d4bb7c007bc2e657f6433cc2260482d72bb38cb4c7a0c3c925178e49477a673a1b36a27588d143f567b218fdb0c358a283140c8881d170f180e59612af3f63e0453223aab7bf0f691fb19f50acf35b3dda5b8af85981ca9", 0xb6}, {&(0x7f0000009bc0)="94508eaf4a30b4b1772f03a8bb620c8b731966c167ffea54c656be4b3abb692545f402195333b9cadd908657a0e11f044dde9ef55be8251e86365af51e36104c186fce2c23954f59d66cbf24c0f4a63c2956879eced1d6bba37eebf392044bdbbddbb394622a1c9b59e1de2eec65d47d1c37bb429f1dc3c0da726b80c41e55fb7f29526d39709c126744fb29841ae5751426088b9abb101bc273a73668b752208ce534b7100b55203b9d7e676ff51a4abb648b8c34d56b1d9cf94facd314f2ac428243a2b1d415674baabe9f11417c62cafdc806496f763c54d40a9973f974be5a5c79dba3558629f85c9cfea4f18d735945096073ccc3ecf0", 0xf9}, {&(0x7f0000009cc0)="ee7c555f1e1e79daa63757f17db30aef51af0b95059b8774e01173430c1b698ef58246b17ec4052c01d40fe995f9f7ddce5462d45d98c7b683efa80f928d3d0d45dbc1003f1e1470da85543a754ea7cb9eb19e7c8730b335e7d872ff91241b220857c8ac50dde228926c9985cf99ee0a3b8aa3ca83c9baf9465f7a865a39282bcf46d0ad17401b68404d194dbee92699238db33fdef2082f2653563c36e19986d5bdc0ba2665cdd6bbb8e57140b973c6747d625c055e6eb468298a235129aaa8c0", 0xc1}, {&(0x7f0000009dc0)="44c4d5dcc6e61cab08fb36baa6435382d36e48d8d92dbbd22b772e93e92d680b80984d706aea5d6d677f891e1f9a0fcea41d5d66e1a34d7a954e49fa8fb634121faa4d7a698246a0177aacf7d8ef53fcba93ea41da23d3aa1329490084fc8e425c0dea2fff1b53b327ae3474f6a235d8c1d30e9f11628cfd402a5e8214f4de6d712ebfc2baadc1f4", 0x88}], 0x7, &(0x7f0000010f40)=[@iv={0xd0, 0x117, 0x2, 0xb8, "fd3b6dbc1a3428e4a68e63faf224d43fe748689710d7bf627f178c2377c028c4dd6b6454206943a38f9156ee4b25573944f6f3c91078cbd34c7a184564ebc07fcbb165d4faf6df11c4287337d3f4431cb75a9e00584dc03552bba3b013a3a0bd46c964fce37ced6ca58c8fa014bea5675978c83e1ae01202169345267c3307d89525860561fb901e6603e06ce26ea13a6b62a97e52979b45129d58e493bb29bd6d484e8194be55fc05a56d8829f33054885161ef3102921d"}, @iv={0xb8, 0x117, 0x2, 0xa2, "9ad0ecc861feac4e5ddb0fd9079e58b2bdb374fca4ab0445a9fc152de38bf7e8125ed3089f963e0ba4270bb235488acaef7c833f0d699ba9961c30877bb5b712273987fb80b9e56ce1ca73c8232e7984e1eb4e8e2735539a8cdb930fce1cfd7fe0adfc1426eff3dd6d32974c9f74f35b993fe04f1e46231de218269644789e7aece84203268ea7cb5161d72f4ec3f489abd3a2f8055b8db1a5f30f67ba961962e885"}, @iv={0xf8, 0x117, 0x2, 0xe2, "cd55d625300b82a80dc5bb34d52fc5a9150f76b4dac6a47fd83f115e3903c9e0f1fd434c07d4d958619019a060a55ed71e65d39e467c64d06c7f519e550807c4c71fa187705ac7c19969da8fc62c42ff7b2d0374e6629510b5ea17ae429db9a4d1eaad664e9fb6fb477cd1f4c47a95891386f01332b7d6bf244960aef46d1a40f82ed7b4f1d5ef5a9f5e235f41f1bd3508a1bea4f198769d93b5f24a789aa2da1c3840c6f482122bc82f4c61713316b2b5cb05172e45dd4b69cf90ff8ee3267e7a320e2d771c6e33a2c611a929ae8110b43150ea57629667f3271b09ceb3d7f1531e"}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x38, 0x117, 0x2, 0x24, "92dc0fb8efbb780c5bf641c94acbda1bf30d48f913550d5abba72a35ede6fdef6e01bf99"}, @op={0x18, 0x117, 0x3, 0x1}], 0x300, 0x8040}, {0x0, 0x0, &(0x7f000000d300)=[{&(0x7f0000009f00)="102f2e5d84913d0dd7e4c654c4d2a825d27ad67e8c20252a88843ace94268d28f9e0b625929925bf1f661ff9d4318f1a7d3c1aed", 0x34}, {&(0x7f0000009f40)="ea88c8df2ae7f1d4cf3b9d448a2c6de705131d9a29c84760a2cd8e8da34e28cb532aae9a8c520ec3d53cc204b6431c95a886a2a1ac2a4c8d1b01f8f742b61b6bae2a7e5723536347957b43003e1c3da9ef2b2b7e2771c986a004da6bca1d4d3994145e0329e026", 0x67}, {&(0x7f000000b300)="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", 0x1000}, {&(0x7f000000c300)="5f96aefff877f9cc9102938b6fe8be2c499d34397c8f4ad786ce1dc6acbfd5a1a2d0b198724849c2d3a3633dffa7632fc114be57e34797f076c3911b0a70ace1e472aba614e5a5cf19624fadc2d6a3c81f87b41137442175a26e914256821351f22ce365ac2dfa2c50e4d376dc832987483bb74677e5190453306b908d7518759a0151b7a09093643be858eea45c9b2bd2dd8cecf7697fb49f7a853df4c9991a0e87437fc955d3f3b912c8bbf497741f8d0a1007c7988539d650fcb9be6d36432205eba562611cc533328fec0c039b9ef0d86a23eb7207b4f69f4574f65d98471b979e1154dbf2414783b2efda7d3df2a239e9cd1febfaa41c858e19f1be994439e0db9b666a383b9f5925a9342c1ec3fc6d5ed131443cf663b1dd1e7c9607757c1737e87047cd8def3252a152b08271bb7d72a8cd47cc622d628e9322080e1c4a5c0644e4c1c36b1cf572f5fefe6a52245bb0ceb94f929a83b36651f8f88673b02eb9611a9c2c4286f2a5654b72691ebe47b6a01e243a1fb029bb9b40ac64635ae3d9864f531e072d83be80b8f5db81191f3e265ba3b249f8e8d35895dba58abd14ba88b85d8a027f312fdfb9c9abb2d813edad7bb495220bd853ae2335d293245a8304634689ccfbc1f7b3b8a7030b21826fd1699a6fb7eb8e483d1e650fd8688c7233237702ce9149b9c6a7a92c66264e6edacc08454df3ed6fbcd2654ac3c187ac9e1d65c0abd981108b04e9ede1b54581de329a7abcb45d7582670fdb8fc527c86446d421bcb37d9829fb808b34cdcf0bd0f562f01a8bfa5a2fbad4a12a4c30af0c0d95f230ef2c4c5bdaf7aaf7727aa25469a0b79e15a50d744e8a7bcae9d25ba946b31b239c173ed53ab624cf11e46836f16473b211a4b8522520130cef6fdf28e967e60dc21467bb42a3db2678193bbdcde74494cbbe9fc8f164d7c0f4c4c5530c0173cbab4795952e38a4c4127225f2cdd9d32c7011738561cd1b9edebb799ada75e1e507df4e30324cbd1acedba0fbe97d4bddfd66528529d01c9d0c73390f62fcfeaaa0447dec9ab990e2b6f4796a9da32ca1491787ad9041c33aed69ce3730a0fbfe5fbca863534684d7cdd28e7336a29e96fcd53bcff83b2c10e6a0ebe33f4e60adef4449828603adcc67304ab4d64d88185bf9f28e8793c7a6cc6be15face7a4379e3de934acf8c7446336fecef808390fb67d453d1a743be4d74e1508bfa2dc57f73b4e41a06c4e773747a38ced83aa7ed57a35ba6c422ca0e748cdd87dbef263e463450b02a792ce8a6118ad70b6ca146f50a78ac350bf25837e5d207e915260893eb49dc75cb7fb1ca5937fa39e9bf67e12998e8db4ac54f2ccd43f8ef91c591e1677bef7cbebd9e5945c97be1494920fc37a8fdc96b017fea861f04e07847861bbe70b7b055235bc4b9995b31446f792739c12c73f444ef6717d31c827a5abd379f641773bf39b4edb1649ecc6c207d7b26bcb9825daa83251d6f2babf6f9a58f489f376fb464e925672547eaf064b3c378268e796db1558da646e2bd91c1a6115bf9a38b3faeef43a45ae67f13597240df9bb99f6bb89cb10d41b34b9b41390c70949260855f02a592c47a2395e91b56dbdb6507cfc149e00ace9600f3f5dfc6da4303af777f970f219c33a6ed97d5d3e9200dfa4d2dfff3a6e264263e6b940bcac82816e4732a025d3c7c0362f670597b202284326a1cd774eda33bec2380dbde7d344b284bd395b02c5a402ab2dfed7699ddf0bd7db49c5bd45ffa52156a6777ebc32b8bc283139652fd8929c50370084d86f52c547fa819fa69726e0f23e2808ca4b6b0357c01c634b0b9b5416bd46fe570e93d9d257c775f0becdabc9e726e39d185540a984d34cc06f059d6c01ab79b2c4929852c1cc65d4517d5aa68fb9241c227779920ad1440211577b6531e9c24fdbfcede857c272764e63f09454cd704d021ece895b5a830abed34fb1e8cc96018553183c91153d6c9602e74ed5ffef44b9fe486445e9b48237e9279b56effc2bc4029e43645251c6aadfa677bb47723ff8a6e83515fd08662e7c729c3786fac7f6bc521f81b52d93699c8e27a254d9536e76ba5ee971043c5ddd3d97b34377541670526b06063380839666909143e26c4472da623c62732dfbc9b991a74d01420df2de3fa78e59e4c02af3268eeb9e4c34274de1ec8d004244331d5e04d8b6967ff8bff623945cf24428f5732d3504f623fa6cbf67b35f34045260bb8d61b5bf33c86d3e51e5c49ac8f47efe27e9b6f4b716c7559e5b6219e99774ec1a2cccec5b66c56f0388030d2ab7034edf272a3a8bcf973bc36e0c5e3c106bc747bf990973dcc700da324c3eca2d6ea8a572bf0dfdcba1aa92046abb1c9c4e24865767d7da9513a13ea957e05b530389b0168934debef0937daa00b9b8e076cb85b5030b35b42fb446e9193d1fe38f036340d021cf4bad7d78aefdd0ccc82e4395600a2acf6b8b595e955a654b9d3b3a045773b24b8d6ac35e20c96eef5c14c3ce2444c2101652d99caa88b690e183fa4d54d082b055257e657b561a1af091f8be41eec68f5bc91a593b683301066b2b1becacfb4804b5f951265a00f5f056f34b96d2e402fbd5b58524f85eda26a906320b1ee878f0f19e78b7149c2d6544b5feabc226467d5dc1d63d01f940c989b31523f617575fbe868c67d30fa87ecec194de7f39cd65a1ef03395eca2ce8da52ee2a5cb15fb3854bd427f3bc4367996f531e24839f961e6276f8d9bc397643dedeaa74894e54271e7383ac6938d6b9347373666530cba64855f0204e1ca874cb98f602052a033e8b0fc9f4d7106f9478cff9415574e7873f93b61a94d3b416034284a5c32818cfd0421317924e73399229008337b4ead0ce15afe6744d95d4d00b40633c68f94c68d7a511b732037dba81481bc63f0375a634920ebfb7a918344d97955c3d49b9b28b5d77c5113f9e1e6e9340c26c9b70bcff85a7dd975b80e7372d021757dc5d1218f852f42893b75154344d2cda5630992dd29bd5c6208cd3a19cf7f74d935f4a4fd780462c5d288d8bccb976101756e11be85a17379ef2fbf699d5a2333a2408a2626d631d8ca368b3a3ea907acdf2d73098c2bcb0c165c0580913dc9a67ebbcbdd811c254ae635e0aaa96cff014c42ba67790d6203c24985c9eaef234c8076ab6614e5d5f8870bc8a31ff75e2f10419bd5b07be047e183aea8f063e2016921943fd71363122d89c5baa5c80593cb90d7a99f373e652fde9a8b33561f6a57d4e7915689e54c46059850e4c99f198ae9251f0e2319ac206e1fa5169eb12ed80ee543262db87e5ecad9458c165c8c8a21847e6c3c3634c7aa376e2458c4fd65ecedcc9f3963aac1f4f0c7bf0132da9b6fabda0aee3d6ab8e05a524b6fe82ffd5951583ecb6c658194a158f63865216aeb985b70b824c9889447a37c8027ac510a70875e94f088d913d92c97ed79d09f0a92c9bc04789c692d673d28b62816c6b6b8e4535f021f577646b1a2f5a5af829c2fabfd2518cde61788101c2ee2fae9b509379863954effdb976dbd77b57d5b70aa3142c7a453ada5ee6e6e35f29683cd940b1174b269dee6c580f12a6d43f7808121cbaabad7500b747cf33aad4805b2c9126022b499f87705d0f18652d9dedd33e9a648547c98ff8508814779c2f23bd5c46c7f3a12f3ad6da3ca7ded2992c13a46fc6368f9ee92f313a1cea7d9799e42b5f7911379cdea3a4f91afa7620a4737dc23e402b0f7c2a9070b8580d7a118d9fce58e0e653650f4dc1ebf601f8a609282343a45fde8c67e1aaeca0cf0cc93a16fc7d1cc1ebb7f8d7baf9349dea82102daf5380aa8975c86b95e0d5b4fb1b08a27e8fe9db4118e70ac1fe66b9b105993d291bfb10adc8180162127deeb94278997a05feafb46ced453b77d2068590b639ed91bed746eaf4524b7e0bb67bde596d11784906e8a28e02d1775e2c1c3f6c71026dc80c8c5e47766cebad0dc0fb36e123df0e5910d30b62dd9f24bf98ac01a321fc23676e38e30e0b014d2e3507a3348df7c30db785192a50fdf668a149e1186404cc72b9692565e17ac8f465b3701116a6f758683a45d98dba752736a5137e1fd25f6334868757d95b10a0f36e1e89e66193058b680239dd09a9f1bb0c637d8100f2a3ed346061b7acfee381e6fb3c8bffca8a4b8b21bfa30fb46972241021dac0e0683b8e2dda1d46490afcb95eda20458e2ccad982445ba80e7f6af5d8a9506165946a46bd0cc1bf81668f471b1d2adfe1542af7dea864e964949c72c730a5fc529639f8e6240d3df298172d992b223c994b69837dbdd0231c14a6250bf52e59021099be16608d34f8ca9887cdb2a7f28ebd84f0c962a6c646a53782f6f6b3756becba89550c25ccced25ae83f7b2a5b51126527afbfe6875823e540abb861073dfee7166c000eaf275fa47a899330af2a6a6026c23478884f076d6ec58ccbc1536d592082140d388ef582633639804a1cffeba5e396703f89ae8dc6adb8ed6ca85d9484b98a4d54a5d9157869a94575a122ddc30f9c09957f9710958b6a02c18f68737bbd5bdc8e8d4b025650709aebf77c47df3227f518bc69af7036211961719da9f469f2fcb4b58890f794a7013148b9fa7a937ef8b7c0790c996f3f60ce3fc0e092d9889405b9715ed789c4adc1be3d4e31d0a01e41dbdd1b285a487fa3e723c132ee129ea5d71730aec789841735432880c9d75ff4eeaad032c4f7cda3033c859cf22c7424b4ffe7af1c71fbb2251f58a7ce9084f8d2546311222c0ce83297fd5a7afb3ef13dd4013fadbc30ab0e25a075183e776cdc439e11eb8c00f9bcb6c8a89c2e2025960f03a44fe96bda1a6440648260b331f826a283075836a4b28b37ceb4ef97bd6dbfb531fb3bb0b1795fe3adae098844bd4622f691cdae12e85b8b0328f117d189e44b80a6a210fa1af8a3b8554b1551b5c4f016d46f43f94f2c03ce360c8306b8afd8cdf91d82ad66fc06ab2d47fba6a57195f47516a7f4d435ee5bdc4b2bf69b426007d5fa3e2a588b4c02527d98496e2b966ef863848e2afacc7b0cede6674bd7967a027b8e0dd0b1fc43764abbac24410c085717ebeaaca089e68d8a97e05a7df2eb4fefd7aff72e3364445616d8b85172aedfc16e4d495e183eccdcce7691ea81fc3d4469a6349b1b7b174a1e5a06e3f90c34db1632bca7e4b7d6a672703674ca6cc4937e8fb640a7920a42f466cacd92f99a035fd7c6d5ed9571a82c8204530fe1fe31b387b618b3e78e9b77f0e153ff60ea5c42edaf617650aebcb8afa362c0ac89c27cd97c48824d37a07967d8f752110d72636467731825cd6284a4473727275055ba5ff93ad2e764a64c0db446768686e7892a0afa80bf367b9ba180bae9fe9ebb8c4916b2f8fef7e5e0aa8dabd7eb72d8bccd93cc06095e2e0b26947182e6df934f7c0b71d9ffa30106a3d1fb48cd9c1cdcffab79a6653572fe7134b539a1b0584834a3a61a1d658541575a6616612aafbe1670d8c00decd95ccf4a1628fc738d822c8b9790e8dfeb1da953ac12dc45bce751c9f5cd0a8db6f0f6713692c096b9f24b76e428ad8e359a601b06a68f63923682cb3cdc99bf7e66a966b27cae6a95b685f61f7dbb25f5a0ffd66864310e0b19e51eb4722de2cc8db5c4e293ac1d1a08511350d78f8e262894f34173ac388abb389045f11e7c58c60f77db9ba2fa794c7ec8a7d79b8581947dcbe9bb2e7f86f96deb310987d6fc64b9cc697871c13799038aeda82fc8bebf59e7a3b17acb", 0x1000}], 0x4, &(0x7f0000010f00)=[@assoc={0x18, 0x117, 0x4, 0x36}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x800}, {0x0, 0x0, &(0x7f000000e700)=[{&(0x7f000000d380)="0fb66a8fd92c7e8d83d2d6c636845b55747fc0ea85885656228c9fa90e3f100b2707bf53aac942ea1ec942fcb125d4ad3119a4e2c9a9afb8584c1d699102f668907bdc9aba6eec5c68da16a1bcda128a8522cbfae0852060f81bac2757139cd6c6536981ea261557d4cab703c5394454496215387e3fe9d882a39eebffcbb5382516f4de0df1f57e3b412db0ffa021f0d5571ffad9615c70d8e300e30e5e4a97f46c31e95865a17677b14d813a2f8a7801269398beefc888334dc4f9f807ad3500965f09bdae3840b719717837d7fb6171be91dc09d535a65a501354b53d4843b20398d0dbcaba60320eb0859e1897", 0xef}, {&(0x7f000000d480)="ed450dcbca62ce04244864003d56ec816d62bba84f3b3c47254abd27efecc269768f61e1ea39f0f1e73949de5c52bed918c6f812acd8ac108186da7cf5a4b75734bb06c9304f297449d33d7d705b", 0x4e}, {&(0x7f000000d500)="d2995ecbc8486a44a162cf6190f9dc493a098871a5e1c419366de3a8c6394096abb73c7cc765b4af75261e0056b79ddc692464c9b7c23133d47531a92b6fb653ba97cb7120ef4121b6", 0x49}, {&(0x7f000000d580)="061d303b797d705bf46f1ba53c51b205710c8dfb4ca4a13622d5d4eaf2056e9873f73d35b59dc0defc34aa5e5ec87a434e45bd4068f798ca2b7f86817a7ec4a921a696e3d0", 0x45}, {&(0x7f000000d600)="65af4d11ca763ae5ad55d19679c81a254359b840cb5ddf4632d171633ee4b2da00340cd8c579172d64f7cbfb64af03b128a078e77dd65538993c8fcc7c151561a42f5588c5f780b68fae466b458879ee6bfd84e4b33c70b0e1217ae2d35256e4b0b4412c5fa67e6db7e303cca11b1100257e3bf186c377d4c1e6ad39190fa2ba3c1046939438b8470484837f0992b4c9e2b4f0336496effca468031badc056963dc5d31d87404f1f345e1162dea59cbdce2e", 0xb2}, {&(0x7f000000d6c0)="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", 0x1000}, {&(0x7f000000e6c0)="75fed99d83209020e9a93e922a6e6fb4d0b3ca04aec6006837620010f2e15bbe69252b29d5edb3d81cf91f75e9", 0x2d}], 0x7, &(0x7f0000010c80)=ANY=[@ANYBLOB="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"], 0x19b, 0x8000}, {0x0, 0x0, &(0x7f000000f900)=[{&(0x7f000000e840)="8c6886048d02e11f2f9aeb3601a6caa0933c89c3db37deb7103992176c02ff95808c52aa54950a3b80d4490d7cf6664e3cd3b0db3762b5a30ae5bd0b4a99bdebacf92f9bfe6b1394d88ca464fc7e861495a706d3c8c14e272bec967a7ffb19cf786aff5f467d7b66c8ec176a80218838af84de22febad3420b0847ebf9a01d44cefa7a456699dcc21004f8b725b8a3eed285af867db50753509b793781dd9e677b78d721b93b3f9d73acd139191518165e2c80d32cfdc94bd4e4c4ebf95096698ac1074756f7a3c96756fe60035a4e1903b5dcd6f95a603c488bef01e4387ac5f924757393d3b4fe1eb37fb852e905b7bb2ad3948286dc5603d724fe1e8d24858ea00d1aa03fda2b27212db8ff0a4e6df5eb92ba39f1cd97ef3c8b0773537e7f3c249ded833a2ac692319f1a70a999d278459b4ed1877245db0b4ad7a280a4713ed3afaf809376e393c3b820e7816f31837dc054af16efb33a4447357d2f2530fa62ba498bc9aabb1016dc17fa47edb3a6f6e80b7a2727096d9ccc5b7dc19c6542c1417a1a0452e84bc0033cc830271caadc7bd72fb931d617cca245ad77302629345622b1c688ae91afc7a7ac7fb63ceb9b09f70a6379d1c8e21b860acce01dc4242de80a8efdda3db53f82541e7cbf3f7775e064501618b3f48174ac09b340474ad9d54fbd021269b896d4713b17072507e810eaa913d57540632a8e8cd95c7d66e8e973260e78cfef6291736101ac0744732019181edc56c02c1494838d36a33d806ccf4b163ffb842daa39f71840d2d4f644b4b2fd51cf58fd1f1aaa81564ec572da6afe95688f24f69ba615fdd4e568839337afedbe83cb4a14fe74e4fc9a0a824e5791361e4d257b49db47d0b96d842595816a80baf4a32e481afadc6d40f9a13da18562a7deb7a94852e30fd838f29c78dcd0a85dcd08cc4ed6851cd315d9777a42434e0a63bc319fc4348cc5ce2f081fe400eeb49b272947a2c64e2ea6eafb4f7586ca41bedf4c9ca892058fa1a3472ca3ded009e285a0382372634abab9bddb794113261dababa72d50f786c5f7d0578a571052ade2ef17b210a39280fc29a24b2a478682477a7d40a7a23789fd3914e63d71e25c94db5ce10aca8c6d0f8bca17bce285325520306ee39d90eb80137ac72f875fcbea8512e3b4bc126447478a1868b01b044f1150081f623d802159f56047559940b4221429ca9b8c75f28224d312da15dfb084491e4ce1dae72cc4bb3f2428255ad82cee9d5ac60dde0a72a8d0ac3113ec94bd9ef2b3cc54b2db4773c514ca3eb3298e4cc9f6554dace7a21d0b53b43b208529b3cf45b7a050d52e279131f7884eabf1aecfea648727887994e98ebbffca773e248e8f7af5258ff675769c9037de8a3bc95d44f74751e21d6130f6c71cc9e6c169694a8e0d273690ed95ab172af3bff1581f5d7620bb1c1a821e1305a101748a9c97684c8e2e89f43405c4fc0f689dcd854a21c4665cb6e544a3e417af989c17307a5dca0a04e2eff01a2dd49579b4cacd392123e5dbc5556338c941f11761bff74dfabbe1194d5832332b3e255c687a9fdce17bdfa3690bcd1c6fc02589a24596752b76a3d0e8139b3df2ee31d50cc418ccac83851768999306566323aa888366e6b59b99e1d44f265bcdfe006ce9b3d749730a1b1a25b6b2715a7d5a62aac43461c7cb3bb52f7ad9ccf81237066a9a2727b34151abd32485b8c74f44aec9f5cdf69fa3d10b4d1dfbfe6a49b0a2f9c0591e6afcbbefc6cc98fbd9446eee88d38ead6d1d2f3aee5bfa32d8539425953498ef861ea4e69fb0d330e3b57be6255fb58cab23444fc33cfe830cc7a0c92bbc2d62e696f37829d96abacf06baefb53a75184fb0660aa3e3892374edfa3439d53aa2dda884c4c1be69312d54f241255bf71d30a8e8dcac1ddfba491befd307797107f08c3bde43efa35c7ab2c06dd7e5ba467e1905dcdd7ef20a8e521cb964fe26a040b7e4b25cb22a571f772187f53c33fb6a3d6f052be360c38eb52e0e2f9b661aa2c800e1295e678e0ce9024f7d39bcf6abb08b3d741b16f9c7f4bd0e84beedfffd54412e38534eeba70df1e88ab4b974098e297e6f8e64a9e1edaa1ddbb89227bcad81dc7df6eda82f7d35445f97b20deabfaf96363991acc617f8987cd49c8403bac917dc0b664de614741a4e4904dda6276f7a15c64204276c0427d8d32f9ff1324bcdc957258d3f0b9217074f4abddddbbc826f9f50074b06e4442b7e98ba0f9702492704147fea91b6e1f6a23e8531ebcfba54ae5314495848b1327d7a5493516305f72f3bf3bfeb1d645ea310da547fbbc5d377f568588a1b5e3a5c30dc0be575bcc22121d6223deab9d09479846a4abcc7a24dcd582cb5f1d551c276551f4f18345a8e1b29057fcd90ce27e960d684e24d395b9293cc32456bc91c159e728a53f448413786baec7d60531a341976a0242941d39140d9d8e3fdaca38166f88ea592170395ba0d059733a0419e48c2568e562ba351bba630e91ff836e0251706dad54ce9abec2a207aa25cb13563503e70f992b5d75f5f1e1bdeb57671b81ff8d2429e9a7e0a546c1ace1ca5c9ce43c33d98eac45690d6efad8bd7616db5ba98ca824e079a2a4cbaf46d17b92c05d83fd2f0a42137ecd27fb64c168e92c5a3d5d16e6b28df37cac53e6d11e80a2678d8a12641f5b247ba60b448208b06f67147f8e49e3d31c46e127ad099b0747f8d71ef189f4b4496c41c72238e0b36572def0f7e850b7ffbad1ef7163048dfa7fd082cc5523a486545f453d5093f2edaed1263253dddb70c458d9f1c51846394b7776731723b4bc5d8d7a6e15f7abb75d15b5281dc6c2ab0b8fa60d83adf9feba36794d07578c624703c13c7ce075c4110c238b7b593325da4a9806659b42c8bd6a3434ef163e273e0e82efe614ab132b7916da84de0a07e6d5106a5936eeb7b46487641d1024460f8fe89f687afcd867cc49fbb8ed86d860e0c340d238a6e58756a2f01bce0b4604244527141b43e2fc0a157aefb0b6f1d01469904961b6c39ec134fe735ae2c07a4ceec17414087fc59c3a56a7e6783f1534d77bc976b48e4d22dca6783ef457dca5357a54f316b84178fba161db3cb2f277bfe69c6cd906842fca9632cd91fc853f5d02994ab9d73f8600d23f48d2e07506358b279191a8359a8d7369c32450f9760ebd97981616e792c332a5294126e03c2907775d9fe25c08d22f4cea9c55766aacfb19bb135be3abc9cef5e91a1cca43dcce2eeb86732c5f21072134726fe8fe9144a836f539e162a978c9028e99d605e498219956327d3dcbbaf7cde217a57504fb34914d4e309ecdb8e4467bd52658f322a3825f790dd0a1bcb5ee09313b6f72b2c4304af855e4f3f7cea68cdde80bce7af2376188f6e309be964d36acf3c1c254f7a07d38b31bf55ee81b4b88173bf9d09bd0b0fcac0975b902fd4f759e101d94f1d0420027c9db0196e1d199137bfc06e5f7b3643c4e97f5f3854a09daeddc714f85992343d146b158c0c11e98e9262e2119fd1154c99874e19a7d5e86804ab793d7f0f8bcb518c7674cef6b4221130858aee01eee06845d276972ad68b76e61e82ac302c14cf0ba8004ea572755dc100fa7b5832c66681ee29a6f6e7c0f813d5221d92554529174d4fca546b8c2f0666cfe7030a157d5b0ac7dbeec274063fa8fcd40b3482255e981ba68fd975b7298a93e8ff784a9ebc50060b8b2d8e785701319466085315c2d05e903d38bc365e85e170908628a19d30e0cddcaec6afbb48f9d5a9d021dcd9e8ca0551d72143c2b9bd65821ad4a80026f0c614b07ffdb524b88a918b8f5f52e9689c5b0565150efcd98b5d956cac9e6df9227e5bd6893102239eabf6e41b987b6aa772a1e448e25d2f64927f478dfba1c3b914b5b87aa9a422999c2ad8f20306b69c982936dfc143e48663e2b895b81066ba4bc10879b780b6f573187d9a7f628641c7525189dfadeb13157229be3338811f16f867468755ac98ef5092d38a757c57ae464a19aa8cef3ca0ebfe1d5fb48094daebcc780880e730557d3749a8ae9fd94af284047db582fbfacbc2a51a2d42e0fef5844569c43bc8a63a34e78d1be1a8d7306b5b5b45b999c72cfb6487d618848fcd22d180e2f5340ea6b0c02d2d59ca6a3c0c1031d4de5dfc7dacdc8b55c7eb7fa92870f60bcd92498c06af37458dad187940b227ed4ab01b6f96aa2ab1c9fcaf11fd914252008911bbe5ac2888d5c700fe17bd3855793b2d1a278005fc4ed577aebd0a975d6503f0c43e9d7b7d557b3a8874568366af32645cc1348233dbadf57a2a0f2fde480489e07f68ae272d7f4b8381c8e816fbec393702fdfab7b726df7530199ed8067e48528694d3bf459209a48aca2899f57ead3ce91a22a31d5140164bf692e80bffc76b3d8b94d4827648fcfcfcfd936fe91e36e57d1c1e46c9afd5686b220062b2270f9acd4d1a7be75374534545644093fa6da1b6d5b7c2d88f98287e307d624bee0c5513b1d6a06cef1cfc29374fc9f93f24240ccbf409488cde434cb82ea9e9927fa30a75a7fc56c5f46151fb8af4cd0b942ac2003d5119dba7f297b35881b1b86f85597b884107346c485c1623c290103a5c82dd0856b175c7aed306322a220b4ef70068cf02a0ad98f180c355c3e71dc56d3fc46c43692cb9852a7a3cf140bef3bb141eebcf36b35b90390c096aa59af58c1dd5a749abdb220db3cb0bb4a7e31e539a79655f29c8c3be1276ce3c99fd8fe0823596785948c21f336e4a3291a8862eed20d840b67b77f60c39776e6fe17f01f69bfa8ece385075b37cb389e2019cd065dfa25f0d1c015e48190e13772550cdcd06ce3a92dfbabada9af1fc30e48d402b2c510e711edab2d20a20b90337ed2ab5c7326b7b57bc9405a91f7f1f76776eccba6ace533a11e2c1013b2aa3b55424bd38b788fa4c4939cb1636529a07407bb7dee2e5294946024ddd6cf249ddb3d30d2f930dd1d5563ec83f0b58d137c1fb8ab037d2c0ee82d7e0a7e48f27a0b82b82552fba814ad509e88b90e80c742375a485521a5ce26d6cad17c4ec0cb0549ee6c5e8e77f47b1ecd28b0c937b607fa2b5a6ab6f4aaaf3df46094446e2c20a9e5897c83ad7d886ce556fdbd12d5d3c2d5cff8b12b2e1bc18a3991d7d97ed6abab020fb863630a58626eb817cf85060e7af1ec97ada51ba195dca78a0c21a049aca1c96c93e824c1afd20208d5bcaace5a18d4b6144376a84e2739070a96ccea863cf49a34f886ad045bb161f806f7578be8a49a8b37754b9919918089e555cf48aea00347e28a37c05c164ed51b24f2271d8b39edb6e9f8e7f2f57ca4d08a8f6506ea0ba75c172c433ca40b7e05633c685e4d000fdedd27f7618090598f55bcdc67fba7f5f9f31ce900e51ce22a743c3a12a51868076ab2704727f5ef3a09fe675e1d66bf503d5051f069975a57c35ae1a6f06ef1cec8f0d03f64d9da3b6bd027fbdfc5de41259c6e67833665231b90a06289969e870ca0691ab32c3eff2cb7cf1c843f43f6c67e792df8b5e3b8aa97fd89bf0313a91c0df922f552616eddc7ebd57677455fc5e6de4697e2084e06d9f132f7cc09202405e91cb5db98bebaa2e1b3705a5a906569df32da62219309abbc83c0fff1fc67f7609bc2a8600ff706b14b81818e104ed07364522fb0a3a26c1d42c490e507f87ec9614d5dc12a2801d284013457d95297a29712b87aedb49d423a27d11d94f7445cf538344efce80e98eb74f4b57b981d8299598287b0f63288831", 0x1000}, {&(0x7f000000f840)="ba7082f2d0cb38f48376cb00fb58", 0xe}, {&(0x7f000000f880)="d2c9b0763d3bc51a65331c57c457c6ffb53c0522e28bf8e353594f42dead7cd8c5732a584c0f4e1ed564b147b3b790bd4b66ea396dca085b070b5d3c6036e31bb3be79b29222933f3713676f", 0x4c}], 0x3, &(0x7f000000f940)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3}], 0x30, 0x40}], 0x6, 0x40000) setsockopt(r4, 0x20000100000114, 0xa, &(0x7f00003cbffc)="02000000", 0x4) bind$bt_rfcomm(r1, &(0x7f0000004400)={0x1f, {0x7ff, 0x2, 0x1f, 0x7ff, 0x100}, 0xfffffffffffffff8}, 0xa) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) sendmsg$nfc_llcp(r2, &(0x7f0000010c40)={&(0x7f000000fb00)={0x27, 0x0, 0x1, 0x6, 0x101, 0x211, "17c718062ea64ab887661ef93710ab3d0f83eb4bdcc4c24630c44da5618a3922d661e72089dd33f3699b1e4bd1aee6e5150ed4f1de6bf688909c9a840db6a1", 0x1}, 0x60, &(0x7f000000d340)=[{&(0x7f000000fb80)="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", 0x1000}], 0x1, &(0x7f0000010b80)={0x90, 0x19b, 0x2, "da92c3f15170a40dd7097bca5f7fa9bbe5b2801dcfe6d336a047205ffe0f0d5c32ad8f32c7f40213efd14773fb9051aa7e18eb7a9ff32ecec532c481ba6207b6df1d7c2a1540614b659b480a6e128ffe077aa3c003bbbf52683afd6334637d02bc69393398dbf3523d4fd1de4e142ecba7759c7cc84765c666"}, 0x90, 0x20040080}, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r6, 0x40bc5311, &(0x7f0000000040)={0xd3, 0x1, 'client1\x00', 0x6, "57216cdb324256ac", "7a9162ed6202ce363fa15c413d3257491b6a14c90e4aea845dab3461d327a9c6", 0x0, 0x4}) connect$inet(r4, &(0x7f0000adf000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) socket$key(0xf, 0x3, 0x2) ioctl$DRM_IOCTL_GET_UNIQUE(r6, 0xc0106401, &(0x7f0000000180)={0x7a, &(0x7f0000000100)=""/122}) read(r4, &(0x7f000083b000)=""/1, 0x1) ioctl$TIOCSTI(r1, 0x5412, 0x7f) ioctl$PIO_SCRNMAP(r6, 0x4b41, &(0x7f00000004c0)="f3b5d4e886377192c1bdbf5a537932e85fa46114e4435d5da953897230a7e296d85dbaed8f7b126d82e1491bb0609523333d1465fa61e11495c808c15cc0ae06dc447477300c9a540f2ea6afe65d20da18063a163bc267b05c8baff44b7443b63ee934b2396a945d2f641e4ce245c1d94ca33781b13ed329f2d1e9e249cc88ca332ba63f3d1d122f6ae3c3981b6b10") setxattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)=@known='trusted.syz\x00', &(0x7f0000000480)='client1\x00', 0x8, 0x3) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) syz_fuse_mount(&(0x7f00000001c0)='./file0\x00', 0x8000, r7, r8, 0x6, 0x0) sendmsg$alg(r4, &(0x7f0000159fc8)={0x0, 0x0, &(0x7f0000fc8000), 0x0, &(0x7f0000000e8e)}, 0x0) 2018/05/29 01:53:50 executing program 7: r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x4465cba8c90cff8f, 0x0) pwrite64(r0, &(0x7f0000000140)="0a6dc583166e55ad5944697ecb423fd1bbeaee35e0e3caf3e10a332fa46811497019e4277e35f9d36320b9a10c8c0f69274c738d605bf62ac0de2486602f4c33835ced7eb733ee30b2c11c9c597aacc19faf929367375c417c31c6a8d6c9e23b95c5a2edd17f83a20ac3b1c621c9052cb8978b99984ba3910914b7ef6a5b99562d26d2e9a60ee35d2008970e91c5633b2d0749b76ee36869ef279de32033283e02c6a3e3cbba024579fce0f8c84ca71193e6c781cc4d5193261ea591a8c2be8d80314faf558b4634cc212cf0816dccec81955c4fca4da08acb1fd61d310d1efa5994f51687e1c430962ea070f3fe6360f8eee8712eddf683", 0xf8, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x200, 0x0) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f00000000c0)={{0xa, 0x4e20, 0x7, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x5}, {0xa, 0x4e24, 0x42, @local={0xfe, 0x80, [], 0xaa}, 0x158}, 0x8, [0x7, 0x4, 0xffff, 0x92c, 0x6, 0x3, 0x1, 0x6]}, 0x5c) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000040)) [ 583.832128] binder: 3923:3924 ioctl 40046207 0 returned -16 2018/05/29 01:53:50 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8008700b, &(0x7f0000000040)) 2018/05/29 01:53:50 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40001, 0x0) close(r0) getsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000100), &(0x7f0000000140)=0x4) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x1}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x6}, 0x8) 2018/05/29 01:53:50 executing program 7: r0 = socket(0x7, 0x1, 0xfffffffffffffffc) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/unix\x00') linkat(r2, &(0x7f0000000200)='./file0\x00', r3, &(0x7f00000002c0)='./file0\x00', 0x1400) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x24a01, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={0x0, 0x98e}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000100)={r4, 0x7}, &(0x7f0000000140)=0x8) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00') sendfile(r1, r5, &(0x7f00000001c0), 0x4) [ 583.924219] binder: 3923:3968 got transaction to invalid handle [ 583.930434] binder: 3923:3968 transaction failed 29201/-22, size 72-8 line 2856 [ 584.009852] binder: undelivered TRANSACTION_ERROR: 29201 [ 584.015923] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:51 executing program 5: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000040)='cpuacct.usage\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) utime(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x7, 0x35}) pselect6(0x40, &(0x7f0000f33fc0)={0x3ffffd, 0x0, 0x0, 0x0, 0x0, 0x4000}, &(0x7f0000768000)={0x0, 0x0, 0xffffffffbffffffe, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000086000)={0x0, 0x0, 0xffffffffffffffff, 0xd10f}, &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000000080), 0x8}) 2018/05/29 01:53:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000080bb01000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:51 executing program 6: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x20000000002) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={"6966623000faffffffffffffff00", 0x5001}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f0000000080)=0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x11}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0x26) 2018/05/29 01:53:51 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f000000d000)={0xa, 0x4e20}, 0x1c) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$llc(r1, &(0x7f00000000c0)="f89f748708bf3ee2aaa303d3270c36899f486adf471d35159ff6ec6b23ba127489ef08ff9b5cbb03e6", 0x29, 0x0, &(0x7f0000000200)={0x1a, 0x118, 0x800, 0x7, 0x6, 0x4, @random="72f5c4150a01"}, 0x10) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f00000001c0)=0x7fff, 0x4) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 2018/05/29 01:53:51 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x101005, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000000c0)=""/246) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000001c0)="80fd0100006e", 0x6}], 0x1, 0x0) 2018/05/29 01:53:51 executing program 1: symlink(&(0x7f0000000080)='/\x00', &(0x7f0000000040)='./file0\x00') mkdir(&(0x7f0000000300)='./control\x00', 0x0) chroot(&(0x7f0000000540)='./control\x00') rmdir(&(0x7f0000000040)='./control\x00') rename(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') 2018/05/29 01:53:51 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) accept4$inet(r0, &(0x7f00000001c0)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10, 0x80800) r1 = socket(0x15, 0x80000, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@random="d9162e009bb1", @random="5237945e8a86", [], {@can={0xc, {{0x4, 0x0, 0x2, 0x5}, 0x3, 0x1, 0x0, 0x0, "cc2aafba83179251"}}}}, &(0x7f0000000100)={0x1, 0x2, [0xfb3, 0x236, 0x271, 0x593]}) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = socket(0xa, 0x2, 0x1) ioctl(r2, 0x8912, &(0x7f0000000040)="c626262c8523bf012cf66f") syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60b7e72000083a00fe80000000007693515b0000000000aafe8000000000000000000000000000aa8000907800000000446798eb4b16f1ea7bc588269b806f52c9e4fdef1e5e411b9e6067b5cacd848bc6964e7f5b3eb74541bccb1f2d2f946a6629cbd3f6dd394bb967391275af4cdc81"], &(0x7f0000000180)) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000240)='ip6gre0\x00') 2018/05/29 01:53:51 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000000)={0x19}) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x20000, 0x0) getsockopt$inet_dccp_int(r1, 0x21, 0x0, &(0x7f0000000080), &(0x7f0000000100)=0x4) poll(&(0x7f00000000c0)=[{r0}], 0x1, 0x100000001) openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x200, 0x0) 2018/05/29 01:53:51 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x40) capset(&(0x7f0000000240)={0x20071026}, &(0x7f0000000080)) mknod$loop(&(0x7f0000000000)='./file0/file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x8, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000100)) [ 584.899983] binder: 3997:4009 got transaction to invalid handle [ 584.906168] binder: 3997:4009 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:51 executing program 2: socket$can_raw(0x1d, 0x3, 0x1) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000683ff4)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x14) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000231000)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x200, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={r1, 0x0, 0x1, 0x2, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000000180)=0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/05/29 01:53:51 executing program 5: r0 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000000c00)=[{{&(0x7f0000000400)=@l2, 0x80, &(0x7f0000000480), 0x0, &(0x7f0000000000)=""/117, 0x75}, 0x7}], 0x1, 0x0, &(0x7f0000000cc0)) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c, &(0x7f0000000680), 0x3ba, &(0x7f0000002000)=ANY=[@ANYBLOB="1058899e6062b29ef36087c530d94dc3"], 0x10}}], 0x2, 0x8000) [ 584.956931] binder_alloc: binder_alloc_mmap_handler: 3997 20001000-20004000 already mapped failed -16 2018/05/29 01:53:51 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0) ioctl$int_out(r0, 0x80004537, &(0x7f0000000180)) 2018/05/29 01:53:51 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc4c85513, &(0x7f0000000580)={{0x7, 0x0, 0x0, 0x0, "1a0ab9b1f94c716787e88fae5552770ad6a9b54e0679918e0a88af8aacaea63fd56d1dd99812e16bc06df8b8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "0b690d49b85ec254b15b023d1e67900f8f55709195aa7d999552981434f68e364a3238b17109db386e35830a143c5755ae184895c461436bad45232f258c32a1", &(0x7f0000000000)='cpusetposix_acl_access)posix_acl_accessprocsystem$\x00', 0x33, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x7fff, 0x2000) getsockopt$EBT_SO_GET_INFO(r1, 0x0, 0x80, &(0x7f00000000c0)={'broute\x00'}, &(0x7f00000001c0)=0xfffffce3) [ 585.001784] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:51 executing program 6: r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x2aa164a2, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000080)={r2, 0x3e}) inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001) mkdirat(r1, &(0x7f00000002c0)='./file0\x00', 0x10a) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='btrfs\x00', 0x0, &(0x7f0000000180)="0e") mount(&(0x7f0000000280)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='autkfs\x00', 0x10000, &(0x7f0000000400)="24ea4d1e8a700de7e989e0550ed25540bb91640f64b007e6ed328451f3739ff9c4") bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) [ 585.036054] binder: 3997:4009 ioctl 40046207 0 returned -16 [ 585.086655] binder: 3997:4016 got transaction to invalid handle [ 585.092828] binder: 3997:4016 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:51 executing program 6: r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ifreq(r0, 0x2089f0, &(0x7f0000000140)={'gre0\x00', @ifru_data=&(0x7f0000000180)="7e70362a7cafd44acc53fb0f8dfdfe340199f95451ec4030140ed460bf9bf9df"}) 2018/05/29 01:53:51 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000280)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000080)={@multicast2=0xe0000002, @empty, r2}, 0xc) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000140)={0x2, {{0x2, 0x0, @rand_addr=0x7}}, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0xa5cd058c7fba27fb) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) 2018/05/29 01:53:51 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="00000000000004000c"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9f}, [@ldst={0x7, 0x0, 0x3}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$sock_ifreq(r1, 0x897f, &(0x7f0000000000)={'veth1_to_bridge\x00', @ifru_hwaddr=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) 2018/05/29 01:53:51 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x8) r1 = socket(0x2, 0x1, 0x1000000000) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000180)={0xffffffffffffff99}, 0x4) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x130, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000330], 0x0, &(0x7f0000000000), &(0x7f0000000300)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x13, 0x0, 0x0, 'ip6gre0\x00', 'vlan0\x00', 'veth1\x00', 'ip6tnl0\x00', @random="c201c9a511d3", [], @random="8d89a2f47b85", [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}, {0x0, '\x00', 0x1}]}, 0x1a8) accept4$inet(r0, &(0x7f0000000100)={0x0, 0x0, @multicast1}, &(0x7f0000000140)=0x10, 0x0) 2018/05/29 01:53:51 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="4626262c8523bf012cf66f") bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, {0x2000000000, 0xf01, 0x5d91, 0x5, 0x8, 0x9}, 0x5, 0x8}, 0xe) r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x32, 0xffffffffffffffff, 0x0) ioctl$EVIOCGKEYCODE(r1, 0x80084503, &(0x7f0000000200)=""/202) 2018/05/29 01:53:51 executing program 7: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) connect(r0, &(0x7f0000000200)=@nl=@kern={0x10}, 0xfffffffffffffc90) write$binfmt_aout(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000df000000000000e2ffffffffffffff000000000000004b67e7968c93153dbb6bb6c1dd2708c52df7280d22388b566b44a4148dc71eaad960f28676d145b4cf1d92ebd2f78abe350d84b119f0b258bf85e7ec1087393261473102fd6c76f416e53cad6ba23700000000000000000000000000000000"], 0x20) getuid() r1 = dup3(r0, r0, 0x80000) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000280)={0x199, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xa}}, {0x2, 0x4e21, @rand_addr=0x6f4}, {0x2, 0x4e22, @loopback=0x7f000001}, 0x300, 0x1000, 0x8, 0x3, 0x471, &(0x7f0000000180)='gre0\x00', 0x8, 0x4cf3, 0x50d}) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000001c0)) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000080)={0x0, @loopback=0x7f000001, 0x4e23, 0x3, 'nq\x00', 0x4, 0x7, 0x77}, 0x2c) 2018/05/29 01:53:51 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x98000, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000000c0)={r1, 0x0, r0}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/13) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000032c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000003380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003340)={&(0x7f0000003300)=@ipv6_getnetconf={0x2c, 0x52, 0x400, 0x70bd29, 0x25dfdbfb, {0xa}, [@NETCONFA_RP_FILTER={0x8, 0x3, 0x100000000}, @NETCONFA_FORWARDING={0x8, 0x2, 0x3}, @NETCONFA_IFINDEX={0x8, 0x1, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200080c4}, 0x20000000) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f00000033c0)={r0, 0x7, 0x8, "0406dbc8722a274674283030121c840b2c09a84250303a1e40b309a0367e0e8fb269140d7030f2c1dee0492d934b4be7b5488d974fe6c1fdf26d5eaaa8575983878f7d2389a15db595c7483e9b36424e391a2f83b984c7ea034f95675b120c3366f30b04fa99efe8be79afe838"}) getsockopt$netlink(r0, 0x10e, 0x5, &(0x7f0000003440)=""/247, &(0x7f0000003540)=0xf7) fstatfs(r0, &(0x7f0000003580)=""/185) bpf$MAP_CREATE(0x0, &(0x7f0000003640)={0xb, 0x3, 0xd, 0x6, 0xf619a0df03626c27, r0, 0xffff}, 0x2c) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000003680)={0x800, 0x200, 0x7, 0x1, 0x0}, &(0x7f00000036c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000003700)={r5, 0x7ff}, &(0x7f0000003740)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000003780)={r6, 0x11}, &(0x7f00000037c0)=0x8) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000003800)={0x303, 0x33}, 0x4) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000003840)=r0) socket(0x3, 0x7, 0x7f) r7 = getgid() setgroups(0x1, &(0x7f0000003880)=[r7]) r8 = open(&(0x7f00000038c0)='./file0\x00', 0x10000, 0x4) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000003900)=0x4, 0x4) clock_adjtime(0x1, &(0x7f0000003940)={0x2, 0x101, 0xff, 0x5, 0x5, 0x4, 0x9, 0x6cc, 0x0, 0x3, 0x101, 0x7fffffff, 0x5, 0x55c2, 0x6, 0x7, 0x7f, 0x6, 0x1, 0xca7, 0x50c, 0x2d, 0xffffffff00000001, 0x100, 0x7}) ioctl$DRM_IOCTL_AGP_ALLOC(r3, 0xc0206434, &(0x7f0000003a40)={0x9, 0x0, 0x10001, 0x3}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000003a80)={0x6, r9, 0x1, 0x8000}) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4000, &(0x7f0000003ac0)=0x80, 0xfffffffffffffff9, 0xf99ccb735cca808b) sendmsg$nl_generic(r8, &(0x7f0000003c00)={&(0x7f0000003b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003bc0)={&(0x7f0000003b40)={0x44, 0x40, 0x856a73c4aaf0e85e, 0x70bd2d, 0x25dfdbfc, {0x10}, [@nested={0x18, 0x84, [@typed={0x8, 0x8, @fd=r2}, @generic="d9ccc3a294ec72b544396f"]}, @typed={0x4, 0x72, @binary}, @typed={0x14, 0x17, @str='usereth1/#{}\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2ef4c810263968e8) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000003c40), &(0x7f0000003c80)=0x4) ioctl$KVM_GET_FPU(r0, 0x81a0ae8c, &(0x7f0000003cc0)) pipe(&(0x7f0000003e80)={0xffffffffffffffff}) getpeername(r10, &(0x7f0000003ec0)=@l2, &(0x7f0000003f40)=0x80) 2018/05/29 01:53:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000fffffdfd0000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 585.178048] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.186345] binder: undelivered TRANSACTION_ERROR: 29201 [ 585.243538] kernel msg: ebtables bug: please report to author: Chains don't start at beginning [ 585.273194] binder: 4069:4072 got transaction with invalid offsets ptr 2018/05/29 01:53:51 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000000140)=@ax25={0x3, {"87c73b70e044d3"}, 0x100}, 0x1a7dc6078c192d84) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) sendmsg$can_bcm(r0, &(0x7f0000001fc8)={&(0x7f0000006000)={0x1d, r1}, 0x10, &(0x7f0000000000)={&(0x7f0000006fb8)={0x5, 0x400, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "0b73a00200000059"}}, 0x48}, 0x1}, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000001c0)={0x3ff, 0x9}) r3 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x9, 0x20000) ioctl$KVM_GET_DEBUGREGS(r3, 0x8080aea1, &(0x7f0000000080)) sendmsg$can_bcm(r0, &(0x7f0000000100)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0xa0, 0x0, {}, {}, {0x0, 0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "8e15adecfc04aba1"}}, 0x48}, 0x1}, 0x0) 2018/05/29 01:53:51 executing program 2: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$vsock_dgram(0x28, 0x2, 0x0) connect$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) shmget(0xffffffffffffffff, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/125) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, {0x8, 0x3, 0x100000000, 0x400, 0x200, 0x100000001}, 0x9, 0x6}, 0xe) 2018/05/29 01:53:51 executing program 4: r0 = socket(0x6, 0x5, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000ab2000)=0x8, 0x4) sendto$inet(r1, &(0x7f00004e9000), 0x0, 0x0, &(0x7f0000821ff0)={0x2, 0x4e21}, 0x10) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) recvmsg(r1, &(0x7f0000000080)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) 2018/05/29 01:53:51 executing program 1: r0 = open(&(0x7f000000fffa)='./bus\x00', 0x102, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f00000000c0), &(0x7f0000000100)=0x30) ioctl$int_in(r0, 0x0, &(0x7f0000000040)=0x9) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYPTR=&(0x7f0000000300)=ANY=[@ANYPTR64, @ANYRES32=r1]], &(0x7f00000002c0)=0x1) truncate(&(0x7f0000000140)='./bus\x00', 0x8) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0c0583b, &(0x7f00000001c0)={0x1ef, &(0x7f0000000040)}) 2018/05/29 01:53:51 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = dup(r0) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xd}}, 0x10) r2 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1, 0x120) ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0) [ 585.308254] kernel msg: ebtables bug: please report to author: Chains don't start at beginning [ 585.316554] binder: 4069:4072 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:53:51 executing program 3: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x1, &(0x7f0000000180)="cfb6060000002b011b2d06f51d60aceb2f2890f5c42b82a4a290338847f4d83172e7b611fa97648083f452242fb8798fbdd73692286148f7fc578ac5d16a483f9fcf1b64bcfebdf6b5e593b960dc835ade08af5621a7dfbbeb386fdb2870e5031601c0da02e7510707ba2192aa7f0d7c9d4e7b7be3da454de3dc079784bd0f4351dcb1580dadfbf8630e0f57e0ead6", 0xffffffc9) ioctl$PPPIOCGL2TPSTATS(r0, 0x80047453, &(0x7f0000000180)) 2018/05/29 01:53:51 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x2, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x0, 0x0) epoll_create1(0x80000) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, &(0x7f00000000c0)=""/125, &(0x7f0000000140)=0x7d) [ 585.377552] binder_alloc: binder_alloc_mmap_handler: 4069 20001000-20004000 already mapped failed -16 2018/05/29 01:53:51 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x80000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000080)="66b9500200000f32ba4200b000eef30f51b40a000f20d86635200000000f22d8c1117b0f01ca0f01ca0f01cad166320f20e06635000002000f22e0", 0x3b}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x0, 0x0, 0xdcdc}]}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x40, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f0000000100)=0x100000000, 0x4) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYRES32]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:51 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x4, {0x1, 0x2, 0x5, 0x3ff, 0x4}, 0x1, 0x8}, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newroute={0x2c, 0x18, 0x9, 0x0, 0x0, {0xa}, [@RTA_ENCAP_TYPE={0x8, 0x15, 0x7}, @RTA_ENCAP={0x8, 0x16, @typed={0x4, 0x3, @binary}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f00000000c0)) [ 585.438740] binder: BINDER_SET_CONTEXT_MGR already set [ 585.464117] binder: 4069:4072 ioctl 40046207 0 returned -16 [ 585.500518] binder_alloc: 4069: binder_alloc_buf, no vma [ 585.506139] binder: 4069:4088 transaction failed 29189/-3, size 72-8 line 2971 [ 585.595399] binder: undelivered TRANSACTION_ERROR: 29189 [ 585.601238] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:52 executing program 6: r0 = socket(0x40000000002, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000040)=@nat={'nat\x00', 0x19, 0x3, 0x258, [0x20000140, 0x0, 0x0, 0x200002d8, 0x20000308], 0x0, &(0x7f0000000000), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x1b, 0x0, 0x0, 'lo\x00', 'nr0\x00', 'ip6gre0\x00', 'team_slave_1\x00', @random="dd11774329db", [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0xe8, 0x120}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "4b9cb56ceb7b09def79220ef912bd147401dc16caee1814ccc9fa42d42fdc139f8c54da4c26952682e49ed1496958cfd2973be3e2ba2d9172d884591a6cd0f13"}}}]}, @snat={'snat\x00', 0x10, {{@random="82485162fb73"}}}}]}, {0x0, '\x00', 0x1}, {0x0, '\x00', 0x1, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'yam0\x00', 'ipddp0\x00', 'gre0\x00', 'yam0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], @link_local={0x1, 0x80, 0xc2}, [], 0x70, 0x70, 0xa8}}, @snat={'snat\x00', 0x10}}]}]}, 0x2d0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x7, 0xc5, 0x9, 0x100000001}, 0x10) 2018/05/29 01:53:52 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10400, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@mcast1={0xff, 0x1, [], 0x1}, 0x7, 0x3, 0xff, 0x4, 0x1ff, 0xff, 0x4}, 0x20) r2 = socket(0x40000000000a, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_pts(r0, 0x0) read(r3, &(0x7f0000000280)=""/1, 0x1) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000fd0ffc)=0xe) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000000)) r4 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r4, 0x1000000000016) 2018/05/29 01:53:52 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x20}, 0x1}, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x14) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000080)='-*/cgroup-vmnet0\x00') getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000), 0x10) 2018/05/29 01:53:52 executing program 1: socket(0x0, 0x0, 0x0) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0x4000000000000000}, {}], 0x3c6, &(0x7f0000000340)={0x77359400}, &(0x7f0000000380), 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000040)='.dead\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240), 0x0, 0xfffffffffffffffa) r0 = syz_open_dev$vcsn(&(0x7f0000000500)='/dev/vcs#\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x200000000000003, 0x9) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xfc0e, @local={0xfe, 0x80, [], 0xaa}}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000240)={r2, 0x5, 0xb3, 0x7ff}, 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={r2, @in={{0x2, 0x4e22}}}, &(0x7f0000000280)=0x84) connect$inet(r1, &(0x7f0000000040)={0x2}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2}, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x9, 0x0, @rand_addr, @broadcast=0xffffffff}, @icmp=@parameter_prob={0x21, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}}}}}}, &(0x7f0000ea3000)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value, &(0x7f0000000440)=0x1a1) 2018/05/29 01:53:52 executing program 2: r0 = socket(0xa, 0x2, 0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1000000000, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000140)={0x3, 0x4, 0x7, 'queue1\x00', 0x3}) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000540)='.', &(0x7f0000000580)='gfs2meta\x00', 0x0, 0x0) 2018/05/29 01:53:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000001bda000000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:52 executing program 7: r0 = socket(0x8, 0x2, 0xb) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000580)=@nat={'%at\x00', 0x19, 0x1, 0x1e0, [0x20000380, 0x0, 0x0, 0x20000500, 0x20000530], 0x0, &(0x7f0000000040), &(0x7f0000000380)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x1d, 0x0, 0x0, 'team_slave_0\x00', 'bridge_slave_0\x00', 'bond_slave_1\x00', 'veth1_to_bridge\x00', @empty, [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0xe0, 0x118, 0x150, [@stp={'stp\x00', 0x55, {{0x0, {0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}]}, @snat={'snat\x00', 0x10, {{@random="5f5a1fad6899"}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x258) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @rand_addr}}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) rt_sigprocmask(0x2, &(0x7f0000000100)={0x100000000}, &(0x7f0000000280), 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000002600a7ce26bd7000fddbdf2500000000805b73f7a6e3eefcaae890b746565e76e0a9d2d889d3bd9ce081c77b857008a3624cdc56f9dbe7dc91c42e2a809ada506521f177f6000000000000000000", @ANYRES32=r2, @ANYBLOB="f3ff0c00ffff090004000a0004000a00"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x24004810) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) clock_adjtime(0x0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1a3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}) 2018/05/29 01:53:52 executing program 3: unshare(0x400) r0 = socket(0xa, 0x1, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0400000000000000", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="3607a79f077ab66550e8a9c036b6f4fe3da11bccbc4e2cf8afb5785329"], @ANYBLOB="020704009e42e000010001000600000096b589c694cef473024a021235df25592e71f23f16d9e2278a88cb6a35555e7aad2a376d6c58e230035333f7380000"]) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000000)=0x124f4b58, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x21, &(0x7f0000000040), &(0x7f00000000c0)=0x4b) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000180)={0x4, &(0x7f0000000100)=[{0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @random}, {}]}) close(r1) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000080)=0x32c2ef95, 0x4) 2018/05/29 01:53:52 executing program 3: prctl$intptr(0x18, 0x0) 2018/05/29 01:53:52 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x26) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000180)={0x2, 0xf, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}]}, 0x40}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0x100, 0x80000000, 0x1e, 0x1, 0x5}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x16}}}, 0x0, 0x3fffffffc000, 0x1, 0x3cb}, &(0x7f0000000140)=0x98) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000240)=@ethtool_stats={0x1d}}) [ 586.348113] binder: 4140:4141 got transaction to invalid handle [ 586.354298] binder: 4140:4141 transaction failed 29201/-22, size 72-8 line 2856 [ 586.368000] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 586.389468] gfs2: gfs2 mount does not exist 2018/05/29 01:53:52 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) [ 586.425277] binder_alloc: binder_alloc_mmap_handler: 4140 20001000-20004000 already mapped failed -16 [ 586.441344] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher 2018/05/29 01:53:52 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x420182, 0x0) getpeername$llc(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10) syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00') [ 586.473101] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:52 executing program 3: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='nfs\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) getsockopt$inet_dccp_int(r0, 0x21, 0x11, &(0x7f00000000c0), &(0x7f0000000140)=0x4) [ 586.503489] binder: 4140:4141 ioctl 40046207 0 returned -16 [ 586.525659] binder: 4140:4169 got transaction to invalid handle [ 586.531963] binder: 4140:4169 transaction failed 29201/-22, size 72-8 line 2856 [ 586.630784] binder: undelivered TRANSACTION_ERROR: 29201 [ 586.638682] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:53 executing program 7: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x5}, &(0x7f0000000180)=0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x10040000}, 0x8) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f00000001c0)={0x2, 'veth1_to_bond\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'ip6tnl0 T\x00'}, 0x18) 2018/05/29 01:53:53 executing program 2: syz_emit_ethernet(0x36, &(0x7f0000000280)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x11, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000100)) r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x4000) ioctl$BLKRESETZONE(r0, 0x40101283, &(0x7f0000000040)={0x4, 0x10001}) 2018/05/29 01:53:53 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x50940) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f00000001c0)=0x9) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) read(r1, &(0x7f0000000000)=""/225, 0xe1) write$sndseq(r2, &(0x7f000082cf40), 0x2049a) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x28, &(0x7f0000000200)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000280)={r3, 0x2, 0x10}, 0xc) mkdir(&(0x7f000082f000)='./control\x00', 0x0) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000fc3ff6)='./control\x00', 0x0) getdents64(r4, &(0x7f0000fc4fbe)=""/80, 0x50) unlinkat(r4, &(0x7f0000000100)='./control\x00', 0x200) close(r1) 2018/05/29 01:53:53 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000840)="c626262c8523bf012cf66f835eea88e58532183847502d8ec49251a2e7f1ee4eef7186970bf9610cda61a8c532034ee1895baec4cd223fde9ade496a994b447993aeb23a630b34f4acdf6e57e74c2904ecc96a84b7e591e79400c12466bb2fdc3b96efbb2e6d5a45ff1f1f411a8149783a25b8b340432d6d37f507b198c9e967833e3c26a58af2d739afff240fd8bf737632cff5243cc0ec650b8b181e67456d3d7862ca3d08418f116e123d10240f25e9d8ed15f69022280087079c79dd213da908e486e0f6d211918e7ecf88089477726f54532dac7f") connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x4}, 0x1c) sendmmsg(r0, &(0x7f0000006840)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="c987486d56fe2cab222a2fdf587fdf5dcc07fb5f84054af7bf963a84eb24700d76f01b563ca01923c4a092371491edddee05b711ad144010ae56eee6e137ac8b174a6463d9d3f3e6a7456ad6a24ca90951bb3f01f9fab85fa2d1774c9690e0c0431fdfbf09f96f221872dbd8c9a7dcae4b65ccee7352d6854191e1fd2732f2d1ae6e71b0f996d3065afb13bcf3e0021eefe34a1132ba9d04c50d89d73f0266a704d6b5afdbb3f728f24ef0d0297e6db5298283b979f54e9ee486", 0xba}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="28000000000000002900000002000000fd1ea28557a08d342cc2c205904084ee7a000000000000001000000000000820cacb4b0500000000000000f8bdb0c80fdf8bfe00e398ce0937f2ee42f8015fed737f4bb04ab332272ffe6b938731362fc4cdb559338b16010000000000000049f6a61c75a6c9fe2df73b52b1c9447a7db33ecce27cae52ce84bff3ff2160096494896ddf56b80550b64477f76d599c9f9e2f5eef1dce7c41c80ad97d92c401"], 0xaf}}], 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000200), &(0x7f0000000280)=0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x100) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mixer\x00', 0x0, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30d) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000940)={0x4000000000000, {{0xa, 0x4e24, 0x7e7, @empty, 0x7}}, 0x1, 0x9, [{{0xa, 0x4e24, 0x2, @local={0xfe, 0x80, [], 0xaa}, 0x401}}, {{0xa, 0x4e20, 0x724e, @remote={0xfe, 0x80, [], 0xbb}, 0x7}}, {{0xa, 0x4e23, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x7fffffff}}, {{0xa, 0x4e24, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x8}}, {{0xa, 0x4e22, 0x5, @dev={0xfe, 0x80, [], 0x21}, 0x9}}, {{0xa, 0x4e21, 0x4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8}}, {{0xa, 0x4e23, 0x8, @dev={0xfe, 0x80, [], 0xe}, 0x5}}, {{0xa, 0x4e24, 0x200, @dev={0xfe, 0x80, [], 0x15}, 0x4}}, {{0xa, 0x4e24, 0x8, @mcast1={0xff, 0x1, [], 0x1}, 0x9}}]}, 0x510) sync() ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000040)={0x4, [0x0, 0x0, 0x0, 0x0]}) 2018/05/29 01:53:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000200000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:53 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f0000000180)="f2410f1b1c74460fc71a66430f3881a00a0000000f20e035004000000f22e066ba6100b00deeb805000000b9a82e00000f01d966ba4000ed663ed9f7c442c1aac6c4c1245ce4", 0x46}], 0x1, 0x0, &(0x7f0000000240), 0x0) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x4000) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000040)={0x2, r3, 0x1}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000003c0)={{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, 0x8005001f}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:53 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00') setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f00000000c0)=0x5, 0x4) r2 = socket$inet6_sctp(0xa, 0x4000000002, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_aout(r2, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x6, 0x30}, 0xc) write(r2, &(0x7f0000000280)="a1", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140), 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x34000) 2018/05/29 01:53:53 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000021c0)='/dev/dsp#\x00', 0x1, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000002240)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x74, r2, 0x220, 0x70bd2d, 0x25dfdbff, {0x7}, [@IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x74}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syz_tun\x00'}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x101}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x804) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="57e815b99097bf9c0c0775b090c90f8437691f85f68889cf", 0x18) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000002680)=[{0x0, 0x0, &(0x7f0000001600), 0x0, &(0x7f0000000200)=[@iv={0x18, 0x117, 0x2}], 0x18}], 0x1, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) [ 587.266728] binder: 4196:4198 got transaction with invalid offsets ptr [ 587.289969] *** Guest State *** [ 587.291119] binder: 4196:4198 transaction failed 29201/-14, size 72-8 line 2999 [ 587.293363] CR0: actual=0x000000008005003f, shadow=0x000000008005001f, gh_mask=fffffffffffffff7 2018/05/29 01:53:53 executing program 2: r0 = syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0xb79, 0x208000) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@loopback=0x7f000001, @loopback=0x7f000001}, 0x1) [ 587.293379] CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 587.293391] CR3 = 0x0000000000000000 [ 587.322942] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 587.328980] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 587.335046] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 587.341215] binder_alloc: binder_alloc_mmap_handler: 4196 20001000-20004000 already mapped failed -16 [ 587.341748] CS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.341768] DS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.341785] SS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.359999] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 587.367133] ES: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.367152] FS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.367169] GS: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.367181] GDTR: limit=0x00000000, base=0x0000000000000000 2018/05/29 01:53:53 executing program 3: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x2e0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, &(0x7f0000000040), &(0x7f0000000800)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff17000000030000000000000081006e72300000820915f9000000000000007465616d300000000000000000000000766c616e30000000000000000000000076657468305f746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d00000000001000030010000766c616e00000000000000000000000000000000000000000000000000000000080000000000000001000000892f0700636f6e6e6c6162656c0000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000004e465155455545000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a2fdc434830bbee900005c49dcb46bea7200000000000000000000000000000000006efb00000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e64300000007468315f746f5f62726965676500aaaaaaaaaabb000000000000ffffffffffff000000000000000070000000c0000000f00000006c6f6700000000000000000000000000000000000000000000000000000000002800000000000000001bf3c55d5257f4f23744c12de105a023359e3d6aa076fb6db6b41c6940a3000000000000000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000000000000000000000d055e9f2d3eca76195b52ee76ab1afef3194e57ac0eec72b0c09e9986efb746b4b3da242c9d9990ced18d7009d1ca245a852043a95da56b0aa987bc3eef35bcef3b1b4f1901cfbb1392ab46d18ec47d18dc70887b2f7d924fcd000000"]}, 0x3b2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) sched_getscheduler(r1) [ 587.367198] LDTR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.367210] IDTR: limit=0x00000000, base=0x0000000000000000 [ 587.367226] TR: sel=0x0000, attr=0x10000, limit=0x00000000, base=0x0000000000000000 [ 587.367239] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 587.375643] IPVS: stopping backup sync thread 4203 ... [ 587.384529] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 587.384540] Interruptibility = 00000000 ActivityState = 00000000 [ 587.384545] *** Host State *** [ 587.384556] RIP = 0xffffffff811f744c RSP = 0xffff880177277390 [ 587.384576] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 587.384588] FSBase=00007f6c30b07700 GSBase=ffff8801daf00000 TRBase=fffffe0000034000 [ 587.384598] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 587.384612] CR0=0000000080050033 CR3=00000001b51ff000 CR4=00000000001426e0 [ 587.419115] binder: BINDER_SET_CONTEXT_MGR already set [ 587.424530] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff87801380 [ 587.424543] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 587.424548] *** Control State *** [ 587.424557] PinBased=0000003f CPUBased=b5986dfa SecondaryExec=000000c2 [ 587.424565] EntryControls=0000d1ff ExitControls=0023efff [ 587.424578] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 587.424588] VMEntry: intr_info=00000000 errcode=00000000 ilen=00000000 [ 587.424597] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 587.424605] reason=80000021 qualification=0000000000000000 2018/05/29 01:53:53 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000b6dfc8)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x14, 0x0, 0x0, 0x2000000000000155, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @rand_addr}}}, @sadb_address={0x5, 0x9, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}]}, 0x98}, 0x1}, 0x0) 2018/05/29 01:53:53 executing program 4: mknod(&(0x7f0000000080)='./file0\x00', 0x2, 0x1) r0 = socket(0x10, 0x80002, 0x9) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7fffef40, 0x0, &(0x7f0000000100), 0xc0, &(0x7f0000000100)}], 0x492492492492805, 0x0) r2 = getpid() fcntl$lock(r1, 0x5, &(0x7f0000000000)={0x3, 0x0, 0x7fffffff, 0x7, r2}) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000000040)={0x3, 0x0, 0x1}) [ 587.424619] IDTVectoring: info=00000000 errcode=00000000 [ 587.466783] kernel msg: ebtables bug: please report to author: Wrong len argument [ 587.469240] TSC Offset = 0xfffffec296274847 [ 587.469251] EPT pointer = 0x00000001d32af01e [ 587.501764] binder_alloc: 4196: binder_alloc_buf, no vma [ 587.503926] binder: 4196:4198 ioctl 40046207 0 returned -16 [ 587.508458] binder: 4196:4206 transaction failed 29189/-3, size 72-8 line 2971 [ 587.533921] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/29 01:53:54 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 587.613338] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bond, syncid = 0, id = 0 [ 587.614956] IPVS: stopping backup sync thread 4215 ... [ 587.649657] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.655680] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:54 executing program 3: unshare(0x60020200) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0), 0x0) 2018/05/29 01:53:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xffff, 0x800) setsockopt$netlink_NETLINK_RX_RING(r3, 0x10e, 0x6, &(0x7f0000000100)={0x66, 0x8, 0x5, 0xfff}, 0x10) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba2000edc4c2f90089c2dcf8070f01ca660f013726660ff19dfaffffff64670f06660fd58d0a000000d19e650600000fb04b5c0f30", 0x36}], 0x1, 0x0, &(0x7f0000000100), 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="640fbe0af0f75100ba420066ed360faa66b9800000c00f326635000800000f308221990fc71e27000f216d260f2134baf80c66b82735ea8166efbafc0cb06cee", 0x40}], 0x1, 0x24, &(0x7f00000002c0), 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10004, 0x0, 0x0, 0x2000, &(0x7f0000017000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:54 executing program 1: clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)) shmdt(0x0) r0 = epoll_create(0x0) ioctl(r0, 0x7, &(0x7f0000000080)="86e192fcd29d") remap_file_pages(&(0x7f000009f000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) 2018/05/29 01:53:54 executing program 7: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xfffffffffffffff7, 0x2000) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r2 = memfd_create(&(0x7f00000002c0)="bcf6", 0x0) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) mkdirat(r1, &(0x7f0000000040)='./file0\x00', 0x0) 2018/05/29 01:53:54 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80800) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000080)=0x20, 0x4) writev(r0, &(0x7f000037d000)=[{&(0x7f0000199fe1)="1f00000002031900000007000000068100ed853b09000100010100ff3ffe58", 0x1f}], 0x1) writev(r1, &(0x7f0000fb5ff0)=[{&(0x7f0000fb6000)="1f00000002031900000007000000e3800802bb0509000100010100493ffe58", 0x1f}], 0x1) [ 587.735056] binder: 4235:4236 got transaction with invalid offsets ptr [ 587.764471] binder: 4235:4236 transaction failed 29201/-14, size 72-8 line 2999 [ 587.767428] IPVS: ftp: loaded support on port[0] = 21 [ 587.802606] binder_alloc: binder_alloc_mmap_handler: 4235 20001000-20004000 already mapped failed -16 [ 587.859776] binder: BINDER_SET_CONTEXT_MGR already set [ 587.865761] binder_alloc: 4235: binder_alloc_buf, no vma [ 587.871472] binder: 4235:4247 transaction failed 29189/-3, size 72-8 line 2971 [ 587.876948] binder: 4235:4236 ioctl 40046207 0 returned -16 [ 587.961602] binder: undelivered TRANSACTION_ERROR: 29189 [ 587.967700] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000093000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:55 executing program 3: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000080)=0x1) recvmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f0000000100)=@ax25, 0x80, &(0x7f0000001400)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/236, 0xec}, {&(0x7f0000000180)=""/45, 0x2d}], 0x3, &(0x7f0000001440)=""/90, 0x5a, 0x69}, 0x2000) r1 = syz_open_dev$sndtimer(&(0x7f0000f85ff1)='/dev/snd/timer\x00', 0x0, 0x0) ppoll(&(0x7f00000001c0)=[{r1}], 0x1, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f00000002c0), 0x8) r2 = getpid() fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x2, r2}) fcntl$setsig(r0, 0xa, 0x11) 2018/05/29 01:53:55 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x200, 0x400000) ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000001c0)={0x3, 0x8, 0x6}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getrusage(0x1, &(0x7f0000000280)) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000340)={0x0, 0x1000, "cefe8bf60ec185d5a0853b4391e4a39f0d9cf1d3dd48e546fa81f5445ce3db6f4f8b5b70f3738b5476db9caf12a91c5b9f45c7413bd6f50c4a07ea3ea7eafd602b34747f2a24d8e5d15117f3550bef3dc8471981d0f26f8c32643d989a8409599b03a61b7afeb04c9a4d8c8fcf87bf6139481c3b8db787157fa3f822ed6d5e549a83b05be2e82efc2324f42f20a9fa089cd383b0fd228f39bc2121fc331f2c97a70bffad0c7ae57bf32b8db071675830930585a4a7861f0cd462a9967d6f1f77b1b1d5f189b24c3435180f0715e23434d778e9b736bbf7eebaec7634091a72a5a65cc74da3a73aa578a0bf8fcfbe5eb6f28a15f029bded016312c1f467e40a5a010f2c6048207b54651cff57698bdecb2365f2d878d9cc3054c674b2d9d69e9aa3f8e061313a94a6a9b6ba263667a9e92e5c5617bbf70bc5c4cc31ee1883d3beadde987f9bfd97071d6466cf96365f0803a2b0a6c3453be0f9bc8b5193240862aecdae4e0e55e61b41e3c0d566fff1c26d25e119052d032cc0cbcb89c4b304008eda065bd8999a6e3d1d13c4356b95739c7705dcca93086970db852669497f3e8e5fee824a78dbdd27ac05903c4be0b89b39d11d5406dcedcfddf472a38cf66949e791ef3c3ec1bf4e59bd30e9abcc7601a225d4e65c35e940066f9dbb69f475581a8df0a165a227fc16a28fbbdb6fcdee148e2dcd7972b52225aa1ad5517220948a23a7bafad8aae5a957255208945a0d8d62bfe32cd59f7c33948e6aee000bc522c1959aa83fbda846f84fe11ebd80f547a847dfffefb24df91a20c295aed607828f5283afb8100b5b1280e24960529859ab877da5a3f85949f043b750c12e078e98bf68481bdb6535001c3536c415fea0a18c96f39ce09c36281db8416f414dc895d48c91817a075c7bde32e00fa445561c4231cea6e576275cbaae33cbc0a811f72f00a378d9bb87cfda3158864886a8e1be75ba040e4264459f1546a57bbc42554b1b0552763b5b6cc3f963ee30b265231fa6c3534063477baa9e470066fab2fd08bd1559580d34358f46b5719048dbca8b13319e5e481e12d5aee77216d8edc19aa8b2f566e1afd61b812d820626192fcb2ed907ad0c8e3fd495727f450be37feb722f600bb78b3ba9719e22d783afd9f7519297faa91f7b016953c364dcbc944cef19a468520c89e9df204ca0601c73b90f70b01c22cd507a65eca46162c4baf3a8f9fa081458a059cf961ce494f967119834796fa1dae8daf3d4d0680ede01d3c62a9a4596565d5e84622b9d9da4e051cb98564547394b9361069fbc82ded5b73fc8d5c449dcf7f2f00e3bcf6358b8ba753b83729646d862ff39ba351635f6ef145bd546f2023aab9f060813a09d5b5b781f31134207e53177fe637c0ab8c1fbb84132905e760bb11633bb9ddeff8ec89bc57ec934925a9ed9c6f4fff0375e1503ef0ec50b4daf4f218ea00e50aa0a16a084a0c443d52279a77897cbeeb7096b09ef995606cabf288061e980e830b76648a718a0112629f71265147bf211a07a5cf3b994104cae36ddd820b2796aea61c662cfc68dfd265e3b5140e02b84c42eb4e81b95c57af2a282f947b1efc4849d207e99773ca9e70b47cfa1e107568e01bad8f121b59929caf8b054c6afb626e0d2b6dce73fb17720f4333832202df6630084a862a159ba2dddc25837152e65535de2c12e0d391fae43b23c425dfb1720039016e9a796630e98c44eb9d5b7c18ce3b03c717d1a1ff3ed0e4856dc3671e8ecfa993970bee5181186a2a9d327faf2c95f26a8b8ba30bae4e2f463aed52f8f6b139f3a51036d8cf7600e7aa7d2f5d3cf08fd512a50edc495c60a5c50a5f5261bf3fbdc20b0991cdc96a8493111d6b02f5c30fc9d81755d7080c7e332e638757ca10026d547b66fac84f65d57bd9cb3abfb5101b323215c1e50eff9a03a049214bcc8b0766318a88bbd5766fa5b4ff208bc952824054e8815013f52956fb0f7cc80895003775358a96aa72590e04edf9451d39b41319b931ebb153083440315fa761e2ff4c89b564040d4994e94e706d4b1a1cb2ff1d41f198124bafccf210e4c58ebd587ae93ee455f97d03bc40db0547cffb7c3907057e3682c5d97d68a87b77df6d3c8db79a45519ace5fabc873d804340e073bb51471eb1422587a8df3abb9f237085afac21c81fb157bc6690a4caef85358129656cc5b29524af9dc10a2fa44eef5365fc8ccb9ddaaafaac006e454d063ee405e1101a3f13b301f20c8ff162ed8e73a9338b912c1da5e3c1aed43afb6b34b830e59036a184e794b5d29fa2bac15c4f627243eabe5f3fa3aa51a517b5800b8698ddc0202289461d03c758e1a1129cf2e32ecfe9fe8227834dd5f89ee4219b772c6f66bebee59936305babd24de6e3e7ef68796c3f6d8e9b6da6c977ca3dac2c1b27d7a88121001d12c29ceeef476745229356186133137f806d428ce5cf277e6eb9dabee6419e26cac6c788469eb551ed5a6907382fdb14beb75d3e9465368440fb6dd88d4bcd12f12088c229a6e13a2de82e0976e85853edfb3c1d7ccd30aaa45ef0d405620f53d4879435e1d82dcce538fd30146b6adc712aa5ba6b16cb0a7358e99b13f3b6e06b94ec68df8776fcc91df397bce8e6dbfce5d6ee180ba548a364176e8590cc7b125019e7d935bc3726bcddf0441b2bb98988a2a7a00cecac3c27070af51bb0e499d16d981392a1bc20b5b956c96bba57f3b4f6b5119eb01d68419f50b1e2b50dbcc2519a9f0af7e22e9c1ceab51b3c57d3e407a6244f9907094b87c95c390dc9a000ba853f7bb31045c3b29400e71c5b6c05cb5884176c6c94aba95757b3c8822f7739c31636d39fd1c66345660cd17f75a95a195ce2e0e7ed8179241d69b21f17d3b2d45cc45aff20973baeac269a62faf7f43a63f5d6d20e4d02af2d31e42875fb4894085254df3d93a34f6bd69ed36084db1135999cbe3d3c1b665c71034167f9e223b13edfa78318ad0347f9ee7268a91430a8bffa324e103ba4dae2708eba37a17511899055f5c52d371fdc4c330cb61b086d0fb6e69c92828f8569cbc97b93b747f6905f51a8c9f3a5e49f155ce50716bb9f5276a69d31cff96a7c6dad6483a559a2a0115a50f4d2cb6d57c576bb90fc4d05d3c328c8bed2bd6e9daff22a7287c267819efc794d3645289cddb81b451870064b014ced06e4d51e46051f23c5e76d6b200a509b6394a7d97e37165827161ee4b1ae000e3785222b004201da207ca8003fc9cf4f66eeb892ac0420c5e04b7c1109f07626f740bcd0ac44ad2496e6e481ca3af866656663e341b06595b7882d6430d1c39918528a900afd6899280d22afeaeb8a19a64453953885c1f8c4377689e7c31fa2f1f03b4e150bdf92f06b3ed689fa281a7c1ab28d32355d8af7541e43413335b3e599329a2e3021baa0ecfce19adb9b1e9ac396fbf0453df4214e235ec29bd3a9926406989a8081f0d270f642164e3fc491c88ce250576a933a71be6448e8b5be6862585b3ad3d7c7d577d682c20be9e4a5af17d99a57397acc1a27ce542ddb2381572b60d981768989de2b02a7082201a75dad41d89ef9d41a7bf80b1b3e72913ab446898f8cf3d8aac2b629dc94dd9c2a223a3d675715e6e2c6a1f79947d31bd6304bf1a076a42180668bf7c5193539d98c40a4ec08b1b2f0ee6afbed37cfa30fbcbd17abc4dfddce7a9e6437cfa389fd5db89662897212f44269048fd2d80b92cb61bc48579d95aa98933be3e6e3b7dea09d62e97705d7862bcf33ac5c09751d2c48e4725aaa58d28c5d71982171c856350508380291a696b121967d5819d739002008fe31ac36d644ff613d691feb5695acff870ce82a050219b53d489c500035a26e52de12a134b08247f49edd7aeb9f8235a86ddf8ee2dee5e539a8a87c66353480a563d2cd321411b82ea5d6a416263bcb7635667ea0447d7d784ea653d1a0c72aae86027c79731d981d768f676405219d4f054783d5f7c889ed045d9b6fe790d7ec5981886da42e229695c021511c59e7ce5991ea39f06dd7f912073c1eaeaa87aa0c2b76995d598b063dd23338b7963c4ec11c07f3ed5f501237dddb0f1f88b9d96463928f9c42a9ce5f223ffa4a5d0ec0681d7de027aa9d2b590cdbf79a7049a6969c9cbe6aac9a6ea5c26edb810f8995d7f062e000f08d425bba891be0c50f05a19cbab3b8610c810772bf1b8c96588dc02a716d4dcde6245d0b10dc92e4c10b679fd99544d9a3b06663196ab3c3d5a4af6909f553f4c47b2951c3141e39b065c9277f7adfbf7fc1d5c64240fd3024c6e258f41b5572d353014e69081dbfd64bf72638ee968694ccb812371c5e82178218193ded38d76681d235f7c9bc615c7026cd1dfbab7a8a95d6e9024b86c12b2e26d44ea39473825071b942787d7d326944e31ac864f314df1b14ae99cbef8326a4e046f1926975c978cf0de77e4125c9419ac7caaa163be4efd408fd495df010ef4a46583094dcf0a27af970453cfe8465899de46b1f70b66193e568383f5c5257498c8a28669ad13d49d12b9998bb4e74b4bedc7f64285de6e5b8e7d477279878b390fc1dbcf1de5a13048a7d49deb02a55d50a0188b0cd0815e9b179f4ce38113e2604647785ffbadb8145b297352f4e083b9553c48ce5ecf2a8f8192772b3f66fbe319c763dd8daac004360052f5573182e381bb6b03c72eda5ffb51d46e334212b3b074cc4dc6908126dbeccd5f694ba4eee7080cc055f4c21974bf109c950b5affbe091b3323d534f387f07668e01f30762b44da1272716d068b449f367cfc3845f46e26c63856fe64e60f69e0a282159b90f2b86ec58df3413091c902b10c56fbe92330340418b43f08e214a4a9278b7ea86522a72b1c3cc16c92d0a57164fc28e51421882bd9db19313c0ea687ecee2e9e4b46cd8a4708188c1d6e77d6b7ca8ac3ccf77603bc2f4d7708d508cfc0a432d3fc78b50019a0e4fe88c0a47cda836fcb49eb40ad9e30c8422c39b64d4adfc91b1fee52bc128b702543c2c0c20b0e93b86e107e8a0760d89be282d134fb0237692a8f7454a9ac88cd9b993f080e4857c0502db0e4883c938e37628ad820eb77014aafd2a3f8272c5309371845f9dafa2e234fbf55622603fd1fc57d3f1cf308fbb605388f980944d69a4cd48e7f50f5dd588a1a276901fed288a94eb8d08b11ae6daae2475bc8b44d17878b724660f929176ac582150a9f174658cb7f82ec11b391dc9da2944d6c9b1b950701fe11b4c5d09a39c2bf33b4a93fb964f3b31182782662134976c377d8396e68e48c4bf75535a7de5a8b25800cae79f2817324752c278b4673443c03e34619d3fd6426273c11bb82dcbfa0a538be7106fd16b8da11b2454159ebf4c44c47e15f2ae613825f74cd023749353519b0f8aa1c1de8d689fae3eedce585ee201e5c0a5c7dfad4133848652594f2546d6b869be4655ee8704b6cfe3233135432cb2af3aeca8131ce79aaab706c0c7255d65c3bf8d9a3303666f1ae8e8ff1a7a6743af4e43af01cc05f8392e35f9c3f55299fa4061152e2a1486c413901c90d40a6f6ec90cb944b967aab6182c88294a11a66e0c7173547f125d7b0ca542e7f4e27e2fdc6ca829a2aded50062e797d56d0184851632643d099ff31cab3fc5cf09387636612bf905e09eec9a7a37dbb977322a10fafa27ecfa0d946d5c5dcc5611c5a13b0ee87f1d986c6b8f6f377344e5f7fac30b78d2ce9c6eb8e69f09710d480953f27bf94fadee434a712b34f535f04aee794c0"}, &(0x7f0000000200)=0x1008) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000001380)={0x10000, 0x6, 0x208, 0x7fffffff, 0x200, 0x6, 0xfa, 0x1000, r4}, 0x20) ioctl$sock_SIOCETHTOOL(r3, 0x8933, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @ah_ip6_spec={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}}, {"e8de", @link_local={0x1, 0x80, 0xc2}}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff}, {"1a82"}}}}) close(r3) close(r2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000140)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 2018/05/29 01:53:55 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x0, 0x1, &(0x7f0000001fe8)=ANY=[@ANYBLOB="8c1ecd26d1c753f82f"], &(0x7f0000003ff6)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000009f3d)=""/195}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000001fd8)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0xc0ffffff, 0x25}, [@ldst={0x7, 0xd}], {0x95}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x437, &(0x7f000000cf3d)=""/195}, 0x48) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000080)='./file0/file0\x00', 0x0, 0x13}, 0x0) 2018/05/29 01:53:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/protocols\x00') r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000440)='/dev/ppp\x00', 0x290200, 0x0) linkat(r0, &(0x7f0000000400)='./file0\x00', r1, &(0x7f0000000480)='./file0\x00', 0x400) timer_create(0x39bad6bc52b5c78a, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={&(0x7f00000000c0), &(0x7f0000000180)}}, &(0x7f0000000240)) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x2, 0x0) stat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)) getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x6, 0x30}, &(0x7f0000000140)=0xc) statx(r2, &(0x7f0000000280)='./file0\x00', 0x5000, 0x10, &(0x7f00000002c0)) 2018/05/29 01:53:55 executing program 6: r0 = socket(0xa, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000540)={'mangle\x00', 0x67, "950b97a22d41d073b60ec01bd8395448df6addaaaab803e43b2e7039eab62326472918ea5b5b1b5e32dd9f3ed57a0ccc94165ad960d91fde8b7878acb20f009b1c293f15b582d38152634516c38d6753625ff75a7c31737a56b54401137ffb44f548c6eb3d3ce8"}, &(0x7f0000000000)=0x437) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000004c0)=@broute={'broute\x00', 0x20, 0x1, 0x3b8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x9, 0x0, 0x0, 'syz_tun\x00', 'bond_slave_0\x00', 'veth0_to_team\x00', 'veth0\x00', @link_local={0x1, 0x80, 0xc2}, [], @empty, [], 0x2f8, 0x2f8, 0x328, [@bpf0={'bpf\x00', 0x210, {{0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xe227}, {}, {}, {}, {}, {}, {0x0, 0x3ff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {0x8, 0x7ff}, {}, {}, {0x100000001, 0x0, 0x8}, {0xc0eb, 0x401}, {}, {}, {0xfffffffffffff4ba, 0x0, 0x5, 0x2}, {}, {}, {}, {0x200}, {}, {}, {}, {}, {0x0, 0x5, 0x7, 0x7f}, {0x3ff, 0xd1}, {}, {}, {0x1fc5e76d, 0x800, 0x100000000, 0x101}, {0x401, 0xcf}, {}, {}, {}, {}, {0x4, 0x20, 0x8, 0x1}], 0xfff}}}, @ipvs={'ipvs\x00', 0x28, {{@ipv6}}}]}}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}]}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x1, 0xffffffffffffffff}]}, 0x430) 2018/05/29 01:53:55 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="390000001300090468fe000081000000e8ffff3f03000000450001070000001419001a0004000200070002000200000800005d14a4e91ee400", 0x39}], 0x1) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140)='/dev/urandom\x00', 0x1c0, 0x0) ioctl$TIOCNXCL(r1, 0x540d) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)) r2 = shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT(r2, 0xd, &(0x7f0000000180)=""/67) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00'}) 2018/05/29 01:53:55 executing program 5: socketpair(0xb, 0x1, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xb) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket(0x11, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_tcp_int(r4, 0x6, 0x7, &(0x7f0000000000)=0x96, 0x4) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000000, 0x2011, r3, 0x0) [ 589.048645] binder: 4276:4280 got transaction with invalid offsets ptr [ 589.057317] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 589.065836] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 589.082219] binder: 4276:4280 transaction failed 29201/-14, size 72-8 line 2999 [ 589.093228] xt_bpf: check failed: parse error 2018/05/29 01:53:55 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xfffffffffffffffd, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0x40045532, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.swap.current\x00', 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1a, &(0x7f0000000080)=""/5, &(0x7f0000000100)=0x5) [ 589.130190] binder_alloc: binder_alloc_mmap_handler: 4276 20001000-20004000 already mapped failed -16 [ 589.139892] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 589.148420] netlink: 3 bytes leftover after parsing attributes in process `syz-executor7'. [ 589.160207] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:55 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x890e, &(0x7f0000000040)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x80001, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) fremovexattr(r0, &(0x7f0000000080)=@known='system.posix_acl_access\x00') 2018/05/29 01:53:55 executing program 6: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000880)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r0, 0x6431) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000300)=ANY=[@ANYBLOB="402000ffdfff075e926ede3b454cd3974ea78d18067056e2d1ca42989467591c0e0a01b3e5b9c233"], &(0x7f0000000340)=0x1) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000200)=@sack_info={0x0, 0x8, 0x80000001}, &(0x7f0000000240)=0xc) io_setup(0x0, &(0x7f0000000040)=0x0) r5 = syz_open_dev$dmmidi(&(0x7f00000007c0)='/dev/dmmidi#\x00', 0xfffffffffffffff9, 0x2000) ioctl$BLKFLSBUF(r5, 0x1261, &(0x7f0000000800)=0x9) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0xffffffffffffff9c, 0x3, 0x1, 0x1, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) io_cancel(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x8, 0x40, r1, &(0x7f00000003c0)="09164a89817da24c135edb540f189600e5a2afcee2dd561f6b56ae6c0904ce02650880280f4bc0050ea2719d8904447f696290cdd83d29a1c2276ff20de7f4c3ba5d41b8b67a022ab94fab69e8dacee7fec0fda5c845096025f1aa1d38a5e44e0c424a9ea1ec529ddc065896bad985f4fcbaad876f165c6794e3199c98efbb17a47d46d01691f2e791a573466c9f9419071d5078ab792329fed5e59729ae604598970b3e3a4e0422d5c9e72a56aeb55fa246518a362418c67e93ae2cba30086fcefacaa63524c3a0eaf551fd1f7161e0c91d0d49a8", 0xd5, 0xcb, 0x0, 0x1, r6}, &(0x7f0000000600)) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x2}, 0x8) r7 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x0, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) recvfrom$ax25(r6, &(0x7f0000000640)=""/228, 0xe4, 0x2, &(0x7f0000000740)={0x3, {"dc99017ef0fe19"}, 0x8000}, 0x10) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0xfffffffffffffffc) accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r9, 0xae45, 0x8) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000780)=0x8, 0x4) ioctl$KVM_RUN(r10, 0xae80, 0x0) 2018/05/29 01:53:55 executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x428) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000f, &(0x7f0000000080)="01", 0x21) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) [ 589.186862] binder: 4276:4280 ioctl 40046207 0 returned -16 2018/05/29 01:53:55 executing program 7: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80003, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB="fc0000006d"], &(0x7f0000000140)=0x2) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x6}}], 0x18}], 0x1, 0x0) [ 589.228393] binder_alloc: 4276: binder_alloc_buf, no vma [ 589.234007] binder: 4276:4309 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:53:55 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}], 0x1c) fcntl$setstatus(r0, 0x4, 0x2800) connect$inet6(r0, &(0x7f00008c0000)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmmsg(r0, &(0x7f000060d000)=[{{0x0, 0x0, &(0x7f0000c38ff0)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1, &(0x7f0000299000)}}], 0x1, 0x0) 2018/05/29 01:53:55 executing program 5: set_mempolicy(0x4, &(0x7f0000000040)=0x3, 0x4) r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000466000)={0x200000007f, 0x21}) 2018/05/29 01:53:55 executing program 3: r0 = userfaultfd(0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0xfffffffffffffffe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000c00000/0x400000)=nil, 0x400000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 2018/05/29 01:53:55 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000300000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:55 executing program 5: r0 = socket$inet6(0xa, 0x2100000000000002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socketpair$inet6(0xa, 0x4, 0x7, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0x4, 0x2b}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x3}}, 0xe8) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 589.427986] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.434343] binder: undelivered TRANSACTION_ERROR: 29201 [ 589.469562] binder: 4336:4337 got transaction with invalid offsets ptr [ 589.513589] binder: 4336:4337 transaction failed 29201/-14, size 72-8 line 2999 [ 589.544487] binder_alloc: binder_alloc_mmap_handler: 4336 20001000-20004000 already mapped failed -16 [ 589.565301] binder: BINDER_SET_CONTEXT_MGR already set [ 589.579235] binder: 4336:4337 ioctl 40046207 0 returned -16 [ 589.588254] binder_alloc: 4336: binder_alloc_buf, no vma [ 589.593845] binder: 4336:4343 transaction failed 29189/-3, size 72-8 line 2971 [ 589.623908] binder: undelivered TRANSACTION_ERROR: 29189 [ 589.631869] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:56 executing program 6: r0 = socket$inet6(0xa, 0x0, 0x43) bind$inet6(r0, &(0x7f000067efe4)={0xa, 0x4e20}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0xfff, 0x4) sendto$inet6(r0, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000900)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000002b00)={@dev={0xfe, 0x80, [], 0x1b}, r1}, 0x14) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x100000001}, 0x8) write(r0, &(0x7f0000000340)="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", 0x599) 2018/05/29 01:53:56 executing program 1: r0 = socket(0xa, 0x5, 0x40) ioctl(r0, 0x7, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000080)}) 2018/05/29 01:53:56 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x73, "deb4e4cf0e4180fbb7e9eb2f887d9f489723f2b9f486c0653c583c6da1a589bc38c2af13408517423a5cbc6329bf2de257628a05d560dcb0eff049527240355c7df6382e41471df50c997b635b278ec704b327e8ff77efa6690721c4d71786e020881adebed7198e54849ba04096cbeb5603e6"}, &(0x7f0000000100)=0x7b) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0xfb2, @remote={0xfe, 0x80, [], 0xbb}, 0x401}}, 0x8001, 0x9}, 0x90) r4 = dup2(r0, r0) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8, 0x400000) ioctl$ION_IOC_ALLOC(r4, 0xc0184900, &(0x7f0000000040)={0x1, 0x2, 0x1, r5}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x19, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x90) close(r2) close(r1) 2018/05/29 01:53:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000050000000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:56 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) ppoll(&(0x7f0000000040)=[{r1}], 0x1, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0), 0x8) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000200)={0x5, 0x3, 0x9, 0x1000, 0x800, 0xfffffffffffffffd, 0x8001, 0x0, 0x2000000000d5e6, 0x1, 0x98, 0x10000010002}) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000240)=""/246) 2018/05/29 01:53:56 executing program 2: prctl$void(0x1d) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x200000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'ip6gretap0\x00', {0x2, 0x4e1d}}) 2018/05/29 01:53:56 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000004780)=[{{&(0x7f0000000280)=@l2, 0x80, &(0x7f0000000100)=[{&(0x7f0000000440)=""/209, 0xd1}, {&(0x7f0000000300)=""/89, 0x59}, {&(0x7f0000000540)=""/226, 0xe2}], 0x3, &(0x7f0000000200)=""/34, 0x22, 0x5}, 0x8}, {{&(0x7f0000000640)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000001c00)=[{&(0x7f00000007c0)=""/175, 0xaf}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/235, 0xeb}, {&(0x7f0000000380)=""/38, 0x26}, {&(0x7f0000001980)=""/120, 0x78}, {&(0x7f0000000740)=""/3, 0x3}, {&(0x7f0000001a00)=""/17, 0x11}, {&(0x7f0000001a40)=""/235, 0xeb}, {&(0x7f0000001b40)=""/117, 0x75}, {&(0x7f0000001bc0)=""/26, 0x1a}], 0xa, 0x0, 0x0, 0xffff}, 0x8}, {{&(0x7f0000001cc0)=@un=@abs, 0x80, &(0x7f0000003200)=[{&(0x7f0000001d40)=""/203, 0xcb}, {&(0x7f0000001e40)=""/76, 0x4c}, {&(0x7f0000001ec0)=""/185, 0xb9}, {&(0x7f0000001f80)=""/25, 0x19}, {&(0x7f0000001fc0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/177, 0xb1}, {&(0x7f0000003080)=""/195, 0xc3}], 0x7, &(0x7f0000003180)=""/26, 0x1a, 0x1}, 0xcf}, {{0x0, 0x0, &(0x7f0000004700)=[{&(0x7f0000003280)=""/166, 0xa6}, {&(0x7f0000003340)=""/200, 0xc8}, {&(0x7f00000035c0)=""/186, 0xba}, {&(0x7f0000003680)=""/119, 0x77}, {&(0x7f0000003700)=""/4096, 0x1000}], 0x5, 0x0, 0x0, 0x6}, 0xe788}], 0x4, 0x40, &(0x7f0000004880)={0x77359400}) getpeername$inet6(r1, &(0x7f00000048c0)={0x0, 0x0, 0x0, @local}, &(0x7f0000004900)=0x1c) bind$alg(r0, &(0x7f00009f3fa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000)="0a0775b0d5e383e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) r3 = socket(0xa, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") sendmmsg(r2, &(0x7f00000031c0)=[{{&(0x7f0000000140)=@can={0x1d}, 0x80, &(0x7f0000000780)=[{&(0x7f00000006c0)="1436430d48d97d3a32f6d8a3b38a641d2645315dde43a6bd599b18781b751695b1a8e759c119cf225c14fa707eba93bedb51b627eabdca612b078440427bed079dcfcc5fb24e11f19e50a4f3e3e2db8a3e9a1cebc4811c20f1e9425968cfa6a30aa224e202ee3bbea69d6a2611bad64f", 0x70}], 0x1, &(0x7f0000003640)=ANY=[]}}], 0x1, 0x48015) sendmsg$alg(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r2, &(0x7f0000003580)={&(0x7f00000003c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0)=[{&(0x7f0000003440)=""/112, 0x200034b0}], 0x1, &(0x7f0000003500)=""/106, 0x6a}, 0x0) 2018/05/29 01:53:56 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="4679f9"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x0, 0xbe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:53:56 executing program 2: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigaction(0x400000000000007, &(0x7f0000000300)={0x40246f, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x7e) r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xffff, 0x40) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000080)={'bcsh0\x00', {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x16}}}) mmap(&(0x7f0000540000/0x2000)=nil, 0x2000, 0x4000000004, 0x44031, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000340)='/dev/audio#\x00', 0x0, 0x0) [ 590.307518] binder: 4367:4369 got transaction to invalid handle [ 590.313701] binder: 4367:4369 transaction failed 29201/-22, size 72-8 line 2856 [ 590.336910] binder_alloc: binder_alloc_mmap_handler: 4367 20001000-20004000 already mapped failed -16 2018/05/29 01:53:56 executing program 4: r0 = socket$inet6(0xa, 0x800, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0xffffffffffffffff, @dev={0xfe, 0x80}, 0x7}, 0x1c) socket(0xa, 0x1, 0x0) ioctl(r0, 0x334, &(0x7f0000000000)="0000000000000400000000") sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000480)=' ', 0x1}, {&(0x7f0000000640)="b1", 0x1}], 0x2, &(0x7f0000000780)}}], 0x1, 0x0) [ 590.365275] binder: BINDER_SET_CONTEXT_MGR already set [ 590.377683] binder: BINDER_SET_CONTEXT_MGR already set [ 590.390306] binder: 4367:4369 ioctl 40046207 0 returned -16 [ 590.395407] binder: 4373:4374 ioctl 40046207 0 returned -16 [ 590.421410] binder: 4367:4396 got transaction to invalid handle [ 590.427771] binder: 4367:4396 transaction failed 29201/-22, size 72-8 line 2856 [ 590.434738] binder_alloc: 4367: binder_alloc_buf, no vma [ 590.440983] binder: 4373:4374 transaction failed 29189/-3, size 24-8 line 2971 [ 590.465252] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.472412] binder: 4373:4374 got transaction to invalid handle [ 590.478748] binder: 4373:4374 transaction failed 29201/-22, size 0-0 line 2856 [ 590.515115] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.521768] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.530797] binder_alloc: binder_alloc_mmap_handler: 4373 20001000-20004000 already mapped failed -16 [ 590.569495] binder: 4373:4405 transaction failed 29189/-22, size 24-8 line 2856 [ 590.578639] binder: 4373:4405 got transaction to invalid handle [ 590.579463] binder: undelivered TRANSACTION_ERROR: 29189 [ 590.584811] binder: 4373:4405 transaction failed 29201/-22, size 0-0 line 2856 [ 590.603916] binder: undelivered TRANSACTION_ERROR: 29201 [ 590.609551] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:57 executing program 2: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200802) 2018/05/29 01:53:57 executing program 6: mknod$loop(&(0x7f0000000ff8)='./file0\x00', 0x3, 0xffffffffffffffff) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000080)="0000000201000000000000010400000000000000", 0x14, 0x0) r0 = socket(0x200000000002, 0x1, 0x0) ioctl(r0, 0x9, &(0x7f0000000240)="c626262c8523bf012cf66f") accept4(r0, &(0x7f0000000140)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80, 0x80000) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180), &(0x7f0000000400)) 2018/05/29 01:53:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000000a0bd010000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:57 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x102009, 0x4008000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffff9c, 0xc008640a, &(0x7f0000000080)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f00000000c0)={r3, r5}) r6 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r6, 0x0, 0x0, 0x73e0) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000025c0)={'team0\x00', 0x0}) pwritev(r4, &(0x7f0000000600)=[{&(0x7f0000000180)="456239596555a480fd83455018bce18e20963c462263ce1b310724075a08145e8c85a01ebe40d886e1bc31012a8f92", 0x2f}, {&(0x7f00000001c0)="ab898216046063e851366973e58eacfc73f9a269128fdcd40a773ad0eef5e183ad14554481a97a13e59e95ac0356f27d725d79d2f2a6a354aa650e1a5d269372ff9b6ff3a40fe90d994f92c61173ed600a6fff8c6b8cba2c1e7765098e522b112d1f60a6918411fa90cea33f2604b0a53b087a50ddcb6ac28c7d0431d82118f753359afe389b", 0x86}, {&(0x7f0000000280)="bbd45e1d1bc8ed466ec19a569cda9ffa1834acf244a4fb2a16337703b0c219ff1d482a2c916e4128e898fa2bf64c66431104428ae9cbe1cd31807fe7872cbe41730df44edc4d78b264895e5b1719fb5c76ba2302c674bf22cd853891c6f2b1432c55200dfeccf319dcf28fdb6cbcdbc0795dabde6286aa94c8a8fec9a5ef599b58628d978b9d", 0x86}, {&(0x7f0000000340)="50e7fa91675fc5b8066acaae758c57548707c1d7e03f48fdca9c13d9b4b1e6b2bf25f06721c27ce22b048a5af18e0cd8889ff20a87459e573df885189fb5548ba6484bd0411c4044c38daae3deb5d530c3244c5c1cc1adaf733041fe428e543bb7c3a2727c1977cfc3315d3e10ae5b0671a9865a950005aae949924e11df3640c2496419223b3e2c93da264f4e97ef9564a180da723a3614c5d8eb9e7360641e852d0225464b78098bbeac8d57766466087217719c89b2d96a08f1650230400ced3aa29d2466641257235b5c268d76c195d88c1ee1724517db75a26e31fbfb6d0cf8a935f08fd5a1b9b586", 0xeb}, {&(0x7f0000000440)="15351bc598d5e66013e6f8c3cfb8905497440b3f1d26ae63024bf4aea222398499ba9f49cae5093a3eaae253d8373818a4d2ba8de16c177c613ccc431bb5d0bb42d27cef054753353df38307335e926f4f1b9179a75d32e30d265b883f2214ab9f3bff14285e5030a504927b2c008f728ab24829658e5fecf896b727ad0130f3241201500d07231cf72d5c6d58dd6195032bcd64ea7b79003955b00ff863f075a55136dc323d09290b49d77c26a138c33bf7f904642dec672d66558c2ae179f19f72923ee5d393a9584608d82efed392081c9f6e82c3f43d074b3f576e3ac9861a2894428739db39eded1fe6b640772413d3", 0xf2}, {&(0x7f0000000540)="302f29f9806c5d4b8868e7132d2511a084fc5af8098ef2eae3e218a9333d1eb3c0c3cb32c656f7fd0559a25c3665758cbf05addb2143bf01a2f1fe86fd4b1e28a826fc23359a209d77dbfdadd8c79f3fc67233092da469216428b39cae5caf6e7fe0b40f11fe6de1b211c01919e3e43a777102213ca87ebe16d6aeb2ce8b8ce70eba", 0x82}], 0x6, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000002600)={@mcast2={0xff, 0x2, [], 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @empty, 0x1, 0x10001, 0x1ff, 0x400, 0xffffffffffffffe1, 0x80, r7}) sendfile(r1, r6, &(0x7f00007ed000), 0xffe) 2018/05/29 01:53:57 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0xa180, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000040)={0x8001}, 0x1) syz_open_dev$binder(&(0x7f00000001c0)='/dev/binder#\x00', 0x0, 0x802) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) getsockname$ax25(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000200)=0x100000001) sendfile(r1, r1, &(0x7f0000000080), 0x81) 2018/05/29 01:53:57 executing program 1: r0 = socket(0xa, 0x5, 0x40) ioctl(r0, 0x7, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) dup2(r2, r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000180)}}}], 0x0, 0x0, &(0x7f0000000080)}) 2018/05/29 01:53:57 executing program 7: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000000)='./file0\x00', 0x2000000) inotify_add_watch(r1, &(0x7f0000000400)='./file0\x00', 0x8) 2018/05/29 01:53:57 executing program 5: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x6b69}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x13f) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r4) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x13f) epoll_wait(r2, &(0x7f0000000000)=[{}], 0x1, 0x0) [ 591.260707] binder: 4432:4433 got transaction with invalid offsets ptr [ 591.277478] binder: 4432:4433 transaction failed 29201/-14, size 72-8 line 2999 [ 591.298534] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:57 executing program 4: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) lremovexattr(&(0x7f0000001340)='./file0\x00', &(0x7f0000001380)=@random={'osx.', 'user\x00'}) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x30000, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000340)=""/4096, &(0x7f00000013c0)=0x1000) getsockopt$inet6_dccp_int(r1, 0x21, 0x5, &(0x7f00000001c0), &(0x7f0000000200)=0x4) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) keyctl$get_security(0x5, 0x0, &(0x7f0000000080)=""/246, 0xf6) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0xdc, @multicast1=0xe0000001, 0x4e24, 0x2, 'nq\x00', 0x20, 0xb175, 0x8000}, 0x2c) fcntl$getflags(r1, 0x845d974d201bf73) 2018/05/29 01:53:57 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='cmdline\x00') read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x9, {0x2, 0x4e20, @rand_addr=0x800}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x200, 0x1, 0x96, 0x7, 0x9, &(0x7f0000000000)='teql0\x00', 0xb4e6, 0x7, 0x2}) 2018/05/29 01:53:57 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write(r0, &(0x7f0000000240)="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", 0x1000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000200)=[{0x20, 0x0, 0x0, 0xfffffffffffff000}, {0x6}]}, 0x10) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[], 0x0) [ 591.306456] binder: 4422:4423 ioctl 40046207 0 returned -16 [ 591.314239] binder_alloc: binder_alloc_mmap_handler: 4432 20001000-20004000 already mapped failed -16 [ 591.324240] binder_alloc: 4432: binder_alloc_buf, no vma [ 591.329797] binder: 4422:4423 transaction failed 29189/-3, size 24-8 line 2971 [ 591.349462] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:53:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0x7, 0x3ff, 0x10000000000001, 0x0, 0x1}, 0x2c) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)='>', 0x1}], 0x1) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r0, &(0x7f00000000c0), &(0x7f0000000100)=""/155}, 0x18) 2018/05/29 01:53:57 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) prctl$setfpexc(0xc, 0x160000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000500)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x108) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @empty, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x4e22, 0x8}}}}}}, &(0x7f0000775000)) [ 591.374197] binder_alloc: 4432: binder_alloc_buf, no vma [ 591.379825] binder: 4432:4451 transaction failed 29189/-3, size 72-8 line 2971 [ 591.417793] binder: 4432:4433 ioctl 40046207 0 returned -16 2018/05/29 01:53:57 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1b000020106e29080000000044d0000003000000"], 0x1}, 0x1}, 0x0) 2018/05/29 01:53:57 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000dcc000)='/dev/snd/seq\x00', 0x0, 0x2) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) r1 = getpid() r2 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x41034754, 0x40080) sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x108009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) write$sndseq(r0, &(0x7f0000000340), 0x3ba) write$binfmt_misc(r2, &(0x7f0000000040)={'syz1', "5536ac5b679eea205add2bcf0a"}, 0x11) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f000035d000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) 2018/05/29 01:53:57 executing program 3: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) r1 = socket(0x10, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2) ioctl$EVIOCGKEYCODE_V2(r0, 0x80084502, &(0x7f00000002c0)=""/215) 2018/05/29 01:53:57 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sm3-generic\x00'}, 0x58) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001c00)='coredump_filter\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000001c40)={0x773, 0x2, 0x7, 0xffffffff, 0x3, 0xffff}) accept$alg(r0, 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) process_vm_readv(r2, &(0x7f00000016c0)=[{&(0x7f0000000180)=""/246, 0xf6}, {&(0x7f0000000040)=""/129, 0x81}, {&(0x7f0000000280)=""/21, 0x15}, {&(0x7f00000002c0)=""/16, 0x10}, {&(0x7f0000000300)=""/232, 0xe8}, {&(0x7f0000000400)=""/139, 0x8b}, {&(0x7f00000004c0)=""/167, 0xa7}, {&(0x7f0000000580)=""/70, 0x46}, {&(0x7f0000000600)=""/4096, 0x1000}, {&(0x7f0000001600)=""/129, 0x81}], 0xa, &(0x7f0000001b80)=[{&(0x7f0000001780)=""/202, 0xca}, {&(0x7f0000001880)=""/224, 0xe0}, {&(0x7f0000001980)=""/186, 0xba}, {&(0x7f0000001a40)=""/86, 0x56}, {&(0x7f0000001ac0)=""/150, 0x96}], 0x5, 0x0) r3 = open(&(0x7f00004b8ff8)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x73e0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000001cc0)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) 2018/05/29 01:53:57 executing program 5: r0 = socket(0xa, 0x1, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = semget(0x2, 0x0, 0x10) semctl$IPC_INFO(r2, 0x0, 0x3, &(0x7f0000000480)=""/200) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)=@ipv6_getroute={0x24, 0x1a, 0x13, 0x0, 0x0, {0xa}, [@RTA_IIF={0x8, 0x10}]}, 0x24}, 0x1}, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x11c, 0xc, 0xf, 0x214, 0x70bd2d, 0x25dfdbfc, {0x3, 0x0, 0x1}, [@generic="77e82e21068ee1721446ced3410a00aa444900f17c24c98c06162376a2536bd977e10af041bb517d0b3ff6118c2ec8e8b727455841be7abcacec56955424c211cfc7a8bfe6ab3f19dfb05ab89a9760166e1032db5a253a491f5b323a4c40568ed87d135029b79eedba4e34181c587fa85ca0072c645913c1ad2e40b87021e25a827b1047fe8f7171a1", @typed={0x8, 0x2f, @u32=0x22fe8000}, @nested={0x64, 0x2d, [@generic="15442162e70c570a2579661a3351b87e09dd90fb471d2df9eaf439f01f7d6ab28d2a0e164325504548f5ac1805339c13", @typed={0x8, 0x71, @pid=r3}, @generic="2340f1d67047204a9f3ad26933bef9f4349133", @typed={0x8, 0x77, @pid=r4}, @typed={0xc, 0x21, @u64=0x4}]}, @generic="aebdacce1f192a58d40a69b59f02505236"]}, 0x11c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) [ 591.460578] binder: 4422:4423 got transaction to invalid handle [ 591.466761] binder: 4422:4423 transaction failed 29201/-22, size 0-0 line 2856 [ 591.476078] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/29 01:53:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:57 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="66b8009000000f23c00f21f86635020006000f23f80f01c80f6ae3b800008ee00f01cbbaf80c66b85470078366efbafc0cb066ee0f01c8263ef2afbaf80c66b8ebb6dd8366efbafc0cb0deee0f2120", 0x4f}], 0x1, 0x0, &(0x7f0000000100), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) 2018/05/29 01:53:57 executing program 6: r0 = socket(0x18, 0x0, 0x1) sendmsg$alg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="6d7dd825ad026e9d52dc074f12ce84d2c82114ac96b9294e10ee2fc712024358", 0x20}, {&(0x7f00000000c0)="999d663ea7e9c1ae26f402e4f82238389baa5d269d4c44b8c88522e009160d508a53abb06b2aa907804fc5e43d707ba1ecbb0c885c5fb3727f430b95e18112b4cfa0aa36fa3dd037309cd329cd43e773bd6eeb650ac3aa3e9340d9944aeb0d747fd63b5454f41fe93a887c76a6b7b71220d09e6d855ea3b3a62f6911e83f9bdb4c9ee3b170606bae3239f4bf802b40ad440c02d0ccb2fc6bf9727b045aae9c8e3b552ac40681cbc7d5615cac9e6640b387c3967d3d317dfeb52b0142d25c0acef1c0877e9be9dece31e93e8eff98efbd18", 0xd1}], 0x2, &(0x7f0000000200), 0x0, 0x10}, 0x8000) connect(r0, &(0x7f0000000040)=@pptp={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x20) 2018/05/29 01:53:57 executing program 1: socket(0x2, 0x1, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f000069c000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40085112, &(0x7f0000b18000)={{0xffffbf92, 0x101}, {0xffffffb0}, 0x0, 0x1}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x200000, 0x0) [ 591.585407] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.604228] binder: undelivered TRANSACTION_ERROR: 29189 2018/05/29 01:53:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x40000107}]}) r3 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x7480, 0x40000) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000180)={'ip_vti0\x00', 0xc02}) r4 = dup(r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={r5, @rand_addr=0x9}, 0xc) 2018/05/29 01:53:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r2 = dup3(r0, r1, 0x0) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x8) r3 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f00000003c0)=0xe8) lstat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000640)=0xe8) getgroups(0x4, &(0x7f0000000680)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000006c0)=0x0) r10 = geteuid() getgroups(0x1, &(0x7f0000000700)=[0x0]) sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000140)="085a2c7d9597eae7cc80a096f3d4c7f44894b9bc095e737271fe86411009a50951cd32df53da4bd028bd935c5bb2178502818584a49f77c231a6bfd3d4bbe726284e12ae3218fcdf95dca89aaf12cb94516e627ae0ac0cee2d0caba71215ae0aa29879bad8c5329d4d74c23c7a93e81d2d8a05e4ab5ae2a6a72d43d9b723cac28b8c5fef237bab1e302ab8795f916a1bd8e581898b7e84c8cc499d161c469944a1e483b1a5c63a94ec9a31a44d2929af7e8514fa5f7ee892c522709d0bfa50155809295b06974f47d80d651b63d2c7d068ce591221599ca9e39c2f0837a10b16e846", 0xe2}, {&(0x7f0000000240)="ec38a8ef9e026b7cf6705911e0e2c487c462fe813587f3949703b4bc735ba2de189283c53bfe5f67b044a8a6561806941871aa10a4e771caa0d1657bb83736658949cff319a17d83631e21516250bf2cb3e753bf416f368e0d979f4bd6362981547cc2fa83d8143192feb0", 0x6b}], 0x2, &(0x7f0000000740)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x30, 0x1, 0x1, [r2, r2, r1, r1, r1, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0x90, 0x40d1}, 0x8000) 2018/05/29 01:53:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551a, &(0x7f0000000100)={0x10000000000008, 0xfffffffffffffcb4}) socket$inet_sctp(0x2, 0x5, 0x84) eventfd2(0x7, 0x800) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)=""/248) [ 591.627772] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:58 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) recvmmsg(r0, &(0x7f0000003f40)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x3a8, &(0x7f0000000340)=[{&(0x7f0000000080)=""/46, 0x2e}, {&(0x7f00000000c0)=""/187, 0xbb}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000240)=""/249, 0xf9}], 0x4, &(0x7f0000000380)=""/4096, 0x1000, 0xff}, 0x7f}, {{&(0x7f0000001380)=@generic, 0x80, &(0x7f0000003880)=[{&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/221, 0xdd}, {&(0x7f0000002500)=""/90, 0x4a}, {&(0x7f0000002580)=""/9, 0x9}, {&(0x7f00000025c0)=""/89, 0x59}, {&(0x7f0000002640)=""/147, 0x93}, {&(0x7f0000002700)=""/51, 0x33}, {&(0x7f0000002740)=""/1, 0x1}, {&(0x7f0000002780)=""/4096, 0x1000}, {&(0x7f0000003780)=""/218, 0xda}], 0xa, &(0x7f0000003940)=""/227, 0xe3, 0x2}, 0x1}, {{&(0x7f0000003a40)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000003d40)=[{&(0x7f0000003ac0)=""/233, 0xe9}, {&(0x7f0000003bc0)=""/163, 0xa3}, {&(0x7f0000003c80)=""/167, 0xa7}], 0x3, &(0x7f0000003d80)=""/55, 0x37, 0xceba}, 0x1}], 0x3, 0x40000000, &(0x7f0000003e80)) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000003dc0)={0x2, 'dummy0\x00', 0x2}, 0x18) setsockopt$sock_void(r0, 0x1, 0x0, 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000003ec0)='/dev/vcsa#\x00', 0x890a, 0x100) unlinkat(r2, &(0x7f0000003f00)='./file0\x00', 0x0) [ 591.690833] binder: 4521:4522 got transaction to invalid handle [ 591.697055] binder: 4521:4522 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:53:58 executing program 6: r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000180)=@dstopts, 0x8) connect$inet6(r0, &(0x7f000000cfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) recvmsg(r0, &(0x7f0000000400)={&(0x7f0000000000)=@nfc, 0x10, &(0x7f0000000080), 0x0, &(0x7f0000000100)=""/128, 0x80}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000002ff0), 0x0, &(0x7f0000000180)}, 0x0) 2018/05/29 01:53:58 executing program 3: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000e5bef8)={0x0, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}}}}, 0x108) r1 = socket(0x4000d, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaa00ff86dd6076605100303afffe8000000000000000000000000000ffff02000000000000000000000000000186009078000c000060c5961e00000000ff200000000000001803000000000001ff020000005bca88d80000000000000000000001f609c23c994366585d2523016026d4056d305721e04f5b476c6ed556cc18f50359d8b1e4347ef31aee846c1bbc02b8cfdb013a7b0a0b42f8b456c6d76f"], 0x0) 2018/05/29 01:53:58 executing program 4: socket(0xa, 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x880, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={0x0, r0, 0xc, 0x1}, 0x14) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x1000000, 0xfffffffffffffffb) 2018/05/29 01:53:58 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0xb7, "9e9151dab2344c055ded476cad090fc240fccf284fefe7958803804e52ac90cc88115108682d4fd80e104d7d080811335a95b97959f37858fa14f04687291c28e906ed4a64a14f5a951ea6e4b8139a70772fe735c6f9ab4e253385f12a60df37510061c00b60a86d5d76c30694e337c293b9b193ca1a430dc087afe14113c0f82e8398b55d41d9996c1aa50c59a373ce25d0199d14eaeb975b443f9016b4ce0cdd95aa98e0acbe592efb27de1363836e8713258f18502c"}, &(0x7f00000002c0)=0xdb) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000c60586c60ade00000000000000e4fd00000000000000000000000000000000000000000000000000000000000000000000000000000000"]) [ 591.790484] binder_alloc: binder_alloc_mmap_handler: 4521 20001000-20004000 already mapped failed -16 [ 591.849345] binder: BINDER_SET_CONTEXT_MGR already set [ 591.869909] binder: 4521:4522 ioctl 40046207 0 returned -16 [ 591.893378] binder: 4521:4552 got transaction to invalid handle [ 591.899584] binder: 4521:4552 transaction failed 29201/-22, size 72-8 line 2856 [ 591.970967] binder: undelivered TRANSACTION_ERROR: 29201 [ 591.978394] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:59 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) readv(r0, &(0x7f0000000040)=[{&(0x7f0000001200)=""/146, 0x92}], 0x1) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x9, 0x406020) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@int=0x6, 0x4) 2018/05/29 01:53:59 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x100) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e23, 0x100000001, @loopback={0x0, 0x1}}}, [0xc9ee, 0x401, 0x6, 0x3098d7aa, 0x81, 0x2dae, 0x9, 0x3, 0x2, 0x5, 0x800, 0x3b867a7a, 0xfffffffffffffff9, 0x60b, 0xe6]}, &(0x7f0000000140)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={r1, 0x401, 0x2, 0x5}, &(0x7f00000001c0)=0x10) getitimer(0x2, &(0x7f0000000200)) ioctl$sock_ipx_SIOCIPXCFGDATA(r0, 0x89e2, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000340)={r2, 0xc0, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0x10000, @dev={0xfe, 0x80, [], 0xb}}, @in={0x2, 0x4e24, @multicast1=0xe0000001}, @in6={0xa, 0x4e21, 0x3ff, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}, @in6={0xa, 0x4e24, 0x279, @mcast2={0xff, 0x2, [], 0x1}, 0x2}, @in6={0xa, 0x4e20, 0x8}, @in={0x2, 0x4e22, @rand_addr=0x80000001}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r1, 0x4f, "23c86b2fccc0d45eb514396335f2eeff12247e4bafa54c401b9803d7eb66432072870fc7c606eecf6c7837bfd6d4ff923682e8aff45e00a73d212553277e18e77d48b943c5cf8d2a50c691c13d5d9e"}, &(0x7f0000000440)=0x57) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xfffffffffffffffa) io_setup(0x7fffffff, &(0x7f0000000480)=0x0) io_submit(r4, 0x5, &(0x7f0000000900)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x3, 0x8c09, r0, &(0x7f00000004c0)="48003fb5452d2f8ce365fdf57d9210dfdeb657c80c21777dd90ba82ccc2bc2e9256fac5ab53ac707b391bb6d5775e2607db4bf307ffb5593320ffbd1004e5cfaf940424e54fb9cec7a904568a1e556a897308fc84694e0d5a708cdc053a1b121479d5a587c8c2391bb4525ab94f5c9ef6099ebebbb2ea8c8487f1001d59eb1c48f124e366b2d54f2ef3e4067b9bdbcc8e74209b5fc16fc22fbb4ac37fe5e6840928ba3924d86efae", 0xa8, 0x80000000, 0x0, 0x1, r0}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x3, 0x6, r0, &(0x7f00000005c0)="2c1d6c54408e1a6f41eecaa79740295e60344f9f155ec6ed24378263dc5b809602baf0eda85667330f42f7ebd0f71281d581eb6bcbad744ffdaac30fe2d69778b998633e782b9c0ed9a5ee9b5a1c25f375c78931da363947ae3ee945dc1e6bf14fbc7044bb83b9c0dfd12abca7d28770b9206dc20eb47cffbf7f4c8698e8ee820ec4b95fcaa44539d08477ca49f21802ba8f8105471ffc303accdf3b819bf8936d23f01608aa269026d79bc9d79ffa63c06231f908e5490c47efd9592fc5586a8ef41a4a77890054e9", 0xc9, 0x8000, 0x0, 0x0, r0}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7, 0x7, r0, &(0x7f0000000700)="6ae9860ccbe3b55b7dc6fa0d63902eec2fbef6204bf6476b97037f9546a4b87d5aed4c5d40b7b6e48d4aa36357869f0eae9e054c5563c296273e9e28824538d4ddcfa3f7f3836ded20340e1bde76fbd648e5bb3c704941ac56eafd022f5cfef108c3b720f8bccbe016", 0x69, 0x6, 0x0, 0x1, r0}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x6, 0xf06d, r0, &(0x7f00000007c0)="8fc18f96414eb7c849da84e1111ce69ba84cb14fca159d891b265f40ca9343ee81d0c32d107621a5e51f8c7783da2fdc0ef023a847a212756c79cc1de3336c0fb59683f57f11670217511d9e517dc7a989fcae09d92b1aec9d9df0ec4bc5e5fa4e2a", 0x62, 0x3, 0x0, 0x0, r0}, &(0x7f00000008c0)={0x0, 0x3bf70c34d8d34925, 0x0, 0x0, 0x3, r0, &(0x7f0000000880), 0x0, 0xfffffffffffffffd, 0x0, 0x0, r0}]) write$binfmt_script(r0, &(0x7f0000000940)={'#! ', './file0', [{0x20, ')'}, {0x20, '/dev/amidi#\x00'}], 0xa, "33a7f425f403611f1f6ee217649b1c48775f76425f3cfd90c3d8c477701c29e7a147de6d812ad03d3cb52081133a130cfe36316ff76920b6afa2fde9a6a0bde924da3834560a4165b5441b460cbbef0943ec03513a8671661c00bb85649466a939224a88a99ea4363ba486ac5f8e53d08c4a3545508e866be3456c5c9326618d57217e65d76c67a21c946f6c1e49366a976c6f5167adbd22dd1af836ffc6b2946232ddbd87a09df44ce0e0522bc806822022"}, 0xcc) r5 = syz_open_dev$midi(&(0x7f0000000a40)='/dev/midi#\x00', 0x8, 0x10000) mq_timedsend(r0, &(0x7f0000000a80)="91feb57fc5f44873475dd157537ebabe1d4f641d066ff846e54130392a175ec569f4175de7dd9b625f77f1bfd0f4880ea4fb1d42ca2108e0d29057075911f322d97230c766a52a0b34d19a60de735ec8acf0230750893146dbae40ffba65049da002062c42adfe7de70d9dfcc5a5678e8d606c29e5df783485095469ce34ee8cb0c46f2dfcea3503e1759f096782d8ba", 0x90, 0x7, &(0x7f0000000b40)={0x77359400}) uselib(&(0x7f0000000b80)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000bc0)={{0x8, 0x2, 0xff, 0x8, "9c1139a01f4353bee36ad54e2f13b31e1e593738fa8ccddfbdf4bc0aea32c82ced1e499198fcdfa5855b00a2", 0x3}, 0x4, [0x100000000, 0x2, 0x8, 0x80000001, 0x10000, 0x2ccb480e, 0x9, 0x709, 0x1, 0x1ff, 0x1000, 0x5, 0xffffffff, 0x8, 0xff, 0x1, 0x6, 0x4, 0x136, 0x400, 0x47b, 0x4, 0x7, 0x1000, 0x2, 0x6, 0x2, 0x6, 0x5, 0x1, 0x10001, 0x2, 0x0, 0x56e, 0xfffffffffffffffc, 0x5, 0x8, 0x7, 0x0, 0x6a, 0x2, 0x3ff, 0x8, 0x9, 0x2, 0xffff, 0xffffffff, 0x5becdc46, 0x1, 0x2, 0x7, 0x5, 0x100, 0x2d2, 0xab, 0x100000000, 0x3f, 0x4, 0x100000000, 0x7, 0x1f, 0x4000000000, 0x3, 0x6f1, 0x3, 0x9, 0x1, 0x7fff, 0x0, 0x2, 0x1, 0x7, 0x4bd9, 0x4, 0x7, 0x6, 0x7, 0x7fffffff80000, 0x100, 0xe71, 0xfffffffffffffffe, 0x7, 0x7ff, 0x2, 0xfffffffffffffff7, 0x7, 0xea, 0x20, 0xbac, 0x0, 0x1, 0x5, 0x3ff, 0x0, 0x5, 0xe848, 0x8, 0x1, 0x5, 0x0, 0x5, 0x2de, 0x2, 0xac, 0x1f, 0x7, 0x2, 0x0, 0x401, 0x80000000, 0x401, 0x9, 0x3, 0x9, 0x6, 0x7, 0x6, 0x8, 0x8, 0x0, 0x1, 0x9, 0x3, 0x1, 0x200, 0x0, 0x7, 0x8]}) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f00000010c0)="26e538c293232cab2bad5ccd7f1399b6", 0x10) setrlimit(0xf, &(0x7f0000001100)={0xfffffffffffffff9, 0x6}) setsockopt$inet_sctp_SCTP_MAXSEG(r5, 0x84, 0xd, &(0x7f0000001140)=@assoc_value={r3}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001180)={0x0, r0, 0xf, 0x3}, 0x14) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/audio\x00', 0x10001, 0x0) ioctl$KDGETLED(r5, 0x4b31, &(0x7f0000001200)) getsockopt$inet6_dccp_buf(r6, 0x21, 0xf, &(0x7f0000001240)=""/8, &(0x7f0000001280)=0x8) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000012c0)=""/163) rt_sigpending(&(0x7f0000001380), 0x8) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f00000013c0)={0x6, 0x5, 0xbf}) fdatasync(r5) uselib(&(0x7f0000001400)='./file0\x00') fcntl$setpipe(r6, 0x407, 0x20) ioctl$PERF_EVENT_IOC_DISABLE(r6, 0x2401, 0x7fff) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x1b, 0x5, 0x5c0, 0x130, 0x0, 0xffffffff, 0x0, 0x418, 0x528, 0x528, 0xffffffff, 0x528, 0x528, 0x5, &(0x7f0000001440), {[{{@ip={@multicast1=0xe0000001, @remote={0xac, 0x14, 0x14, 0xbb}, 0xffffff00, 0xffffff00, 'nr0\x00', 'syzkaller1\x00', {}, {}, 0x1, 0x3, 0x1e}, 0x0, 0xf8, 0x130, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @common=@set={0x40, 'set\x00', 0x0, {{0x57da, [0xffff, 0x2, 0xffffffff7fffffff, 0x1, 0x5, 0xdf2], 0x5, 0x29a, 0x5da8aa01}}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x3, @broadcast=0xffffffff, @loopback=0x7f000001, @port=0x4e21, @gre_key=0xbd6}}}}, {{@uncond, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@ttl={0x28, 'ttl\x00', 0x0, {0x2}}, @common=@socket0={0x20, 'socket\x00'}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x2, @dev={0xac, 0x14, 0x14, 0x1e}, @empty, @port=0x4e23, @icmp_id=0x67}}}}, {{@ip={@rand_addr=0x3f, @multicast1=0xe0000001, 0xff, 0xff000000, 'ipddp0\x00', 'veth1_to_team\x00', {0xff}, {}, 0xdd, 0x1, 0x10}, 0x0, 0x198, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack1={0xc0, 'conntrack\x00', 0x1, {{@ipv6, [0xffffffff, 0xff, 0xffffffff, 0xffffffff], @ipv6, [0xff, 0xffffffff, 0xffffffff, 0xffffff00], @ipv6=@mcast2={0xff, 0x2, [], 0x1}, [0xffffffff, 0x0, 0xffffffff, 0xff000000], @ipv4=@broadcast=0xffffffff, [0x0, 0xff000000, 0x0, 0xff000000], 0x6, 0xfff, 0x2, 0x4e21, 0x4e21, 0x4e22, 0x4e22, 0x480, 0x212}, 0xc0, 0x928}}, @common=@set={0x40, 'set\x00', 0x0, {{0x5, [0x1, 0x2, 0x7, 0x9, 0x1f, 0x8], 0x8, 0x9, 0x20}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @local={0xac, 0x14, 0x14, 0xaa}, @broadcast=0xffffffff, @icmp_id=0x65, @gre_key=0x1}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={0x40, 'set\x00', 0x0, {{0x8, [0x100, 0x8, 0x9, 0x5, 0x262, 0x5], 0xfffffffffffff800}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x12}, @remote={0xac, 0x14, 0x14, 0xbb}, @icmp_id=0x68, @icmp_id=0x68}}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x620) 2018/05/29 01:53:59 executing program 3: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x1, 0x4, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000140)={{0x5, 0x2000000000000003}, 'port0\x00', 0x4040200002c, 0x401, 0x7, 0x80000001, 0x0, 0xb, 0x6, 0x0, 0x6, 0x8000000079f6}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1d}, 0xff63, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000040000f7ffffff00000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYRES64=r2/1000+30000, @ANYBLOB="0300008001000000020000a0170000006c50d1b94102c0494f07f07ee10b0f98071eee06c7963ba09cbdd3b1e3060e01f6492c32fa12dfd558938a977e7cc83c2b9e7a7629bf312ccbe28dc4338eef0c"], 0x80}, 0x1, 0x0, 0x0, 0x84}, 0x4000) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000380)=0x80000000, 0x4) prctl$void(0x1f) 2018/05/29 01:53:59 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000540)='net/sctp\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'team0\x00', 0x2}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) utimes(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={{0x77359400}, {r1, r2/1000+30000}}) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000200)) pread64(r0, &(0x7f0000000440)=""/123, 0x7b, 0x0) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, &(0x7f0000000040)="90b4899ec2e619c2815978db41f4bb3ed0255a0ec6a1e0b8130fc588cc2564b12e510b14ecfa44b852e0f108265ef97ee30fa6b771d81824f0509bce50ff521bdfb90d6b383ab8359ff27c762ca075647e638a2bc48dac29ed03e1037d3ff827e99844e38c46717be26946bd74a7a870c44312df4335cf60cd4f948ce8d23396aa0f1f4de022fc5b36855c64cda93e6f3e90777381bca2103a2356ba4778e93b93e0609c4247190cfdd97091265d9b1d29c8e8cf1fb2b92ba5257293d4ec81e75fa2260b5f5b86699a4131e8d941cfaed5072e70980e6f0893d04af86a0fdb67fd7851e4cd1aeebee87688a05936d1cf") 2018/05/29 01:53:59 executing program 7: r0 = socket(0x0, 0x805, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000200)=@req3={0x80000000}, 0xff27) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80004000}, 0xfeda) r2 = msgget(0x2, 0x4) msgctl$IPC_STAT(r2, 0x2, &(0x7f0000000080)=""/69) close(r0) 2018/05/29 01:53:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:59 executing program 5: r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000d81ff8)=0x101) r1 = syz_open_dev$dspn(&(0x7f0000af6ff6)='/dev/dsp#\x00', 0x1, 0x4000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0x333) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x0, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) connect$pptp(r2, &(0x7f0000000040)={0x18, 0x2, {0x2, @multicast1=0xe0000001}}, 0x1e) fcntl$setstatus(r1, 0x4, 0x20000000800) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x3b, 0x6, @buffer={0x0, 0xbf, &(0x7f0000000200)=""/191}, &(0x7f00000000c0)="c3297f67f0b12f701da9138ea6b6f2416206fb11e6a12ea2b3e67243e8b2481a925bf814532b3f2c2c3e8fad96fc729a5243f7b54538e4e5d85eb9", &(0x7f00000002c0)=""/156, 0xffffffff, 0x4, 0x2, &(0x7f0000000380)}) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)=0x3ff) readv(r1, &(0x7f0000a6fff0)=[{&(0x7f0000000180)=""/110, 0xfffffec7}], 0x1000000000000258) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x3) r3 = syz_open_dev$sndpcmp(&(0x7f0000000440)='/dev/snd/pcmC#D#p\x00', 0xf1, 0x200) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000480)) 2018/05/29 01:53:59 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x10040, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x121000) ioctl$KVM_IOEVENTFD(r0, 0x4040ae79, &(0x7f0000000340)={0x0, &(0x7f00000002c0), 0x2, r1, 0x4}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000001c0)="9cd73340a3f42b97bb6d5246a1b09a645ac3cab262f85187b29b65a59e6072eb860571f19ece8b1d90afab91a0fb2ab78709904dbedf6bac28c6a26be1ca93df5c201fb77cd50fd8457fd814e4fe5f8233b14d8b416f56ce07a19dca22870e6d4323348f2a55bea797d1e0b60a6115d2b277a0228a7920f5fb4f7d04018e470cfa9730d4098b10cd5a01e065a457119da71381d8fb280a2540fc2469be6e47ebdc433153d900348823b497d04650c77db525547817fea5c0c7bd7e5eb4de65026bee7846b60ea51ccd02e3809bbd92274e06626018fac3d1839c8414c4af39c63d0e01f44241fbab9cd8d2cfde", 0xed, 0xfffffffffffffffb) keyctl$restrict_keyring(0x1d, r2, &(0x7f0000000080)='trusted\x00', 0x0) r3 = socket$netlink(0x10, 0x3, 0xa) writev(r3, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 2018/05/29 01:53:59 executing program 1: r0 = socket$inet(0x10, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="240000002c0007031dfffd946fa2830020200a0009000000001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47b6268e3966cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 592.795390] binder: 4599:4601 got transaction with invalid offsets ptr [ 592.827531] binder: 4599:4601 transaction failed 29201/-14, size 72-8 line 2999 [ 592.910689] binder_alloc: binder_alloc_mmap_handler: 4599 20001000-20004000 already mapped failed -16 [ 592.949588] binder: BINDER_SET_CONTEXT_MGR already set [ 592.955274] binder: 4599:4601 ioctl 40046207 0 returned -16 2018/05/29 01:53:59 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x18100, 0x0) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f00000001c0)={"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"}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e3, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf9e, 0x0, 0xf6, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) open(&(0x7f0000000000)='.\x00', 0xd140ef0a5979172b, 0x0) 2018/05/29 01:53:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x2, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f00000000c0)) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000002c0)={0x7b, 0x0, [0x48]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x800, 0x0) 2018/05/29 01:53:59 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000001000)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) clock_gettime(0x0, &(0x7f000052bff0)={0x0, 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000088e000)={0x0, r1}, &(0x7f0000e98ffc), 0x0) futex(&(0x7f000000cffc), 0x5, 0x80, &(0x7f0000049ff0)={0x0, 0x989680}, &(0x7f0000a2a000), 0x5000000) modify_ldt$read(0x0, &(0x7f0000000000)=""/164, 0xa4) 2018/05/29 01:53:59 executing program 7: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000000c0)=0x5000000) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_S390_VCPU_FAULT(r2, 0x4008ae52, &(0x7f0000000080)) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000040)='threaded\x00', 0x9) r3 = getpid() perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0xfffffffffffffbff, 0x3f, 0x6, 0x9, 0x0, 0x6, 0x80000, 0x6, 0xb8c, 0x7f, 0x9, 0x8, 0x1816, 0x100000000, 0x9, 0x3ff, 0x80000001, 0xda, 0x1, 0x9, 0x3, 0x2, 0x3, 0x0, 0x38e7, 0x8, 0x7, 0xfd6, 0xfffffffffffffffa, 0x101, 0x7ff, 0x3, 0x4, 0x8, 0x4, 0x100, 0x0, 0xe52, 0x4, @perf_config_ext={0x20c, 0x1f}, 0x1000, 0x8, 0x1, 0x7, 0x6, 0x1, 0x7}, r3, 0x7, r0, 0x8) 2018/05/29 01:53:59 executing program 6: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xffffffffd71640ab, 0x400000) accept$inet(r0, &(0x7f00000000c0)={0x0, 0x0, @multicast2}, &(0x7f0000000100)=0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000000000), &(0x7f0000000040)=0x4) 2018/05/29 01:53:59 executing program 1: r0 = socket(0xa, 0x1, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000300)='/dev/urandom\x00', 0x82002, 0x0) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000140)=""/201) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={r1, 0x3, 0x1, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) socket(0x3, 0x8080f, 0xff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000000)='/dev/urandom\x00') mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ustat(0x6, &(0x7f0000000100)) 2018/05/29 01:53:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00z\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:53:59 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000001d00)=@migrate_id={0x12, 0x10, 0xfa00}, 0x18) [ 592.961733] binder_alloc: 4599: binder_alloc_buf, no vma [ 592.967275] binder: 4599:4623 transaction failed 29189/-3, size 72-8 line 2971 [ 592.990978] binder: undelivered TRANSACTION_ERROR: 29189 [ 592.996546] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:53:59 executing program 6: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0xfff8000000000001, 0x9, 0xffd) bind$inet(r1, &(0x7f0000000140)={0x2, 0x10000000004e24, @multicast2=0xe0000002}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x38) r2 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x12ec00000000, 0x20100) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000000c0)={0x401, 0x401}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00') preadv(r3, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'team0\x00', 0x4000000000400}) 2018/05/29 01:53:59 executing program 7: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) getsockopt$ipx_IPX_TYPE(r0, 0x100, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$nl_xfrm(0xa, 0x3, 0x87) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff87, 0x0, @local={0xfe, 0x80, [], 0xaa}, @local={0xfe, 0x80, [], 0xaa}, {[], @tcp={{0x0, 0x1f4, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f00000002c0)) recvfrom$ax25(r0, &(0x7f0000000180)=""/173, 0xad, 0x1, &(0x7f00000000c0)={0x3, {"94e940bbb90132"}}, 0x10) 2018/05/29 01:53:59 executing program 2: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xffffffff, 0x101001) io_setup(0x9, &(0x7f0000000040)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xffff, r0, &(0x7f0000000080)="4348769d2d659f3e9d9eeda507fefc83ed706e044979a1f454cbddae2bb8c51790346f9a8d7b04d2fa4cf041432466d0b727c6044d7187afe5625854606478a5a109b4dd483a26a6770cb54761ff9399130ec7cdbdf53865faadd10fe699e675f304bd1100f1f7debc34689bfb5df24be4c2dcd39d3e0f882348280f98c69353b4abc72bb9ae68fe578401372c72f96d034431b86cf41c05d3b378ee01484111098899a528f67afddf8d3addf1594f33cac482e4ba70429823e18cfbd4", 0xbd, 0x7, 0x0, 0x1, r0}]) ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f00000001c0)) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000200)) exit(0x80000000) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7fff) ioctl$int_out(r2, 0x2, &(0x7f0000000280)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f00000002c0)=0x3f, 0x4) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000300)) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r3 = dup3(r2, r2, 0x80000) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vsock\x00', 0xc4200, 0x0) linkat(r0, &(0x7f0000000380)='./file0\x00', r4, &(0x7f00000003c0)='./file0\x00', 0x1000) ioctl$int_out(r3, 0x2, &(0x7f0000000400)) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000440)={0x0, @in6={{0xa, 0x4e21, 0xffffffff, @dev={0xfe, 0x80, [], 0x1e}, 0x8a}}, [0x2, 0x35, 0x0, 0xfffffffffffffff8, 0x2, 0x58e4, 0xffffffffffffffff, 0x80000001, 0x7, 0xa80d, 0x9, 0x7fff, 0x7, 0x0, 0x2]}, &(0x7f0000000540)=0x100) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000580)=r5, 0x4) r6 = open(&(0x7f00000005c0)='./file0\x00', 0x101000, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000600)="07c788066ec338") ioctl$KVM_S390_UCAS_UNMAP(r6, 0x4018ae51, &(0x7f0000000640)={0x93, 0x3ff, 0x7}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={r5, @in6={{0xa, 0x4e20, 0x6, @local={0xfe, 0x80, [], 0xaa}, 0xef}}}, &(0x7f0000000740)=0x84) setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000780)=0x9, 0x4) r8 = getpgrp(0x0) perf_event_open(&(0x7f0000000800)={0x4, 0x70, 0x1000, 0x3, 0x5, 0x4, 0x0, 0xffffffffffffffff, 0x10000, 0x1, 0x20, 0x1596e63c, 0x9, 0xef, 0x4, 0xb9e, 0x5, 0x1, 0x7fff, 0x10001, 0x4, 0x9, 0x6, 0x1, 0x5, 0x6, 0x1000, 0x3, 0x80000001, 0x1, 0x9, 0x7, 0x61b4, 0x58f, 0xd9c, 0x1000, 0x80000000, 0x1, 0x0, 0x10001, 0x7, @perf_bp={&(0x7f00000007c0), 0xa}, 0x0, 0x241, 0x1, 0x5, 0x7fff, 0x200, 0x2}, r8, 0xf, r4, 0xa) r9 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000880)='/dev/mixer\x00', 0x400800, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12) pipe2(&(0x7f00000008c0), 0x800) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x1f54f0db) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, &(0x7f0000000900)={r7, 0x200, 0x2, 0x20, 0x4, 0x3}, &(0x7f0000000940)=0x14) [ 593.045345] binder: 4644:4646 got transaction with invalid offsets ptr [ 593.077299] binder: 4644:4646 transaction failed 29201/-14, size 72-8 line 2999 [ 593.131234] binder_alloc: binder_alloc_mmap_handler: 4644 20001000-20004000 already mapped failed -16 [ 593.158401] binder: BINDER_SET_CONTEXT_MGR already set [ 593.175563] binder_alloc: 4644: binder_alloc_buf, no vma [ 593.181174] binder: 4644:4663 transaction failed 29189/-3, size 72-8 line 2971 [ 593.191101] binder: 4644:4646 ioctl 40046207 0 returned -16 [ 593.230220] binder: undelivered TRANSACTION_ERROR: 29189 [ 593.235984] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:00 executing program 5: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000140)='cpuset.memory_migrate\x00', 0x2, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') pwritev(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='0', 0x1}], 0x1, 0x0) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x80, 0x400000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r3, 0x800443d2, &(0x7f0000000180)={0x3, &(0x7f0000000100)=[{}, {}, {}]}) fcntl$getownex(r3, 0x10, &(0x7f0000000280)) readv(r0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/184, 0xb8}, {&(0x7f0000000380)=""/76, 0x4c}], 0x2) 2018/05/29 01:54:00 executing program 2: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x6, &(0x7f0000000140), 0x8) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000011c0)=""/81) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40000, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={0x1008, 0x4, "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"}, &(0x7f0000000080), 0x1000) 2018/05/29 01:54:00 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000939000)=0x400000019) socketpair(0x5, 0x3, 0x6c3a, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SG_GET_TIMEOUT(r2, 0x2202, 0x0) 2018/05/29 01:54:00 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) modify_ldt$read(0x0, &(0x7f0000000040)=""/43, 0x2b) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={'icmp\x00'}, &(0x7f00000000c0)=0x1e) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000140)) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 2018/05/29 01:54:00 executing program 7: r0 = socket(0x400800000000011, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={"69666230000800ffffffffffff00", 0x201012}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000080)={'veth1_to_bridge\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) 2018/05/29 01:54:00 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x4}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="0c2b00000000000000000000000000007910540000000000005b0100000000009500000040000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) 2018/05/29 01:54:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:00 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bridge\x00', 0xfe65) accept$inet(r0, 0x0, &(0x7f0000000140)) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x80, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockname(r0, &(0x7f0000000240)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000380)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000400)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in6=@ipv4, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@dev}}, &(0x7f0000000540)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000580)={{{@in=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f0000000680)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b8010000", @ANYRES16=r2, @ANYBLOB="28002abd7000fcdbdf250200000008000100", @ANYRES32=r3, @ANYBLOB="9c01020038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400c40300003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r4, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300030000000800040001000080400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r7, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400ff0700000800f6c0", @ANYRES32=r8], 0x1b8}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$inet(r0, &(0x7f0000a88f88), 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x84e23}, 0x10) [ 594.222468] binder: 4678:4688 got transaction with invalid offsets ptr [ 594.247769] binder: 4678:4688 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:00 executing program 4: r0 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000080)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000000180)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00', r1}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") rt_sigaction(0x17, &(0x7f0000000000), &(0x7f0000d4efe8), 0x8, &(0x7f0000000040)) 2018/05/29 01:54:00 executing program 5: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0xa, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @loopback}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@dev}}, &(0x7f0000000140)=0xe8) sendmsg$nl_netfilter(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0x1184, 0x14, 0x3, 0x400, 0x70bd2b, 0x25dfdbfc, {0x3, 0x0, 0x7}, [@generic="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", @nested={0xd8, 0xc, [@typed={0x8, 0x7d, @u32=0x9}, @generic="dc1f087260a0c53fbde7f688f2a87368723c0a285e270582e208c7f4b7be92f317c1c27614914736f45313a6a56b47e4394eb155c10c53afa8135efa2a593bd3c8e1709060c94693cb4ca8b33d37b70db47729d7ec3acf722b4fcbd8fb700a92808915ac9d6d0c216033ecd9ca2c6e79c866b35376394a", @generic="baad6da248819c6c26905c1bb7a8ea19097d42d2c1d5804247420c55e8bd19bc0c86cac5336d23b4500cd9e1ecec84d4a29001ae2c2bf5d323cff4026cac31f9a26a9b1f7f5b78562741", @typed={0x8, 0x4b, @uid=r3}]}, @generic="72e5512dd530290a4a3d8a73ddb9c3d59e35aa633cf832d95d60086f8d10913e6554d958537041fa7385791a32b42f61b553860ab4d16f045a9be98ea1b2f605ae4639de61f3f7c1cb3463e1", @generic="a65c6668615334e50c00661da4e9fb53daacfe3884665cb27e57a3589bdcda18ea7d2e30b298fee472f09bb011078d93312c6037a726f23b65dd12c0784abd9bd7b4cd576a662e393851a5"]}, 0x1184}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") recvfrom(r1, &(0x7f0000000040)=""/203, 0xcb, 0x2, &(0x7f0000000240)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2}, 'syz_tun\x00'}}, 0x707000) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f00000004c0), 0x4) write(r0, &(0x7f0000000380), 0x0) 2018/05/29 01:54:00 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000340)=0x0) move_pages(r0, 0x3, &(0x7f0000000380)=[&(0x7f000000f000/0x4000)=nil, &(0x7f0000012000/0x1000)=nil, &(0x7f0000ff1000/0xe000)=nil], 0x0, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) r1 = userfaultfd(0x2548b5d97a7d625c) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x40, 0x0) write$vnet(r2, &(0x7f0000001780)={0x1, {&(0x7f00000006c0)=""/4096, 0x1000, &(0x7f00000016c0)=""/162, 0x3, 0x2}}, 0x68) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000080)=0x81) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x6c, r3, 0x30, 0x70bd25, 0x25dfdbfb, {0x9}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x101}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x54}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r4 = socket$inet6_sctp(0xa, 0x400000000007, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000000c0)={0x0}, &(0x7f00000001c0)=0x8) sysfs$3(0x3) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@local, @in=@loopback}}, {{@in=@rand_addr}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000000100)={r5, @in={{0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}}}, &(0x7f0000000000)=0x84) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) close(r1) seccomp(0x1, 0x1, &(0x7f0000000500)={0x2, &(0x7f00000004c0)=[{0x2, 0x3, 0x8, 0x71}, {0x13, 0x400, 0x7, 0x800}]}) getsockopt$bt_hci(r2, 0x0, 0x3, &(0x7f0000000400)=""/110, &(0x7f0000000480)=0x6e) 2018/05/29 01:54:00 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0x7) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000003, 0x8012, r0, 0x0) [ 594.290576] binder_alloc: binder_alloc_mmap_handler: 4678 20001000-20004000 already mapped failed -16 2018/05/29 01:54:00 executing program 7: r0 = socket$inet6(0xa, 0x10000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) ioctl$EVIOCGEFFECTS(r1, 0x80044584, &(0x7f0000000040)=""/161) pwrite64(r1, &(0x7f0000000000), 0x800600, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000280)={'mangle\x00', 0xf9, "afc8a0bf5de1a23a2a5260870fc2cdbe70b57019d7363292cd638f7d65328860c164c746d7681c84429b987ad40c52492c5a020b2b28308702004ba1114103793af546d68ab595ba4d20e83021b78ef895389fe7b9eb15e193243279418ee18513fb68c445dd494c6343fd1277cc817ce4b280e347ffa863771cc3dcfa38fddf1d48ae97e5f13d7e1d7c1a9a9702065a7b81089750f8e7e395b6e5d326a86fc30b644f6152c1250628cc29a55638f265eb34a39288882a7bd8ed3594bd5c9c056bd9d031bfaf9dc4b0c75a608b8056d0e3c06d83131aea0df1385491c01d70b4587b4fdd874db4e0d66471d4653074fefd3137a573fc10d1d5"}, &(0x7f0000000000)=0x11d) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, &(0x7f0000000140)=0x6, 0x4) 2018/05/29 01:54:00 executing program 6: r0 = socket(0xa, 0x1, 0x0) r1 = add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, &(0x7f00000004c0)="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", 0x4d1, 0xfffffffffffffffb) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) keyctl$read(0xb, r1, &(0x7f00000009c0)=""/4096, 0x1000) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl(r0, 0x6ebaaa3c, &(0x7f0000000280)="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") syz_emit_ethernet(0x66, &(0x7f0000000140)={@empty=[0x2b], @random="1b207f5c5eeb", [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0xfeffffff, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x21, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}, &(0x7f0000000000)) 2018/05/29 01:54:00 executing program 1: r0 = socket(0xa, 0x1, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000000)=0xfffffec5) fcntl$notify(r0, 0x402, 0x22) 2018/05/29 01:54:00 executing program 4: socketpair$inet6(0xa, 0x80007, 0x10000, &(0x7f0000000000)={0xffffffffffffffff}) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x7f, @empty, 0x8}, 0x1c) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2) msync(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xbf9edc54b040fc8c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40040, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x201, 0x0) linkat(r1, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x1400) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000200)=0x0) waitid(0x1, r3, 0x0, 0xd72c914690ba6ad7, &(0x7f0000000240)) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000180)=0x0) ptrace$getsig(0x4202, r4, 0x81, &(0x7f00000001c0)) [ 594.358742] binder: BINDER_SET_CONTEXT_MGR already set [ 594.392921] binder: 4678:4688 ioctl 40046207 0 returned -16 [ 594.438536] binder_alloc: 4678: binder_alloc_buf, no vma [ 594.444152] binder: 4678:4700 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:00 executing program 6: r0 = memfd_create(&(0x7f0000033ff3)='\x00', 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x20005) r3 = dup2(r2, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e48000000000000007f4f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r0, &(0x7f0000000040), 0xfffffffffffffe10) write$sndseq(r2, &(0x7f0000000340)=[{0x21, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x3ac) 2018/05/29 01:54:00 executing program 2: r0 = add_key$keyring(&(0x7f00000005c0)='keyring\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000240)='keyring\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = add_key$keyring(&(0x7f0000000440)='keyring\x00', &(0x7f0000000480)={0x73, 0x79, 0x7a}, 0x0, 0x0, r1) r4 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r3) r5 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000b00)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="7f", 0x1, r4) r6 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, &(0x7f00000006c0)="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", 0x101, r0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r5, r6, r6}, &(0x7f0000000600)=""/132, 0x84, 0x0) 2018/05/29 01:54:00 executing program 4: syz_emit_ethernet(0x3e5, &(0x7f0000000080)={@random="fb5dfe1c625e", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, [], {@ipv6={0x86dd, {0x9a8, 0x6, "1796dd", 0x3af, 0xa9, 0x9341, @empty, @remote={0xfe, 0x80, [], 0xbb}, {[@dstopts={0x2b, 0x12, [], [@jumbo={0xc2, 0x4, 0x79d1}, @jumbo={0xc2, 0x4, 0x1000}, @generic={0x9, 0x83, "9948320ae074b35f46af057ce9e2befc22abd39a35bcf5c804944f4813b40a011d9a07e8e4a3b4c5ae2d6b1e97a15bbe0a2d5a9e36680642e4121bfba81e9d7279b45778a2ea598f3fff70417b221c1e063b493db717174760f7d3125425ce7d3948df5bcf7e3e258c65ff47b1c25eaba5ac4a98240e05d8cc016f7229abe522ebe79e"}]}, @hopopts={0xaf, 0xe, [], [@calipso={0x7, 0x28, {0xff, 0x8, 0x9, 0x100000001, [0x101, 0x5, 0x7, 0x6]}}, @hao={0xc9, 0x10, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @calipso={0x7, 0x38, {0x7f, 0xc, 0x5, 0x2, [0x10001, 0x1ff, 0x8, 0x6, 0x48a2, 0x9]}}]}, @routing={0x2c, 0x6, 0x3, 0x4, 0x0, [@remote={0xfe, 0x80, [], 0xbb}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}]}], @gre={{0x0, 0x0, 0x1, 0x95, 0x0, 0x4, 0x0, 0x1, 0x880b, 0xfb, 0x2, [], "81bf98c933d96a2461a9d444004fa64240ba2b6dc4870cd292345682a4a9b92c2074117880a6699baaa3f4ca0641ff754214627d79ecabbb165403f0e877a3e0be1e3c50e1521fd1d385f8af4882b0f9ba06cdbb05f482e95a6f28a603c8b4a7cfa0702dc085a192dccdecd3f2341d2bd2418e66c6769e7923a1dfe12783987fbc50dd963f27ae4420dfc351fe515cfda6e2f40dd7b4fa85742dffe2c3513c459dc3cd8222a3372846e1fc683a877002dd5fb8bd168697d43c8b52d8321be70ac11fcdaed3414f36bbf9dc3f8b60436300e1e5c7371ad06bd69b6f417a232787278ded4594ac5290ff639dd9d31ccac0b5deced88102b2ed6faf83"}, {0x4, 0x0, 0x81b0, 0x5, 0x0, 0x0, 0x800, [0xffffffffffff02f1, 0x1, 0xfff], "407b8398579be9f59aafa883"}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x86dd, [0x81], "19481de7c3ae42cbd89c381b818455727e83ffe7ce09b392821a5b1b1ce5b6b0ced150543c969d657045410bb0984a83661f5a2ba33934378bf7014dd35494d8847279e1714797c01358957efb3a6915e01c96af6829673dfeca8d488e1415bd295404abc74eaa43aa392ba2ad0cc3dbe95ae721eae8eaa58ca21585209510e337"}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x0, 0xb30, 0x7f, 0x1, 0x8}, 0x1, 0x1ff}}, {0x8, 0x22eb, 0x0, {{0x6, 0x2, 0x7fff, 0x3, 0x2, 0x7, 0x1, 0x2}, 0x2, 0xfff, 0x6, 0x5, 0x4, 0x100, 0x4, 0x6, 0x7, 0x20}}, {0x8, 0x6558, 0x1, "e404c544254103f7f0fd83bd725353234bd2bd160343ee3bb15c690c2fb288d78369015e5d9fe21e93595d27cecaf4e714effb37d00d5bfce6c6c3c74ddd2802923900c21668f656fd5f259c889b9ab1fcd0395fba58a666c26eb6813caf5fec464d3d41491ae2792f48869421bdd2eaae02df4a7cac3409a9df89b4c7b6d6787fd732"}}}}}}}, 0x0) 2018/05/29 01:54:00 executing program 1: r0 = socket(0x10, 0x80a, 0xffffffff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000000980)='./file0\x00', &(0x7f00000003c0)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000009c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='.', &(0x7f0000000480)="b3b8155713fb18dea1325403cf49458ea055d7591982903d491d14c2e9cbc39e8bf705c21d4cc6c570ba1b1b03c6db40040c163a6dee9329d669c3a83a02ef2119957d6d4d06f79c5d29c3f97acbbbd1a0034898939712cc63020f31107f31c3a7ea6b055a3d9cd058451eefee6ebdb0357831796761e16f810e2452be7d0bbb99ee890739873f2de48187428342a5e95f625e7b49265dcb01cdb718bd2920863ed6af48bf044ad87394625a24423d5fefebc93d3a4a96d582c636a0bc3ec3fa80854deb41daa221d12ed5bdc1aeaabed9dcbb850b47a98ab25649387ab11d7b205a07b9082b736c17f97d", 0x1004, 0x0) mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000400)='mqueue\x00', 0x0, 0x0) 2018/05/29 01:54:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00h\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 594.540628] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.547693] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:01 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@multicast2=0xe0000002]}, 0x14) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@rand_addr=0x3, @empty]}, 0x18) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000040)={'tunl0\x00', {0x2, 0x4e21, @broadcast=0xffffffff}}) socket$inet_udp(0x2, 0x2, 0x0) 2018/05/29 01:54:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000140)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x51, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140), 0x1, 0x0, &(0x7f0000000180)="b1"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f0000000200)=[@decrefs={0x40046307, 0x1}], 0x48, 0x0, &(0x7f0000000300)="5e28a928b7b064604e0e282c5e59178e911afbbf407f5d60c0018fc63978a8215812c8a9dd1f30dd744e464f514cbb5ddacf40c59a28a69893bd1d1d2ce267e600c0adadbea88e26"}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2002, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1263484000000000000000d739000000000000000000000000000000000000cf00000000000010000000000000ffffffe0000000", @ANYPTR=&(0x7f0000000340)=ANY=[], @ANYPTR=&(0x7f0000000380)=ANY=[], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000000240)}) [ 594.607337] binder: 4753:4756 got transaction with invalid offsets ptr [ 594.642356] binder: 4753:4756 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:01 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x6, 0x800) ioctl$DRM_IOCTL_AUTH_MAGIC(r2, 0x40046411, &(0x7f0000000140)=0xdd) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="070000002e10190100b5ceeca52bbc455143f900000000000000030000000800000004000183c35361d3120e77e04fd684f616b9db28f142"], 0x1c}, 0x1}, 0x0) 2018/05/29 01:54:01 executing program 6: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) futex(&(0x7f0000000000)=0x2, 0xb, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f00000000c0), 0x0) r1 = socket(0x2000a, 0xfffffffffffffffe, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000080)={@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @random="b8822a01ac7a", [{[{0x9100, 0x10000, 0x3, 0x3}], {0x8100, 0x2, 0x3, 0x5}}], {@can={0xc, {{0x4, 0xffffffffffffffe1, 0x3, 0x7}, 0x2, 0x0, 0x0, 0x0, "ea5b1becb7d9ee27"}}}}, &(0x7f0000000100)={0x1, 0x3, [0xe25, 0xdbd, 0x900, 0x7d0]}) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x7, 0x8001) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0xf1, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x4e22, @rand_addr=0x7fffffff}, 0x20, 0x9cf3, 0x8, 0x4, 0x5, &(0x7f0000000180)='yam0\x00', 0x1000, 0xffffffffffffffff, 0x7}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) [ 594.673570] binder_alloc: binder_alloc_mmap_handler: 4753 20001000-20004000 already mapped failed -16 [ 594.725100] binder: BINDER_SET_CONTEXT_MGR already set [ 594.737376] binder: BINDER_SET_CONTEXT_MGR already set [ 594.758101] binder: 4753:4756 ioctl 40046207 0 returned -16 [ 594.770320] binder: 4769:4772 ioctl 40046207 0 returned -16 [ 594.782280] binder_alloc: 4753: binder_alloc_buf, no vma [ 594.787946] binder: 4753:4760 transaction failed 29189/-3, size 72-8 line 2971 [ 594.788643] binder: 4769:4772 transaction failed 29189/-22, size 0-0 line 2856 [ 594.807895] binder: 4769:4772 DecRefs 0 refcount change on invalid ref 1 ret -22 [ 594.850563] binder: undelivered TRANSACTION_ERROR: 29189 [ 594.856466] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.519839] binder: 4769:4785 got reply transaction with no transaction stack [ 595.527205] binder: 4769:4785 transaction failed 29201/-71, size 1048576-966367641344 line 2763 [ 595.640900] binder_alloc: binder_alloc_mmap_handler: 4769 20001000-20004000 already mapped failed -16 [ 595.653788] binder: 4769:4788 transaction failed 29189/-22, size 0-0 line 2856 [ 595.664589] binder: 4769:4788 DecRefs 0 refcount change on invalid ref 1 ret -22 2018/05/29 01:54:02 executing program 6: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x1c) splice(r0, &(0x7f0000000000), r0, &(0x7f0000000040), 0x2, 0x8) write$binfmt_elf64(r0, &(0x7f00000001c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x1ff, 0x3ff, 0x9, 0x2, 0x3, 0x6, 0x400, 0x163, 0x40, 0x5, 0xff, 0x7fffffff, 0x38, 0x1, 0x200, 0x8, 0x5}, [{0x5, 0x3, 0x5, 0x8, 0x2, 0xcd, 0x8, 0x670}, {0x5, 0x8, 0x4, 0x1000, 0x3, 0x94, 0x4d62, 0x6}], "7fef159dcdf3da11ed87bdb2ffbc23f44a427dcbee2113b3eba8e7628d66588de2daa53461cef19c83f22a0d4f49f0acc03641d6fb38a40ac5598eaab971e17dd9d71bc6d4c2929f5e6cc786732f73630d4af39379ebf3f2d066a8484fccccd067ea0c2b6ed2d147fa76b29d29090963da0a232915def3deffd60e4be78dd17b06cc1807b8c72994bc17a97095eee4a09260071512773b37555690825f3db3f9cb", [[]]}, 0x251) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000440)) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x0, 0x0) dup2(r0, r1) 2018/05/29 01:54:02 executing program 5: openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer\x00', 0x400000, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f00000003c0)='/dev/snd/pcmC#D#p\x00', 0xffffffff, 0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000400)={0x0, 0x100000000}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000480)={r1, 0xf4c}, 0x8) r2 = open(&(0x7f0000000000)='./file0\x00', 0x8000000000, 0x40) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={r3, &(0x7f0000000280)=""/195}) write$cgroup_int(r0, &(0x7f00000004c0)={[0x2d, 0x3e, 0x3d]}, 0x3) r4 = socket$inet6(0xa, 0x8000d, 0x4000000000085) lseek(r2, 0x0, 0x2) ioctl(r4, 0x8917, &(0x7f0000000240)="c626262c8523bf012cf66f") clone(0x2008010904, &(0x7f0000000380)="309523ab011510434a2edcb7bee3424bb1", &(0x7f000078e000), &(0x7f000039f000), &(0x7f00000000c0)) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000540)) getsockopt$packet_buf(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000100)=""/186, &(0x7f00000001c0)=0xba) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000200)={@ipv4={[], [0xff, 0xff], @rand_addr=0x4}, 0x54, r5}) 2018/05/29 01:54:02 executing program 2: set_mempolicy(0x3, &(0x7f0000000380)=0x5, 0x40) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$getown(r0, 0x9) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/vcs\x00', 0x80040, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f00000002c0)={'TPROXY\x00'}, &(0x7f0000000300)=0x1e) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xfffffffd}], 0x1, &(0x7f0000121000)=[{&(0x7f0000000040)=""/231, 0xffffff4e}], 0x23a, 0x0) 2018/05/29 01:54:02 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x20011, r0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001540), 0x8, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2018/05/29 01:54:02 executing program 1: r0 = memfd_create(&(0x7f0000000040)='trusted\x00', 0x3) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f00000000c0)=0x5) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x1ff, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc1105511, &(0x7f0000000080)=0x7) 2018/05/29 01:54:02 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) timer_settime(0x0, 0x0, &(0x7f0000000040)={{}, {0x0, 0x989680}}, &(0x7f0000040000)) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x8001, 0x1) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x4, 0x8001, 0x2, 0x6, 0xc28e}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={r2}, 0x8) r3 = pkey_alloc(0x0, 0x2) pkey_mprotect(&(0x7f0000579000/0x3000)=nil, 0x3000, 0x8, r3) rt_sigtimedwait(&(0x7f0000000140)={0x3}, 0x0, &(0x7f0000000180), 0x8) 2018/05/29 01:54:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00o0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:02 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_SIOCGSKNS(0xffffffffffffff9c, 0x894c, &(0x7f0000000040)=0x3) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) r1 = msgget(0x0, 0x594) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bpq0\x00') msgctl$MSG_INFO(r1, 0xc, &(0x7f0000000100)=""/201) socketpair(0xe, 0x807, 0xfffffffffffff09d, &(0x7f0000000000)) sendto$inet(r0, &(0x7f0000000200)="003ad58cc68ff22c65a55a130b001dd3d2f1e054c97dc5ec1282d4f49516d16988297746b0bacc3c342041eac747af5da6ea12f49a1ac0679adaafd101002dc732e1343558eb32e0ca2be92eab9a9a8792c2c638c067", 0x56, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0xc0, &(0x7f00000000c0)={0x2, 0x0, @empty=0x5a8}, 0x6) [ 595.686900] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.692444] binder: undelivered TRANSACTION_ERROR: 29201 [ 595.736955] binder: 4802:4803 got transaction with invalid offsets ptr 2018/05/29 01:54:02 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4100, 0x0) listen(r0, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x10d, 0x10, &(0x7f0000000040), 0xc) [ 595.786671] binder: 4802:4803 transaction failed 29201/-14, size 72-8 line 2999 [ 595.832006] binder_alloc: binder_alloc_mmap_handler: 4802 20001000-20004000 already mapped failed -16 [ 595.860588] binder: BINDER_SET_CONTEXT_MGR already set [ 595.879905] binder: 4802:4803 ioctl 40046207 0 returned -16 2018/05/29 01:54:02 executing program 3: r0 = socket$inet(0x2, 0x3, 0x2) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) r2 = socket(0xa, 0x2, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001300)=""/4096, 0x1000}], 0x1) setsockopt$inet_int(r0, 0x0, 0xd1, &(0x7f00000000c0), 0x4) 2018/05/29 01:54:02 executing program 5: r0 = socket(0xa, 0x1, 0x0) r1 = msgget$private(0x0, 0x0) fstat(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair(0x0, 0x6, 0x1be70000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x5) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000540)={{0x0, 0x0, r2}}) 2018/05/29 01:54:02 executing program 4: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000280)='./file0\x00') rt_sigaction(0x400000000000007, &(0x7f0000000000)={0x40246f, {0xffffffbfffbff270}}, &(0x7f0000000380), 0x8, &(0x7f0000000100)) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @multicast2=0xe0000002}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e20, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @multicast2=0xe0000002}, @in6={0xa, 0x4e20, 0x5, @dev={0xfe, 0x80, [], 0x1b}, 0x8000}], 0x7c) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x242040) ioctl$TIOCCONS(r1, 0x541d) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x4, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f00000002c0)='net/rpc\x00') 2018/05/29 01:54:02 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$packet(0x11, 0x2000000000000003, 0x300) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000dbfffc)=0x3, 0x4) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x3, 0x0, @loopback={0x0, 0x1}}, 0x1c) write(r0, &(0x7f0000000000)="782975b37c34f48c2af055a36ecc82390cb85e0e6275efd773f0dd9e830871a1954371393be21ea4af5400b913f1c3d0e0e22b76f1a2aa4a31c10db0bfa65bb07bad2c568b3d6d9e", 0x48) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000c9effc), 0x4) sendto$inet6(r0, &(0x7f0000001a80)="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", 0x540, 0x0, &(0x7f0000aaa000)={0xa, 0x4e23, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x7) r2 = dup(r0) write$sndseq(r2, &(0x7f0000801f40)=[{}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @queue}], 0xc0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000f06000)={0x9}, 0x10) write$eventfd(r2, &(0x7f000057bff8), 0x8) read(r0, &(0x7f0000000080)=""/220, 0xdc) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000180)="834fa163f5803f85d01c32936ccebc776362c31d22ace0eb125620af15510fa325bf104e563f8cad25347574c2a12f8d393427f737bc4348be0ea53e79cf870bd699170985904be5eae3d42682425b6b2d81e9870befd30f02967e2d7d04db630d3cf4f09fab494adf5b73bff28cec77338bf2b61a383b51", 0x78}, {&(0x7f0000000200)="5e2ee2ee44a1a306117f15", 0xb}], 0x2) fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = fcntl$getown(r0, 0x9) openat$uinput(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/uinput\x00', 0x14040, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000380)={0x0, 0x0}) r6 = fcntl$getown(r0, 0x9) sendmsg$nl_netfilter(r2, &(0x7f0000001a00)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc1500000d08000827bd7000ffdbdf250100000108006200", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="7c01820008009175", @ANYRES32=r6, @ANYBLOB="0c00860001000100000000001af4f90b5a837e769aaa8842c8b08d4addfd8bd32130d01218a684c114f3f3c6add8c6d33ddbae13d91e4745dbac390b284ff57b9bc2b5cfccbbb7735001ad3743ceb6e98dab6292c575bf751aea97124a8677ad3d82cc759344a4ab6368498819f542dd70ad4b135fdcdd946a0a8fe28c240d5baabdd3848b104133df6dcf424c584c1bd52f57a321045fb24c9e2f5b218f1a875c8fde624b461638cc86a6cba2887f4408703b551bd5d554c1c23fa42cb7fdeec1e001fc369d7b47960000cc543c486bb3875cee61ee1f0b1344cad9c06833686bba242b1d2beb955a3d51bf08bf9fd59be763ce169bd2cd351dfec7874c18ba8c12ddd3a1b9cc7a63f20682f7b33b3933b302011a58dcf884ce425e2221a67e07b8dd65fa2fde5f951cd70705af142c2d80bba0c0e81531f72ac8d40710326c24022872c54a0ac54b5e9d3928389afba8c264c2ee8da822d92da94b96f99de96dd753072a7d199e8d9cc344c30a103208004d00070000001c01700077ccfd5cd2a71d92234b4dfa6fed4f03de2e154c6f0198dc0d045e6357326447ec224872afdb4de7f8b4d4ce44ed01628734a49702df7ca08006cfdbd8a7231656b7616094d3533ef2cd7e4dc12f30a5eaee150e73c15c57775c673e935258d0545e070c2e94081c5dccd600eae7eb6e76762ecc827d804424b45245e3073f820c34ee7b9b08baa08381c41a6487dc4b76751006f5bda201f5909206c8e508e082cd3540875629476a8a2735934bc49d95fe8a71c9f764fb6019d9bc289f5241fb9961d851193a703e583c2a4a5ffc79c7c48c99dfd3a6aa0cb6873b1f7a3cce27b5a519781383186095d0da0a637b8b289665f4db234bc9e082603fce07812d0c00220030aa0000000000000c007300766d6e6574300000"], 0x15fc}, 0x1, 0x0, 0x0, 0x20000000}, 0x841) readv(r2, &(0x7f0000864f80)=[{&(0x7f0000142000)=""/4096, 0x1000}], 0x1) write$eventfd(r2, &(0x7f000061f000), 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00007e4ff0), 0x10) write$eventfd(r2, &(0x7f00006d5000), 0x8) 2018/05/29 01:54:02 executing program 6: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresgid(&(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)) getresgid(&(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) getgroups(0x2, &(0x7f0000000040)) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000140)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) stat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000340)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r5 = getegid() stat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgroups(0x9, &(0x7f0000000580)=[0x0, r1, r2, r3, r4, r5, r6, r7, r8]) setpriority(0x1, 0x0, 0x20000000) 2018/05/29 01:54:02 executing program 7: r0 = syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"79616d300001178b00", 0x4012}) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x11) socketpair(0xa, 0x80005, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 2018/05/29 01:54:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x0, 0x0) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000680)={[], 0x5, 0x6, 0x7fff, 0x0, 0x4, 0x6001, 0x6000, [], 0xfffffffffffffde9}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket(0x0, 0x0, 0x3) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x10000000001008b, 0x0) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e24, @broadcast=0xffffffff}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000000)={0x70003}) r5 = syz_open_dev$loop(&(0x7f0000000340)='/dev/loop#\x00', 0x2, 0x82) r6 = memfd_create(&(0x7f00000000c0)='nodev\x00', 0x0) ioctl$LOOP_CHANGE_FD(r5, 0x4c00, r6) ioctl$LOOP_SET_STATUS64(r5, 0x4c03, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "e1d3f877e5eae453e55d7d64d00d4901baed21f7de92a8669b38ccd6260857dbf5ae46354569636517b50f805ae208258dbb7d0abe8d208f0f1bcc885c8ba93c", "fe047b3177f4fc2eb04172daa8e7d1c4c4cf144a23173b6605afb988de9bbae0932dee7e07195d78f7ddd19a37cb5aa0a5629eef628582fba5bf4af44acfe059", "ee42e3ef1d1772a9432c220303b70b708ad791139c2982fccc5d747a3131995a"}) [ 595.916872] binder_alloc: 4802: binder_alloc_buf, no vma [ 595.922525] binder: 4802:4826 transaction failed 29189/-3, size 72-8 line 2971 [ 595.950380] binder: undelivered TRANSACTION_ERROR: 29189 [ 595.955935] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:02 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x890e, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x89, 0x10001) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000080)={0xfffffffffffffff7, 0x3, 0x5}) r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000005ff7)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000009fe8)={0xfffb, 0x1a, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x7) [ 596.023824] binder: 4848:4850 got transaction with invalid offsets ptr [ 596.039558] binder: 4848:4850 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:02 executing program 5: syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x10880) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x7, 0x2, 0x6, 0x800000f, 0xffffffffffffffff, r0}, 0x2c) sendfile(r1, r0, &(0x7f0000000040), 0x7) [ 596.083637] binder_alloc: binder_alloc_mmap_handler: 4848 20001000-20004000 already mapped failed -16 [ 596.112484] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:02 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@loopback={0x0, 0x1}, @in6=@dev={0xfe, 0x80}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1c}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0x0, 0x0, 0x7}}, 0xe8) getsockname$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c) sendto$inet6(r0, &(0x7f0000000140), 0x0, 0x0, &(0x7f00000001c0)={0xa, 0x4e21}, 0x1c) 2018/05/29 01:54:02 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socket$inet(0x2, 0x3, 0x3c) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/raw\x00') read(r1, &(0x7f0000000040)=""/230, 0x20000126) socket$inet_icmp_raw(0x2, 0x3, 0x1) read(r1, &(0x7f0000000000)=""/56, 0x38) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") linkat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x1400) [ 596.134584] binder: 4848:4850 ioctl 40046207 0 returned -16 2018/05/29 01:54:02 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000003080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(r0, 0x0) syz_open_pts(r0, 0x1000000000042000) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0xffffffff80000000) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x200080, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0xffff) r2 = syz_open_pts(r0, 0x0) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x0, 0x0) sendmsg$rds(r3, &(0x7f0000001c80)={&(0x7f0000000140)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000440)=""/4096, 0x1000}], 0x3, &(0x7f0000001a80)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001440)=""/147, 0x93}, &(0x7f00000001c0), 0x1c}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8001}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x3}, &(0x7f0000001500)=0x10000, &(0x7f0000001540)=0x5, 0xca, 0x101, 0x9, 0x5, 0x10, 0xfffffffffffffff9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x7f, 0x8}, &(0x7f0000001580)=0xff, &(0x7f00000015c0)=0x8, 0x0, 0x4, 0x4, 0x5, 0x43, 0x7}}, @rdma_dest={0x18, 0x114, 0x2, {0x200, 0x6}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000001600)=""/101, 0x65}, &(0x7f0000001680), 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000016c0)=""/225, 0xe1}, &(0x7f00000017c0), 0x42}}, @rdma_args={0x48, 0x114, 0x1, {{0x1000, 0x1cc0}, {&(0x7f0000001800)}, &(0x7f0000001a40)=[{&(0x7f0000001840)=""/219, 0xdb}, {&(0x7f0000001940)=""/127, 0x7f}, {&(0x7f00000019c0)=""/56, 0x38}, {&(0x7f0000001a00)=""/18, 0x12}], 0x4, 0x10, 0x7}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5}], 0x1d0, 0x20008004}, 0x810) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x9) 2018/05/29 01:54:02 executing program 7: perf_event_open(&(0x7f0000c86f88)={0x2, 0x70, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000180), 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) [ 596.207757] binder_alloc: 4848: binder_alloc_buf, no vma [ 596.213345] binder: 4848:4877 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:02 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x400002, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000040)) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000002880)={0x0, @dev={0xac, 0x14, 0x14}, @rand_addr}, 0xc) 2018/05/29 01:54:02 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x8, 0x7, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000000000000000000d0ad3bfba56812c085da101859850000000095000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0xfb, &(0x7f0000000000)=""/251}, 0x48) syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') socket$pppoe(0x18, 0x1, 0x0) 2018/05/29 01:54:02 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) io_setup(0x5, &(0x7f0000000080)=0x0) r2 = fcntl$dupfd(r0, 0x406, r0) io_cancel(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2, 0x1000, r0, &(0x7f0000000100)="199bf8b63302f829bfa0b7e260e72b056acb8ffa52cec2a216196f18012bde6ed2f77c041ee5164546ac99573dfd5ee2d838c375493780646490d327ee1dec207033ac3052c644d235bf8387da2741056c8fb5360ca87b74a473c7c5be38d8a3735fabcf2492acf5b7c1eab76d6e572be3b1c531f0aeee399a363f19621a2b8290ee69ea07f7b46a3036b2f5f7fd4e7bd68e09c9d7bff8639c9c14ba11", 0x9d, 0xfffffffffffffffd, 0x0, 0x1, r2}, &(0x7f0000000200)) ioctl(r0, 0x4, &(0x7f0000000000)="796ed5067c5b2392f032effd7171f5d1f0") write$rdma_cm(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000080000fa", @ANYRES32=0xffffffff, @ANYBLOB="00000000e848388bb2a053e2329de7a4b33d71f58c5d367d9d8b3caa453cec615e42347f13bce61ae70b375c06a99087d7"], 0x10) 2018/05/29 01:54:02 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x3}, 0x2c) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x13f) r4 = socket(0x2, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x10) 2018/05/29 01:54:02 executing program 7: syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x40) r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x969, 0x8001}) r1 = socket(0xa, 0x200000000001, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) 2018/05/29 01:54:02 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:02 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x2e, 0x119, 0x0, 0x0, {0x4}, [@nested={0x8, 0x0, [@typed={0x4, 0x1, @binary}]}]}, 0x1c}, 0x1}, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x00', 0x2) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000280)=""/168) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000000140)={@dev, 0x0}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', r3}) 2018/05/29 01:54:02 executing program 6: r0 = socket(0x2, 0x2000000000000a, 0xfffffffffffffffd) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") syslog(0x3, &(0x7f00000029c0)=""/4096, 0x100) [ 596.348380] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.354438] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:02 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x83, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois\x00', 0x9) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 2018/05/29 01:54:02 executing program 5: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x10001, 0x5, 0x5d, 0x2, 0x22}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r2, 0x3, 0x8}, 0xc) sendmmsg(r1, &(0x7f0000000080), 0x153, 0x0) close(r0) [ 596.453960] binder: 4902:4904 got transaction with invalid offsets ptr [ 596.468486] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.476910] binder: 4902:4904 transaction failed 29201/-14, size 72-8 line 2999 [ 596.486508] binder_alloc: binder_alloc_mmap_handler: 4902 20001000-20004000 already mapped failed -16 2018/05/29 01:54:02 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'ifb0\x00', 0x1601}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x4000) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f00000000c0)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8923, &(0x7f0000000080)={"6966623000f71633e9fe000400000076", 0x3001}) 2018/05/29 01:54:02 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) splice(r0, &(0x7f0000000000)=0x19, r1, &(0x7f0000000040)=0x5d, 0xb372, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x40000, 0x0) ioctl$KDDISABIO(r3, 0x4b37) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0x0, &(0x7f0000000580)="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", 0xa81) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 596.513252] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.522607] binder: BINDER_SET_CONTEXT_MGR already set [ 596.559129] : renamed from ifb0 [ 596.563273] binder: 4902:4904 ioctl 40046207 0 returned -16 [ 596.585457] binder_alloc: 4902: binder_alloc_buf, no vma [ 596.591109] binder: 4902:4919 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r2 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0xf1e, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r2, 0x84, 0x65, &(0x7f0000001240)=[@in6={0xa, 0x4e23, 0x40, @dev={0xfe, 0x80, [], 0x18}, 0x1f}, @in={0x2, 0x4e20, @rand_addr=0x5}, @in={0x2, 0x4e20, @multicast1=0xe0000001}, @in6={0xa, 0x4e23, 0xff, @dev={0xfe, 0x80, [], 0xb}, 0x4d87}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e23, 0x3, @loopback={0x0, 0x1}, 0xfff}, @in={0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}], 0x94) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x5, 0x4) fcntl$setownex(r0, 0xf, &(0x7f0000001200)={0x5, r1}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x1, 0x0) write$tun(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="00006003028000000100101b0600020317470c4ff3830d9e29286b33682426afb27914346eb1ce0142ba7dba89447cd37dac254d2e2362da9835390766180434402633e64657c372e92f5c2051d8c76bbc13a016a59a9e9994d6ed8aecdb6e9e0aa3886200d3a57112f05d411046839623ae97eb15e7deea329f640675207a0626dfe732b4b0eef6fae168aa526919f1f6a1da6e0f9e4f01a64c67375f7178e879351b346c836427c50c7e550d8fc6823f5a20b550f73c13ac301c63c902f96c0d2a8a87441e2a7ee00535cc288f479ba05c0f86a983c368c05b2921d0dbf65cc436be309715ae9507aa33856dc48af4524ae41691d44412a5ff627a6b43e1763ef536da17086c1e58279dab8202b27175586665dfc485d2d2f317b6f530f556f00305c996ba2c4311d62d93e76a929ab131ef4b9641a24defc2011410219066bec4aff15d7c4621e42c17ac0c58bdd979578a6c78569bd21a99e284a8a29cf0f06fa2b7e702f21e3d1bab324c2a4ed8d0b7979c2355908bdef0fb868728dee243e6994e6056f08d4d1fa178e85b4eea46b4f35bdb76ac375ef6c43a9a8419f9e1a54a71c0ebb9510f8c9fba3720aad45b5465984f2335a1fe18a1095410da0792e6e197e4bdafcbfd82d116fb23cdf03fcdc566200d8106285c9f38c3c4b0f3ac14fbfa03d67c0d222d8b812f99f678a0be939112441c66701968e1e609d7a67cbd5ef423f6a5f14ea1a4ca8d2cc8bb86564fbc56b02c8823d080cd8e38bcd428f276b2066fb7734186b384896dfc939d1f1e186587502129fe23e4b190814daefff3c6e70b815f0bbdd60028e35f2ff1b16d45a5dcecb282eb28f56a4779953edcaa88e19232b1bf2a261aa43a619638fdbf963af5a01b47a84e135673d90151e4eb064ef156d3455bab84ca03fb5b8e6833c872c23088c387270891ec908e11799a3ab29fe89567bb16161261efd60c82bcef0c5e844d27fc178c95a6bfb577e4b7656cf59447915b59b24fd8a7fdb62ad2f67ec2a8e26a618846367529f4d026ff7a160e037be89007f1a2ddb5a79486820b9953d722598a65ebf3a7826fadbbf20015766be273ee6e7671ac8c17009d72aeeb600951226b056ecd8698d6e610de93da812f0d8e589da85dd6d35d3137792036c9d778cf6ba7845f7fc9c1c95c4fb52d141d58cc5d8391a93b85d3989315859b2c1e275f6d38424309599e25288c854e12fa45da2097aaf71cb9eeeda4428a4d676504a5d6e01b4a9a90519a3dc655516738b2f1753c357ee80d8a32412f8248f13f45954770bca65b6ab9203e5a9145b8e315b4db3333614ec60ae69ce613904d71032f493fbfb9af52df46af39a3f2fe7dc168d32e64b6e47e8f6c0f81dabafd8072388de2e1da2ebaeae44f79324c6e50f6010cda70a2856070a8c382dbf0c3456272accaa275bcd6974cdff743f752a4e6aff9449c0b9d7bdec3135442234a1769fa14f8c3864bb31efee134566c9b2b07d3f38100919a77d8a4ab76fea05c87576a2d91616d0dc97f712d317cf6b3d7faa55aecd61d55f8697f5dee61fa4a7a8d71343e699a81e10191f687397c401e6dc80338c56e0cc4dff474e4e3357a9a1e165aee26e2b4f1e1e1645749fa05daa78a585b6a89462d2e71b8552cdda28862b0155aedc6ff36bc8a2607178ec9514a026c47989f068b5c6b8e83ff6d326b6601ddd09d7bdae304e69125c7a6c3ff312e5663e3f91b458adc054574999319c46ab7e684d790e6d0745816cfcc11d0c6cee312ace5d58949531718ebf47df6147d28156b5d321472e943fe347bd959ad1d89c3dd046592e21908cf03a17c9fcce2c685da43ca53f3c27a78c137b891a9c554c6479b2d496948d0d8b219147d96685c3ab876ba8f47ffa3258d0da4d86fe8711f343e22b55e06f438cbcfcdd631840a46e07e9fc5a525715d03d8652ced7ce0abaf162698e29e03a57299869240d8ce71054c07e2aaf0d307be6465872977b4034bfcb61122195a848e12d17daa1232dcbae95207f78ac16e8340fbfa54bf34a603294bd3ce4f9faca243adf1b0b83aae8ba2f9a4b084f813d112687745879887c8ba34c8d1a928954c8f38c8a4080e72ae7d896cdfc8a35b97dbd2450b3aa7ed656de51b1811a3da5ec00b56650d3e9fb8084f8faa87ada95da4d892abefb05c76b9233cfa0ed0568e82eddd88f65c487d8c5644d89253acc1011f3e089f112b3cbfc15abf02435533beb72bc936a735a17556182db9c10224206a0a7fa343cddc3dd62a370b827f165052064a1cb31495f014ba013dfd38301d73b4852ac9a7517df97d89b87ab3814df0cf270274a331faca4597c4d259110dc48d663459ce02a0c4e0875666d1a81aebbcf15609157059c636834f4ad67b41eacc2204fe08fa10e1bc8755792368ceba886c89fd9e41850b4c64c4d6d829e3621ab9b3f1001d9767d9992468db484cad878e9f75be6a7cab15a9350171167709b253fd6378fbf5abb8de981ecf39396434f5219494b364a3a1a53f18bb6928115559d255d73fbf93abfb380bad178f0f3f9388c04ed7509d28238c3397fd52821e0bde5a404198d1e121ded8c745541be4a8bf869602cda591ce17191221448f7df9ad48541b77ffa06b45d1adf7a2177e87a8b8af2a0f5149147a09b7fbf0a90024d3e09018fa82f7d30a0c01daacbd40974bb0a3ea1cd0ed4003313beb3adf99947bc9bc3f5f44338d679c8473268b5af6c26f1245bd2f0ce02b7cf3de4df25ba563763d54930e243c788816a548171b502d4ade869ad587e2f8b27cfbcefaa8044c34adb4681eedea68694872af75a3f38725f74d247a11c96c2c2640add4d6fe42a3c1bb208dcd2e04ba8f84e8f5b3c485da1d624efda3439f06a10f3433b8f32ac798bdfe3871f145ecbbff1619c10d9480e0793863442ff34bdcbf7f0754c62c1088090c196fd24ca8a6c5081a27261a5109becb05b1aac43a6fa31899271e4faceb03e7e8bea272f278d32c9bf58b384c015c6b06aa2819ef2f51cf34c26d38042e694d4c4c57e4d19839e8cd32f6811c5d1c6e3f5b8a26b6ce03f9eac5dfa876ed62ab7690f0835965faa265a9d03bb16a32967872ed4f6ac1a4dd300afd3a904b4f1ce7671862aa934431533d7858770b2d694d10623ab0b83319fd9c461ad49c5c80185e405cac34caeb9d21aa79f066a77eadb5b2bdc27a56363cdcd74d562797110501682f2bd5412c6ac62d0857131a8156111d79da35d16fb418b8c38dd52e440a84f8bcc26e6fcabd9f41f1c8091dc84b9d36c71e159e6131d375fe959d78e011fd6898ce94286c0795f43cea7a04b421c3a4d3bebf1ecfbb6d2489934cfe6983e349c89374a8074c8f48b3e46050a7898efdbb2e5ca0e582f4c7e1108bc0f01602e233c706bf610fc84b2d86dc7f06766fd98b7cceebbc07d91051c15ef5ee50603a62eefc221fde9385653e79ba083d45a809967aaa89205f561890cce13236e4b8bffd6263bc5bb8b2b6e9ba5ba165fce22219a583ed31781158e89005b061211a6e3b8a64f05994e8f7bdbeb92d6d58627298976eaa85329c73352fc5ecb23b1d4e4135a0e191339f465f9be4c71ee52ce4231c2234870f29a345aca728a69389a58f807ee98b054503a2146f04cbed7daa38be3d6a73c1ec759e7d713bb636059f1090c41404245b9af5e2c2f2f2da6a95bf0f42fd4306d797fda59b928250c75f6343a713827ff3ffa7f59bfb0cc6824f69a3a8dcc040ba104ba25e88197bd3e9762d73baa6908947c18ac4243446f52e108686c6b5d5f45bb68fe8987648bc813141d705e32df3625a8029fa9ffa2574d29214bc46fde332504261a3c6dfb89b8169a7457eac97a31aec37e8dc5ffda7ef4f32987ec9f1b7e55208a7edbce0b3ba538e511f28f92db505fe440ceb48d13c3f844fb5393c5fe5206a30be5ddcbbd7923ad353556e4ede67c63e5ea08a8710e613d1ec8f6d2f92afb7cc2e3647d777684d7672ff67a1ae7315f53808cd395dc39a7b86d21f19a0ff9488630c492adf03aadb8b1d3adcdc46fb1ef168f3c71a67c701f0dc72b2c28df4c7f45b0aa86a003badc3700e2fab1727f2a3a0caa19435b25b2b3a4380d4d639a67f058345bed96e657c02318219686baa254f43f2fe158fa48e1c8f1ee43a6ad5219ddec4c339f38d5ca911dfd6ba440a5b1a1c7a414f11927308b786ae58e9addde8c2b9e87a99614c8fb0c792a1e9eb31c49ae6f7224e2a3a458da82fdadd4eeabf92c4adaeb04160caf7789364597e17c6475c82a50f952a3079ba8baaf34fa5464e36ce5f5e62e23b9e7ad9a028a77566677236811c5b32aa6efe1ac099fc22175f88ea74a26e8a9f4556e9ee501cc81158617dfb567fee83575031b3247616527709c4c2b3f40f6ec9dcd8592c02e1c67ee1c14dad2f0d2891700ca132ae590eb735fcbb4958348f23d14da75512ac213f2ec48d35c3bced1454db523fcd852d455a22131e3e60703ee59544da0593fdb0bc03fb43e1276878cfff8aa422e02bef5482c32994c9eab68500a72d5db08b329dd30536379333410f84724dc75b227a7fbee862931166075f7b4953f67460372c5c91575aa1069ffb6af129036605ae11146addf5bac38c4f32f3ff1295e0eea34b347465165525ad087cfccfc7d348789e59abf3c31e92d33bb5a5934acabb20c8e31ca55fc56defbd3a43ef872d01e9dcdec69a07ca4e88eb52a9755c1fbe4ed71c0c21387c562aa9f2953dd9a9c413b40b4d75a7e7b10d5630f831615e24b4484912692d4bceaffd4289ea60bd825574fc2101847c7670d7d2df914ee496c81b108d35e7a1beb68005748349f4f8b7961203a7c2248ec2c8f14878d55367a31dbc8ea4107f8adee42acc3e11dc278fbfadd6cfff62455416fba9958ad4f20abb4ac41a703b9c7912f56e21b8ba349d9e0eb2f9a7a263ec26ac64f16726c40eb571448ece54e7db36b5efd3fcf7a5f606cbf7d35cd389b863d59b4f52a9f7ad26a30e6b1149e171899dc921af73a4b1dc3fc1d00f2834fc684c8758eae34e89c8b0eb1ffb7ba4412b2462837b0d83a49a624469340f8dff90a62575b32214f80b2b0800e094737d63c8a09335eee46cfd875d6deb30f4ea8e0370ad04200647b9c4a078a620a23cb849809d77af95f213a6abf4a4ccc6a74f26eaff51c730b8d6905753acf37a913070cf01a8ad6c803cbe7f18d52df8a8a4d0223c95a15575b3ec92f22b1a75c076ec675ecb4c5c2b66d1b09d13d95c6237112cae0490bee9dd6ddde4f891d251f648a903a34209efc604a2f9aa940dea2068071b43f8e9f82ad4d26fe6bbf63f3e6679ea1ead80e622d3afa5ff0c3a7c2010bb83d0acb3a9f14aac1f3bd4a2894308f77b7a42fd7a705037d855c8cfe119b7fb79ace21177b7137655045037b96eb614e27b64630d722b43fd8502da208b7f1bd7e3b339df36f1bde670d30bf7f1baa98c7a61332863e821c3c36ce4a57162db357323922fa071ed74c211defc678bd238804d99a5a065b7639639f4ddf25dddca6733cf5ed5304b0bba12bb83e29215722d52b10d979d2a5f1efa7b66e3d9e62b2167fc449c49dfb7942b57a29a390efbe659b50a81006239dadc28cbf16e1dc8bdef01a474783adee9e2885aa5c0fb8c6c86e532e5fe6f62606f01aa24d5daf7e73a0a25ff533a8a9a694a8def94eb51103bb0800b2e7c9494757ebe3087de4e3d85509ea3b078bf2589ea1ea6ed4fcd5ff73b7357c81aac818028b984ed9e824f6d4cb9c4346aa814f241e2d787d9b434e07fb0d4f9ccfab6cbe88816e6a50be6131ceda06ece2179095a7d19e015710c9578"], 0x9f7) 2018/05/29 01:54:03 executing program 6: sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000200)={0x7f, 0xbbf, &(0x7f0000000040)="30fa00f6862140b13be897394ca6a5a59262c2309afeb2cd1baaa2116d37d03d65bc976b72d84da28572e92dd176ea19043ead727a5f9097d8da873b1cf792752000668feb3a8a697f4d0cf72c0f6d2b939bdd60972352ab1e9be8e48d69565c65ddfebf5c5b72f9a179e547866e6c39e9a06af2fa1413055974cc1d839e11ad3dd32a20659f", &(0x7f00000001c0)="6bdda97aa24ba8ba84c87d9a5d97ab102a79d48cf529e30e71d04fb6a8aa9bac873915", 0x86, 0x23}) ioctl$int_out(r0, 0x40045731, &(0x7f0000000100)) 2018/05/29 01:54:03 executing program 4: r0 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f0000000200)=0x1c, 0x80800) fcntl$setpipe(r0, 0x407, 0x8) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000040)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000000c0)={0x21, @time}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r2, 0x402c5342, &(0x7f0000000340)={0xb3, 0x9, 0x10000}) close(r2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) 2018/05/29 01:54:03 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x3, &(0x7f0000000980)) open$dir(&(0x7f0000000040)='./file0\x00', 0x458082, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/mcfilter\x00') ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 2018/05/29 01:54:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000fdfdffff0000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:03 executing program 3: clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000080)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000ee6ff8)='./file0\x00', &(0x7f0000000000), &(0x7f00000088c0)) r0 = inotify_init1(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x300, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0x81, 0x10, [0x7, 0x1, 0x9, 0x25]}) r2 = getpid() fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r3, r2, 0x4, 0xffffffffffffffff, &(0x7f0000000100)) open$dir(&(0x7f0000296ff8)='./file0\x00', 0x27e, 0x0) [ 596.716295] binder: undelivered TRANSACTION_ERROR: 29189 [ 596.722748] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.782445] binder: 4953:4954 got transaction to invalid handle [ 596.788669] binder: 4953:4954 transaction failed 29201/-22, size 72-8 line 2856 [ 596.856842] binder_alloc: binder_alloc_mmap_handler: 4953 20001000-20004000 already mapped failed -16 [ 596.873544] binder: BINDER_SET_CONTEXT_MGR already set [ 596.884745] binder: 4953:4954 ioctl 40046207 0 returned -16 [ 596.896690] binder: 4953:4963 got transaction to invalid handle [ 596.902877] binder: 4953:4963 transaction failed 29201/-22, size 72-8 line 2856 [ 596.927520] binder: undelivered TRANSACTION_ERROR: 29201 [ 596.933502] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:04 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000003bc0)=[{&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000680), 0x0, &(0x7f00000000c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x48}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000002f40)=[{{&(0x7f0000000940)=@ax25, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000a00)=""/36, 0x24}}], 0x1, 0x0, &(0x7f0000003000)) r2 = dup3(r0, r0, 0x80000) setsockopt$inet6_buf(r2, 0x29, 0x0, &(0x7f0000000140)="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", 0xff) 2018/05/29 01:54:04 executing program 2: r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r0, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) connect$inet(r0, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r0, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$BLKRRPART(r1, 0x125f, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) shutdown(r2, 0x1) 2018/05/29 01:54:04 executing program 6: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000140)=0x14) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) pread64(r1, &(0x7f0000000180)=""/25, 0x19, 0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000080)=r2) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") keyctl$read(0x10, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r4 = syz_open_procfs(0x0, &(0x7f0000000000)='environ\x00') close(r1) close(r4) 2018/05/29 01:54:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000600000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:04 executing program 7: r0 = epoll_create1(0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') r1 = epoll_create1(0x0) close(r0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0xa, 0x800) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbfb, {0x3}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c845}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) 2018/05/29 01:54:04 executing program 3: mq_unlink(&(0x7f0000000280)='{ppp1\x00') unshare(0x24020400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x8000000000000007, 0x101, 0x20}, 0x153) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_rr_get_interval(r1, &(0x7f00000000c0)) prctl$void(0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0}, 0x20) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r3 = openat(r2, &(0x7f0000000200)='./file0\x00', 0x151000, 0x81) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/144}, 0x18) getsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0), &(0x7f0000000340)=0xb) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r3, 0x0, 0x60, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x44) 2018/05/29 01:54:04 executing program 1: r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0x8599, &(0x7f0000000040)=0x0) io_cancel(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000080)}, &(0x7f0000000180)) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000300)={&(0x7f0000000100), 0x0, 0x100000001, 0x1, 0x6, 0xb97, 0x1f, {0x8, 0x20000ff, 0x80000000005, 0x20000005, 0x100000001, 0x2, 0x0, 0x3f, 0x3, 0xfffffffffffffeff, 0x29, 0x5, 0xf6, 0x6, "54e929a0ee378ebdf42c9db74c28564748cb297ff640ad16d9d1b47211794dad"}}) 2018/05/29 01:54:04 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x401, 0x1) ioctl$int_in(r0, 0x80000080045010, &(0x7f0000000000)) 2018/05/29 01:54:04 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x8b, 0x26200) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000100)=0x8001, 0x4) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000300)='./file0\x00', r3, r4) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000580)='/dev/vcs\x00', 0x100000, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r5, 0x118, 0x1, &(0x7f0000000540)=0x3, 0x4) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000005c0)={0xb4, 0x0, 0xffff, "eb9e9044257e793d55b48a98a1d636961821bb311a264770f75fbe8bc29915095899e308001b947e8d909821e0dc0217414bd11500a600294270611012355832f3550b071c9864d189437ed943978914d1c88c54ca8be1f7ba29dbb7c8b685f0d96032a19b34f12297ff9db36f65b1863226398bfd8da7e82c5ca909c516cdeebe189b1d2147a5d502573c24008a76075789287f40a3ffdc68631ad16ba846a55f088a6264664225e1234fba91c946279cd02791"}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x480000, 0x0) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000000040)) ioctl$sock_inet_SIOCGIFBRDADDR(r0, 0x8919, &(0x7f0000000080)={'veth1_to_team\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x14}}}) setsockopt$inet6_IPV6_PKTINFO(r5, 0x29, 0x32, &(0x7f0000000500)={@mcast1={0xff, 0x1, [], 0x1}, r2}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000680)={0x0, @in={{0x2, 0x4e23, @multicast2=0xe0000002}}, 0xffffffffffffff19, 0x7, 0x7, 0x4, 0x14}, &(0x7f0000000180)=0xffffffae) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000740)=ANY=[@ANYRES32=r7, @ANYBLOB="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"], &(0x7f00000002c0)=0xec) fchmod(r0, 0x6) 2018/05/29 01:54:04 executing program 5: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000200)={&(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)=0x0) prctl$setptracer(0x59616d61, r2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x600) getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000240), &(0x7f0000000280)=0x4) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x40000000000000}) [ 597.732318] binder: 4985:4986 got transaction with invalid offsets ptr [ 597.746393] QAT: Invalid ioctl [ 597.763795] QAT: Invalid ioctl [ 597.769477] binder: 4985:4986 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:04 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={"6272696467653000800000000040f400", 0xfffffffffffffffc}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'bridge0\x00', 0xfffffffffffffffd}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, r1, 0x102, 0x70bd2b, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x7f}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xffff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0xffffffffffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x81}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1ff}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) 2018/05/29 01:54:04 executing program 6: bind$inet(0xffffffffffffffff, &(0x7f0000b9bff0)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) r0 = socket(0xa, 0x5, 0x7) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = dup3(r0, r0, 0x80000) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000140)) finit_module(r0, &(0x7f0000000000)='Nvmnet0^\'ppp1\x00', 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x4}, 0x1c) recvmmsg(r2, &(0x7f0000003300)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/222, 0xde}], 0x1, &(0x7f00000006c0)=""/248, 0xf8}}, {{&(0x7f00000007c0)=@generic, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000840)=""/87, 0x57}, {&(0x7f0000000980)=""/26, 0x1a}, {&(0x7f0000000a80)=""/68, 0x44}], 0x3, &(0x7f0000000d00)=""/68, 0x44}}], 0x2, 0x0, 0x0) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000040)={0x8000000000000000, 0x6000, 0x200, 0x1, 0x6}) sendmmsg(r2, &(0x7f0000007e00), 0x136a88c8311572c, 0x0) [ 597.810750] binder_alloc: binder_alloc_mmap_handler: 4985 20001000-20004000 already mapped failed -16 [ 597.839424] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:04 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x100) r1 = syz_open_dev$urandom(&(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)) 2018/05/29 01:54:04 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffdfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x4000) r1 = socket(0xa, 0x803, 0x6) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f000095bffc), 0x4) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60dc652b00140600fe8000000000000003000000000000aafe8000008000000000008b00aa0000000043f3c8e9d57c4b1d3e7a4b78cf5515f3dd430dde5b8c788e07867f7f3923230b34f743249e1bf621767c3bbbbd82b417712228c17c52cbad047b3317da0a323059a449502ff19a74cc9913eb83d014aefae635397af4d58b642020f10adbdaaf464c23e15eb6cdf44c8116b6daa279f77aeb05ebcecf76c66cb5784215fb6bf2ef78c5fdaa2264a60556ee35e3a858b2bf0963aefd7adf0ddf38b58edcc6b8c77bb1da21e0385f92b5719d862cf2df7b94f12983b1ae24b0542d6800000000000000000000000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="000000327cf1f4c1b05a1b00000008"], &(0x7f00000002c0)) r2 = fcntl$getown(r1, 0x9) fcntl$lock(r0, 0x5, &(0x7f0000000100)={0x2, 0x3, 0x4, 0x1, r2}) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x200002, 0x0) nanosleep(&(0x7f0000000140), &(0x7f0000000180)) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000000280)=""/226, 0xe2}], 0x1, 0x0) 2018/05/29 01:54:04 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000ed1000)={0x8, 0x4, 0x80000000004, 0x8000000007}, 0x2c) write(r0, &(0x7f0000000240)="2b155280145332088c5cfccfa995cbf2002f850497f0c626741a54de4ea3168da5826fb30312f754bf4fe45e5a67db89ba79f0a6e750a813d545f37ca820124f0463e19fa11ccb46298a74fb7089b54aefc7065fa440ca6523c8da9c8f85e0be4f99355ef0ab37a348f9fa23b8a6ba62", 0x70) r1 = syz_open_dev$amidi(&(0x7f0000000180)='/dev/amidi#\x00', 0xffb, 0x100000008080) ioctl(r1, 0x401, &(0x7f00000000c0)="5d9415c3072ee263abcbec59c30d6abcd122b909d7ba02e2b5efdc0d25310a512f1be34ea49081ee7ca8ae1b81a6bb512260ef35151e9053770522db0698cfa50422") setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x2, 0x1, 0x7}, {0x0, 0x7, 0x3, 0x2}, {0xf45, 0x894, 0x100, 0x6}, {0x9, 0x3ff, 0x7, 0x400}]}, 0x10) [ 597.857204] device bridge0 entered promiscuous mode [ 597.868541] binder: 4985:4986 ioctl 40046207 0 returned -16 2018/05/29 01:54:04 executing program 4: r0 = socket(0x3, 0x0, 0x100000000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x7ff, 0xff, 0xa, 0x92e, 0xfffffffffffffffd, 0x9, 0x9, 0x5, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)={r1, 0x1, 0xe4, "32c4a04d2bd4666812290d4f503c55d11a84b91a6f28b77ea61f118ceda660fe8d523bb739414b59167f22f5f90408b33c49b344777a7f47b74e44a12112075e44342a66027f934d95f7923507192944aa17e692d18798ae948301b4af7faacf82fa9a248c149531ca24531405e3eccfc20b0da94ec213aed9b463394538e0463b7bb98a8b096bd15b024f4af64934cce0bdf7963f78b5d4090ed9f5403e0bc31c47d07b8e276633e45b49c73b03a896607cfe50c953d2daa0bece248030b08360c01f33235fc2d7b280e9187456dcb802d468ba53d68d4737ee4d73aa9de19b82b6ae6f"}, 0xec) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)={r1, 0x1f}, &(0x7f00000000c0)=0x8) r2 = fcntl$dupfd(r0, 0x406, r0) ioctl$IOC_PR_CLEAR(r2, 0x401070cd, &(0x7f0000000100)={0x2}) keyctl$get_persistent(0xc, 0x0, 0x0) [ 597.907665] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.914094] bridge0: port 1(bridge_slave_0) entered forwarding state 2018/05/29 01:54:04 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}, 0xd}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0xffffffffffffffff, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x8a000, 0x0) r3 = memfd_create(&(0x7f00000002c0)='{-proc\x00', 0x2) renameat(r2, &(0x7f0000000280)='./file0\x00', r3, &(0x7f0000000300)='./file0\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000040)={{{@in6=@ipv4={[], [], @dev}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000140)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000180)={r5, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, 0xc) 2018/05/29 01:54:04 executing program 1: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x7, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_opts(r1, 0x29, 0x36, &(0x7f00000003c0), 0x8) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}}, 0xc) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000380)=0x2, 0x35b) [ 597.964414] binder_alloc: 4985: binder_alloc_buf, no vma [ 597.970076] binder: 4985:5031 transaction failed 29189/-3, size 72-8 line 2971 [ 597.999595] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 598.022660] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.060948] bridge0: port 1(bridge_slave_0) entered blocking state 2018/05/29 01:54:04 executing program 3: r0 = syz_open_dev$tun(&(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={"74000200000f002dc830ee000000005d", 0x106}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x800, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280)=0x4, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x8000000000, 0xfe) ioctl$KVM_PPC_ALLOCATE_HTAB(r3, 0xc004aea7, &(0x7f00000001c0)=0x7) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8, 0x1b}]}, 0x28}, 0x1}, 0x0) pread64(r0, &(0x7f0000000080)=""/88, 0x58, 0x0) [ 598.067403] bridge0: port 1(bridge_slave_0) entered forwarding state 2018/05/29 01:54:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000007fffffff00000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:04 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000520011030000000000000002000000004e1e80c67bbbd036d959165b5985663b41e024e1dce5a0ef0fa274ed7ea25b3968d43acfcb6a974b858ec336f045d92cdb70370d774432874fa601b5af2ebcca70dae747c885cf0551d9af7aeef9aeda1197d736d93619319947efde81d8fdaf29091573db76cc5bbeaf23affa51ab990163da0000c9236d4c1a0a5595ba640ffc223aa114cc7574bc23832076882ff5844167b8d5c3be5b4734e320f6f0a17674"], 0x14}, 0x1}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rtc0\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000200)={0x0, 0x0, 0x81, 0x8a, 0x7f, 0x4}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="05000200059cbc7d37a454ecc33b84788f339f1f313eeb088462a6582fb7a715791ee6dc383baaf08b24dd247a2d4c1732379369cf3593f9799be2163f71742c97fb835b870aab68ef0e16e46317cf8a4754937011bab283a556de30bf1791459e38f61c6660ecf43f3f947c7cbcc8e294e72f0175411be5059b0007f50f7ae756abe491db59a7d4cddb321027cc6f2baa3b3d63f06fdb4b334b8f3210b3902cea15e3f662b76da0def4901d6e883d00eb3225bbc459438501f3c05ab8ae142b"], &(0x7f00000002c0)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000300)={r2, 0x401, 0x2, 0x1, 0x4, 0xfffffffffffffffb, 0x4, 0xfffffffffffffffb, {r3, @in6={{0xa, 0x4e22, 0x1, @empty, 0x1}}, 0x4, 0x1, 0x4, 0xfffffffffffffffb, 0x80}}, &(0x7f00000003c0)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r4, 0x6000000000}, 0x8) recvmmsg(r0, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000006640), 0x0, &(0x7f0000006680)=""/142, 0x8e}}], 0x1, 0x0, &(0x7f0000006940)) 2018/05/29 01:54:04 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af300200f5abfb9845f9e19859c9693206f2c60b0000000719e1d66e970123d893d974e5b9c3285677b2139823e5500c92ab5b94da3a7de19f063bb765b02bd5b660fb7fa898c6f5c6369c3f363068d10af833f6475bbe8b7967255b177607ba100f6c4654718232dbda64aa1f69cf9ab5b3ea3ed63452b7ebd37c9dae664e322e08ad8f6029fe8fd0b34c7117480471aeca0a3fc9eceb28509ca8a83e4f8b85131808bc5cfb4cc24e1901769c084c082712b470666b6dddf74ced693973ba1ded8b") fcntl$setstatus(r0, 0x4, 0x6800) io_setup(0x7a14, &(0x7f0000000200)=0x0) io_setup(0x100000000, &(0x7f0000000080)) openat$urandom(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/urandom\x00', 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001440)=[&(0x7f0000000040)={0x0, 0x0, 0x8, 0x0, 0x0, r0, &(0x7f0000001200)="fc", 0x1}]) [ 598.094268] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.100448] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.110600] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 598.164584] binder: 5058:5059 got transaction with invalid offsets ptr [ 598.189583] binder: 5058:5059 transaction failed 29201/-14, size 72-8 line 2999 [ 598.190209] ýÿ: port 2(bridge_slave_1) entered blocking state [ 598.203125] ýÿ: port 2(bridge_slave_1) entered forwarding state [ 598.209416] ýÿ: port 1(bridge_slave_0) entered blocking state [ 598.214934] binder_alloc: binder_alloc_mmap_handler: 5058 20001000-20004000 already mapped failed -16 [ 598.215366] ýÿ: port 1(bridge_slave_0) entered forwarding state [ 598.226690] binder: BINDER_SET_CONTEXT_MGR already set [ 598.232240] IPv6: ADDRCONF(NETDEV_UP): ýÿ: link is not ready [ 598.242374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.246991] binder_alloc: 5058: binder_alloc_buf, no vma [ 598.249077] binder: 5058:5059 ioctl 40046207 0 returned -16 [ 598.254524] binder: 5058:5064 transaction failed 29189/-3, size 72-8 line 2971 [ 598.260397] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 598.279482] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 598.286826] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 598.304473] binder: undelivered TRANSACTION_ERROR: 29189 [ 598.323170] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 598.326070] binder: undelivered TRANSACTION_ERROR: 29201 [ 598.331688] IPv6: ADDRCONF(NETDEV_CHANGE): ýÿ: link becomes ready [ 598.356850] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 598.368615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 598.387349] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 598.394833] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready 2018/05/29 01:54:05 executing program 7: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)=""/250) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r1, 0x0, 0x13, 0x7c, &(0x7f0000000040)="8334b3c0d6e1b760c558f4ed126005a1c3699a", &(0x7f0000000080)=""/124, 0xffff}, 0x28) 2018/05/29 01:54:05 executing program 4: r0 = socket$inet6(0xa, 0x806, 0xc498) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x800, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000002c0)={r1, r1}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc00088}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbfb, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0x2}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) setsockopt$inet6_buf(r0, 0x29, 0x38, &(0x7f0000000000)="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", 0x68) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000300)=0x2, 0x4) 2018/05/29 01:54:05 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) ioctl$KDDISABIO(r0, 0x4b37) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r2, 0x1, &(0x7f0000b52fd8)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f000096f000)="060063efff7f00009d", 0x9}]) 2018/05/29 01:54:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:05 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @loopback=0x7f000001}], 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x3, 0x1, 0x1000, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0x20) ioctl$sock_inet_SIOCRTMSG(r1, 0x890d, &(0x7f0000000200)={0x5, {0x2, 0x4e24, @loopback=0x7f000001}, {0x2, 0x4e24, @broadcast=0xffffffff}, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x0, 0x0, 0x2, 0x401, 0x1, &(0x7f0000000140)='teql0\x00', 0x0, 0x0, 0x7af7}) sendto$inet(r0, &(0x7f0000ac0fbb)="c4", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f000056effc), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={r1, 0x3, 0x1, 0x7fff, &(0x7f0000000180)=[0x0, 0x0], 0x2}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000000)={0x0, 0xffffffffffffffa5, "dfe782d7c4cf1bfb82a00000add9f486"}, &(0x7f0000000080)=0x18) 2018/05/29 01:54:05 executing program 1: futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) nanosleep(&(0x7f0000000180)={0x0, 0x1c9c380}, &(0x7f00000001c0)) futex(&(0x7f000000cffc), 0x0, 0x4, &(0x7f0000000000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000), 0x0) r0 = socket$netlink(0x10, 0x3, 0x63b81f7ad15ec290) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='bcsf0\x00', 0x3}) 2018/05/29 01:54:05 executing program 6: syz_emit_ethernet(0x6e, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2}, @random="b42d87402e52", [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x38, 0x3a, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @icmpv6=@pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "0a07ec", 0x0, 0x29, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @ipv4={[0xf5ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xff, 0xff], @dev={0xac, 0x14}}, [], "a82f7ae1cd16d2e2"}}}}}}}, &(0x7f00000016c0)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0]) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7f, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(r3, 0x400443c9, &(0x7f0000000180)={{0x9, 0xffffffffffffff00, 0x1000000000, 0x565a0e5c, 0x5, 0x2}, 0x200}) getresgid(&(0x7f0000000240)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) r5 = getegid() r6 = getegid() stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x3, 0x4000) ioctl$TIOCOUTQ(r8, 0x5411, &(0x7f0000000440)) getgroups(0x7, &(0x7f00000003c0)=[r0, r1, r2, r4, r5, r6, r7]) 2018/05/29 01:54:05 executing program 3: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f00000000c0)) r1 = getpgid(0x0) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec33, 0x0, 0x0, 0x0, 0x0, 0x1f}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0xa, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f00000003c0)) sendto$inet(r3, &(0x7f0000000280), 0x3ce, 0x0, &(0x7f0000e68000)={0x2}, 0x10) r4 = creat(&(0x7f0000000040)='./file0\x00', 0x124) write$cgroup_pid(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x9) sync_file_range(r2, 0x0, 0x31e, 0x7) [ 599.050911] binder: 5091:5093 got transaction with invalid offsets ptr [ 599.070323] binder: 5091:5093 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:05 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000440)=0x80, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) r4 = socket(0xa, 0x2, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) write(r2, &(0x7f0000000000)="4763a9dcffa1ea42fbf80db8b35a779466f2299bbbe87a95d2c32fef5ef4aa6a19451bf19cbb949dc61e90adcf1f7703966768f71cfd342ae13128f6c4d6ad4a3140eb5b37b8d722959a99a5b6b7294ddb59685400f86d51c6b1e430cb6b9b5f0f77513e824ade2b37db8f192a5ca08e36b2ce92707ce9e14b43f0b3586e9e7f47fa40112028b95ed840ca6b8a4962cf81", 0x91) tkill(r3, 0x1000000000016) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2018/05/29 01:54:05 executing program 7: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x30, 0x204082) accept$inet(r1, &(0x7f0000000040)={0x0, 0x0, @dev}, &(0x7f0000000080)=0x10) ioctl$TIOCNOTTY(r1, 0x5422) r2 = getpgrp(0xffffffffffffffff) r3 = syz_open_procfs(r2, &(0x7f0000000200)='maps\x00') read(r3, &(0x7f0000000280)=""/240, 0xf0) 2018/05/29 01:54:05 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000002c0)={0x10}, 0xc, &(0x7f0000001880)={&(0x7f00000004c0)=@setlink={0x30, 0x13, 0x105, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_XDP={0x10, 0x2b, [@nested={0xc, 0x2, [@typed={0x8, 0x0, @fd}]}]}]}, 0x30}, 0x1}, 0x0) getsockname(r0, &(0x7f0000000140)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @local}}}, &(0x7f00000001c0)=0x80) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@loopback={0x0, 0x1}, @mcast2={0xff, 0x2, [], 0x1}, @remote={0xfe, 0x80, [], 0xbb}, 0x401, 0x5, 0x1000, 0x400, 0xdf68, 0x10000, r1}) getsockopt(r0, 0x40000, 0x241d, &(0x7f0000000000)=""/213, &(0x7f0000000100)=0xd5) socket$bt_rfcomm(0x1f, 0x3, 0x3) [ 599.101099] binder_alloc: binder_alloc_mmap_handler: 5091 20001000-20004000 already mapped failed -16 [ 599.129550] binder: BINDER_SET_CONTEXT_MGR already set [ 599.144403] binder_alloc: 5091: binder_alloc_buf, no vma 2018/05/29 01:54:05 executing program 5: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x3, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000240)={0x0, 0x298, 0x5, 'queue0\x00', 0x7}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000080)={0x2, 0x18, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1=0xe0000001}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@loopback={0x0, 0x1}, @in=@remote={0xac, 0x14, 0x14, 0xbb}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x3, @multicast1=0xe0000001}}]}, 0x80}, 0x1}, 0x0) 2018/05/29 01:54:05 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ioprio_get$pid(0x0, r1) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x4}, 0x1c) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") semget$private(0x0, 0x2, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@empty, 0x0, 0x1, 0x0, 0x6}, 0x20) [ 599.150106] binder: 5091:5102 transaction failed 29189/-3, size 72-8 line 2971 [ 599.164367] binder: 5091:5093 ioctl 40046207 0 returned -16 2018/05/29 01:54:05 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2201, 0x0) r1 = dup(r0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x3, 0x2, 0x0, 0x0, @sint={0x5, 0xffff}}]}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000007ade04000000000000c17ee5fb00102cd9780bc342b385af9ea0c7356728da747fdb873dde2a4c7b139cec58650b949e5165177a57566ff7f4a88f839264fd57c3b8a20a661201c40a141a5de295a692a07a783b6c"]) 2018/05/29 01:54:05 executing program 3: setsockopt$netlink_NETLINK_RX_RING(0xffffffffffffffff, 0x10e, 0x6, &(0x7f0000017000)={0x0, 0x0, 0x0, 0x8}, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000ca3000)='/dev/autofs\x00', 0x0, 0x0) ioctl(r0, 0xc, &(0x7f0000001840)="010000000000000018b6fd50bf9c7c669ffa4072f329f6a8101a11d84500ecb122d45c9b4c38260fc620e0c7865a9494d936057e42183370c5d6d44d832e11f8b463d20af6681041af86f44842194089d4039272d1697fa0a28b06464ef6968688ecc2f142ddb36e8fb7ce5f18f4e553c4e54643fba7b6cf8157f90b0803e7620f9f684ffab393cabc6b812d2f8d25b4710fab0f08e0885eec7b1ef430caff68fe765d69673e1c011fe07446519225") pwritev(r0, &(0x7f00000015c0)=[{&(0x7f00000002c0)="b011b3baf094b0c49b62bcf12d78df1930e6563b22e9f578a24b665fadc3328dc6d7ea58f72917ded0b7c25d1a5bde287c31749f6224aa2c73c507f96089861f74b0210bc7bba20747ef9930b0cf2bc0ee7f99e86fdb26a519811bd45421d257ed7dc186098f97fd87fad5bf043b9822a23a6142adbd14722d70da1ed6", 0x7d}, {&(0x7f0000000340)="8269ece52597914691c3b4b95eb71fd2241082579bfa27cdc36efa3c15d681051ec223b206efa07343619ec3ec2144a5592dd901b804febff34c97962fb13334eee1a2fdbabf6f62dab58ed925ac670c2123e6dff389acce78d22cd4149b9e92af98f5f1ebd283c541e714ec5f8cdd50108d39f2311e3cff33a776ec5b1932958a70298114f851fb2c95663c9b7fedb6f0ce31cd51557c7056c0804c7c56aed94228bdaea3ba42ebea789b212fc44f0a19ca8fa2faa8942bde414ad0152ef746264548249e51b9c6aac52d3dc3576f866944fe2fd080188e96f61fcc5fee5b7598a6ba6c475c27bdc8e71e96dbd757dc77d714", 0xf3}, {&(0x7f0000000440)="3952cab990ba27916a12411f6aa057448fed895a38fd7bc1774fb00efb76ef7093712f1d8c934dfe3c4b604808143327f4074bb5e3f489903d46ae65bd679c5f30a20249157b37a05312972c", 0x4c}, {&(0x7f00000004c0)="53407a7bf77200c11af2794183ad808969fd26fea0215a4723a608ec422b920cad5c1f5c34f9b337610ecc0c6d74f2982d23bdadfa69ec8a8aa9623815e86da08bb106fb3202c91799deadee3bfacd7419f4f9be4ccc07b00025499de48f1132eb09f21dd39d81ef16fa72c6585ff51e20fa9d", 0x32}, {&(0x7f0000000540)="324888f6db80c5bde782ac374111697f2ee27619f7bb7753d280196e554f40abf00b730d33ba04ec367af8", 0x2b}, {&(0x7f0000000580)="6531dd2af8b311fad7cd74a67ffcf58e31519f5f134d7d449e0ae4a34ec26ce3", 0x20}, {&(0x7f00000005c0)="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", 0x1000}], 0x7, 0x0) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000000)=""/83, &(0x7f0000000080)=0x53) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000000c0)={0x0, 0xe2, "25897fae7450d3f3efd8ddc5beaaa56ce6cbecad73b7e2a2410414c00303bba480276e8ab3493a2292332cbbab0d068647fe1ce24d40cb45c5cf0be75879da1b780d038b6ed99dd7fad09845de934176e403b0cf580c24e81f868f5327702c609ea478ad29b262d5d11a99dd67f152867e457a3ec276f9b20d74835b4990507991a7c7006c3f30be809294cde240da1f71e8c67d2bd3882b3b65343ab870cee243003732d1da76a3aba275bd02ab37985c1251bed5ddf602956f22f152d508654303f073e4c6fbd0db1b99e9ae1df7d92164ba3ba1c7562c2a2f96adf570aa85b3f6"}, &(0x7f00000001c0)=0xea) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000200)={0x1, [0x3ff]}, 0x6) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000016c0)={r1, @in6={{0xa, 0x4e21, 0x100000001, @remote={0xfe, 0x80, [], 0xbb}, 0x45}}, 0x8, 0x200}, 0x90) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000240), &(0x7f0000000280)=0x30) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000001640)=@sack_info={r1, 0x1, 0x5}, &(0x7f0000001680)=0xc) [ 599.215648] netlink: 'syz-executor4': attribute type 2 has an invalid length. [ 599.252704] netlink: 'syz-executor4': attribute type 2 has an invalid length. 2018/05/29 01:54:05 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000fffffdfd0000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:05 executing program 5: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000040)="0679bddd4fa342b82902ae7cf0f9916ba890bef3f37319acf4f8e453f005e02784ce2a58b5ff548523", 0x29) [ 599.273181] binder: undelivered TRANSACTION_ERROR: 29189 [ 599.279521] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:05 executing program 4: r0 = socket(0xa, 0xa, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000040)={0x49, 0x9, 0x4, 'queue0\x00'}) openat(r1, &(0x7f0000000100)='./file0\x00', 0x0, 0x2) pipe(&(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f00000001c0), 0xfffffef3) exit_group(0x3) read(r2, &(0x7f0000000f40)=""/250, 0xfa) 2018/05/29 01:54:05 executing program 3: r0 = socket(0x10, 0x3, 0x0) prctl$intptr(0x0, 0x1) exit_group(0x9) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0ffffffffffff}}, 0x1c}, 0x1}, 0x0) r1 = getpgrp(0x0) fcntl$lock(r0, 0x5, &(0x7f0000000080)={0x1, 0x7, 0x65d, 0xc40, r1}) 2018/05/29 01:54:05 executing program 5: r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback=0x7f000001}, 0x10) sendmsg$rds(r0, &(0x7f0000000040)={&(0x7f0000014000)={0x2, 0x0, @multicast1=0xe0000001}, 0x10, &(0x7f0000000140), 0x0, &(0x7f0000002600)=ANY=[@ANYBLOB="580000000000000014010000060000000000000000000000", @ANYPTR=&(0x7f0000002580)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYPTR=&(0x7f00000025c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000580000000000000014010000090000000000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0xb0}, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x0) openat$cgroup_type(r1, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x4e21, 0x800, @remote={0xfe, 0x80, [], 0xbb}, 0x7}}, 0x3, 0x0, 0x6, "308cf864b48fc54d2fbf573680b8b533f072eb2c88af0f3f0a7a0d460c465739b7e5e225349231fd4f72560861638fbd893ebcb3cdd12790f8e8f1eb6eec2dc9d07868aaccc0380d77cba95245443cfe"}, 0xd8) [ 599.323892] binder: 5131:5132 got transaction to invalid handle [ 599.330282] binder: 5131:5132 transaction failed 29201/-22, size 72-8 line 2856 [ 599.379697] binder_alloc: binder_alloc_mmap_handler: 5131 20001000-20004000 already mapped failed -16 [ 599.408645] binder: BINDER_SET_CONTEXT_MGR already set [ 599.419723] binder: 5131:5145 got transaction to invalid handle [ 599.425914] binder: 5131:5145 transaction failed 29201/-22, size 72-8 line 2856 [ 599.428492] binder: 5131:5132 ioctl 40046207 0 returned -16 [ 599.475853] binder: undelivered TRANSACTION_ERROR: 29201 [ 599.481758] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000009000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000002c0)="366536f26f660f22c066b871e5ee230f23c80f21f86635040030000f23f80f38f0b7cedb66b9ab0a000066b80300000066ba000000000f300f01cf66b8b4c800000f23d00f21f866353000000f0f23f8ba410066ed66b9be09000066b80000000066ba008000000f30f30f001e0000", 0x6f}], 0x1, 0x24, &(0x7f00000001c0), 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x200, 0x0, 0x0, 0x10001}, &(0x7f0000000040)=0x18) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000340)={r4, 0x1000, "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"}, &(0x7f0000000080)=0x1008) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:54:06 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) r1 = socket(0xa, 0x80003, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in={{0x2, 0x4e20, @multicast2=0xe0000002}}, 0x6f34, 0x100}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r3, 0x9}, &(0x7f0000000240)=0x8) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) r5 = dup(r0) connect$unix(r5, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x8001, 0x200000) ioctl$VHOST_SET_VRING_NUM(r4, 0x4008af10, &(0x7f0000000280)={0x2, 0x7}) 2018/05/29 01:54:06 executing program 4: r0 = socket(0x2000008, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") socketpair$inet(0x2, 0x2, 0x88, &(0x7f0000000000)) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) 2018/05/29 01:54:06 executing program 7: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='comm\x00') r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendfile(r1, r0, &(0x7f0000000000), 0xffff) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc5, 0x1, 0xfff, 0x3}, {0xffffffffffffffff, 0x8001, 0x3, 0x7be3}, {0x9, 0x400, 0x7, 0x2}]}, 0x10) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffff80000000, 0x4, 0x7, 0x10, "dbb92d72a056728edbe264d7c763b40a0fcd268c25a7d7ee061640ae28bf1ef8a9c96b0e99add110646257128da25ff7fd782b4cff53a14684e3c8c520b53ec8", "4ce11387b2c1bc232fdf9a60027ca569d2512c40fdedf981fcdb7675047c117b", [0x4f9, 0x200]}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x8, 0x3ff, 0x800, 'queue0\x00', 0x9}) 2018/05/29 01:54:06 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a}, &(0x7f0000000340), 0x0, 0xfffffffffffffffa) keyctl$get_security(0x5, 0x0, &(0x7f0000000080)=""/246, 0xf6) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x7f, 0x0, 0xa05e3b162a7b1108}, 0x4) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f00000001c0)={0x4, 0x70, 0xfffffffffffffc00, 0x0, 0x8, 0x1, 0x0, 0x5f, 0x41220, 0x8, 0x4, 0x6, 0x8000, 0x10001, 0x80000001, 0x389, 0x2, 0x9, 0x9, 0x2, 0xfc, 0x0, 0xfff, 0x2690, 0x0, 0x3, 0x0, 0x5, 0x8b4, 0x9, 0x6c, 0x8, 0xfffffffffffffffc, 0x3f, 0xfffffffffffffffa, 0xfffffffffffffeff, 0x5, 0x1, 0x0, 0x4, 0x0, @perf_config_ext={0x0, 0x6}, 0x1, 0x8d, 0x7f, 0x4, 0x2, 0x4, 0xf}) write$binfmt_misc(r0, &(0x7f0000000340)={'syz1', "b2f0bdf1c55e3265d383c43d08618d0c1951bf87c44b7971af855fe190b8a56ffac64b4eacf83deb80114634064f930d3b19484deaafdad64b8a15a0fcf5ded3928414b4f277d4aa159d9c2d602a709a321eda1b3ae4a0682d98d873ce7c10e392822ed2ef53ed32711358f52b362122c168c6cc61861ccf44c6a7275246f70e92e96265ff811564f00833e26b70b4efa1394ef64f65d4894796ba8afaf17d12ac63c3647d11997a031f614f803d308f9f2a5c773642bdc15bf3e35506bd083f8b2111aa9359c08415"}, 0xcd) 2018/05/29 01:54:06 executing program 5: r0 = socket(0x2, 0x1, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x60, r1, 0x1, 0x70bd28, 0x25dfdbff, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x5}}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4c}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7}]}]}, 0x60}, 0x1}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x2001ffc}, 0xc) sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f0000001440)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001400)={&(0x7f0000001300)=ANY=[]}, 0x1}, 0x0) recvmmsg(r2, &(0x7f0000000d80)=[{{&(0x7f0000000780)=@ipx, 0x80, &(0x7f00000008c0)}}, {{&(0x7f0000000900)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c80), 0x0, &(0x7f0000000cc0)=""/191, 0xbf}}], 0x2, 0x10022, &(0x7f0000000e00)={0x77359400}) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x5}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r4, 0x20, 0xfffffffffffffffb, 0x0, 0x4, 0x61}, &(0x7f0000000100)=0x14) r5 = semget(0x3, 0x2, 0x108) semctl$GETVAL(r5, 0x5, 0xc, &(0x7f0000000140)=""/103) 2018/05/29 01:54:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00`\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:06 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000040)={&(0x7f0000000400)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f00000034c0), 0x0, &(0x7f0000000940)=""/42, 0x2a}, 0x202) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)='#', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100)=0x2, 0x3) mq_open(&(0x7f00000001c0)='\x00', 0x40, 0x0, &(0x7f0000000200)={0x0, 0x7, 0x4, 0x4, 0x7bc, 0x8, 0x4, 0xffff}) [ 600.322554] binder: 5167:5174 got transaction with invalid offsets ptr [ 600.348572] binder: 5167:5174 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:06 executing program 7: r0 = syz_open_procfs(0x0, &(0x7f0000000040)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x801c581f, &(0x7f0000000000)={0x20000303, &(0x7f00000000c0)}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) 2018/05/29 01:54:06 executing program 4: r0 = fcntl$getown(0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, r0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000040)={0xffffffffffffff9c}) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000080)={{0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x8}, {0xa, 0x4e21, 0x401, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x18}}, 0x3}, 0xa99, [0x953, 0x0, 0x0, 0x3, 0x438, 0x9, 0x80000000, 0x2]}, 0x5c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$ipx(0xffffffffffffffff, &(0x7f0000000200)={0x4, 0x0, 0x0, "48a4e9709dcf"}, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x20, 0x7}, 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000440)='tls\x00', 0x4) set_mempolicy(0x4000, &(0x7f0000000000), 0x1) 2018/05/29 01:54:06 executing program 5: r0 = socket$inet(0x2, 0x2, 0x5) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x8080) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f00000000c0)={0x1, 0x4}) sendto$inet(r0, &(0x7f0000865000), 0xebce, 0x0, &(0x7f0000fd9ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4f, {0x2, 0x14e21, @dev={0xac, 0x14, 0x14, 0x14}}, {0x2, 0x80000000004e22, @dev={0xac, 0x14, 0x14, 0x20}}, {0x2, 0x4e20}, 0x244, 0x81, 0x1ff, 0x1f, 0x2, 0x0, 0x9, 0x8001, 0x2}) [ 600.375931] binder_alloc: binder_alloc_mmap_handler: 5167 20001000-20004000 already mapped failed -16 [ 600.404432] binder: BINDER_SET_CONTEXT_MGR already set [ 600.419472] binder_alloc: 5167: binder_alloc_buf, no vma 2018/05/29 01:54:06 executing program 3: r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4}) mq_unlink(&(0x7f0000000100)='eth0\x00') mq_timedsend(r0, &(0x7f00000e6000), 0x0, 0x0, &(0x7f0000e0b000)) mq_notify(r0, &(0x7f0000000080)={0x0, 0x1b, 0x3, @thr={&(0x7f0000000040)="d8ad6868bd80b003cae2d75a", &(0x7f0000000140)="f6e55a745877b7cb2c9fbfe506405e51f2b967ba04344b4e1b2c2a9f9905f9c16d1d4988ff60ad7f40942393382c0389164ffe4209a8a4e2902f6473cb8e8691581d9d125338774f688274d48cfdb8ab58fec695df801df06f9fe2b38f1b8099d39b0f396f965cd3884ba88996d9cb83ad38381e0cfe028eff8cf5f8d32c9c240244008d55c66f4b4d5150e96701a79764efd61603665c1484ef25b4fb80fcac6ab97bc5aca16f505422319132086bb296c2dfaf8b4b6934b63c73c2abaeb0bcbca2fdfc2ac5a66e8f832f814307d1544beb229f3c"}}) mq_timedsend(r0, &(0x7f0000000080), 0x0, 0x1, &(0x7f00000000c0)) close(r0) [ 600.425116] binder: 5167:5193 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:06 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400ce500000000a000000080000000000000000"], 0x14}, 0x1}, 0x0) 2018/05/29 01:54:06 executing program 6: r0 = socket(0x18, 0x7, 0x8) connect(r0, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, {0xa}}}, 0x32) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0xff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x8, 0x2800) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)={0x4, r2, 0x1}) r3 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) setsockopt(r0, 0x111, 0x1, &(0x7f0000000000), 0x8b83c3f) ioctl$LOOP_SET_FD(r1, 0x4c00, r3) 2018/05/29 01:54:06 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000002000)="24000000030207031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e", 0x24}], 0x1}, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) [ 600.516768] binder: 5167:5174 ioctl 40046207 0 returned -16 2018/05/29 01:54:06 executing program 3: r0 = semget$private(0x0, 0xceb3889984c59351, 0x19) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000280)=""/4096) r1 = memfd_create(&(0x7f0000000000)="000000000010000000004300000000", 0x0) r2 = socket(0x2, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) getsockopt$sock_buf(r1, 0x1, 0xe9dbec41d8946f0f, &(0x7f0000000040)=""/41, &(0x7f0000000080)=0x29) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) [ 600.630299] binder: undelivered TRANSACTION_ERROR: 29189 [ 600.636269] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:07 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'bridge_slave_1\x00'}}) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x40, 0x2) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000040)) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1d, &(0x7f0000000140)="0d2fca566d1f1dba7986c2092de59ebce2b8e222a116008b1c8678d2cd0417eff5c6c23be37deef2f851d6b07304a68e09369252fbb36205405623e329737e0994fb380fed2a22100bec040187d15a9a4653ab", 0x53) 2018/05/29 01:54:07 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f000001bfc8)={&(0x7f0000db4000)={0x10}, 0xc, &(0x7f00006bcff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800030300000000000000000a00000000000000150002000000080016000400000000000000000b41f5928187224a8d9c83df408d24dc138df71e9d33e0c96ac6e133dcb245ebd6e65aed0707967f224b24c5f118790d20dd0428037178471e5e0e32fc1245d3aedc4e35a3deff965d954e1a6e64211d50ba52fd52814ff9ca59f434d85dbec0df3093e90e2cac98a241825e09b5fce356dd36e09da5075eff3b1e3417aae757a90d"], 0x2c}, 0x1}, 0x0) 2018/05/29 01:54:07 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) flistxattr(r0, &(0x7f0000000400)=""/4096, 0x1000) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x40000, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000140)=0x7, 0x4) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x28, 0x8000) ioctl$TCGETS(r2, 0x5401, &(0x7f00000000c0)) r3 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000000)=@nl=@kern={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000380)="5500000018007f5300fe01b2a4a280930a06000000a8430891000000390008000a000c0000dc1338d54400009b84136ef75afb83de448daa7227c43ab8220000060cec4fab91d40000000000000000000000000000", 0x55}], 0x1, &(0x7f0000000400)}, 0x0) 2018/05/29 01:54:07 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000200)={0x0, {{0x2}}, 0x0, 0x200000000000203}, 0x15d) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0xc400, 0x0) ioctl$EVIOCGVERSION(r1, 0x80044501, &(0x7f0000000040)=""/37) 2018/05/29 01:54:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000093000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:07 executing program 5: prctl$getreaper(0x28, &(0x7f0000000100)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x82000, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_extract_tcp_res(&(0x7f0000000000), 0x3, 0xfff) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) ptrace$cont(0x9, r1, 0x7fff, 0x200) 2018/05/29 01:54:07 executing program 6: pwritev(0xffffffffffffffff, &(0x7f000029afd8), 0x0, 0xfffffffffffffffc) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2002, 0x0) 2018/05/29 01:54:07 executing program 3: r0 = socket(0xa, 0x5, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f000092d000/0x400000)=nil, 0x400000, 0xfffffffffffffffc, 0x8972, 0xffffffffffffffff, 0x0) bind$inet(r1, &(0x7f0000134000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) connect$inet(r1, &(0x7f00000e5000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) connect$inet(r1, &(0x7f00009322c4)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) connect$inet(r1, &(0x7f00000dcff0)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) ppoll(&(0x7f0000000280)=[{r1}], 0x1, &(0x7f00000002c0)={0x0, 0x1c9c380}, &(0x7f0000000300), 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") 2018/05/29 01:54:07 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400)='/dev/rfkill\x00', 0x0, 0x0) ioctl$SG_SET_DEBUG(r0, 0x227e, &(0x7f0000000000)) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000ac0)) r1 = socket(0x40000000002, 0x3, 0x2) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000a40)={0x0, {0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, {0x2, 0x0, @broadcast=0xffffffff}, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)="7465616d5f736c6176655f313a0300"}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000c40)={0x0, @in6={{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, &(0x7f0000000a00)=0x84) [ 601.537825] binder: 5238:5239 got transaction with invalid offsets ptr [ 601.552136] binder: 5238:5239 transaction failed 29201/-14, size 72-8 line 2999 [ 601.556868] netlink: 16 bytes leftover after parsing attributes in process `syz-executor7'. 2018/05/29 01:54:07 executing program 5: r0 = socket(0x100000000000007, 0x5, 0x7fffffff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x15, 0x5, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @rand_addr=0x9}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team_slave_0\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x1d, r2}, 0x10, &(0x7f0000000300)={&(0x7f00000002c0)=@can={{0x2, 0x6ab6, 0x1, 0x6}, 0x4, 0x2, 0x0, 0x0, "c5029cb2b708aedb"}, 0x10}, 0x1, 0x0, 0x0, 0x8054}, 0x50) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x169076, 0x0) sendfile(r3, r3, &(0x7f0000000580), 0x40c007) ioctl$SNDRV_TIMER_IOCTL_STATUS(r3, 0x80605414, &(0x7f00000005c0)=""/4096) 2018/05/29 01:54:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x3, 0x40000) r1 = accept$inet6(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c) setsockopt$inet6_buf(r1, 0x29, 0x3f, &(0x7f00000001c0)="3bbf6528620b21d864c1b8d7d73e9b1d93bd3c1f839fb6403fb202ce909f34c50ccbe596a5a9693a7021cfdd2cd105513310a49ddc88476d3d03a2ece652e5ca13612b25638b8d1ddc471a197122ca2b0eabed69059c8cc590461b9010913c7892b6719de85498207feac9726c84b1eb286701884488eafaa78a87f6667c6c", 0x7f) r2 = socket$netlink(0x10, 0x3, 0x4) r3 = socket$inet(0x2, 0x100000000805, 0x0) listen(r3, 0x800006) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84470080ffe0ffff070000000000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)=0x0) fstat(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r2, r4, r5) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400) [ 601.584294] binder_alloc: binder_alloc_mmap_handler: 5238 20001000-20004000 already mapped failed -16 [ 601.613809] binder: BINDER_SET_CONTEXT_MGR already set [ 601.632665] binder: 5238:5239 ioctl 40046207 0 returned -16 [ 601.665189] binder_alloc: 5238: binder_alloc_buf, no vma [ 601.670945] binder: 5238:5257 transaction failed 29189/-3, size 72-8 line 2971 [ 601.680534] RDS: rds_bind could not find a transport for 0.0.0.9, load rds_tcp or rds_rdma? [ 601.717467] binder: undelivered TRANSACTION_ERROR: 29189 [ 601.723748] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.138586] RDS: rds_bind could not find a transport for 0.0.0.9, load rds_tcp or rds_rdma? 2018/05/29 01:54:08 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000fa8fe4)={0xa, 0x4e23}, 0x1c) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000180)) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, {0x0, 0x0, 0xc7}, 0x1}, 0xa) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3, 0x4) r2 = socket(0xa, 0x4, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000966fe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) openat(r1, &(0x7f0000000040)='./file0\x00', 0x8000, 0x40) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1080, 0x400) r3 = dup(r0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write$eventfd(r3, &(0x7f0000605ff8), 0x34000) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000100)=0xb5a5, 0x4) 2018/05/29 01:54:08 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8c00, 0x0) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="66baa100b0b1eec74424002e130000c74424020e000000c7442406000000000f01142466baf80cb8fae98787ef66bafc0c66ed0fbf75b1c4e2752fabc4ba0029c4c2d9a771050f00d4660f38828900280000b9800000c00f3235001000000f30b9880400000f32", 0x67}], 0x1, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/29 01:54:08 executing program 3: r0 = epoll_create1(0x80000) fdatasync(r0) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000d36ff4)={0x8000000000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000080)) 2018/05/29 01:54:08 executing program 6: r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={0x0, 0xff, 0x18}, 0xc) flock(r0, 0x8) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) r2 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000c3bff4)) ioctl$TIOCPKT(r1, 0x5420, &(0x7f00003b8ffc)=0x51) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r3 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x3ff, 0x200) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000040)={0x10001, 0x0, 0x0, 0x20, 0x5, 0x9}) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000062000)) 2018/05/29 01:54:08 executing program 7: perf_event_open(&(0x7f0000000140)={0x2, 0x7b, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x80005, 0x0) utime(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x100000001, 0x9}) getsockopt(r0, 0x200100000114, 0x2711, &(0x7f00000002c0)=""/1, &(0x7f0000000280)=0xffb1) sendto(r0, &(0x7f0000000080)="05c00593619afa20d11bdf9a3c3c092a4c2ffc7a852509bd8f3ef6695aba1cf173c96aabd5d6ee0c5783aef10bb9de19bbe04e0a1388372ef0ccf755f8da08af9c3bc42ae550be21bd0f375a198fe027cc422a54be5f2c46b6abe9501f5715544fe23fe4bb889b7da17a53c591beda0eac8314b191cd8e20c41014609591066433afc1f2a1c9e490841b59ab85f2feb53bd1f4e5a9f36ea33de956f89d51622ac1b756f0575da22a989246", 0xab, 0x0, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @rand_addr=0xfffffffffffffff9}, 0x0, 0x2, 0x2, 0x2}}, 0x80) umount2(&(0x7f0000000400)='./file0\x00', 0x8) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={0x0, 0x9, 0x1ff, 0xee, 0x840e, 0x188}, &(0x7f0000000300)=0x14) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000340)={r1, @in={{0x2, 0x4e21, @multicast1=0xe0000001}}}, 0x84) 2018/05/29 01:54:08 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x980, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000240)={0xe4, 0xc, [0x800, 0x4, 0x80000001]}) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) listen(r1, 0x40) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r2, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f0000214000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1}], 0x1, &(0x7f0000414000)}, 0x0) r3 = accept(r1, &(0x7f0000000580)=@generic, &(0x7f0000000600)=0x80) shutdown(r2, 0x800000000000001) openat$ppp(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ppp\x00', 0x80500, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x2}, 0x10}, 0x1}, 0x0) accept4$packet(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r4}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x7, 0x100, 0x8001, {}, {0x0, 0x7530}, {0x3, 0x80000000, 0x0, 0x7fffffff}, 0x1, @canfd={{0x3, 0x0, 0x101, 0x7fffffff}, 0x31, 0x2, 0x0, 0x0, "87d261d9d2aeabe2ed98c453e70c047c3c3558322fc94e4dee12353a36b224ad1ddb022028c6830f7022ea210c337228d9bddc5e0d4a36c60643f82d8da83241"}}, 0x80}, 0x1, 0x0, 0x0, 0x1827e5006f55d126}, 0x4004000) 2018/05/29 01:54:08 executing program 5: r0 = socket$inet6(0xa, 0x80005, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x11d, 0x3ce) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") write(r0, &(0x7f00000001c0), 0x0) recvmmsg(r0, &(0x7f0000000200), 0x1d4, 0x2004, &(0x7f00000000c0)={0x77359400}) 2018/05/29 01:54:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00s\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 602.517834] binder: 5284:5294 got transaction with invalid offsets ptr [ 602.550380] binder: 5284:5294 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:08 executing program 6: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000c67000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x1000008000) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000700)={0x1, 0x9}, 0x8) r1 = socket$inet_dccp(0x2, 0x6, 0x0) dup2(r0, r1) r2 = accept4(r0, &(0x7f00000001c0)=@in={0x0, 0x0, @local}, &(0x7f0000000280)=0x80, 0x0) close(r2) 2018/05/29 01:54:08 executing program 3: r0 = socket(0x11, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) write$binfmt_aout(r2, &(0x7f0000000280)={{0x10b, 0x100000000, 0x5, 0x312, 0xf7, 0x6, 0xd1, 0x8}, "bbf1a98db2245a97fdba10cd830dab89194e7e3a7e748386ca053cee0f11d22a", [[], [], [], []]}, 0x440) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000000)=@ethtool_rxfh={0x4, 0x0, 0x0, 0x0, 0x0, "f055b4"}}) close(r2) close(r1) 2018/05/29 01:54:08 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f00000007c0)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='bdev\x00', 0x100000, &(0x7f00000002c0)) mount(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='.', &(0x7f0000000040)="045b898f73", 0x1004, 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='.', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f0000000200)) mount(&(0x7f00000001c0)='.', &(0x7f0000000100)='./file0\x00', &(0x7f0000753000)='mslos\x00', 0x5010, &(0x7f0000000ac0)) mount(&(0x7f00008deff8)='/\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)="6e66730039ad695ab91f0928267795ce2b07ba848ecc6b7c69", 0x2007a00, &(0x7f0000000140)) umount2(&(0x7f0000000040)='./file0\x00', 0x2) modify_ldt$write(0x1, &(0x7f0000000080)={0x10000, 0x0, 0x400, 0x1000003, 0x7, 0xffffffff, 0xfffffffffffffffc, 0x4, 0x400, 0x7ff}, 0x10) [ 602.580632] binder_alloc: binder_alloc_mmap_handler: 5284 20001000-20004000 already mapped failed -16 [ 602.635786] binder: BINDER_SET_CONTEXT_MGR already set [ 602.665900] binder: 5284:5294 ioctl 40046207 0 returned -16 [ 602.667621] binder_alloc: 5284: binder_alloc_buf, no vma [ 602.677212] binder: 5284:5304 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:09 executing program 3: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) r1 = dup(r0) socket$pptp(0x18, 0x1, 0x2) ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) ioctl$TCXONC(r1, 0x4008af04, 0x0) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0xbc, 0x49d6, 0x5}) 2018/05/29 01:54:09 executing program 1: mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, &(0x7f000000a000)) capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) rename(&(0x7f0000000000)='./file0/bus\x00', &(0x7f0000000040)='./file0/file0\x00') socketpair(0x1b, 0x3, 0x2, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(r0, &(0x7f0000000480)=""/4096, 0x1000) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) sched_setaffinity(r2, 0x8, &(0x7f0000000140)=0x1) ioctl$sock_netrom_SIOCGSTAMP(r1, 0x8906, &(0x7f00000001c0)) 2018/05/29 01:54:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000000000001bda00000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) [ 602.769775] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.778245] binder: undelivered TRANSACTION_ERROR: 29201 [ 602.858550] binder: 5334:5337 got transaction with invalid offsets ptr [ 602.871446] binder: 5334:5337 transaction failed 29201/-14, size 72-8 line 2999 [ 602.895530] binder_alloc: binder_alloc_mmap_handler: 5334 20001000-20004000 already mapped failed -16 [ 602.908509] binder: BINDER_SET_CONTEXT_MGR already set [ 602.917268] binder_alloc: 5334: binder_alloc_buf, no vma [ 602.919878] binder: 5334:5337 ioctl 40046207 0 returned -16 [ 602.922818] binder: 5334:5340 transaction failed 29189/-3, size 72-8 line 2971 [ 602.960299] binder: undelivered TRANSACTION_ERROR: 29189 [ 602.966177] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:11 executing program 4: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x8000) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0xb, 0x4, &(0x7f000000b000)={0x77359400}, &(0x7f0000048000), 0x0) flistxattr(r0, &(0x7f00000000c0)=""/69, 0x45) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000048000)=0x1c0000000, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(r0, 0x3, 0x0, 0x6) 2018/05/29 01:54:11 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000000040)='./bus\x00', 0xffe, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$clear(0x7, r0) execve(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)=[&(0x7f0000000100)='keyring\x00', &(0x7f00000001c0)='keyring\x00', &(0x7f0000000200)='keyring\x00', &(0x7f00000003c0)='keyring&em0wlan0\x00', &(0x7f0000000440)='keyring\x00', &(0x7f00000002c0)='keyring\x00', &(0x7f0000000300)='keyring\x00'], &(0x7f00000001c0)) 2018/05/29 01:54:11 executing program 2: epoll_create1(0x0) socket$unix(0x1, 0x5, 0x0) chroot(&(0x7f0000000000)='./file0\x00') socket$alg(0x26, 0x5, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) 2018/05/29 01:54:11 executing program 1: mmap(&(0x7f000035d000/0x3000)=nil, 0x3000, 0x2, 0x32, 0xffffffffffffffff, 0x0) socketpair(0x3, 0x4, 0x100000000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x100000000, 0x3, 0x7f, 0x5, "e739d50403a5b0baa48f0e09d2ba17fff54c89049439ff59fd48d8ea64a991fdc4a881b305e08ca705f2959e", 0x200}) r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc1205531, &(0x7f000035dffc)) 2018/05/29 01:54:11 executing program 6: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000180)={0x0, 0x0}) r1 = syz_open_procfs(r0, &(0x7f0000000140)='net#connector\x00') exit(0x0) fsetxattr(r1, &(0x7f0000000000)=@random={'btrfs.', 'user.syz\x00'}, &(0x7f0000000300)='comm\x00', 0x5, 0x0) 2018/05/29 01:54:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000010000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:11 executing program 7: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000540)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x84020800}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0xa}, 0x1, 0x0, 0x0, 0x2000000d}, 0x14) r1 = semget$private(0x0, 0x0, 0x2) getsockname$packet(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000005c0)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000600)={@remote={0xfe, 0x80, [], 0xbb}, 0x28, r2}) semctl$GETNCNT(r1, 0x0, 0xe, &(0x7f00000003c0)=""/241) r3 = socket(0x1001000000010, 0x802, 0x0) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @multicast2=0xe0000002}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="000000000000000018001200140001006970366772650000000000000006000008000d00", @ANYRES32], 0x40}, 0x1}, 0x0) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f00000001c0)={0x10000, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x2, 0x4e24, @loopback=0x7f000001}, 0x40, 0x50f, 0x6, 0x80, 0xffff, &(0x7f0000000180)='team_slave_1\x00', 0x1f, 0xffffffffffff99b3, 0xb3}) 2018/05/29 01:54:11 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x11, 0x800000003, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x8, 0x4) bind(r1, &(0x7f00005a2000)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00@\x00', 0x101}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'lo\x00'}) [ 605.067901] binder: 5360:5361 got transaction with invalid offsets ptr [ 605.080653] device lo left promiscuous mode 2018/05/29 01:54:11 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x2, 0xa, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") poll(&(0x7f0000000540)=[{r0, 0x2108}, {r1, 0x8}], 0x2, 0xd1) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000500)=0x2, 0x2) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000002c0)=0x569, &(0x7f0000000300)=0x2) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) setsockopt$inet6_mtu(r0, 0x29, 0x43, &(0x7f0000000080), 0xb6e7d10d529ef8d7) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, &(0x7f0000000000)=0xfffffffffffffd91) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="ffff081cee7e0000010000000600c100aa8570fe5b3cb7dd74e0077f00fa9c"], &(0x7f0000000280)=0x18) openat$cuse(0xffffffffffffff9c, &(0x7f0000000580)='/dev/cuse\x00', 0xc2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xf, 0xa, &(0x7f0000000380)=@raw=[@jmp={0x5, 0x5, 0xf, 0x5, 0xa, 0xc, 0xffffffffffffffff}, @alu={0x4, 0x7f, 0xf, 0x7, 0xf, 0xfffffffc}, @jmp={0x5, 0x3, 0xf, 0x6, 0x7, 0x2, 0x4}, @generic={0xc0ad, 0x2, 0x6, 0x1f}, @call={0x85, 0x0, 0x0, 0x3e}], &(0x7f0000000200)='GPL\x00', 0x6, 0x45, &(0x7f0000000400)=""/69, 0x40f00, 0x1}, 0x48) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000180)={r2, 0x5, 0xfe, 0x3, 0xfffffffffffffffa, 0x40}, &(0x7f00000001c0)=0x14) [ 605.122168] device lo entered promiscuous mode [ 605.122740] binder: 5360:5361 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:11 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x10000400, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000003c0)=0x3) [ 605.200447] binder_alloc: binder_alloc_mmap_handler: 5360 20001000-20004000 already mapped failed -16 2018/05/29 01:54:11 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x5, &(0x7f0000001ffc)=0x6, 0x4) r1 = getpgid(0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$KVM_GET_CLOCK(r2, 0x8030ae7c, &(0x7f0000000080)) syz_open_procfs(r1, &(0x7f0000000000)='oom_score\x00') r3 = dup3(0xffffffffffffffff, r0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x80, 0xd39d, 0x0, 0x1, 0xb, 0x9d92, 0x80000001, 0x100000001, 0x3, 0x2}, 0xb) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e20, 0x6295, @dev={0xfe, 0x80, [], 0x1d}, 0x200}}, 0x7ff, 0x3, 0x5, 0x400, 0x2}, 0x98) 2018/05/29 01:54:11 executing program 1: r0 = socket(0xa, 0x8000000001, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") unshare(0x2000400) ioctl$void(r0, 0xc0045878) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000000)={'syzkaller1\x00', {0x2, 0x4e22, @broadcast=0xffffffff}}) setsockopt$sock_attach_bpf(r1, 0x1, 0x1d, &(0x7f0000000140), 0x4) [ 605.254900] binder: BINDER_SET_CONTEXT_MGR already set [ 605.265869] binder: 5360:5361 ioctl 40046207 0 returned -16 [ 605.271887] binder_alloc: 5360: binder_alloc_buf, no vma [ 605.277518] binder: 5360:5377 transaction failed 29189/-3, size 72-8 line 2971 [ 605.371152] binder: undelivered TRANSACTION_ERROR: 29189 [ 605.377800] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:13 executing program 5: r0 = socket(0x2, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000400)=""/182) 2018/05/29 01:54:13 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x402401, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0xffffffffffffff9c, 0x0, 0x1, 0x1ff, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='loginuid\x00') ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000180)={r1, r2}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa84080000aa00000000bb000000000018aa0000883e0008a6780000000000020000010000000000000000"], &(0x7f0000000080)) 2018/05/29 01:54:13 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket(0x40000000001e, 0x1, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00') setsockopt(r1, 0x10f, 0x7f, &(0x7f0000000000)="76e927ce", 0x4) 2018/05/29 01:54:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:13 executing program 1: r0 = socket(0x11, 0x100000803, 0x0) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x20000000002) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={"6966623000faffffffffffffff00", 0x5001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'ifb0\x00', 0xa201}) write$tun(r1, &(0x7f0000000480)={@void, @val={0x5}, @ipv4={{0x5, 0x4, 0x0, 0x0, 0xfde5, 0x0, 0xffffffffffffffff, 0x0, 0xffffff84, 0x0, @empty, @multicast1=0xe0000001}, @igmp={0x0, 0x0, 0x0, @multicast1=0xe0000001}}}, 0xfdef) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000140)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000080)={0x0, 'team_slave_0\x00'}, 0x18) 2018/05/29 01:54:13 executing program 6: mkdir(&(0x7f000082f000)='./control\x00', 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x482100, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x242000, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x80000032, r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/qat_adf_ctl\x00', 0x480, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r2, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) unlink(&(0x7f00000000c0)='./control/file0\x00') rmdir(&(0x7f000015dff6)='./control\x00') chdir(&(0x7f0000000040)='./control\x00') stat(&(0x7f00000002c0)='./control/file0/file0\x00', &(0x7f0000000440)) clone(0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000300), &(0x7f0000000340)) r3 = socket(0xa, 0x1, 0x0) ioctl(r3, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") close(r1) 2018/05/29 01:54:13 executing program 4: ioperm(0x0, 0x5, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={0xffffffffffffff9c, 0x6, 0x0, 0xa05, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}, 0x20) r0 = memfd_create(&(0x7f0000000000)='/d)eva#', 0x4) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000340)=""/224) getcwd(&(0x7f0000000740)=""/203, 0xfffffffffffffd43) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x1, 0x42000) getpeername$ipx(r1, &(0x7f0000000140), &(0x7f0000000180)=0x10) ioctl$DRM_IOCTL_AGP_ACQUIRE(r1, 0x6430) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000240)={0x5, 0x2, 0x3}) getsockname$packet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x14) iopl(0xfffffffffffffffe) 2018/05/29 01:54:13 executing program 7: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000340)=0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x3) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x0, 0x0) umount2(&(0x7f0000000240)='../file0\x00', 0xa) mkdir(&(0x7f0000f4eff8)='./file0\x00', 0x0) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) symlink(&(0x7f00000000c0)='/\x00', &(0x7f0000000000)='./file0/file0\x00') mount(&(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='./file0/file0\x00', &(0x7f00000001c0)='9p\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001880)={{{@in6=@mcast1, @in6=@mcast2}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000680)=0xe8) write$cgroup_int(r1, &(0x7f0000000300)=ANY=[], 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f000000aff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000001c000)) chdir(&(0x7f0000000780)='./file0\x00') symlink(&(0x7f0000000100)='../file0\x00', &(0x7f0000000200)='./file0\x00') umount2(&(0x7f0000000180)='./file0\x00', 0x3) [ 606.796315] binder: 5410:5412 got transaction with invalid offsets ptr [ 606.806072] Trying to set illegal importance in message [ 606.813328] binder: 5410:5412 transaction failed 29201/-14, size 72-8 line 2999 [ 606.825883] Trying to set illegal importance in message [ 606.830822] 9pnet_virtio: no channels available for device ./file1 2018/05/29 01:54:13 executing program 5: 2018/05/29 01:54:13 executing program 2: 2018/05/29 01:54:13 executing program 3: 2018/05/29 01:54:13 executing program 4: [ 606.838341] binder_alloc: binder_alloc_mmap_handler: 5410 20001000-20004000 already mapped failed -16 [ 606.866594] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:13 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10cd}, 0xfffffffffffffef6) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x7, 0x1f, 0x1, 0x1, 0x1}], {0x95}}, &(0x7f000031cff6)='syzkaller\x00', 0x5c6e, 0x412, &(0x7f00001a7f05)=""/251}, 0x48) 2018/05/29 01:54:13 executing program 5: r0 = socket$kcm(0xa, 0x3, 0x11) sendmsg$kcm(r0, &(0x7f00000027c0)={&(0x7f0000000000)=@nl=@unspec, 0x80, &(0x7f0000002500), 0x0, &(0x7f0000000080)}, 0x0) [ 606.902986] binder: 5410:5412 ioctl 40046207 0 returned -16 2018/05/29 01:54:13 executing program 3: mount(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='/\x00', &(0x7f00000001c0)="6a6666733ac1", 0x21000ad, &(0x7f0000000340)) [ 606.964410] binder_alloc: 5410: binder_alloc_buf, no vma [ 606.970109] binder: 5410:5443 transaction failed 29189/-3, size 72-8 line 2971 [ 607.086457] binder: undelivered TRANSACTION_ERROR: 29189 [ 607.092443] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:14 executing program 4: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x61) write$binfmt_elf32(r0, &(0x7f0000000400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3e, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x20, 0x1}, [{0x1, 0x0, 0x1000, 0x0, 0xbe}]}, 0x58) close(r0) uselib(&(0x7f00000001c0)='./file0\x00') 2018/05/29 01:54:14 executing program 7: r0 = socket(0x10, 0x3, 0x0) recvmsg(r0, &(0x7f0000000440)={&(0x7f0000000140)=@sco, 0x80, &(0x7f00000002c0)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_getmulticast={0x14, 0x3a, 0x305, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) 2018/05/29 01:54:14 executing program 2: ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) r1 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000180)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) dup2(r1, r0) 2018/05/29 01:54:14 executing program 3: perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000006c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)={[0x30]}, 0x1) 2018/05/29 01:54:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @link_local={0x1, 0x80, 0xc2}, [], {@ipv4={0x800, {{0x8, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}, {[@lsrr={0x83, 0x7, 0x5ef, [@multicast1=0xe0000001]}, @ssrr={0x89, 0x3}]}}, @igmp={0x0, 0x0, 0x0, @broadcast=0xffffffff}}}}}, &(0x7f00000002c0)) 2018/05/29 01:54:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00O@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:14 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101400, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) 2018/05/29 01:54:14 executing program 6: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0x44, 0x3, 0x288, [0x0, 0x0, 0x200005c0], 0x0, &(0x7f0000000580), &(0x7f00000005c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x5, 0x0, 0x0, 'tunl0\x00', 'veth0_to_bridge\x00', 'ipddp0\x00', 'rose0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0x70, 0x70, 0x98}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x4}}, {{{0x5, 0x0, 0x0, 'ifb0\x00', 'yam0\x00', 'team_slave_0\x00', 'sit0\x00', @empty, [], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], 0xc4, 0x118, 0x160, [@cgroup0={'cgroup\x00', 0x8}, @pkttype={'pkttype\x00', 0x4}]}, [@common=@AUDIT={'AUDIT\x00', 0x4}, @common=@mark={'mark\x00', 0x8, {{0x0, 0xffffffffffffffff}}}]}, @common=@log={'log\x00', 0x24, {{0x0, "00bf31456771b60ac574d84edbd08169581e22f659da2a4d6945a66badbf"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0x330) 2018/05/29 01:54:14 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) write$rdma_cm(r0, &(0x7f0000000640)=@get_event={0xc, 0x8, 0xfa00, {&(0x7f00000004c0)}}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) 2018/05/29 01:54:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="52569592d11f39bb93b3bda7c008ace3180a0000000000df"], &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096}, 0x48) [ 607.794627] binder: 5464:5469 got transaction with invalid offsets ptr [ 607.815164] kernel msg: ebtables bug: please report to author: Wrong len argument [ 607.823667] binder: 5464:5469 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:14 executing program 1: openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x101400, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) dup2(r0, r1) 2018/05/29 01:54:14 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40000, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000280)=""/56) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000000)={{0x2, 0x4e23, @rand_addr=0x3f7}, {}, 0x0, {0x2, 0x0, @rand_addr=0x5}, "04d6350100104040000000008000"}) [ 607.851427] binder_alloc: binder_alloc_mmap_handler: 5464 20001000-20004000 already mapped failed -16 2018/05/29 01:54:14 executing program 2: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x5, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000280)={{&(0x7f000090c000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f000090c000/0x4000)=nil, 0x4000, 0x67) madvise(&(0x7f000090b000/0x3000)=nil, 0x3000, 0x4) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000100)=""/154) dup3(r0, r1, 0x0) 2018/05/29 01:54:14 executing program 6: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10}, 0xffffffffffffff51, &(0x7f0000000580)={&(0x7f00000002c0)=@updpolicy={0xfc, 0x19, 0x301, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14}, @in6=@ipv4={[], [0xff, 0xff]}, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in=@multicast1=0xe0000001, 0x0, 0xff}, 0x0, @in=@multicast2=0xe0000002, 0x0, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4}, 0x0) [ 607.905345] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:14 executing program 3: r0 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0xa4100) setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000040)={0x303, 0x33}, 0x4) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x49ee, 0x4) mprotect(&(0x7f00006ba000/0x4000)=nil, 0x4000, 0x1) rt_sigaction(0x0, &(0x7f0000000100), 0x0, 0x8, &(0x7f00000000c0)) r1 = pkey_alloc(0x0, 0x3) pkey_free(r1) 2018/05/29 01:54:14 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xa5}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000140)={r4, 0x0, r5}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f00000002c0)=@ioapic={0x2, 0x0, 0x0, 0x0, 0x0, [{0x5, 0xfdfdffff}, {0x0, 0xf}]}) [ 607.931200] binder: 5464:5469 ioctl 40046207 0 returned -16 [ 607.943178] binder_alloc: 5464: binder_alloc_buf, no vma [ 607.948786] binder: 5464:5484 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:14 executing program 6: r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x4, 0x381840) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @multicast2=0xe0000002}}, 0x0, 0x0, 0x4}, &(0x7f0000000200)=0x98) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003c1000), 0x0) r2 = accept$alg(r0, 0x0, 0x0) recvmsg(r2, &(0x7f0000d43000)={&(0x7f000076c000)=@hci, 0x3, &(0x7f0000ae0fc0)=[{&(0x7f0000b9ff8b)=""/117, 0xa5}], 0x1, &(0x7f0000837f57)=""/169, 0xa9}, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x30000) r4 = fcntl$dupfd(r1, 0x0, r0) renameat2(r3, &(0x7f0000000100)='./file0\x00', r4, &(0x7f0000000240)='./file0\x00', 0x1) [ 608.060802] binder: undelivered TRANSACTION_ERROR: 29189 [ 608.066869] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:14 executing program 7: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={"626f6e641100000000000000e5ff00", r1}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="4d9f"]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xf0ffffffffffff}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0xc0) 2018/05/29 01:54:14 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'veth1_to_bridge\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, r1}, 0x14) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x800) sendmsg$rds(r2, &(0x7f0000003000)={&(0x7f0000000040)={0x2, 0x4e22, @broadcast=0xffffffff}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/245, 0xf5}], 0x1, &(0x7f0000002e00)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000002c0)=""/145, 0x91}, &(0x7f0000000140), 0x2}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/203, 0xcb}, &(0x7f0000000480), 0x5}}, @zcopy_cookie={0x18, 0x114, 0xc}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000004c0)=""/42, 0x2a}, &(0x7f0000000500), 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x5c}, &(0x7f0000000540)=0x1, &(0x7f0000000580)=0x8, 0xa82, 0x3f, 0x401, 0x3ff, 0x5e, 0xfff}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000005c0)=""/225, 0xe1}, &(0x7f00000006c0), 0x8}}, @rdma_dest={0x18, 0x114, 0x2, {0x6, 0x10000}}, @mask_fadd={0x58, 0x114, 0x8, {{0x1ff, 0xd3e8}, &(0x7f0000000700), &(0x7f0000000740)=0xc2ad, 0x9, 0xffff, 0x3, 0x0, 0x54, 0x10001}}, @rdma_args={0x48, 0x114, 0x1, {{0x3}, {&(0x7f0000000780)=""/4096, 0x1000}, &(0x7f0000002d40)=[{&(0x7f0000001780)=""/251, 0xfb}, {&(0x7f0000001880)=""/52, 0x34}, {&(0x7f00000018c0)=""/38, 0x26}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/118, 0x76}, {&(0x7f0000001a80)=""/208, 0xd0}, {&(0x7f0000001b80)=""/125, 0x7d}, {&(0x7f0000001c00)=""/4096, 0x1000}, {&(0x7f0000002c00)=""/250, 0xfa}, {&(0x7f0000002d00)=""/50, 0x32}], 0xa, 0x8, 0xfffffffffffff2ff}}, @rdma_dest={0x18, 0x114, 0x2, {0x100000000, 0x9}}], 0x200, 0x4008800}, 0x1) 2018/05/29 01:54:14 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:14 executing program 3: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000c34000)={0xaa, 0x24}) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000b4e000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) mremap(&(0x7f00004e6000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000ffa000/0x4000)=nil) close(r0) 2018/05/29 01:54:14 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)="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", 0x0, 0x0) getdents(r0, &(0x7f0000000040)=""/135, 0x87) 2018/05/29 01:54:14 executing program 6: r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x10, 0x4000000000000002, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000400)={'team_slave_1\x00', 0x1000}) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") munmap(&(0x7f0000000000/0x600000)=nil, 0x600000) futex(&(0x7f00000000c0), 0x7, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) 2018/05/29 01:54:15 executing program 4: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) prlimit64(r3, 0x0, &(0x7f00000000c0)={0x3, 0x82}, &(0x7f0000000100)) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) close(r2) r4 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmat(r4, &(0x7f0000ff7000/0x4000)=nil, 0x4000) close(r1) [ 608.625869] binder: 5527:5533 got transaction with invalid offsets ptr [ 608.648134] binder: 5527:5533 transaction failed 29201/-14, size 72-8 line 2999 [ 608.686255] binder_alloc: binder_alloc_mmap_handler: 5527 20001000-20004000 already mapped failed -16 [ 608.723687] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:15 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8914, &(0x7f0000000000)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') r1 = getpid() setpriority(0x0, r1, 0x0) 2018/05/29 01:54:15 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) pipe(&(0x7f0000000100)={0xffffffffffffffff}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clock_adjtime(0x5, &(0x7f0000000000)={0x7, 0x20, 0xfff, 0x8001, 0x2, 0x4, 0x10000, 0x200, 0x81, 0x7f, 0x3a, 0x101, 0x9, 0x9, 0xfffffffffffffffd, 0x96a, 0xc8f, 0x5, 0x20, 0x1, 0x4535cb8, 0xacee, 0x2, 0xd5ed, 0x3, 0x5}) ioctl$KVM_IRQ_LINE(r1, 0x4008ae6a, &(0x7f0000000280)={0xfec00000}) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x401) 2018/05/29 01:54:15 executing program 6: r0 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, &(0x7f00000000c0)="9f", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000001c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a}, &(0x7f0000000240)="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", 0x801, 0xfffffffffffffffd) r2 = add_key$user(&(0x7f0000001240)='user\x00', &(0x7f0000001280)={0x73, 0x79, 0x7a}, &(0x7f00000012c0)=' ', 0x1, 0xfffffffffffffffe) r3 = accept$inet(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, @multicast2}, &(0x7f0000000a80)=0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000b40)={0xa, &(0x7f0000000ac0)=[{0x5, 0x3ff, 0x5}, {0x3, 0x8, 0x7f, 0xfffffffffffffff7}, {0x9, 0x6, 0xff, 0x81}, {0x9, 0xffff, 0x100000001, 0x2}, {0xfffffffffffffffa, 0x2, 0x8000, 0x800}, {0x10000, 0x7ff, 0x6, 0x2}, {0x7, 0x360, 0x20, 0x2000000}, {0x1000, 0x6, 0x401, 0x1}, {0x101, 0x0, 0x7, 0xffffffff80000001}, {0x5, 0x9, 0x8adc, 0x6}]}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x900, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)={0xe, 0x1ff, 0x1, 0xff, 0x1, r4, 0x8}, 0x2c) getsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) keyctl$dh_compute(0x17, &(0x7f0000001300)={r0, r1, r2}, &(0x7f0000001340)=""/245, 0xf5, &(0x7f00000014c0)={&(0x7f0000001440)={'michael_mic\x00'}, &(0x7f0000001480)}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r5, 0xc018620b, &(0x7f0000000bc0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r4, 0xc018620b, &(0x7f0000000c00)={r6}) 2018/05/29 01:54:15 executing program 7: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSWINSZ(r0, 0x5423, &(0x7f0000000080)={0x1b}) read(r0, &(0x7f0000000080), 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x404401, 0x0) accept4$unix(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x6e, 0x800) [ 608.734628] binder: 5527:5533 ioctl 40046207 0 returned -16 [ 608.736340] binder_alloc: 5527: binder_alloc_buf, no vma [ 608.746058] binder: 5527:5538 transaction failed 29189/-3, size 72-8 line 2971 [ 608.780848] MPI: mpi too large (16392 bits) [ 608.828559] binder: undelivered TRANSACTION_ERROR: 29189 [ 608.835530] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:15 executing program 2: r0 = socket$inet6(0xa, 0x1, 0x5) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f0000000200)="a1", 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @loopback={0x0, 0x2c}}, 0x1c) shutdown(r0, 0x1) 2018/05/29 01:54:15 executing program 7: r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x448040, 0x0) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000000140)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {}, {}]}) bind$pptp(r0, &(0x7f0000000040)={0x18, 0x2}, 0x1e) r2 = socket$pptp(0x18, 0x1, 0x2) dup2(r0, r2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x1, @broadcast=0xffffffff}}, 0x1e) 2018/05/29 01:54:15 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x120, 0x36b) setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000040)=0xfffffffffffffffd, 0x7068a81a753b9e8e) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGARP(r1, 0x8954, &(0x7f0000000200)={{0x2, 0x4e20, @multicast2=0xe0000002}, {0x7}, 0x8, {0x2, 0x4e21, @multicast1=0xe0000001}, 'yam0\x00'}) write(r0, &(0x7f00000001c0), 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f0000000580), 0x0, &(0x7f00000005c0)=""/212, 0xd4}}], 0x1, 0x2000, &(0x7f0000000e40)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) clock_settime(0x7, &(0x7f00000000c0)={r2, r3+30000000}) 2018/05/29 01:54:15 executing program 5: r0 = socket(0xa, 0x1, 0x0) unshare(0x400) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x6}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) 2018/05/29 01:54:15 executing program 4: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000040)=0x6e) open_by_handle_at(r0, &(0x7f00000003c0)={0xe1, 0x7, "142d5337bf6ca90d9b542ee490b95cef1c8b8dd7ab78e085b59a1c13d4465455bb1b084a81f78d5dcb71f73f72d40172ba6098a16f97080f0ad20741422b29de09909d2d88f859fb3031f2161add70d636eca47c9a70cc1647ddd17baa34556c10fecf4cebbd85c725b873666946bd7c013cd6c209e2a1fec00676717777e23e8a1a7804657742f3c3f0c361563b6b90643c2147edce800e24a29b73ad888b5e834f90d2f7472832ff849726b35ad84b936658369907566439d52d9f481c7854e56906155ad545a3f460bba689619675ad3abec9fa4325df5d"}, 0x686380) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)={0x22c, 0x1d, 0xfffffffffffffffd, 0x0, 0x0, {0x7592da67}, [@generic="821d1bcab344ab22c7600903a6ad99c0af4feb0862dafb5a79156790644b8fb8901543e029f4b2f16ed7832f7d1b3f7c9eb369a6d0dddc4ceb67fdd5cc7f4c27c247d168d6a7669d5ba89347d59015ecdf2fdf600df4cdee7ccfea544214d70981527178875cd5b598f0da4f6bddf48b92f29fe330fcf8872b0f3ecf91229053e0d48a3fa9f14c3f2302d5c654e2", @nested={0xcc, 0x78, [@generic="decbcabaf2bbb8e4a197874cdb714f19f5b8fc14474d3f67694a07de29a8baae04fbdee3352b180bc6fdad8d2e92edfcaa2033e0aa83e2865ac84a3d697f229ccc84f0dfe180d4e7bc485e93e82c370847d16bf9084ead39012b45c669daa7a25ac6fd0bd8dd0d02586cfcd1e3e98894e28c8ca98b658c7017e91577087c0ddc4280b838f0a2211732e87d606cd4b57d441c02d37c842e82620ebb9af1c7e71c387cd0d69b48b7fc678ffe2e", @typed={0x8, 0x86, @str='\x00'}, @generic="930faa9953a7407e50", @generic="c1a8546972277760e68239"]}, @generic="805242f1fe6201352c1722c5aa597b3ebbb3923fad740d92fae9003d7fc5a34cca1f1b89a9425ead0673a227b8a3e8f4b238d944860939c9ae13c007d7b4a08d27b7842400fff08668d582872a160b64ff375ed1c2730a6e97dc1011091e3d5e7dd0c1c6e96edf9a11442c8efd30f346b3c459f90c56f345be05b9796acf4c63a980f08c08c1cf9ce3954f115d5dc0fd55b4f9525c82826cccf28bbacd1b60efb445f61e7e0b1e5c39fc3c90136dd17540a5bf10f0370b396a6824e7"]}, 0x22c}, 0x1}, 0x0) 2018/05/29 01:54:15 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000026c0)='smaps\x00') epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f0000002700)) ioctl$SG_IO(r1, 0x2285, &(0x7f00000000c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x384c8, &(0x7f00000004c0)}, &(0x7f0000000140)="9689b714939a", &(0x7f0000000280)=""/4096}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x10000, 0x0) sendmmsg(r3, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000001280)="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", 0xfa}, {&(0x7f0000001380)="8d8b8e78b366aeb891ef2cf0983371ebb9acf0d0997e473f6efb641d87541a1a39da9cb323e2c2f971703ccab4537a37d3a80a57e6162ee3ac182da0c84f4e98472c8d6b91dc21c39b462de8d7e0fa84f16ca66e71c2f35b9592c38e9a813b9cd00c7896e701a641f47fc2b95b0a4d4ee3518fffe6a36d00d4dfcee57ae5aa3ba58789954fcf71bcf3cb87a09287f028fb1e59a4bc230a44c687d134d8dfbcf5317caae8a7efc9d6680f992dac0e536c365d9ecf4bb43cd1e54f82ee2fb5ef256acc1ad72c03e79816afce13153bb26630a9759f031fe4b6371a827c6c015a0980e774169c3b8216122cc1149b0b99c9c915adf7c2d006", 0xf7}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000000180)="818c9e3bdb30cea20484da77f84933c43625e5cd3a38c59db67448ddccd10e200183168f9b0cf814961064ab08c7c57500304e7831b9d5811e4d23251e00c4c23d9e0300a82aea9728de4873f3b93c56f1b5bb4664f590bf3a991b6d9857def2f5de4d14e041930ac7c8dc8df3d18e0adabcab792a47f02454bdc6b507c9c2df23ed202f9db24a009b9a037ad9a6f4656c06f9fe18116da544d2f48114c0", 0x9e}, {&(0x7f0000002480)="b0e49d84b55d3dfbb9f5a8cd2c80aa107ca506a693be7c64aa5332ba9a55e55e5b41b66b97f66f9cda382144338d2de03e105bd06d", 0x35}], 0x5, &(0x7f0000002540)=[{0x40, 0x105, 0x3f, "7fce21989ef844a9c9030f1d144204f1c4070a5ebace90cfaebbe54059b14f0c52a417f3fb5e195457770f"}, {0xd8, 0x116, 0x4000000, "538743ba1f5999617e99295f902245d62e53df5e3fd8083d93d72498c0c5a599f5caf0d34ec5c81c3472c7e404f2dd7c7dec300de473d38a1cfaa58bfb12b23717caef76180d8028670b2ed7803e3e4fd6f6ca824d797c045b4ed93e53a5820286f617427fa54f65d2c9f2e42804101f10543618b262f0d582f3317009148ed888433bc314ac7b8e07c7828c4dddf8e12b76636e01674923797e13c7e832620566463bd84c3ab6fd34cad3de6d9972e1ed451ca0288b8d3d4a74566acd14592eb604dcc4"}], 0x118, 0x80}, 0x800}], 0x1, 0x8844) 2018/05/29 01:54:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000500000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:15 executing program 6: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, r0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = dup3(r1, r1, 0x80000) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f00000000c0)=""/1, &(0x7f00000001c0)=0x1) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r3, 0x84, 0x7, &(0x7f0000000080)={0x7f}, 0x4) openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x1000000000080000, 0x0) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f0000000100)=0x4) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100, 0x1) 2018/05/29 01:54:16 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x40, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4543(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r2 = getpgrp(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{}, {}, {}, {}, {}]}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000000c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000280)={0xb7, 0x100, r2, 0x9, r3, 0x1944, 0x11c, 0x9}) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x10) [ 609.582711] binder: 5576:5581 got transaction with invalid offsets ptr [ 609.595162] binder: 5576:5581 transaction failed 29201/-14, size 72-8 line 2999 [ 609.607419] netlink: 536 bytes leftover after parsing attributes in process `syz-executor4'. 2018/05/29 01:54:16 executing program 6: r0 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x3, 0x40, 0x7}, 0xc) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x800) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000080)={0x10000000, 0x4, 0x1}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(rmd128-generic,pcbc(aes-aesni))\x00'}, 0x5f) dup(r0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000180)) [ 609.642273] binder_alloc: binder_alloc_mmap_handler: 5576 20001000-20004000 already mapped failed -16 [ 609.660363] netlink: 536 bytes leftover after parsing attributes in process `syz-executor4'. [ 609.667562] QAT: Invalid ioctl [ 609.677530] binder: BINDER_SET_CONTEXT_MGR already set [ 609.684464] binder_alloc: 5576: binder_alloc_buf, no vma 2018/05/29 01:54:16 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000000000)={0xfffffffffffffffd}, 0x0, 0x8) timer_create(0x0, &(0x7f00000001c0)={0x0, 0x12, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000040fe0)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) pselect6(0x40, &(0x7f0000000200), &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x989680}, &(0x7f0000000280)={&(0x7f0000000140), 0x8}) semget(0x1, 0x0, 0x82) ptrace$poke(0x5, r1, &(0x7f0000000040), 0x212) 2018/05/29 01:54:16 executing program 5: r0 = semget$private(0x0, 0x8, 0x0) semop(0x0, &(0x7f0000000000)=[{0x2, 0xffff, 0xfffffffffffffffc}], 0x1) semop(r0, &(0x7f0000000000), 0x177) semctl$IPC_RMID(r0, 0x0, 0x10) 2018/05/29 01:54:16 executing program 7: r0 = socket(0xa, 0x1, 0x1ff) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$inet(0x2, 0x80003, 0x3) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000469ffc)=0x132, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000000)={0xfffffffffffffff7, 0x1, 0x7, 0xfffffffffffffffb, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r2, 0x2}, 0xc) sendto$inet(r1, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000300)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) close(r1) [ 609.690076] binder: 5576:5594 transaction failed 29189/-3, size 72-8 line 2971 [ 609.697219] binder: 5576:5581 ioctl 40046207 0 returned -16 [ 609.786867] QAT: Invalid ioctl [ 609.790514] QAT: Invalid ioctl [ 609.797396] QAT: Invalid ioctl [ 609.808852] QAT: Invalid ioctl [ 609.839321] QAT: Invalid ioctl 2018/05/29 01:54:16 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) sched_yield() r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x40, 0x2) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond\x00', &(0x7f0000000080)=@ethtool_rxnfc={0x2b, 0x0, 0x0, {0x0, @ah_ip6_spec={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}}, {"e8de", @link_local={0x1, 0x80, 0xc2}}, @ah_ip4_spec={@dev={0xac, 0x14, 0x14}, @broadcast=0xffffffff}, {"1a82"}}}}) close(r2) close(r1) 2018/05/29 01:54:16 executing program 5: r0 = socket(0x2, 0x1, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6799d7c57755a259, 0x8000000020011, r1, 0x0) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) 2018/05/29 01:54:16 executing program 4: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f00000001c0)=""/4096) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) r1 = socket(0x200000000000011, 0x4000000000080002, 0x0) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000001500)=ANY=[@ANYBLOB="63f691016fb444f7cc0f52a5198a140983fd861b738c4a00843cacf7d00f032e354ed2e809e9113ba59aa9caf8195ddad78b1e3f8fa4fac356025dbd4093b374b8e9b341adc3eb9249b22b8fb0023b62e8cc0341b386750500768a7f4d", @ANYPTR64, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYPTR, @ANYPTR, @ANYPTR64=&(0x7f0000001280)=ANY=[@ANYBLOB="35e4558193b0ff4d7d3252baabdfaa89c41c9cfd17ba0d95b867b994bb8f54610397dc8ba087993fb6f700aaa2d0829895a263fcec9c1d5a0626877faf64275b5971609c3560ce357968488f2d77210c2b5488dd364d71a5bbeaecf817acdd6fd52a2d", @ANYPTR, @ANYPTR, @ANYBLOB="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", @ANYRES16=r2, @ANYBLOB="aaf133acaf0f49b03d497751f0240df5b188485706b3918040f9090d7b27ed7e85e66e92fdb7431d056d3adcd34aceadaff964810bf6a4fdfb8c26aab1276edf4ddfb4f0ebc6a0a2b7a118d44cb38bbb09f19b8d3afd5da3f63506f757960e0c67c0ef3f443f156fb5af502b2c663a3f2f7e40381468282616a51fba1f5440e034c66e65734aabd00275c5495c2273f8da125fb5c522bb3c91dd6caadb931d4e86ba8e3d7d6607d222776c760ae7b3903c33e38d5ed05c4c14d0ed780db96e69f6d5635363a291353ea3ebf879a25e4e499cea000642b9144e576b5a", @ANYRES32=r2]], @ANYRES16=r1], 0x4) 2018/05/29 01:54:16 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000007000)={&(0x7f0000001000)={0x10}, 0xc, &(0x7f0000007ff0)={&(0x7f0000009000)=ANY=[@ANYBLOB="40010000100001030000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000100000000320000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200010000000000000000000800160000000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0x140}, 0x1}, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000040)={{{@in=@local, @in=@broadcast}}, {{@in=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000140)=0xe8) 2018/05/29 01:54:16 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'trusted.', '/dev/kvm\x00'}, &(0x7f00000000c0)=""/25, 0x19) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x5, 0x40000) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000140)=0x9000000) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [0x40000070]}) 2018/05/29 01:54:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000400000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:16 executing program 1: perf_event_open(&(0x7f0000000100)={0x2000000005, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r0, 0x5452, &(0x7f0000000000)={0x260, &(0x7f0000000040)}) 2018/05/29 01:54:16 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) sendto$inet(r0, &(0x7f0000000140), 0x0, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) readv(r0, &(0x7f00000005c0)=[{&(0x7f00000004c0)=""/101, 0x65}, {&(0x7f0000000540)=""/101, 0x65}], 0x2) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@l2, 0x80, &(0x7f0000000280)=[{&(0x7f00000001c0)=""/169, 0xa9}], 0x1}, 0x0) sendmsg$netlink(r0, &(0x7f0000000440)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x110001}, 0xc, &(0x7f0000000180)=[{&(0x7f0000000600)={0x1514, 0x18, 0x308, 0x70bd26, 0x25dfdbfd, "", [@typed={0x4, 0x43}, @generic="a5a3515fc8703aa759e7c4f18016a3fd6eb848fb814722df27225436f2e619c8cc727da7c7d07a662cc84ad16ac2a7965c911250a507bbd69b0c635132a724c64712fe06a41b15b23c1e349d3cc19d59e77f38c419fd1f24ff379926da42fdaaf1c3d4d00f55e4057784bf28f3e835aee6500d9d5608479c5d31ec4cb43839756090a111dcb0ac", @nested={0x1004, 0x61, [@generic="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"]}, @nested={0x25c, 0x22, [@generic="91190bef87a98772b09f881ab90638d9b6e798b30deb83305448dc3534a1970f1a4417de8ce73f1cfe71e4a0ab3a32a84090bcea13fd023ae8055711cb90940b3428c2271a65ed4c02d41ff86b913c1d500b7cc1d6a70b0dbe0792d47e055dd16023798a5872f9fe880308e784020cc3d670c197d177e1c3af5cfc285fc32b4804a090b4ecf58822bbe0ee3ab4", @typed={0x8, 0x55, @u32=0x101}, @generic="cc7ef1a9a699474e8c715de504476f1689c7bcc789ac99146bb00a5dcd676b882844061953df1b12e1a785075d0966610119804cfd731eaff3ba7e854daae9d5b957a4249d12903df6f8fd2b01d467764693c28c935b4be3c831982bc81ac05b7c3837dc0364ed483336c46c2250e3c1ed6b528e30d78a59a619db8bd4ae3e38dc78802a7c0a32c40bb6a4f7dd7815e0bd03dad59f74aed3316e8799cecc1dd80df86154815de90f20bc620fb63192c466bebf005bacda079e3c3071da67ecf6a15bb79e804ac518868b6858a47c496e4997", @generic="b01a588c4d4372c6b74c58b07e8d71b214c9a2874456402ded831752ebc5388967df9443b30481716695f06b42e970cbec3197d1090d3a4c46f7b457c5d5c2288b585d9bfe570cabb2c9039ddcca1512d14610a693a26771feb1bc8d1e4d28abf9468701aeac46e8673bde8537106ee09ab99f024f64f9d6bf5dea4560eab18566c2c724b49cda7a04cfa5d3b608c825c8fc4ddb3cf2d8dd451a1dc3570bc4cb6dcc5002fe59e3272a788e20fe4df0d730abc058971a43b40c1be1b4d82454fb997cc071a4e37d7868d993d55314bf3835d307055c2944e8266c9d5af9f50b18349950d28dcadc3c1ad0ad52f8d7ca"]}, @typed={0x8, 0x6, @u32=0x6}, @nested={0x210, 0x6c, [@typed={0x8, 0x8, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @typed={0x8, 0x3c, @u32=0x4}, @generic="0f4a5cc511cbdc7049ae51f97d18228614875fa4cccde04588247adcf8d20dbc4d6631a2933da48f119f0ecb4b5586b8e84f4c80fe515b230260f330b4d6c6734d8bace44827d356ef9e8fd0c2dd0592bededc98efceaabc8f9b809dfb3e094a57447547f27d9fc004d851a1912969370a904bccb54f398299a122ea1b596d907d9174bfdc67fde699bf4048ce4261c9705fa3e680adf88805b7ec8d8b79a8a14a4a64f6e09f7ad61c67ee9de1d43858fdc1668bd773b86ecfe551dfde1f2697dfa71b83199c389d88f15fa982e8d591d6f870067dcc8696faec2d1fdbbd18a48607a27a3cfd7b55dab068cacc4a9e50", @generic="835141ffedd2b1bda3badbe458397bba1650c9c8fd258df4304afe76614491a745d531873f7f00dfe4bee4d6e18670343aab6b0911b7638b66d3992dc55acdb1f6ba1ac80de8b61c573994ecb442d80067d98b9f9f96c8174088", @generic="e5ff9f7687cf6b2a961c8b13e814c8caca4845bc2c3282ae3e0101168d6781f3ba2331a6dec486acfa511e4956e9ee3ff9321ca329504d908e4553ebedb83537a59062bbcf83fa9f4d0abef1055c61aff21b59e9", @generic="a4ceed1f276b11b0b8102be51d95e2eedecff3274b882735230a82272953fc2755494ae92185b2d62f60057017d0f4d92b75653779c6453fe156a1663d567fcae0792117a5aefcbc65955e384d3a959495998fbc83ab8123c2a47d58"]}]}, 0x1514}, {&(0x7f0000001b40)=ANY=[@ANYBLOB="2c0000002b00000225bd7008fddbdf25bc1aaf9110ddadac76538a9b25bbe5cb43f7f98ca22d6514ac5be70441283ff0c64d0f1a4a351c103244b6c0a4aab56301ec214c86"], 0x2c}, {&(0x7f0000000340)={0xb4, 0x14, 0x100, 0x70bd26, 0x25dfdbfc, "", [@nested={0xa4, 0x0, [@generic="0a9bdc522aec12890c780ad3b8defae89b24ce59ecc5c5e48354984c091c6a9edda2d78f46b21bf5857350", @generic="08c1b42c82c25274abe2a3d9e93ddddb81ce0bee1f8dcfb448b8183eec404f8b1b66755b08fc8573d89b34a3f3b72195b975f15e3fb4554fdc788c7ec1f76b34057af24253c0d4c44d7fceda72ebb5ad06bb270faf41f988e6ea4f07cf9766afa31e569e07aff95418ecb46bb1fd872d9e58e4d920", @generic]}]}, 0xb4}], 0x3, &(0x7f0000000400)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x40, 0x4000}, 0x20000000) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="17", 0x1}], 0x1) [ 609.862790] binder: undelivered TRANSACTION_ERROR: 29189 [ 609.870523] binder: undelivered TRANSACTION_ERROR: 29201 [ 609.883313] QAT: Invalid ioctl [ 609.898186] QAT: Invalid ioctl [ 609.952013] binder: 5642:5645 got transaction with invalid offsets ptr [ 609.973164] binder_alloc: binder_alloc_mmap_handler: 5643 20000000-20002000 already mapped failed -16 [ 609.976165] binder: 5642:5645 transaction failed 29201/-14, size 72-8 line 2999 [ 610.011293] binder_alloc: binder_alloc_mmap_handler: 5642 20001000-20004000 already mapped failed -16 [ 610.040138] binder: BINDER_SET_CONTEXT_MGR already set [ 610.078802] binder: 5642:5645 ioctl 40046207 0 returned -16 [ 610.100534] binder_alloc: 5642: binder_alloc_buf, no vma [ 610.106142] binder: 5642:5660 transaction failed 29189/-3, size 72-8 line 2971 [ 610.129540] binder: undelivered TRANSACTION_ERROR: 29189 [ 610.135260] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:17 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000000)=ANY=[@ANYBLOB="020f0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000000020000000000000000000600000000000000000000000000000000000000000000000000000000000001ac1414bbf5c31ed397535c000000000000000000000005000000000002000300e00000010000000000000000"], 0x80}, 0x1}, 0x0) 2018/05/29 01:54:17 executing program 1: r0 = socket(0xa, 0x1, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x8, 0x4) pipe2(&(0x7f0000000080), 0x800) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x14, 0x0, 0x1, 0x0, 0x0, {0xc}}, 0x14}, 0x1}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000380)={0x1c, 0x28, 0x1, 0x0, 0x0, {0x1}, [@nested={0x8, 0x0, [@typed={0x4109, 0x0, @binary}]}]}, 0x1c}, 0x1}, 0x0) 2018/05/29 01:54:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400192340834b80040d8c560a067fffffff81004e220000000058000b4824ca945f64009400050028925aa8000000000000008000f0fffeffe809000000fff5dd00000010000100092c0800410400000000fcff", 0x58}], 0x1) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x1d34c0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) 2018/05/29 01:54:17 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(tea-generic)\x00'}, 0x58) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000000)={'broute\x00'}, &(0x7f0000000080)=0x78) close(r0) 2018/05/29 01:54:17 executing program 7: rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) r0 = socket(0x7, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setrlimit(0x1, &(0x7f0000011000)) r1 = memfd_create(&(0x7f0000000480)='(}nodev.ppp1vboxnet1selinuxtrustedvboxnet0GPLposix_acl_access*\\\\md5sum@\x00', 0x2) write(r1, &(0x7f0000000040)=',', 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB="5b0000006196251b0b0a35674159d8045894e1aadb2b8f517e70593e91f1dc9c8454e95ceac66818d86c2634dc3f1e9187515f27e14059057651846ea9252311fdea366d17765e2efae399b9ed6df7c43ce3949e83d3008c2a4b4b9985626bc6046bd0a3f316fb4d9d8c9561c95fe27ab96bc85c0a69ec8290215d2022b218af33d5c7cb3c4286b61ac11d0017adb27dfc69b8865ad6960840fa96cba3b21eb0db1f2d3fb2afbae406ead527c703c7dd048aac91e6780b313d7185a9cc187e212bd9969552bb7867b9c119404b27f06ade493a185df549d973145bdec8251513a05bf1374a0eac05a1592b3dc5e00b7607d83166fadc2db833e7d957fa5f2bd5ecf22414048cf2fb5af6ffc7da365a36bc631dbcea021ab150e9de9c6d66ed2547bbce60909b7431b2c32e46a0e8c36505835583fa94a252e364a031550552646d5fe9bb8c9ffce7701235e9151e30388b96966c38ccce2219cf7e7c85c7311b72cc0fdf30200048b53c62456951dc4cdcaeb4e1c7e5917d645dbdb02e7ef19c15d6318b8ce97bf08e62d76041aeec72fd406154a48993c08309e74328434eaf887032e9da4280fd38b6ee3341f8536f4e7a7ef0724a9e3036e922c1f263701eb2a35504ac4295e5fe89d77b685e5104f682daac86220ed9699482ed9857337d6a3a75e5df2ea3f1477d63ccf634a302a3ec01"], &(0x7f0000000000)=0x63) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={r2}, 0x8) 2018/05/29 01:54:17 executing program 2: r0 = socket(0x10, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') sendfile(r0, r1, &(0x7f0000000200), 0x80000005) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0xfffffffffffffff7, 0x8, 0x8008, 0x1, 0x5, 0x24, 0x3f, 0x0, 0x0}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xe, 0x200, 0x5, 0x2, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000140)={r2, 0x81, 0x1, 0xa, 0x3d, 0x3f, 0x7fff, 0x0, {r3, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x5, 0xfff, 0xffff, 0xfff, 0x6}}, &(0x7f0000000280)=0xb0) 2018/05/29 01:54:17 executing program 6: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2000000802, 0x0) syz_open_dev$ndb(&(0x7f00000000c0)='/dev/nbd#\x00', 0x0, 0x10000) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={'ip_vti0\x00', {0x2}}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1ff, 0x0) ioctl$SG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000080)) 2018/05/29 01:54:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0063404000000001bda0000000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:17 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu\x00', 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080)=0x1fffffff, 0x4) socket$inet(0x2, 0x0, 0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x301280, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) [ 610.825775] binder: 5673:5683 got transaction to invalid handle [ 610.831988] binder: 5673:5683 transaction failed 29201/-22, size 72-8 line 2856 2018/05/29 01:54:17 executing program 2: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) syz_extract_tcp_res(&(0x7f00000000c0), 0x35f, 0x8000) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) setsockopt$sock_attach_bpf(r0, 0x10d, 0xf, &(0x7f0000000000), 0x36) 2018/05/29 01:54:17 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000580)='/dev/sequencer2\x00', 0x0, 0x0) sendmsg$nfc_llcp(r1, &(0x7f0000000900)={&(0x7f00000005c0)={0x27, 0x80000001, 0x1, 0x0, 0x4, 0x2, "57827df6e5f94c5c7bef9552bed99a91a6baffd2ef05e5b8cd8925b78ce25c4f76c386014faca8cd54c5eb46ddd204f2b47631f74b80db1d968ebb34d5e434", 0x12}, 0x60, &(0x7f0000000800)=[{&(0x7f0000000640)="435219f8bf475d716d366328587e6a504b9057edf6bdcfd1486f8bd678c63f9b4c01f3ddce0ea925dca348a400355044e465369fd346a1b4849c3dfae4859e93f50535c8806bb1183aef265c9a600f1b87d1831a6da648c4e078d2bb49700365015b974802a1ed4d9e49a943a12a519e1ad659b9fb0dea4f353f3146e9443dc7533ce3a91e7d2e6074b89c4a70bbf67178a6a99aadb51de6da05", 0x9a}, {&(0x7f0000000700)="f0ff9d510bdda2df40d9f56eec9bc5430ac6cb0da17920c167f2b00e0161bd7b71fbd5742d8e90100b71a3217ff47d251b99fac9b87ba7cbf2cf45f6fdf2edf319617b663ae42b972e34f7beb96aabb262782c7a3f5c5d4ebb9af3f2a68f4a3a148ea87ad6eced3b055996f9ab079c8b175a1118bdca02136230eecebb04c323a4bf6fa7995568588160a315f3ec018750c8296870bcad3b54d6462fc87117683e6fdf6c02d7d9c62e49c1cd5b42a181349885c8689e15f4b5bfef0d39e24a6b0ffc785d7a2158f26fc0fe460419c16212c1fb12f56e0bf34ed278e353ad64e10a0e934f7668a5", 0xe7}], 0x2, &(0x7f0000000840)={0xc0, 0x111, 0x57c, "a4e83fe320c1d23e572e61b6dc2876d0c0f011acf7708165a42b481201da53baf0654044230ad1200bd45998d91bbbc2801ae490aef9322ffdb24e562923e0246aff66aa66bf3b5fa8da07aa7e037b41e6fd3ec3061535354cfee072cac572223bc34e327604c5c6acc25a7c4ed6d79762d0952e3dc5ee811826393f5d004f4d16d8fe63832f18ed7b28fe828563b68d08531cc0edfdc19488bad7b2288a783d31be0df53addaf19d87a"}, 0xc0, 0x4004}, 0x1) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x36f) sendto$inet(r0, &(0x7f00006fd000)="c3401c344654f3c7d9b41ba48c8e399aa4eedc3d6bd8ebd65c856a27d61154adc2b2a9763ae0201c0d32e11f38e9dd18c58f6bd779650fc30f93653bdaecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x51, &(0x7f0000e66000)={0x2, 0x0, @rand_addr}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='illinois\x00', 0x199) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c741772000000000000000000000000000000000000000000000000000089000000965f8c55ea99e2c3741581e6027ac5a5fa36cc57d7d316985bcbd73a1af52f99420f39302e22c103aed397fbc805b2886ceaf40df8fa5bf7bf9dfb0524b3007c5bffb7359f106c5b6c6af3e82b612880d27108986374bd20eeb3dbd3091c42289eb8555f80d183b1c5ab9f44cac6954ad42386affa6970a6714a000000000000000000000000000000"], &(0x7f0000000040)=0xad) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000280)=@raw={'raw\x00', 0x9, 0x3, 0x2a0, 0x108, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, &(0x7f0000000240), {[{{@ip={@empty, @empty, 0x0, 0xffffff00, 'bond0\x00', 'gretap0\x00', {0xff}, {0xff}, 0x6, 0x3, 0x5}, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00'}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x9, 0x4, 0x4, 'snmp_trap\x00', 0x855}}}, {{@ip={@multicast2=0xe0000002, @multicast1=0xe0000001, 0x0, 0xff, 'lo\x00', 'veth1_to_team\x00', {}, {0xff}, 0x84, 0x3, 0x2}, 0x0, 0xe0, 0x100, 0x0, {}, [@common=@socket0={0x20, 'socket\x00'}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x5}}]}, @unspec=@NOTRACK={0x20, 'NOTRACK\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x300) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="17", 0x1}], 0x1) socket$inet_dccp(0x2, 0x6, 0x0) 2018/05/29 01:54:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000f01b0001000000000000001a0acf72a154000000", @ANYRES32=0x0, @ANYBLOB="000000000c0001000180c20000000000"], 0x28}, 0x1}, 0x0) socket$l2tp(0x18, 0x1, 0x1) [ 610.901258] binder_alloc: binder_alloc_mmap_handler: 5673 20001000-20004000 already mapped failed -16 [ 610.928292] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:17 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x2, 0x40}, 0x10) ioctl(0xffffffffffffffff, 0x8, &(0x7f0000000240)) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) listen(r0, 0x1000000000000002) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = accept4(r0, &(0x7f00000003c0)=@in={0x0, 0x0, @multicast1}, &(0x7f0000000380)=0x3e, 0x0) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000005c0)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x98) 2018/05/29 01:54:17 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000780)="6e65742f6970365f666c6f776c6162656c006ec03114893458edc1c9d8dc4b0d8dae982640d0e6bb51d7ff596e1c92de0eaa319198e91f0a4d43697c2bcd77f017365af160acf33bd66432ebe50c0e8bdaf7fc39feff34ef27a1397193227f4733c145e66536c6c275112520e72b3097843b5cdac480c3b1384ebf592505f88589fcd2d7") readv(r0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/125, 0x7d}], 0x1) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) [ 610.952767] binder: 5673:5683 ioctl 40046207 0 returned -16 [ 611.040177] binder: 5673:5718 got transaction to invalid handle [ 611.046398] binder: 5673:5718 transaction failed 29201/-22, size 72-8 line 2856 [ 611.120756] binder: undelivered TRANSACTION_ERROR: 29201 [ 611.126551] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:18 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000100)='/dev/dmmidi#\x00', 0xfff, 0x101400) memfd_create(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3) ioctl$int_out(r0, 0x40045730, &(0x7f0000000000)) 2018/05/29 01:54:18 executing program 6: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_GET_VRING_ENDIAN(r0, 0x4008af14, &(0x7f0000000200)={0x2, 0x9}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x4b2f, 0x40) accept(r1, &(0x7f00000000c0)=@rc, &(0x7f0000000180)=0x80) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="e626262c8598bf012cf66f") ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000140)) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000640)) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000000)={'icmp6\x00'}, &(0x7f0000000040)=0x1e) 2018/05/29 01:54:18 executing program 2: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000380)="c626262c8523bf012cf66f") r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000005ffc)=0x5, 0x4) connect$inet6(r1, &(0x7f0000006fe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) ioctl$sock_inet_SIOCRTMSG(r0, 0x890d, &(0x7f0000000000)={0x0, {0x2, 0x4e22}, {0x2, 0x4e23}, {0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x140, 0xfffffffffffffff9, 0x10001, 0x8, 0xfffffffffffffffb, 0x0, 0x7, 0x5, 0x7}) 2018/05/29 01:54:18 executing program 7: r0 = userfaultfd(0x80800) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) ppoll(&(0x7f00004c7fb0)=[{r0, 0xd}], 0x1, &(0x7f0000000000)={0x1000000077359400}, &(0x7f00004c7000), 0x8) r1 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x6, 0x8000) setsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000180)=0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ifreq(r2, 0x8948, &(0x7f0000000100)={'ip6_vti0\x00', @ifru_names='bond0\x00'}) 2018/05/29 01:54:18 executing program 3: accept4(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x80000) r0 = creat(&(0x7f00000004c0)='./file0\x00', 0x8) setsockopt$inet6_int(r0, 0x29, 0xfffffffffffffffc, &(0x7f00000005c0)=0x1, 0x4) r1 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xff61, 0x0) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000180)) add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffd) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x10000, @loopback={0x0, 0x1}, 0x5}}, 0x6, 0x1}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)={r3, 0xee, "6a436f95f122e16b0c56f1679a89f893029ee92d49177a85ef384232be3126d60bc0924bd98c4e60edd5a6dbbee2eb8cf47c2dd88148310aa143e10a7b170f5bc8f88a4d0370cbfea922bfb7aa06d9e4998429969b795a3c331690ab429f3aa1aa804203988d083efeac614059ae505077ac688b551d0b49a27d13705b992d55ac0b9e3af0e5afe203beefe5d2604fc25c0546167b7b041b9c405fc8ec0141271811eeec4d2ac382a547cf3cfc796b79729a8f25c12c722945c8317542e3b68ddb04e69a8b7ec221e58553d5f940175aacc46c03367dce1cd6ccad865ac0eda45bdbad09abf09c38037c9362e6ca"}, &(0x7f0000000400)=0xf6) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r1, 0xc008551b, &(0x7f0000000040)={0xed, 0xffffffffffffffb5, [0x0, 0xffffffff]}) 2018/05/29 01:54:18 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000002ff7)='/dev/ppp\x00', 0x40, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000001000)=""/246) ioctl$EVIOCGREP(r0, 0x80047456, &(0x7f0000003000)=""/174) 2018/05/29 01:54:18 executing program 1: mmap(&(0x7f0000600000/0x4000)=nil, 0x4000, 0x0, 0x44031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000240)='/dev/usbmon#\x00', 0x8001, 0x40) r1 = accept$inet(r0, &(0x7f00000002c0)={0x0, 0x0, @broadcast}, &(0x7f0000000300)=0x10) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) fcntl$setown(r0, 0x8, r2) ioctl$KVM_SET_VAPIC_ADDR(r0, 0x4008ae93, &(0x7f0000000380)=0x3000) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_team\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x800000000004}, 0x2c) mbind(&(0x7f000078f000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000040), 0x2, 0x3) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r3, &(0x7f0000000080)="9f48dda710e9e71a9aff8a51463ce1", &(0x7f00000001c0)="ee28f4d1df91e319f1e9599584ca5d9ba0989f926ec5023a868ff28afecd23a4ccc928074747c81cf3906a848735e8c535d34c9000f6512d22c9a8f6c44c1bdbd17772b192190be3f7f32122f87043481d14028b04bdbdb2cbd25e953a3f24bc463416bafd33861986d388838f5000a12ee75fc98731be13fe07", 0x2}, 0x20) 2018/05/29 01:54:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000040000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:18 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x309000) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) r1 = socket(0x10, 0x4000000000000002, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth1_to_bond\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "cff5311583e841047bd7196b084ad491d4e9e65b3585f6367e2be2a6e9bc1222", "607c310c30b50a78820affe03385c38997d4f4a0f78a5dcafca8d96b1c751f69", "b64cf00f76d27fe64db7b83e40c4f15bd96cdf2fed331bef8944a1c33948808b", "dff0fd56c85b66493c1d68159acf2e8c7b6a012cc888ea159d0e37a0219f6e59", "d837213d74efb222893e00c87d6587d525f4458aa28bc01c78edcd4fce560a2c", "e5c748d311984f5669610cd7"}}) 2018/05/29 01:54:18 executing program 5: r0 = socket(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000200)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x4) r3 = getpgrp(0x0) r4 = syz_open_dev$usbmon(&(0x7f0000a63ff3)='/dev/usbmon#\x00', 0x0, 0x0) r5 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f000053b000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f0000008ff8)=0x3f) fcntl$setown(r6, 0x8, r3) read$eventfd(r4, &(0x7f0000e5aff8), 0xfffffc7a) fcntl$setsig(r6, 0xa, 0x12) gettid() poll(&(0x7f0000b28fe0)=[{r7}], 0x1, 0xfffffffffffffff8) dup3(r6, r7, 0x0) tkill(r5, 0x16) dup2(r1, r2) [ 612.021498] binder: 5740:5742 got transaction with invalid offsets ptr [ 612.057716] binder: 5740:5742 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:18 executing program 3: r0 = syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x34, 0x2) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffffffc, 0x802) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f0000000040)=0x2, 0x4) 2018/05/29 01:54:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000001000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000001000)={&(0x7f0000005000), 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x4, "b1abe2da02000000e1000000fc00000000000000dc98784b49e0007e00002fd9"}}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)=""/250) syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8, 0x2) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x800, 0x0) 2018/05/29 01:54:18 executing program 6: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x9, 0x400) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='coredump_filter\x00') pwritev(r0, &(0x7f0000000440)=[{&(0x7f0000000340)='[', 0x1}], 0x1, 0x0) 2018/05/29 01:54:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0x1, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000063fc900000000000000050000008c0100000400000000000000000065750ede82461998ec3d09876e6d0cd4e191a1f98937702d8f9523b12ed909205c7333bb937dee28d4b292dd4b26916a0dc38b518cdf628235cebb98b7559414d05501b53517cdf5426294335b7189c3003b2cbdae69c72000000000000000710e13"], 0x89) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x800, 0x0) [ 612.098081] binder_alloc: binder_alloc_mmap_handler: 5740 20001000-20004000 already mapped failed -16 [ 612.161277] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:18 executing program 2: r0 = socket(0xb, 0x3, 0x80000001) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") mkdir(&(0x7f0000000500)='./file0\x00', 0x0) chroot(&(0x7f000009a000)='./file0\x00') chdir(&(0x7f0000000200)='../file0\x00') symlink(&(0x7f0000000140)='..', &(0x7f0000272ff7)='../file0\x00') mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000000400)='ubifs\x00', 0x1004, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2040, 0x0) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000440)=@sack_info={0x0, 0x100, 0x8}, &(0x7f0000000480)=0xc) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000004c0)={r2, 0xbb0, 0x5, 0x9}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000280)={{{@in6, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) getresgid(&(0x7f0000000100), &(0x7f0000000180), &(0x7f00000001c0)=0x0) fchownat(r1, &(0x7f0000000040)='./file0\x00', r3, r4, 0x1000) r5 = gettid() ptrace$peekuser(0x3, r5, 0x401) renameat(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f00000003c0)='../file0\x00') chroot(&(0x7f0000000080)='../file0\x00') 2018/05/29 01:54:18 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) io_submit(r1, 0x1, &(0x7f0000000140)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0xf5c, r0, &(0x7f00000000c0)="f1772a8dc878cab11087da3b1ce682edf3506ef5611c7d7313c510604486429f88b96b46d5455d38d9e2faef2fc7a2fbf3d43dc653650dcfaff35b8bf8a3d6ec9569076695b4546e75fa63ee7eea918ad6c2bbbe97e9892823fb4ab576d88595b0", 0x61, 0x100000000, 0x0, 0x1, r0}]) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x44, 0x6000000000000000, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), &(0x7f00000002c0)}}], 0x0, 0x0, &(0x7f00000003c0)}) 2018/05/29 01:54:18 executing program 6: r0 = socket$inet(0x10, 0x3, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400800, 0x0) sendto$ax25(r1, &(0x7f0000000140)="1bb4cf0fae329517e9fbdb933ba525d3b5c58d08e4a3ac345c2c72527bffb2deb0aa8d8d8714104bc6bf048168131b197d7b89858c6fcb1bbac2d7fcb7db56ee8bf32a0f4ac1ed9c2b241cac132451b7ba4567ed96f2874674710d225b1166a652d9441528a3f645defa897c8d4aa01ea72900a159f7bd871c41a21bbe7cd0685ee4cbaf9998a01100be3978e973", 0x8e, 0x200040c0, &(0x7f0000000080)={0x3, {"49e2b4dea2990e"}, 0x4}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000110007031dfffd946fc68e0020200a1b01000000010000000c1ba3a20c00ff7e", 0x24}], 0x1}, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x3) 2018/05/29 01:54:18 executing program 3: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'bond0\x00', 0x8000}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) r3 = getuid() r4 = getegid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000440)={0x0}, &(0x7f0000000480)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000004c0)={0x0, 0x0}, &(0x7f0000000500)=0xc) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) r7 = getegid() sendmsg$unix(r1, &(0x7f00000005c0)={&(0x7f0000000240)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000380)=[{&(0x7f00000002c0)="b563a66eef32f9e466530e6804699641e91f9a196920d6cd364ad19a7920dde1e79558569bf813d7dc2cd32aafc06e0fc7ce73c321ab166ae7a6013e11de8a83127b4087fd171ebb1a23b947569de0d03d2687dca634b05627fa0a5e62c9a6488d22a6c4c497e9d0fdcfb3e6efa7345e6b658756bc452271734d8f55aa1ffea6bbb06c37858d0a6513badf59eb584c400015f835eed970d4071f47177c8a901101", 0xa1}], 0x1, &(0x7f0000000540)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}], 0x60, 0x4000000}, 0xb1e484f31149fe41) ioctl$sock_ipx_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000100)={'ip6tnl0\x00', {0x4, 0x40000000000, 0x177, "b3c7b852dbaa", 0x1}}) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nullb0\x00', 0x9165fcc8cc84df25, 0x0) ioctl$BLKFLSBUF(r8, 0x1261, &(0x7f0000000080)=0xfffffffffffffff7) write$binfmt_misc(r8, &(0x7f0000000640)=ANY=[@ANYBLOB="b5be6ef65ed1ff7f00008e586e5b48dfe29b9618b0ecd7ac9f60ba6960a9b73ddceecd0c17f487806e1bc3a58d95ea498fcf31712bd44b5d1abfe73573aeb44404907a0485c01a3c5cbaebccef10acabec9310bc25fbe13632c87411d3a1ea6f2ec02f83e9483b762ea1b03c327a8b0f033bc2174947ba79c2161c851e892fceeb0508ff1ed3f90d467ced63073bceb92499a502c6590497b54069312b34bdfb9c44e5c8257b38580583a96d74f9a67145106686b69d72c41210a1cc2823feea635f0e"], 0x3e00406000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x100, 0x0) signalfd(r1, &(0x7f0000000600)={0x7}, 0x8) [ 612.209919] binder: 5740:5742 ioctl 40046207 0 returned -16 [ 612.218343] binder_alloc: 5740: binder_alloc_buf, no vma [ 612.223939] binder: 5740:5756 transaction failed 29189/-3, size 72-8 line 2971 [ 612.314669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 612.347765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor6'. [ 612.371932] binder: undelivered TRANSACTION_ERROR: 29189 [ 612.381307] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:19 executing program 1: r0 = socket(0x11, 0x8080a, 0x0) getpeername(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) r1 = dup3(0xffffffffffffffff, r0, 0x80000) ioctl$VT_RELDISP(r1, 0x5605) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req3={0x0, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc, 0x4, 0x50, 0x8}, 0x1c) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000100)) 2018/05/29 01:54:19 executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x80, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) r1 = socket(0xa, 0x2, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000001280)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}, &(0x7f0000000180)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000001340)={r2, 0x9}, &(0x7f0000001380)=0x8) 2018/05/29 01:54:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:19 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0xffffffffffffffff, 0x3, 0x1, 0xb3, &(0x7f00000003c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@mcast2, @in6=@ipv4={[], [], @rand_addr}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000000)=0xe8) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000200)={0x0, 0x3, 'client1\x00', 0xffffffff80000000, "d037728d07c1398a", "b3a85c43535c5405f73ec5ad3c84111e78acecad3021a94449f19a2b7b50c457", 0x80000000, 0x4a}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', r2}) ioctl$sock_bt_cmtp_CMTPCONNDEL(r1, 0x400443c9, &(0x7f0000000440)={{0x7, 0x7, 0x7, 0x8, 0x101, 0x2}, 0x4}) fallocate(r0, 0x2, 0xfffffffffffffff9, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={"7369743000220000000000ffff00", 0x0}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={'veth1_to_bridge\x00', {0x2, 0x4e21, @rand_addr=0xffffffffffffffc0}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000300)={r3, 0x1, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) socket(0x13, 0x3, 0x1) 2018/05/29 01:54:19 executing program 6: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x4) r1 = socket(0xa, 0x1, 0x0) r2 = socket(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={r1, 0x3, 0x1, 0xffffffff, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}, 0xfffffffffffffcd9) getsockopt$inet_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000000)=""/5, &(0x7f0000000040)=0x5) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}}}}, 0x108) 2018/05/29 01:54:19 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="66b98601000066b88d00000066ba000000000f3066b9230800000f3226f40f35ec66b9800000c00f326635000100000f300f09f466b9420900000f322ed9870140", 0x41}], 0x1, 0x0, &(0x7f0000000180), 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0x6, 0x7, 0xb000}, 0x4) r3 = creat(&(0x7f0000000880)='./file0\x00', 0xa0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000100)={{0x1}, 'port1\x00', 0x90, 0x4, 0x4, 0x38e1, 0xa116, 0x5, 0x3, 0x0, 0x1, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$BLKZEROOUT(r2, 0x127f, &(0x7f00000007c0)={0xff}) r4 = getpgrp(0x0) process_vm_writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/64, 0x40}, {&(0x7f0000000300)=""/66, 0x42}, {&(0x7f0000000380)=""/9, 0x9}], 0x3, &(0x7f0000000740)=[{&(0x7f0000000400)=""/212, 0xd4}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/176, 0xb0}, {&(0x7f0000000680)=""/20, 0x14}, {&(0x7f00000006c0)=""/93, 0x5d}], 0x5, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000800)={0x9bf}) perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x38d, 0x7, 0x7f, 0x81, 0x6, 0x0, 0x1, 0x48191, 0x2, 0x20, 0xffffe00000000000, 0x3f, 0xd901, 0x6, 0xffffffff, 0x3f, 0x9, 0x8c8, 0x6, 0x10001, 0x9, 0x1, 0x7, 0x1f, 0x5, 0x84, 0x0, 0xdc, 0xc2, 0x3, 0x2, 0x2, 0x8, 0x1c, 0x0, 0x7, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x10000, 0x3f00}, 0x20104, 0xdc, 0x3, 0x2, 0x3, 0xa2e, 0xcf05}, r3, 0x3, r3, 0x2) 2018/05/29 01:54:19 executing program 5: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x2, 0x400) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r0, 0xc0045520, &(0x7f0000000080)=0x4) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000180)={0x7fff, 0x8}) setsockopt$sock_int(r1, 0x1, 0x8000000000033, &(0x7f0000000040), 0x10) getsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f00000000c0)=""/72, &(0x7f0000000140)=0x48) 2018/05/29 01:54:19 executing program 7: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) poll(&(0x7f0000000040)=[{r1}], 0x1, 0xfffffffffffffffc) r2 = syz_open_pts(r1, 0x200200) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r0, 0x14) tkill(r3, 0x1000000000016) dup3(r2, r1, 0x0) llistxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=""/103, 0x67) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000000200)) r4 = socket(0xa, 0x1, 0x0) ioctl(r4, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") tkill(r0, 0x1000000000016) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}}, 0xb672, 0x7, 0x1, 0x100, 0x8}, &(0x7f0000000000)=0x98) syz_open_procfs(r3, &(0x7f0000000300)="6d6f756e748471") setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x7}, 0x8) [ 613.590467] binder: 5817:5819 got transaction with invalid offsets ptr [ 613.617252] binder: 5817:5819 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:20 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8800) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000000034a66db21d9ece4a000000000000000000ff0000000000000000000000"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:54:20 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a93", 0x5) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000100)={&(0x7f0000000140)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x0, 0x0, 0x0, {0x7}}, 0x28f}, 0x1}, 0x0) r2 = msgget(0x1, 0x641) msgctl$IPC_INFO(r2, 0x3, &(0x7f0000000480)=""/155) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000540)="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", 0x1000) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x1, 0x4) recvmsg(r1, &(0x7f00000002c0)={&(0x7f0000000180)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/112, 0x7}, {&(0x7f0000002900)=""/4096, 0x1000}], 0x2, &(0x7f00000003c0)=""/164, 0xa4}, 0x0) [ 613.640066] binder_alloc: binder_alloc_mmap_handler: 5817 20001000-20004000 already mapped failed -16 [ 613.652116] binder: BINDER_SET_CONTEXT_MGR already set [ 613.674934] binder: 5817:5819 ioctl 40046207 0 returned -16 [ 613.681765] binder_alloc: 5817: binder_alloc_buf, no vma 2018/05/29 01:54:20 executing program 5: openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x4000000000206, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x105005, 0x0) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x7f) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") fallocate(r0, 0x0, 0x0, 0x8000000) fallocate(r0, 0x3, 0x9, 0x80000000) 2018/05/29 01:54:20 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x6, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x20) r2 = openat$cgroup_procs(r0, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) dup3(r2, r1, 0x0) [ 613.687370] binder: 5817:5839 transaction failed 29189/-3, size 72-8 line 2971 [ 613.708861] kvm_set_msr_common: 72 callbacks suppressed [ 613.708877] kvm [5825]: vcpu0, guest rIP: 0x12 disabled perfctr wrmsr: 0x186 data 0x8d 2018/05/29 01:54:20 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00007a0000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000616ff8)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0x7, &(0x7f0000a9cff8)) prctl$setmm(0x23, 0x6, &(0x7f0000ffe000/0x1000)=nil) sendmsg$unix(r2, &(0x7f0000bba000)={&(0x7f00003a2000)=@abs, 0x8, &(0x7f00006c6ff0), 0x0, &(0x7f00009dffb8)=[@rights={0x18, 0x1, 0x1, [r0]}], 0x18}, 0x0) sendmsg$unix(r1, &(0x7f000062e000)={&(0x7f0000690ff6)=@abs, 0x6e, &(0x7f000000d000), 0x0, &(0x7f0000000000)=ANY=[@ANYRES64=r0, @ANYRES32=r1, @ANYBLOB="48b721cf7c9d283b86bccf17fe52a2045200"], 0x1e}, 0x40000) [ 613.806176] kvm [5825]: vcpu0, guest rIP: 0x12 disabled perfctr wrmsr: 0x186 data 0x8d [ 613.817550] binder: undelivered TRANSACTION_ERROR: 29189 [ 613.826208] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:20 executing program 2: r0 = socket(0x18, 0x0, 0x1) connect(r0, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x2, {0xa}}}, 0x32) setsockopt(r0, 0x400000000000111, 0x3, &(0x7f0000000040)="00004df3", 0x4) r1 = socket(0x11, 0x2, 0x0) r2 = syz_open_dev$tun(&(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={"6966623000fbffffffffffffff523d00", 0x2000}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'ip6gre0\x00', 0x400}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'ifb0\x00\x00\x00\x00\x00\x00\x00!\x00', 0xa201}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000180)=""/188, &(0x7f00000000c0)=0xbc) 2018/05/29 01:54:20 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:20 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x401, 0x0, 0xffffffffffffffff, 0x1c}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffff9c}, [@ldst={0x7, 0x1, 0x0, 0x0, 0x7a}], {0x95}}, &(0x7f0000003ff6)='syzkaller\x00', 0x5, 0x450, &(0x7f000000cf3d)=""/195}, 0x48) 2018/05/29 01:54:20 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) fcntl$setstatus(r0, 0x4, 0x40000000042c00) sendto$inet(r0, &(0x7f0000a88f88), 0x332, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffffffffffe4e, 0x0, &(0x7f00000000c0)={0x2}, 0x10) ppoll(&(0x7f0000000080)=[{r0}], 0x1, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000240), 0x8) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2400, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10203, 0x0, &(0x7f0000ffc000/0x2000)=nil}) 2018/05/29 01:54:20 executing program 6: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000100)) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x8, 0x6, 0x8, 0x7ff, "89df90cdaa9b52ef0f9f1f8872a1fbb89070a3c2ea173c5e5db10053b55c99c17034ec37602d02d7684b5fcd", 0x3edc}, 0x0, 0x0, 0x9, r2, 0x3, 0x3, "46fab4e45ba61961749a97f2cf28b8b61e2999434fa98bfa25fae0aa8cd819b7735d72eed9e1f6d3027bba5f25f1c11dbb52c1af48ed63a70b24b3f9547dd064", &(0x7f0000000080)='{(@\x00', 0x4, [], [0x5, 0x5, 0x0, 0x8]}) 2018/05/29 01:54:20 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00000002c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e400010100000000000000000000000000000000"], 0x14) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x1, [@empty]}, 0x14) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x101000) getsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080), &(0x7f0000000100)=0xffffff7b) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/05/29 01:54:20 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) getrandom(&(0x7f00000000c0)=""/85, 0x55, 0x2) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x6882, 0x0) openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440"], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000580)={0x4c, 0x0, &(0x7f0000000400)=[@decrefs={0x40046307}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000100), &(0x7f0000000300)=[0x0]}}], 0x0, 0x0, &(0x7f0000000480)}) 2018/05/29 01:54:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7, 0x200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="15"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x7f, 0x10000) setsockopt$inet6_dccp_buf(r4, 0x21, 0x8d, &(0x7f0000000140)="2bb4a276ee649b625fba3db9625efba76c41353d27b49e9f5a83ca19b3ded1ea33e2295974ddd8db080eebe51ddc2f6486bed823f803712be87c0beb4ca1e89b02893a8e6aecac7f98d9b2a17ca7ffff8c84e45051dc3ecb2f7f19e2855c3a66f725d81e7b2d4dcb995852846b6a5c1e6cab4632de", 0x75) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) getsockopt$nfc_llcp(r2, 0x118, 0x0, &(0x7f0000000200)=""/92, 0x5c) fcntl$setpipe(r4, 0x407, 0xb6a) ioctl$KVM_RUN(r3, 0xae80, 0x0) linkat(r2, &(0x7f00000000c0)='./file0\x00', r4, &(0x7f00000001c0)='./file0\x00', 0x400) ioctl$void(r0, 0x5451) [ 614.485773] binder: 5872:5875 got transaction with invalid offsets ptr [ 614.505594] binder: 5887 invalid dec weak, ref 1328 desc 0 s 1 w 0 [ 614.509148] binder: 5872:5875 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:20 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x440) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x45e84faf, 0x7, 0x8, 0x7}]}) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, &(0x7f0000d8d000)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f00000002c0), &(0x7f0000000280), 0x0) 2018/05/29 01:54:20 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x8, 0x404000) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x5, 0x2, 0x8001, 0x9}, &(0x7f0000000100)=0x14) ioctl$EVIOCSABS20(r0, 0x401845e0, &(0x7f0000000200)={0x3f, 0x3, 0x8000, 0x9e05, 0x101, 0x2}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r0, 0x28, &(0x7f0000000340)}, 0x10) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000300)=0x1, 0x4) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r0, 0xc0086423, &(0x7f0000000400)={r2, 0x2}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={r1, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0xfffffffffffffff7, @mcast2={0xff, 0x2, [], 0x1}, 0x5}]}, &(0x7f00000001c0)=0x10) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, &(0x7f0000000000)={0x0, 0x6, 0x4, 0x0, 0xfffefffffffffffc, 0x0, 0x1}) msgget$private(0x0, 0x200) bind$nfc_llcp(r0, &(0x7f0000000240)={0x27, 0x1, 0x2, 0x6, 0x8, 0x5, "d91bc55aca1c7b270cd909b42d4820a0244e1f86fb5cd9ac3ffbf3a49c2e5a8eb28c474eb6a577634170ca8331c7ed3c31ecdc1b28fb591913314266da0c5b", 0x3f}, 0x60) mq_timedreceive(r3, &(0x7f0000002140)=""/4096, 0x1000, 0x6, &(0x7f00000002c0)={0x77359400}) mq_timedsend(r3, &(0x7f0000000080)="792881b9cc0ac66d44243e15a95a1701af2e9834f7d94a5049a38fbb0fd351b9f419febb69bc", 0xfffffffffffffdd1, 0x0, &(0x7f0000e0b000)) 2018/05/29 01:54:20 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7ffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000040)=0x1e) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000080)) [ 614.533932] binder: 5887:5889 transaction failed 29189/-22, size 0-8 line 2856 [ 614.549420] binder_alloc: binder_alloc_mmap_handler: 5872 20001000-20004000 already mapped failed -16 2018/05/29 01:54:20 executing program 1: r0 = socket$kcm(0x2, 0xffffffffffffffff, 0x0) mq_unlink(&(0x7f0000000080)='$wlan0trusted(}wlan1vboxnet0cpusetvboxnet1\x00') getsockopt$bt_hci(r0, 0x10d, 0xb, &(0x7f0000000000)=""/86, &(0x7f0000000180)=0x56) read(r0, &(0x7f00000001c0)=""/224, 0xe0) [ 614.580413] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:21 executing program 5: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="c626262c8523bf012cf66f") r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40802, 0x0) write(r0, &(0x7f0000000080)="954989736b63f4bcc6360b9dd829", 0xe) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="10257300c2c8", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000010000000000000000bb14000200ff02000000000000000000000180ffffffffffffa302000014000100fe8000000000000000000008000000bb08000800000000000800080041000000"], 0x6c}, 0x1, 0x0, 0x0, 0x24008005}, 0x240088d0) r3 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) sendfile(r1, r3, &(0x7f0000000300), 0x102000001) [ 614.606577] binder: 5887:5905 tried to acquire reference to desc 0, got 1 instead [ 614.619261] binder: 5872:5875 ioctl 40046207 0 returned -16 2018/05/29 01:54:21 executing program 4: r0 = socket(0x10, 0x802, 0x0) write(r0, &(0x7f0000294f74)="fc00000048000700ab092500090007000aab80ff010000000000369321000100ff010000000500000000000000036915fa2c1ec28656aaa79bb94b46fe0000000700020800008c0000036c6c256f1a272f2e117c22ebc205214000000000008934d07302ade01720d7d5bbc91a3e2e80772c74fb2cc56ce1f0f156272f5b00000005defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bbab2ccd243f295ed94e0ad91bd0734babc7c3f2eeb57d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48f6f0000080548deac270e33429fd3000175e63fb8d38a873cf1", 0xfc) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000000)={'bond_slave_1\x00', 0x8d}) 2018/05/29 01:54:21 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = socket(0x11, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2}}, 0x14) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x6) r2 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0xc5) sendmmsg$inet_sctp(r0, &(0x7f0000000700)=[{&(0x7f0000000200)=@in6={0xa, 0x0, 0x1}, 0x1c, &(0x7f0000000580), 0x0, &(0x7f0000000680)}], 0x492492492492682, 0x0) [ 614.658154] binder: 5887 invalid dec weak, ref 1328 desc 0 s 1 w 0 [ 614.686816] binder: 5887:5910 transaction failed 29189/-22, size 0-8 line 2856 [ 614.695655] binder_alloc: 5872: binder_alloc_buf, no vma [ 614.701248] binder: 5872:5918 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:21 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)="922e683ea23e535c2c8be7781a08cc1cf728569dc34f3edc78d65baf32011edcec5eaae0663c0270c34887696aefc7f925c6fbe0b502aafaa612984c183e11ea2dd890dc73c7efa2a95c69b49d52c522093631cd27fc19ba2f892ff5b9bffa48a3f9579ed3a1c89e") r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$addseals(r2, 0xa, 0x4000007) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x9) pread64(r2, &(0x7f0000000100)=""/4096, 0x1000, 0x0) 2018/05/29 01:54:21 executing program 1: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="c626262c8523bf012cf66f") r1 = socket(0x200000000000011, 0x3, 0x8) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0x14) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="25af4c79dc434a0d7c5fca71020848a5719a2b8f57f1ed56dec6e385dfb6d03d1f4e", 0x22}], 0x1, &(0x7f0000000140)}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x1ff, 0x2, [0x20, 0x242]}, &(0x7f0000000140)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={r3, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}}, 0x84) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4000000000000005, &(0x7f0000000040)=0x3ff, 0x143) bind$inet6(0xffffffffffffffff, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x8000000000000}, 0xffffffffffffff6c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f00004aaffc)=0x2, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) [ 614.731461] netlink: 180 bytes leftover after parsing attributes in process `syz-executor4'. [ 614.772346] netlink: 180 bytes leftover after parsing attributes in process `syz-executor4'. [ 614.791834] binder: undelivered TRANSACTION_ERROR: 29189 [ 614.797445] binder: undelivered TRANSACTION_ERROR: 29189 [ 614.856628] binder: undelivered TRANSACTION_ERROR: 29189 [ 614.862496] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:21 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_int(r0, 0x0, 0x53, &(0x7f0000000000), &(0x7f0000000080)=0x4) r1 = creat(&(0x7f0000000140)='./file0/file0\x00', 0x10) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f00000000c0)=0x7) 2018/05/29 01:54:21 executing program 4: r0 = socket(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c606262c8523bf012cf66f") mlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) mlock(&(0x7f0000ff0000/0x10000)=nil, 0x10000) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000080)=0x5) 2018/05/29 01:54:21 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:21 executing program 1: unshare(0x2000400) syz_emit_ethernet(0x42, &(0x7f0000000040)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @empty, [], {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @mcast1={0xff, 0x1, [], 0x1}, @empty, @mcast2={0xff, 0x2, [], 0x1}}}}}, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x400280, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000000c0)) 2018/05/29 01:54:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = memfd_create(&(0x7f0000000040)='/dev/kvm\x00', 0x2) ioctl$TIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000140)="66b9d004000066b80900000066ba000000000f3066b85e2100000f23d00f21f86635300000000f23f80f0fd58ef0319408800f01d1660f6c5600b80c008ec80f01cb0f2329bad004b0afee", 0x4b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2018/05/29 01:54:21 executing program 6: r0 = socket(0xa, 0x5, 0x1) ioctl(r0, 0x8912, &(0x7f0000000080)="c7361b2c8523bf012cf66f") unshare(0x400) r1 = socket$rds(0x15, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000002c0), 0x4) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000040), 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f00000000c0)=0xc) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000300)=[0x0, 0x1, 0x7ff, 0xf0d7, 0x6, 0x5, 0x1, 0x9], 0x8, 0xd0d, 0x2, 0x7fff, 0x1, 0xfa82, {0x7, 0x9, 0x7, 0x0, 0x2, 0x4, 0x8, 0x3, 0x2, 0xffffffff, 0x40, 0x3, 0x6, 0x0, "f5544f8ff5cc8de4402372f31bec23730c9d1d25dd2b97723483591d8e13c854"}}) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x800, 0x81, r2, 0x1, r3, 0x74c, 0x3, 0x1ff8000000}) r4 = shmget$private(0x0, 0x3000, 0x180, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_INFO(r4, 0xe, &(0x7f0000000200)=""/191) sched_setattr(r2, &(0x7f00000001c0)={0x30, 0x2, 0x1, 0x0, 0x0, 0x80, 0xa8, 0x3}, 0x0) 2018/05/29 01:54:21 executing program 7: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xfff, 0x10000) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r0, 0x800443d2, &(0x7f0000000200)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="2b00000000001b207f5c5eeb08002f9078ac1414aaac1414aab421880b0000000000000800000086dd0800005700000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], &(0x7f0000000000)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10001, 0x0) write$rdma_cm(0xffffffffffffffff, &(0x7f0000005a00)=@create_id={0x0, 0x18, 0xfa00, {0xaf7c, &(0x7f00000059c0)={0xffffffff}, 0x13f}}, 0x20) write$rdma_cm(r2, &(0x7f0000005a40)=@init_qp_attr={0xb, 0x10, 0xfa00, {&(0x7f0000000080), r3, 0x8}}, 0x18) 2018/05/29 01:54:21 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl(r1, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x4}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x240080, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) setsockopt$inet6_mtu(r0, 0x29, 0x31, &(0x7f0000000080), 0xb6e7d10d529ef8d7) [ 615.649260] binder: 5953:5956 got transaction with invalid offsets ptr 2018/05/29 01:54:22 executing program 7: r0 = socket$inet6(0xa, 0x803, 0x100000001) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x4122, 0xff) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000000)=0x0) fcntl$setown(r0, 0x8, r1) write(r0, &(0x7f00000001c0), 0xffbc) 2018/05/29 01:54:22 executing program 1: r0 = getgid() r1 = getgid() setregid(r0, r1) r2 = socket(0x14, 0x3, 0x800000000300) r3 = getpid() fcntl$setownex(r2, 0xf, &(0x7f0000000080)={0x0, r3}) connect$rds(r2, &(0x7f0000000040)={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'bond_slave_0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="ff0000000000000000000000000000008aa528e5ca979eb4fffd9321a4e6b6c9570f101e52669a9f1fe7541091b1527051d212f3f795008a2ce04fdb27b7c32fbdf7af0e1bcc857b153355a58a0afdf39bd76de3fd5b98f9d1c0f6b861cb1b4b8fbe7aad5679f769296dcfd65175ddee5deafce96d87668df6ef1cf09084919b3759217002a0b36b4bda254125c3c73144b10d5a8d392f94552526edfad660c32a6ef0f021d85618dbddf0606f85602ba7aa2ac083d5cea1469a340d4e5a3b9481f8da74b642426191bb57f0235acfdb34e3f9a7"]}) accept$nfc_llcp(r2, &(0x7f00000000c0), &(0x7f0000000180)=0x60) getgid() 2018/05/29 01:54:22 executing program 5: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x105005, 0x0) ioctl$EVIOCGPHYS(r0, 0x80404507, &(0x7f0000000340)=""/223) fcntl$setlease(r0, 0x400, 0x0) pwrite64(r0, &(0x7f0000000000), 0x800600, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000000)=0x5) 2018/05/29 01:54:22 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000340)='syz_tun\x00', 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r1 = accept(r0, &(0x7f0000000280)=@nl=@proc, &(0x7f0000000200)=0x80) connect$can_bcm(r1, &(0x7f0000000380)={0x1d}, 0x10) r2 = socket(0xa, 0x1, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000100)={0x7b, 0x0, [0xc4f5, 0x5, 0x4]}) ioctl(r2, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2=0xe0000002}}}, 0x88) getsockopt$inet_mreq(r0, 0x0, 0x27, &(0x7f0000000000)={@remote, @loopback}, &(0x7f00000001c0)=0x8) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000300)={@local={0xac, 0x14, 0x14, 0xaa}, @local={0xac, 0x14, 0x14, 0xaa}}, 0x9) 2018/05/29 01:54:22 executing program 4: llistxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=""/174, 0xae) pipe(&(0x7f0000000080)={0xffffffffffffffff}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000001280)=""/178, 0xb2}], 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) pread64(r2, &(0x7f0000000240)=""/34, 0x281, 0x80000002) [ 615.703160] binder: 5953:5956 transaction failed 29201/-14, size 72-8 line 2999 [ 615.741541] binder_alloc: binder_alloc_mmap_handler: 5953 20001000-20004000 already mapped failed -16 2018/05/29 01:54:22 executing program 7: r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) ftruncate(r0, 0x400) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000a40), 0x0) sendfile(r3, r1, &(0x7f0000000240), 0x2) 2018/05/29 01:54:22 executing program 6: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="c626262c8523bf012cf66f") mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) symlink(&(0x7f00000000c0)='/\x00', &(0x7f0000000000)='./file0/file0\x00') mount(&(0x7f0000000080)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000200)='pipefs\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x12000, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) 2018/05/29 01:54:22 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x4) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/05/29 01:54:22 executing program 2: r0 = socket(0xa, 0x1, 0x0) prctl$intptr(0x1a, 0x0) r1 = getpid() waitid(0x3, r1, &(0x7f0000000080), 0x80000008, &(0x7f0000000680)) ioctl(r0, 0x8916, &(0x7f0000000740)="c989d22b4da00a8e2db3bd28d682a2d4093733fd960e7087bc99d343a7bf031aff82546004efd70ce3c1a3f9eac2cc038f82068d53c8267325e241e3a2184e4f707a17889de7d6aa87610051f39c394968c5c3ce0222ee7e0b07bb780f430751b23eb86946eb0bd847d0ec86074b9395155c61a5d4ccce5ecf1cc405eccd61cee8505d1e155bea85dab17e0eaebb9cbbeed95531054277d308cc13e0e3eef627bfacf0cee3aa4a44836a61e69cfc12cc0c0c6d779dcef3fc04a85919ebc9e9df8a5d533ab8b7b0") r2 = shmget(0x2, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000440)=""/101) getpgrp(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x358, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}, 0x1, 0x0, 0x6, 0x3, 0x80}, &(0x7f0000000640)=0x98) r3 = gettid() r4 = syz_open_procfs(r3, &(0x7f00000004c0)='net/ptype\x00') getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000400)=0x14) clone(0x3, &(0x7f0000000340)="f0043488206af64a00000100008000000000de3e932abe0dbaf6f5bcea283d0dfd065202a2f6e227be45a3e8e1ed88ecf1e18f08842efe708c04083217558f9d1e8d23170152dcb53412d7ba3ffd26969897a7f6877b9c8ec081d92a992af44bb857e120ef2ddf768fed8a275e84ed0824dc92745f39967d8c590e052be705b54651a4c31bbb23031db31063f2f84f4e0f1475e901d99dcb6ff6bd1851fe8b493228702c299513bca785fe4acc589631e37ee45c0e5e5b6a", &(0x7f0000000500), &(0x7f0000000200), &(0x7f00000002c0)="e0b5ab2f58850b8dcb7aafcd31ddd83f81a560533d7ac14a9a7bf4c1444d793a8c000000000000ffffe26dad6359e17be15f67f3929bed76356776ea8adfb03c2e1167078844") getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffff157, 0x100000000, 0x3}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f00000000c0)={r5, 0x100000000, 0x7}, 0x8) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000000140)={'TPROXY\x00'}, &(0x7f0000000180)=0x1e) fstat(r4, &(0x7f0000000240)) [ 615.825143] binder: BINDER_SET_CONTEXT_MGR already set [ 615.862783] binder: 5953:5956 ioctl 40046207 0 returned -16 2018/05/29 01:54:22 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x101000, 0x0) ioctl$sock_ipx_SIOCAIPXITFCRT(r0, 0x89e0, &(0x7f00000001c0)=0xffffffff) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000200)={0x81, 0x6, 0x3a8, 0x9, "eecc898b942bde9458f28619f39990cebcff0704f48cf0380deeb5729a153173"}) r1 = socket(0xa, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$EVIOCGID(r2, 0x80084502, &(0x7f0000000100)=""/101) ioctl(r1, 0x8912, &(0x7f0000000000)="af26262c8523bf012cf66f") getsockopt$inet6_tcp_int(r1, 0x6, 0x17, &(0x7f0000000080), &(0x7f0000000040)=0xffffff5d) [ 615.902557] binder_alloc: 5953: binder_alloc_buf, no vma [ 615.908434] binder: 5953:5971 transaction failed 29189/-3, size 72-8 line 2971 [ 615.997575] binder: undelivered TRANSACTION_ERROR: 29189 [ 616.021324] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:23 executing program 7: r0 = socket$inet(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x1, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000040], 0x0, &(0x7f0000000000), &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000001500000000000000810079616d300000000000000000000000006263736630000000000000000000000069706464703000000000000000000000736974300000000000000000000000000180c2000000000000000000aaaaaaaaaabb0000000000000000e000000068010000a001000074696d65000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000766c616e000000000000000000000000000000000000000000000000000000000800000000000000000000000000007f6d61726b000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000004c45440000000000000000000000000000000000000000000000000000000000280000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000006d61726b00000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000291ba603d242a78e2cf92768f50bee8d0cc469fbc99c3f3267bed5e49ca90944f18e374bc0f524d2a26eb0e3204365e65d04a0fab9c2bb65bbcf088063216bb35c262776555bd97e6d64ba7c070863d18a9e62a8d7"]}, 0x2fd) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x3c8, 0x0, 0x3c8, 0x1b8, 0xf0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x4e0, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xc0, 0xf0, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0x3, 0x679, 0x4, 0x1}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x5, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23}}}, {{@ip={@loopback=0x7f000001, @local={0xac, 0x14, 0x14, 0xaa}, 0xffffffff, 0xff000000, 'ifb0\x00', 'bridge_slave_0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x1c}, 0x0, 0x98, 0xc8}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x400, 0x3, @empty, 0x4e24}}}, {{@uncond, 0x0, 0x98, 0xc0}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x1b}}}, {{@uncond, 0x0, 0xf0, 0x150, 0x0, {}, [@common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x190, 0x4a, 0x1, 0x1}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x3f, 0x3, [0x0, 0x3b, 0xa, 0x19, 0x17, 0x19, 0x28, 0x20, 0x3f, 0x23, 0x3f, 0x3e, 0xffffffffffffffab, 0x40, 0x3a, 0x12], 0x2, 0x7, 0x437f}}}, {{@ip={@rand_addr=0x4, @empty, 0xffffff00, 0x0, '\x00', 'veth0_to_team\x00', {}, {0xff}, 0x77, 0x3, 0x20}, 0x0, 0xe8, 0x118, 0x0, {}, [@inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0xd}}, @common=@inet=@length={0x28, 'length\x00', 0x0, {0x7, 0x7ff}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3c6042b0, 0xa6f3, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e23}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5d8) 2018/05/29 01:54:23 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x80006, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) fcntl$setpipe(r1, 0x407, 0x10000) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000580)=@add_del={0x2, &(0x7f0000000480)='team_slave_1\x00', 0x6}) getsockopt$packet_buf(r2, 0x107, 0x16, &(0x7f0000000100)=""/230, &(0x7f0000000200)=0xe6) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='rose0\x00', 0x9}) 2018/05/29 01:54:23 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x8, 0x2, &(0x7f0000000040)=@raw=[@map={0x18, 0x0, 0x1}], &(0x7f00000000c0)='syzkaller\x00', 0x7ff, 0xb4, &(0x7f0000000100)=""/180}, 0x48) r1 = dup3(r0, r0, 0x80000) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) 2018/05/29 01:54:23 executing program 5: openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) recvmmsg(r0, &(0x7f0000006e40)=[{{&(0x7f00000033c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004900)=""/197, 0xc5}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3, 0x73d}, 0x5) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x80, 0x0, 0x3}, 0xe1) sendto$inet6(r1, &(0x7f00000003c0)="84", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23}}, 0x8001, 0xffffffffffff1bea, 0x1a8000000, 0x7fff}, &(0x7f0000000000)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x3, 0xf6ce, 0xb9, 0x0, 0x50}, 0x98) 2018/05/29 01:54:23 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:23 executing program 1: connect(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa}}}, 0x32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000140)={0xa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x28) write$binfmt_aout(r0, &(0x7f0000000340), 0x20) 2018/05/29 01:54:23 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f00000002c0)=0x3ff, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x2, 0x26f) pipe2(&(0x7f0000006100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000006180)={0x1, &(0x7f0000006140)=[{0x0, 0x0, 0x0, @local}]}) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x400, 0x0) sendto$inet6(r0, &(0x7f00007a8fff), 0x0, 0xfffffefffffffffe, &(0x7f000006ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000c86000), &(0x7f0000d1b252)) 2018/05/29 01:54:23 executing program 4: getsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000180)=@sack_info={0x0, 0x1f}, &(0x7f00000001c0)=0xc) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={r0, 0x4, 0x100, 0x400}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x4000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000140)=0x2, 0x4) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x2, 0x400042) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f00000000c0)=0x7, 0x8) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8724a6beebce0180c200000083004500001c0000000000009078e0954396fee9000001e000000200009078e0000002"], &(0x7f0000000080)) [ 616.768528] kernel msg: ebtables bug: please report to author: Wrong len argument [ 616.777906] binder: 6033:6041 got transaction with invalid offsets ptr [ 616.793966] binder: 6033:6041 transaction failed 29201/-14, size 72-8 line 2999 [ 616.803592] kernel msg: ebtables bug: please report to author: Wrong len argument 2018/05/29 01:54:23 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x200000, 0x40) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, 0x0, 0x1, 0x2, 0xa, 0x7d8, 0x8, 0x10001}, &(0x7f00000000c0)=0x20) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f00000003c0)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000d7efec)=ANY=[@ANYBLOB="140000280106ffff000000000600000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x88, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1e}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x73}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x100000001}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x0) [ 616.812634] binder_alloc: binder_alloc_mmap_handler: 6033 20001000-20004000 already mapped failed -16 2018/05/29 01:54:23 executing program 1: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x400000) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0xffffffffffffff16) r1 = getpgid(0xffffffffffffffff) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}]}) prctl$setptracer(0x59616d61, r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x22, &(0x7f0000ddfffc)=0x1, 0xfe8c) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000100)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) sendmmsg(r2, &(0x7f0000004c80)=[{{0x0, 0x0, &(0x7f0000004b40), 0x218, &(0x7f0000004bc0)}}], 0x400000000000284, 0x20004bc0) 2018/05/29 01:54:23 executing program 3: r0 = socket(0x0, 0xa, 0x4) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000100), &(0x7f00000001c0)=0x4) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000064e000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f000095cfc8)={&(0x7f0000893ff8)=@sco, 0x80, &(0x7f00000a4fb0), 0x0, &(0x7f0000b30000), 0x2b25abfcfb57224f, 0x1}, 0x0) setsockopt$RDS_RECVERR(r1, 0x114, 0x5, &(0x7f00000000c0)=0x1, 0x4) r4 = dup2(r2, r3) sendto(r2, &(0x7f0000000440)='|', 0xffffffffffffff08, 0x0, 0x0, 0x0) getsockopt$bt_BT_POWER(r4, 0x112, 0x9, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x1) [ 616.841623] binder: BINDER_SET_CONTEXT_MGR already set 2018/05/29 01:54:23 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000200)={0x15, @loopback=0x7f000001, 0x4e20, 0x4, 'rr\x00', 0x9, 0x8, 0x30}, 0x2c) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockname$inet(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10) r4 = socket(0x10, 0x80000, 0xf3) accept4$unix(r4, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80800) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4102, 0x0) ioctl$SG_SET_KEEP_ORPHAN(r5, 0x2287, &(0x7f0000000300)=0x1) getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f00000004c0), &(0x7f0000000500)=0xfffffffffffffef8) 2018/05/29 01:54:23 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x200, &(0x7f0000000040), &(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000280)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x40000, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x8, 0x5}) 2018/05/29 01:54:23 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000fb6000)='./file0\x00', &(0x7f0000d78000)='.', &(0x7f0000fdb000)='ubifs\x00', 0x1003, 0x0) mount(&(0x7f0000000040)='.', &(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='mslos\x00', 0x85010, &(0x7f00000001c0)="a33c34c10e21ee78de0e5a8bd4958a083f7bb6e1058d7898627769d73482c6c640f4775ebfa9b3290c829f000000") mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)='nfs\x00', 0x2080, &(0x7f0000000000)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uinput\x00', 0x181000, 0x0) ioctl$DRM_IOCTL_CONTROL(r0, 0x40086414, &(0x7f00000000c0)={0x1, 0x3}) [ 616.863429] binder: 6033:6041 ioctl 40046207 0 returned -16 [ 616.884444] binder_alloc: 6033: binder_alloc_buf, no vma [ 616.890178] binder: 6033:6058 transaction failed 29189/-3, size 72-8 line 2971 [ 617.021351] binder: undelivered TRANSACTION_ERROR: 29189 [ 617.028907] binder: undelivered TRANSACTION_ERROR: 29201 2018/05/29 01:54:24 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = pkey_alloc(0x0, 0x3) pkey_free(r0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x10200, 0x100) getsockopt$inet_mreqsrc(r1, 0x0, 0x26, &(0x7f0000000080)={@remote, @remote, @rand_addr}, &(0x7f0000000100)=0xc) getsockopt$inet_mreqsrc(r1, 0x0, 0x25, &(0x7f0000000140)={@multicast1, @multicast1, @local}, &(0x7f0000000180)=0xc) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000001c0)={0x7, 0x7fff, 0x9, 0x4, 0x81, 0x100000000}) r2 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000000240)=""/194) 2018/05/29 01:54:24 executing program 1: r0 = socket(0xa, 0x2, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xfffffffffffffffe, 0x80) epoll_pwait(r1, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}], 0x6, 0x4, &(0x7f00000001c0)={0x8001}, 0x8) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r2 = open(&(0x7f0000000000)='.\x00', 0xd140ef0a5979172b, 0x0) getpeername(r2, &(0x7f0000000040)=@ax25, &(0x7f00000000c0)=0x80) 2018/05/29 01:54:24 executing program 6: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x5, 0x80000) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000140)={0x7, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @broadcast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @broadcast}]}) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) lseek(r0, 0x0, 0x3) 2018/05/29 01:54:24 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0x36, "61fad517e004e8fa47f0b9839af7b5540a6f22c692b884b509b9beb810a19233f7b0bd7f99bede6b0436585cb2934dd243e6671be2e3"}, &(0x7f0000000140)=0x3e) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000180)={r1, 0x2}, 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000100)={0x1000, 0x100, 0x800, 0x8, 0x80, 0x2, 0x8001}, 0xc) r2 = perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fremovexattr(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="7308fba9c3eb656375c3d98c1b726974792e76626f786e6574302d00f6ead78bf8624b205fe8f62b9e4ede4cba8b6344245468"]) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/37) 2018/05/29 01:54:24 executing program 5: r0 = socket(0xa, 0x1, 0x0) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000180)=0x3, 0x4) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000140)={r1, r2/1000+10000}, 0x10) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000600)=ANY=[@ANYBLOB="736563757269747900000000120000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bb5e60e340625089b0d6dbd675e26233dca0c124f5a1c4854ec28ddd0cb8989bb4f711a3ce5059d2fce519470f6086783ebb24f7291bdd0c2fb50fcdc07b2d76b5387ad19fb0ce982698321d"], 0x68) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) write$binfmt_aout(r5, &(0x7f00000006c0)={{0x1cc, 0x7, 0x1000, 0x18d, 0x5c, 0x80000000, 0x259}, "8ad20c4d942d34bbb0bce3edc0d96e07a52fff43c63b2e3ee289d28bf6ff61c65d1c887f47c4b277adeb9597eb82206aa05c21e029b5cc624c343809a176b8e9b4f3b1c8c7b7119ae5655e9800a01e8fc28473e7b7a96cd01432f3b399c74a62bf869c61f0d99ec8268d6da8e0b56c0f13ebe19a2012d7b242d0554ef76e432004d6f97d99c4189b45af87f57e58a7858eadf0f893f6db0b1b464025c9", [[], [], [], [], []]}, 0x5bd) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f00000001c0)="670f080f01cf0f22e50fc7ad003000000f34c4e2ad91a4a800000000b8a7d71e8a0f23c00f21f83501000b000f23f8c4c1c971d4e90fc79b8a3568bcb9800000c00f3235002000000f30", 0x4a}], 0x1, 0x0, &(0x7f0000000580), 0x0) clone(0x0, &(0x7f00000004c0)="2edfc4dc4b13cfe2f95b82c256cf530511ce8855d93f899e7c41efd559fc4d668064a919a99c9091411ec8c27dab41ef501192222b31f080c750bcc72748b45900e210615cda87bd85ab34532f5cc3714ab467070ffce88ec2aa627932db4542", &(0x7f0000000000), &(0x7f0000000100), &(0x7f00000005c0)) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_SREGS(r5, 0x8138ae83, &(0x7f0000000380)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x20800, 0x0) ioctl$EVIOCGABS20(r6, 0x80184560, &(0x7f00000002c0)=""/183) 2018/05/29 01:54:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00c@@\x00\x00\x00\x00@O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00H\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:24 executing program 4: r0 = socket(0xa, 0x2, 0x0) mmap(&(0x7f0000187000/0x600000)=nil, 0x600000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x3, 0x400) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x60801, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 2018/05/29 01:54:24 executing program 3: r0 = socket(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") pipe2(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000180)={0xa736, 0xdb}) r2 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x8000400000000c9, 0x0) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000002c0)={0x9, &(0x7f00000001c0)=[{0x200, 0x646c, 0x401, 0xffff}, {0xffffffff, 0x4, 0x3b, 0x5f}, {0x80, 0x40, 0xffffffff, 0x80}, {0xfc332c5, 0xfae3, 0xa2c, 0x2}, {0x6, 0x2, 0x1}, {0x34c, 0xb3aa, 0x8, 0x5000000000}, {0xff, 0x1, 0x3, 0x2}, {0x80, 0x0, 0x7, 0x6}, {0xffffffffffffffff, 0x43bb}]}, 0x10) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r5 = syz_open_procfs(r4, &(0x7f0000000280)='net/udp\x00') ioctl$LOOP_SET_FD(r2, 0x4c00, r5) pread64(r3, &(0x7f0000000080)=""/151, 0x97, 0x0) ioctl$BLKBSZSET(r5, 0x40081271, &(0x7f0000000140)=0x4) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000300)) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) [ 617.860937] binder: 6094:6096 got transaction with invalid offsets ptr [ 617.887184] binder: 6094:6096 transaction failed 29201/-14, size 72-8 line 2999 2018/05/29 01:54:24 executing program 6: r0 = socket(0x10, 0x2, 0xc) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f3050100080001000104a9dcffdf04", 0x1f) write(r0, &(0x7f0000594000)="1f0000000104ff00fd4354c007110000f305010008000100060423dcffdf00", 0x1f) 2018/05/29 01:54:24 executing program 4: utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x5, 0x9}) r0 = syz_open_procfs(0x0, &(0x7f0000000780)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0xa0013, r0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x1) [ 617.920873] binder_alloc: binder_alloc_mmap_handler: 6094 20001000-20004000 already mapped failed -16 [ 617.974490] binder: BINDER_SET_CONTEXT_MGR already set [ 617.990884] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 618.009488] binder: 6094:6096 ioctl 40046207 0 returned -16 2018/05/29 01:54:24 executing program 4: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x3, &(0x7f0000c91000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x57}, [], {0x95}}, &(0x7f0000e6bffc)='GPL\x00', 0x1, 0x333, &(0x7f000000d000)=""/153}, 0x3e) r1 = syz_open_dev$tun(&(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x400000) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'bpq0\x00\x00\x00\x00\x00\x00\x00 \x00', 0x2}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x7a) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000080)=r0) [ 618.039218] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 618.087996] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. [ 618.118263] netlink: 3 bytes leftover after parsing attributes in process `syz-executor6'. 2018/05/29 01:54:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x3c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="006340400000000080bb010000000000000000000000000000000000000000000000000048000000000000000800000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB="1900000000000000"]], 0x0, 0x0, &(0x7f0000002000)}) 2018/05/29 01:54:24 executing program 1: r0 = socket$inet6(0xa, 0x10000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") openat$nullb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/nullb0\x00', 0x88000, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x4002, 0x0) io_setup(0x4000080, &(0x7f00000000c0)=0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="64030000f35110114c37642367651e31d0c74142b109eaa9ca8f03f99ba73232e54df28d2b3dc3eb6c56fdb54b0dafe7ae48df01e7c69e6b6b0cfcbdde26c0d60ace98febe87236ec3a2396d67b2c699a18e55055fa677df1f3083158dae9687c7e23e4f4f17f6b3f2684a8d3b17178c4068a582985e46236dd386ff60ea769e47df2c360382f1dc57631af3f0ca16a9aa1dbd9b7901b7ec33c7db47b27d614f3153d52b6896f00340579537fa312a004e954f08f5d37053faab586c81ddc204786cd72392f3e96891cb52d9e3a3d88391dd0e335f3714fe4c2e1fada1130fd709e2f3b9e0f641b7275fde4a1aaa61", @ANYRES16=r3, @ANYBLOB="00012cbd7000ffdbdf250700000008000400060000000800040004000000400002000800070000000000080004000100000008000400503a000014000100fe8000000000000000000000000000bb08000900010000800800060009000000"], 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c0) io_submit(r2, 0x111, &(0x7f0000001540)=[&(0x7f0000000140)={0x0, 0x0, 0xd, 0x1, 0x0, r1, &(0x7f0000000000), 0xfffffce4}]) [ 618.197804] binder: undelivered TRANSACTION_ERROR: 29201 [ 618.269993] binder: 6132:6135 got transaction with invalid offsets ptr [ 618.320012] binder: 6132:6135 transaction failed 29201/-14, size 72-8 line 2999 [ 618.352621] binder_alloc: binder_alloc_mmap_handler: 6132 20001000-20004000 already mapped failed -16 [ 618.377444] binder: BINDER_SET_CONTEXT_MGR already set [ 618.388785] binder: 6132:6135 ioctl 40046207 0 returned -16 2018/05/29 01:54:24 executing program 6: r0 = socket$inet6(0xa, 0x803, 0x100000001) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000000c0)=[@in={0x2, 0x4e22, @rand_addr=0x4}, @in6={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x180000000}, 0x5}, @in={0x2, 0x4e22, @multicast2=0xe0000002}], 0x3c) getsockopt$inet6_int(r0, 0x3a, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0xfffffffffffffc7b) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x8e106f29b6d284bb) 2018/05/29 01:54:24 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240)='/dev/zero\x00', 0x2000, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'ipddp0\x00', 0x507d71d334a456fc}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)=@newspdinfo={0xec, 0x24, 0x0, 0x70bd25, 0x25dfdbfd, 0x1, [@migrate={0x88, 0x11, [{@in=@broadcast=0xffffffff, @in6=@loopback={0x0, 0x1}, 0x7f, 0x4, 0x0, 0x3503, 0xa, 0x2}, {@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, @in6=@dev={0xfe, 0x80, [], 0xa}, 0x7f, 0x0, 0x0, 0x0, 0xa, 0x2}, {@in6=@dev={0xfe, 0x80, [], 0x8}, @in6=@dev={0xfe, 0x80, [], 0xc}, 0xff, 0x1, 0x0, 0x34ff, 0x2, 0x2}]}, @tfcpad={0x8, 0x16, 0x5}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd2a}}, @address_filter={0x28, 0x1a, {@in=@rand_addr=0x400, @in6=@loopback={0x0, 0x1}, 0xa, 0xf7, 0x100}}, @replay_thresh={0x8, 0xb}, @proto={0x8, 0x19, 0x6f}]}, 0xec}, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}]}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x1) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000200)=0x4, 0x4) [ 618.419576] binder_alloc: 6132: binder_alloc_buf, no vma [ 618.425213] binder: 6132:6140 transaction failed 29189/-3, size 72-8 line 2971 2018/05/29 01:54:25 executing program 1: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000240)="c626262c8523bf012cf66f") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x482182, 0x0) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ffb000/0x1000)=nil, 0xffff, 0x1, 0x73, &(0x7f0000ff9000/0x3000)=nil, 0x200040000000000}) [ 618.620794] binder: undelivered TRANSACTION_ERROR: 29189 [ 618.626907] binder: undelivered TRANSACTION_ERROR: 29201 [ 742.867022] INFO: rcu_sched self-detected stall on CPU [ 742.872487] 0-....: (124999 ticks this GP) idle=f32/1/4611686018427387906 softirq=150547/150692 fqs=31192 [ 742.882556] (t=125000 jiffies g=74488 c=74487 q=2218) [ 742.887906] NMI backtrace for cpu 0 [ 742.891522] CPU: 0 PID: 6102 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #72 [ 742.898686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 742.908021] Call Trace: [ 742.910584] [ 742.912724] dump_stack+0x1b9/0x294 [ 742.916333] ? dump_stack_print_info.cold.2+0x52/0x52 [ 742.921507] ? lock_release+0xa10/0xa10 [ 742.925475] nmi_cpu_backtrace.cold.4+0x19/0xce [ 742.930135] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 742.935316] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 742.940582] arch_trigger_cpumask_backtrace+0x14/0x20 [ 742.945754] rcu_dump_cpu_stacks+0x175/0x1c2 [ 742.950144] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 742.955145] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 742.960583] ? print_other_cpu_stall+0x4a0/0x4a0 [ 742.965327] ? debug_check_no_locks_freed+0x310/0x310 [ 742.970520] ? find_held_lock+0x36/0x1c0 [ 742.974571] ? zap_class+0x720/0x720 [ 742.978266] ? perf_trace_lock+0xd6/0x900 [ 742.982394] ? zap_class+0x720/0x720 [ 742.986090] ? graph_lock+0x170/0x170 [ 742.989871] ? graph_lock+0x170/0x170 [ 742.993658] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 742.999197] ? pvclock_gtod_notify+0x2db/0x3c0 [ 743.003761] ? graph_lock+0x170/0x170 [ 743.007544] ? graph_lock+0x170/0x170 [ 743.011335] ? __lock_is_held+0xb5/0x140 [ 743.015388] rcu_check_callbacks+0x21b/0xad0 [ 743.019780] ? rcu_cpu_stall_reset+0x210/0x210 [ 743.024349] ? trace_hardirqs_off+0xd/0x10 [ 743.028569] ? raise_softirq+0x1b2/0x450 [ 743.032614] ? raise_softirq_irqoff+0x310/0x310 [ 743.037268] ? account_guest_time+0x3d0/0x3d0 [ 743.041744] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 743.047263] ? hrtimer_run_queues+0x70/0x390 [ 743.051656] ? run_local_timers+0x168/0x1d0 [ 743.055964] ? timer_clear_idle+0x50/0x50 [ 743.060100] ? account_system_time+0x7f/0xb0 [ 743.064492] ? account_process_tick+0x76/0x240 [ 743.069067] update_process_times+0x2d/0x70 [ 743.073373] tick_sched_handle+0x9f/0x180 [ 743.077502] tick_sched_timer+0x45/0x130 [ 743.081547] __hrtimer_run_queues+0x3e3/0x10a0 [ 743.086111] ? tick_sched_do_timer+0x1a0/0x1a0 [ 743.090677] ? hrtimer_start_range_ns+0xd10/0xd10 [ 743.095504] ? pvclock_read_flags+0x160/0x160 [ 743.099990] ? kvm_clock_read+0x25/0x30 [ 743.103951] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 743.108949] ? kvm_clock_read+0x25/0x30 [ 743.112913] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 743.117910] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 743.123259] ? do_timer+0x50/0x50 [ 743.126697] ? rcu_nmi_exit+0xd7/0x2b0 [ 743.130580] ? do_raw_spin_lock+0xc1/0x200 [ 743.134803] hrtimer_interrupt+0x2f3/0x750 [ 743.139040] smp_apic_timer_interrupt+0x15d/0x710 [ 743.143864] ? smp_call_function_single_interrupt+0x650/0x650 [ 743.149729] ? _raw_spin_lock+0x32/0x40 [ 743.153702] ? _raw_spin_unlock+0x22/0x30 [ 743.157830] ? handle_edge_irq+0x330/0x870 [ 743.162048] ? task_prio+0x50/0x50 [ 743.165575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.170403] apic_timer_interrupt+0xf/0x20 [ 743.174622] [ 743.176843] RIP: 0010:__sanitizer_cov_trace_pc+0x4c/0x50 [ 743.182277] RSP: 0018:ffff88014f237940 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 743.189966] RAX: 0000000000040000 RBX: ffff8801d28e2000 RCX: ffffc90002ae6000 [ 743.197214] RDX: 0000000000040000 RSI: ffffffff84b30851 RDI: 0000000000000003 [ 743.204470] RBP: ffff88014f2379c0 R08: ffff8801c7bfa700 R09: ffff88014f237518 [ 743.211721] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 743.218975] R13: ffff8801da4061d8 R14: ffff8801b3085460 R15: ffff8801b3085380 [ 743.226235] ? lo_ioctl+0x1b71/0x2130 [ 743.230031] ? lo_ioctl+0x1b71/0x2130 [ 743.233815] ? exit_robust_list+0x290/0x290 [ 743.238127] ? lo_rw_aio_complete+0x430/0x430 [ 743.242605] blkdev_ioctl+0x9b6/0x2020 [ 743.246474] ? blkpg_ioctl+0xc40/0xc40 [ 743.250344] ? lock_downgrade+0x8e0/0x8e0 [ 743.254477] ? rcu_is_watching+0x85/0x140 [ 743.258607] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 743.263792] ? __fget+0x40c/0x650 [ 743.267228] ? expand_files.part.8+0x9a0/0x9a0 [ 743.271794] ? lock_downgrade+0x8e0/0x8e0 [ 743.275927] block_ioctl+0xee/0x130 [ 743.279537] ? blkdev_fallocate+0x400/0x400 [ 743.283840] do_vfs_ioctl+0x1cf/0x16a0 [ 743.287709] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 743.292274] ? ioctl_preallocate+0x2e0/0x2e0 [ 743.296665] ? fget_raw+0x20/0x20 [ 743.300107] ? _raw_spin_unlock+0x22/0x30 [ 743.304238] ? put_unused_fd+0x62/0x70 [ 743.308107] ? __x64_sys_futex+0x477/0x680 [ 743.312326] ? do_futex+0x27d0/0x27d0 [ 743.316110] ? security_file_ioctl+0x94/0xc0 [ 743.320504] ksys_ioctl+0xa9/0xd0 [ 743.323940] __x64_sys_ioctl+0x73/0xb0 [ 743.327820] do_syscall_64+0x1b1/0x800 [ 743.331690] ? finish_task_switch+0x1ca/0x840 [ 743.336168] ? syscall_return_slowpath+0x5c0/0x5c0 [ 743.341080] ? syscall_return_slowpath+0x30f/0x5c0 [ 743.345994] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 743.351355] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.356183] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 743.361353] RIP: 0033:0x455a09 [ 743.364522] RSP: 002b:00007f48025d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 743.372212] RAX: ffffffffffffffda RBX: 00007f48025da6d4 RCX: 0000000000455a09 [ 743.379461] RDX: 0000000000000016 RSI: 0000000000004c00 RDI: 0000000000000017 [ 743.386712] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 743.393964] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 743.401214] R13: 00000000000002b2 R14: 00000000006f8150 R15: 0000000000000000 [ 743.597023] INFO: rcu_bh self-detected stall on CPU [ 743.602092] 0-....: (124459 ticks this GP) idle=f32/1/4611686018427387906 softirq=150692/150692 fqs=31082 [ 743.611945] (t=125000 jiffies g=-101 c=-102 q=1) [ 743.616862] NMI backtrace for cpu 0 [ 743.620481] CPU: 0 PID: 6102 Comm: syz-executor3 Not tainted 4.17.0-rc7+ #72 [ 743.627644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 743.636976] Call Trace: [ 743.639540] [ 743.641679] dump_stack+0x1b9/0x294 [ 743.645289] ? dump_stack_print_info.cold.2+0x52/0x52 [ 743.650460] ? lock_release+0xa10/0xa10 [ 743.654420] nmi_cpu_backtrace.cold.4+0x19/0xce [ 743.659071] ? lapic_can_unplug_cpu.cold.26+0x3f/0x3f [ 743.664240] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 743.669498] arch_trigger_cpumask_backtrace+0x14/0x20 [ 743.674689] rcu_dump_cpu_stacks+0x175/0x1c2 [ 743.679087] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 743.684097] check_cpu_stall.isra.61.cold.80+0x36c/0x59a [ 743.689533] ? print_other_cpu_stall+0x4a0/0x4a0 [ 743.694276] ? debug_check_no_locks_freed+0x310/0x310 [ 743.699454] ? find_held_lock+0x36/0x1c0 [ 743.703504] ? zap_class+0x720/0x720 [ 743.707200] ? perf_trace_lock+0xd6/0x900 [ 743.711327] ? zap_class+0x720/0x720 [ 743.715030] ? graph_lock+0x170/0x170 [ 743.718816] ? graph_lock+0x170/0x170 [ 743.722602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.728128] ? pvclock_gtod_notify+0x2db/0x3c0 [ 743.732693] ? show_rcu_gp_kthreads+0x30/0x30 [ 743.737168] ? graph_lock+0x170/0x170 [ 743.740950] ? graph_lock+0x170/0x170 [ 743.744759] ? __lock_is_held+0xb5/0x140 [ 743.748809] rcu_check_callbacks+0x21b/0xad0 [ 743.753289] ? rcu_cpu_stall_reset+0x210/0x210 [ 743.757852] ? trace_hardirqs_off+0xd/0x10 [ 743.762070] ? raise_softirq+0x1b2/0x450 [ 743.766122] ? raise_softirq_irqoff+0x310/0x310 [ 743.770776] ? account_guest_time+0x3d0/0x3d0 [ 743.775254] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 743.780771] ? hrtimer_run_queues+0x70/0x390 [ 743.785163] ? run_local_timers+0x168/0x1d0 [ 743.789465] ? timer_clear_idle+0x50/0x50 [ 743.793595] ? account_system_time+0x7f/0xb0 [ 743.797983] ? account_process_tick+0x76/0x240 [ 743.802552] update_process_times+0x2d/0x70 [ 743.806863] tick_sched_handle+0x9f/0x180 [ 743.810992] tick_sched_timer+0x45/0x130 [ 743.815043] __hrtimer_run_queues+0x3e3/0x10a0 [ 743.819618] ? tick_sched_do_timer+0x1a0/0x1a0 [ 743.824181] ? hrtimer_start_range_ns+0xd10/0xd10 [ 743.829015] ? pvclock_read_flags+0x160/0x160 [ 743.833497] ? kvm_clock_read+0x25/0x30 [ 743.837453] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 743.842451] ? kvm_clock_read+0x25/0x30 [ 743.846408] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 743.851405] ? ktime_get_update_offsets_now+0x3d3/0x5c0 [ 743.856755] ? do_timer+0x50/0x50 [ 743.860189] ? rcu_nmi_exit+0xd7/0x2b0 [ 743.864063] ? do_raw_spin_lock+0xc1/0x200 [ 743.868283] hrtimer_interrupt+0x2f3/0x750 [ 743.872509] smp_apic_timer_interrupt+0x15d/0x710 [ 743.877334] ? smp_call_function_single_interrupt+0x650/0x650 [ 743.883198] ? _raw_spin_lock+0x32/0x40 [ 743.887154] ? _raw_spin_unlock+0x22/0x30 [ 743.891283] ? handle_edge_irq+0x330/0x870 [ 743.895500] ? task_prio+0x50/0x50 [ 743.899114] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 743.903942] apic_timer_interrupt+0xf/0x20 [ 743.908152] [ 743.910372] RIP: 0010:write_comp_data+0x14/0x70 [ 743.915025] RSP: 0018:ffff88014f237928 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 743.922718] RAX: 0000000000000000 RBX: ffff8801d28e2000 RCX: ffffffff84b30777 [ 743.929972] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000005 [ 743.937220] RBP: ffff88014f237928 R08: ffff8801c7bfa700 R09: ffff88014f237518 [ 743.944468] R10: 0000000000000003 R11: 0000000000000001 R12: 0000000000000000 [ 743.951718] R13: ffff880188876d80 R14: ffff8801b3085460 R15: ffff8801b3085380 [ 743.958979] ? lo_ioctl+0x1a97/0x2130 [ 743.962765] __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 743.968115] lo_ioctl+0x1a97/0x2130 [ 743.971728] ? exit_robust_list+0x290/0x290 [ 743.976037] ? lo_rw_aio_complete+0x430/0x430 [ 743.980519] blkdev_ioctl+0x9b6/0x2020 [ 743.984387] ? blkpg_ioctl+0xc40/0xc40 [ 743.988255] ? lock_downgrade+0x8e0/0x8e0 [ 743.992387] ? rcu_is_watching+0x85/0x140 [ 743.996518] ? rcu_bh_force_quiescent_state+0x20/0x20 [ 744.001694] ? __fget+0x40c/0x650 [ 744.005134] ? expand_files.part.8+0x9a0/0x9a0 [ 744.009709] ? lock_downgrade+0x8e0/0x8e0 [ 744.013845] block_ioctl+0xee/0x130 [ 744.017454] ? blkdev_fallocate+0x400/0x400 [ 744.021769] do_vfs_ioctl+0x1cf/0x16a0 [ 744.025638] ? do_raw_spin_trylock+0x1b0/0x1b0 [ 744.030202] ? ioctl_preallocate+0x2e0/0x2e0 [ 744.034601] ? fget_raw+0x20/0x20 [ 744.038040] ? _raw_spin_unlock+0x22/0x30 [ 744.042170] ? put_unused_fd+0x62/0x70 [ 744.046044] ? __x64_sys_futex+0x477/0x680 [ 744.050263] ? do_futex+0x27d0/0x27d0 [ 744.054048] ? security_file_ioctl+0x94/0xc0 [ 744.058440] ksys_ioctl+0xa9/0xd0 [ 744.061884] __x64_sys_ioctl+0x73/0xb0 [ 744.065754] do_syscall_64+0x1b1/0x800 [ 744.069644] ? finish_task_switch+0x1ca/0x840 [ 744.074121] ? syscall_return_slowpath+0x5c0/0x5c0 [ 744.079039] ? syscall_return_slowpath+0x30f/0x5c0 [ 744.083960] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 744.089306] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 744.094131] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 744.099298] RIP: 0033:0x455a09 [ 744.102467] RSP: 002b:00007f48025d9c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 744.110164] RAX: ffffffffffffffda RBX: 00007f48025da6d4 RCX: 0000000000455a09 [ 744.117415] RDX: 0000000000000016 RSI: 0000000000004c00 RDI: 0000000000000017 [ 744.124670] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 744.131927] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 744.139176] R13: 00000000000002b2 R14: 00000000006f8150 R15: 0000000000000000