7b, &(0x7f0000000100)={0x0, 0x7}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r3, &(0x7f00000001c0)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:23 executing program 5: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000240)={'nat\x00'}, &(0x7f00000002c0)=0x78) accept4$inet6(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, @mcast2}, &(0x7f00000001c0)=0x1c, 0x80800) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x30143f, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x80, 0x4) r2 = socket$inet6(0xa, 0x801, 0x83) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000040)={0x4, 0xfffffffffffffffc, 0x1, 0x5, 0x3, 0x9, 0x7, 0x9da00000000, 0x0}, &(0x7f0000000080)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000340)=ANY=[@ANYRES32=r3, @ANYBLOB="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"], 0xb3) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000200)=0x6, 0x4) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000636000)=0xa9) 2018/03/21 23:55:23 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x2, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:23 executing program 4: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r0, 0x8138ae83, &(0x7f0000000100)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000000280)=@known='user.syz\x00') preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000240)) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x28, &(0x7f00000002c0)}, 0x10) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x4, 0x40]) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$KVM_X86_SET_MCE(r1, 0x4040ae9e, &(0x7f0000000080)={0x400000000000000, 0x1002, 0x7f, 0x8, 0x1c}) socket$vsock_dgram(0x28, 0x2, 0x0) 2018/03/21 23:55:23 executing program 7: r0 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x20) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000000080)={0x0, 0xfffffffffffffff7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x1}, &(0x7f0000000280)=0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000b05fdff000000e1000000000000000038723d635bd23f1e8ce6e7f518d12d1f02edfa00695d8f45769fa16f033c6c93381e388090b15f300f7e89f3f643a0ee42f51a34731f15b0ff6676b0a942b0c7686af7bd879f8a983cb4026cc131a281f31aa8260ae39eaa8df3a84ea2493456892c3d1d7ba902defb2035001241d77eb390501e53618674eae1128fd2dbdbb62a1ae2c2a35b0e8022a055a7"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:23 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x1, {{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x90) mprotect(&(0x7f000000c000/0x1000)=nil, 0x1000, 0x1000000) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001000)={0x0, @broadcast, @broadcast}, &(0x7f0000008000)=0xc) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000040)={0x10205, 0x0, &(0x7f0000008000/0x4000)=nil}) 2018/03/21 23:55:23 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4000, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={r0, 0x3, 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0], 0x4}, 0x20) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/21 23:55:23 executing program 0: clock_gettime(0x0, &(0x7f0000002340)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000000300)=""/103, 0x67}], 0x5, &(0x7f0000000400)=""/13, 0xd, 0x7e44a8ae}}, {{&(0x7f0000000440)=@rc, 0x80, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/131, 0x83}], 0x2, &(0x7f00000015c0)=""/220, 0xdc, 0x7}, 0x166}, {{&(0x7f00000016c0)=@ax25, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/204, 0xcc}, {&(0x7f0000001840)=""/63, 0x3f}], 0x2, &(0x7f00000018c0)=""/241, 0xf1, 0xf108}, 0x4}, {{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/26, 0x1a}, {&(0x7f0000001a80)=""/118, 0x76}, {&(0x7f0000001b00)=""/68, 0x44}], 0x3, 0x0, 0x0, 0x4}, 0x3}, {{&(0x7f0000001bc0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/40, 0x28}, {&(0x7f0000001c80)=""/86, 0x56}, {&(0x7f0000001d00)=""/242, 0xf2}], 0x3, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f0000001f40)=""/91, 0x5b}, {&(0x7f0000001fc0)=""/32, 0x20}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/7, 0x7}], 0x5, 0x0, 0x0, 0x80}, 0x4}], 0x6, 0x40, &(0x7f0000002380)={r0, r1+30000000}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000023c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000024c0)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000002500)={r3, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000080)={@rand_addr, @loopback, @rand_addr}, &(0x7f0000002540)=0xc) 2018/03/21 23:55:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/validatetrans\x00', 0x1, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001200)='/selinux/avc/cache_stats\x00', 0x0, 0x0) recvfrom$ax25(r1, &(0x7f0000001240)=""/73, 0x49, 0x2, &(0x7f00000012c0)={0x3, {"480156d3bc0887"}, 0x7}, 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/21 23:55:24 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000ba55cacf011b4d525e0be50b05fdff000000e10000000000000500668eed7022fa3a3bbe0a69f3675e025533ba90ce523651782d7876289b5643081f7c34a8b39bc2786e63df90078742b4358c23fcc6d2e77b06eaf27d2c744f75d632596b5bca4cf274ec3715c8f79c4fe9138cab6f73df0f6ac621f8257fcdf39fbb0e4e72cb6be7ac08250e547ec2dff4eb8345d5cac5650d24a08e016b0134bd15a48b4d52b21060181c738f8e0c0579bb3ecc31d1f1827b41484f378d53f44a43d01759"], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) [ 77.247560] binder: 9076:9082 unknown command 19 [ 77.254353] binder: 9076:9082 ioctl c0306201 20000040 returned -22 [ 77.262627] binder: BINDER_SET_CONTEXT_MGR already set [ 77.268470] binder: 9076:9082 ioctl 40046207 0 returned -16 [ 77.287711] binder: 9076:9099 unknown command 21 [ 77.295420] binder: 9076:9099 ioctl c0306201 20000040 returned -22 2018/03/21 23:55:24 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x101000, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x7) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x710, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e23, @multicast1=0xe0000001}, {0x307}, 0x2c, {0x2, 0x4e22, @broadcast=0xffffffff}, 'syz_tun\x00'}) getsockopt$netlink(r3, 0x10e, 0x9, &(0x7f0000002040)=""/4096, &(0x7f0000000040)=0x1000) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000013000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:24 executing program 0: clock_gettime(0x0, &(0x7f0000002340)={0x0, 0x0}) recvmmsg(0xffffffffffffff9c, &(0x7f00000021c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000100)=""/204, 0xcc}, {&(0x7f0000000200)=""/219, 0xdb}, {&(0x7f0000000300)=""/103, 0x67}], 0x5, &(0x7f0000000400)=""/13, 0xd, 0x7e44a8ae}}, {{&(0x7f0000000440)=@rc, 0x80, &(0x7f0000001580)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/131, 0x83}], 0x2, &(0x7f00000015c0)=""/220, 0xdc, 0x7}, 0x166}, {{&(0x7f00000016c0)=@ax25, 0x80, &(0x7f0000001880)=[{&(0x7f0000001740)=""/204, 0xcc}, {&(0x7f0000001840)=""/63, 0x3f}], 0x2, &(0x7f00000018c0)=""/241, 0xf1, 0xf108}, 0x4}, {{&(0x7f00000019c0)=@hci, 0x80, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/26, 0x1a}, {&(0x7f0000001a80)=""/118, 0x76}, {&(0x7f0000001b00)=""/68, 0x44}], 0x3, 0x0, 0x0, 0x4}, 0x3}, {{&(0x7f0000001bc0)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001c40)=""/40, 0x28}, {&(0x7f0000001c80)=""/86, 0x56}, {&(0x7f0000001d00)=""/242, 0xf2}], 0x3, 0x0, 0x0, 0x4}}, {{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f0000001f40)=""/91, 0x5b}, {&(0x7f0000001fc0)=""/32, 0x20}, {&(0x7f0000002000)=""/221, 0xdd}, {&(0x7f0000002100)=""/7, 0x7}], 0x5, 0x0, 0x0, 0x80}, 0x4}], 0x6, 0x40, &(0x7f0000002380)={r0, r1+30000000}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000023c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@dev}}, &(0x7f00000024c0)=0xe8) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000002500)={r3, 0x1, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) socket$key(0xf, 0x3, 0x2) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000080)={@rand_addr, @loopback, @rand_addr}, &(0x7f0000002540)=0xc) 2018/03/21 23:55:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) rt_sigreturn() setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000080)=0x6fae, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x10000400000004, &(0x7f00000000c0)=""/145, &(0x7f00005ed000)=0x91) 2018/03/21 23:55:24 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x100, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000080)={0x1ff, 0xfffffffffffffff7, 0x0, 0x1000, 0x1ff, 0x6}, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x400000) 2018/03/21 23:55:24 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x141) ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000636000)=0xa9) 2018/03/21 23:55:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0xffffffff, 0xffffffffffffffc0, 0xdff, 0x0, 0xcfeb}, 0x14) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) sendmmsg$nfc_llcp(r0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x27, 0x1, 0x2, 0x6, 0xd7fa, 0x6, "3a67c5cb5faf7afa7f9514e4728dbddf2216198b58175660e44548571e13993acab39b6033c4ceeca2029e1d139ab53b42e6567b924bf10539b13377927613", 0x28}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000140)="5f19441bbf2bc01bd82619f02c04551d76eeef7b5f2818350f92d48b8c83a6259d6d4d65b82f51e779b3c7df7fe121e6fe7fcad235a8330e17e681a7aa31ad8ed41c8d95c5a5867a081310d419b9c173a0b93eb2f83fd8b0ccd8401e0555c50968b923b28bad81657a3cb4efbfd78268b278158c101d3b12bd2daad8309243576e42415e7092d51b513f3451cf5ca0d282a94c94", 0x94}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="6000000000000000190100000100000093058641fb7ecaafdaf4538e5fddee3d8de468aeaebe0781e687bdbed3bf64acfe4aead266300c47fe7128221bbed877a8473337e147669022623cd9c5ba410359be0fd0c5bc2af402000000000000009a915475a2233926f09fa346b1ccccf9316a6b173ec8e5933cbab7077bf4ab195b0a6226f3741f582405188f8740fbfa62f7556404c4048abdbedf133f23f827954c086b084ed30e5c48ed199df9e3cf93ec520069cbd2136cf549df14836d079b4bf62e94df5266dc0b5ee5a97a309c9d18ac5e539b1850d47aa1257b2460d85ea9e48efc891b1c21"], 0x60, 0x4004000}], 0x1, 0x40) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) rt_tgsigqueueinfo(r1, r1, 0x30, &(0x7f0000000080)={0x1b, 0x6a9, 0x0, 0x8}) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:24 executing program 3: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280)='/dev/hwrng\x00', 0x305100, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000140)=0x101) bind$alg(r0, &(0x7f00000002c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ctr(blowfish),sha256-avx)\x00'}, 0x58) futex(&(0x7f000000cffc), 0x400000005, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x2000001) r1 = request_key(&(0x7f0000000040)='blacklist\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0)='proc&{ppp1system\x00', 0xfffffffffffffff8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={r0, 0x0, 0x1, 0x0, &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x3}, 0x20) getsockopt$inet_tcp_int(r0, 0x6, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x3) keyctl$set_timeout(0xf, r1, 0xfffffffffffffffa) [ 77.359310] QAT: Invalid ioctl [ 77.376611] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:24 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xeab4, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast2}}, {{@in=@broadcast}, 0x0, @in6=@remote}}, &(0x7f0000000080)=0xe8) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:24 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00002e9000)={0xffffffffffffffff}) close(r0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000380)) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x10005, 0x84) sendto$inet6(r1, &(0x7f0000000580)="97", 0x1, 0x0, &(0x7f0000000400)={0xa, 0x4e24, 0x2, @loopback={0x0, 0x1}}, 0x1c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vga_arbiter\x00', 0xfef1210049cc0761, 0x0) ioctl$sock_ipx_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000300)={'ip6_vti0\x00', {0x4, 0x4, 0xfff, "20d71d51a029", 0x101}}) recvmmsg(r0, &(0x7f0000003ec0)=[{{0x0, 0x0, &(0x7f0000003bc0), 0xe4, &(0x7f0000003c00)=""/69, 0x45}}, {{&(0x7f0000003c80)=@nfc, 0x10, &(0x7f0000000280)=[{&(0x7f0000000000)=""/18, 0x12}, {&(0x7f0000000040)=""/7, 0x7}, {&(0x7f0000000080)}, {&(0x7f00000000c0)=""/57, 0x39}, {&(0x7f0000000100)=""/249, 0xf9}, {&(0x7f0000000200)=""/119, 0x77}], 0x6, &(0x7f0000003e00)=""/158, 0x9e}}], 0x2, 0x0, 0x0) 2018/03/21 23:55:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCSCTTY(r0, 0x540e, 0x1) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x40000, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x2, 0x3ffe) ioctl$KDADDIO(r1, 0x4b34, 0x80) bind$ax25(r1, &(0x7f0000000080)={0x3, {"f7461a4f1a06d6"}, 0x3}, 0x10) [ 77.402915] binder: 9114:9120 ioctl 40046207 0 returned -16 [ 77.427996] QAT: Invalid ioctl 2018/03/21 23:55:24 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000040)=""/169, &(0x7f0000000140)=0xa9) 2018/03/21 23:55:24 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$fiemap(r0, 0xc020660b, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffffff00000000001000000000000007000000008000f8ff00000000000000ff010000000000000500000000000000070000000000000000000000000000000000000000000000040000000000800000000000000000000500000000000000040000000000000032e700000000000000000000000000000000000000000000000200000000000000000000000000000900000000000000ff0300000000000007000000000000000000000000000000000000000000000000010000000000000000000000000000"]) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000480)={0x0, 0x4af, 0x10}, &(0x7f00000004c0)=0xc) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000500)={r2, 0x3ff}, &(0x7f0000000540)=0x8) setsockopt$inet6_dccp_int(r1, 0x21, 0x10, &(0x7f0000000080)=0x1, 0x4) modify_ldt$write(0x1, &(0x7f0000000000)={0x8, 0x20000800, 0x0, 0x40, 0x2, 0x90c4, 0xffffffffffffff01, 0x5, 0x4, 0x2}, 0x10) 2018/03/21 23:55:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x8100, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:24 executing program 2: r0 = accept$inet(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x0, @loopback}, &(0x7f0000000200)=0x10) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000240)={'nr0\x00', {0x2, 0x4e23, @multicast2=0xe0000002}}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) getsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x9, &(0x7f0000000100), &(0x7f0000000140)=0x1) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f00000000c0)=0x5) mq_getsetattr(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x2, 0xea, 0x8, 0x101, 0x1ff, 0x2, 0x7a61}, &(0x7f00000001c0)) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000080)=0x204000000) 2018/03/21 23:55:24 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}, 0x4}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x2000000000064, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x101000, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000040)={0x4, 0x4, 0x100000000, 0x5, 0x401, 0xffff, 0xfffffffffffffffb, 0x1, 0x0, 0x0, 0xa0fa, 0x80000001}) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000100)=0x0) ioprio_set$pid(0x1, r3, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:24 executing program 3: r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0xd1, &(0x7f00000000c0)=0x1e, 0x4) setsockopt$inet6_int(r0, 0x29, 0xc8, &(0x7f0000000000), 0x4) r1 = open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x40) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x3, 0x4) 2018/03/21 23:55:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0x4) r3 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="3eeb2281306c4b3ca6620cebbfcd3e202377ebd0b9f90a16dd5d54e211ff010000b659253202ad0e1773c3ea985feb4864426f0c86daa1b978b473c75d05ae351a889eeae4c93443c79b7eec9e354b85aef9dc1a28d33ef5bb54a1610ee986feb00074dad354fb18eaf4efc57d6079eb9afc3cd6f3bc594b7fb505190d792177f1fd98899149bcfd1bf9ff3f427e05a86f1215cb74765d5fe0584a197c1c77af4bb38bc47bed2e53318602f80a6972d4f2e9ace10846e4265ad7d623c0ef9c07ec3ecc6ca5f34b0000000000000010009f3b0000001000"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000280)={0x8, 0x0, [{0xd, 0x3c256047, 0x2, 0xec0, 0x40, 0x101, 0x8}, {0xc0000000, 0x100000000, 0x6, 0x1, 0x9, 0x7, 0xffffffffffffffff}, {0xf, 0x5, 0x7, 0xc59, 0x5, 0x100000000, 0x3}, {0x40000000, 0x52, 0x1, 0x3f, 0x0, 0x745, 0x8}, {0x4000000f, 0x1, 0x2, 0x3, 0x8b00, 0x400, 0x7}, {0xc000000d, 0x8, 0x7, 0x100000000, 0x800, 0x7, 0x8}, {0xd, 0xa1de, 0x1, 0x5, 0x1ff, 0x400, 0x7}, {0xc0000001, 0x1ff, 0x1, 0xbf5, 0x8, 0x0, 0x15}]}) r4 = request_key(&(0x7f0000000000)='logon\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000000c0)=':}ppp0\x00', 0xfffffffffffffffc) keyctl$revoke(0x3, r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e880c4004003fc9"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5608) 2018/03/21 23:55:24 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="af", 0x1}], 0x1, 0x0) write(r1, &(0x7f00000000c0)="f80d4a9457f521884928498faf3df80cf2d0e361d6a00466f34d7d1f5e2a63d4b45c34103433e2e21d5ae8d1542078638ce22df1541a47fcc3e4244655393d4f9e", 0xfffffffffffffe13) dup2(r1, r0) 2018/03/21 23:55:24 executing program 7: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40, 0x0) sendto$ax25(r0, &(0x7f0000000280)="78d65105eba831f08936d329e265d85912464525d3e9c9d80e60062a663055928f477f4d184feae0722028e9bba070c76ec05570cab5e04a63d18c746f0768cec3b2a24d83bea134230c14bd3be1a39de15e0950566a3363767952a70557df6a429e382eace0681b0930d542f8a10589d544ca879ef48fd2c53daf106b823c82bc53bd200fd79dfd2d517a24dec2f64269ddf8164d1241a6a636ec4f49eb7e6eaa1005f163074c865f3e6abaa4da663de43dacdfbc87189516b6934c868d853d960bf56efe969def9f39b39307eff779b3e4c3b5942438d9f0adaae3fe6722486a550f1fcc95e499b429be71fe93", 0xee, 0x4000000, 0x0, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000068000000864c62a5e11e70b8cd5a1ba91993c52d79b7c7386d87ef7e53a8ebe3d7bd3a241c00ca547549d4879082d08760559dfc9d66717dbd44df9e8d4e68707d7e8933119e30c8203817947b958b204d3cbaa5602b1a92ea1a92a2a2bf814a0733b9c524e5f47c2769c1aebb667b825c212c405c9f510018fab694a9420fa388"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:24 executing program 3: r0 = memfd_create(&(0x7f00006a7000)='/dev/vga_arbiter\x00', 0x0) write(r0, &(0x7f0000ffdffb)='#!', 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='cmdline\x00') sendfile(r0, r1, &(0x7f0000000000)=0x1d, 0x401) execveat(r0, &(0x7f0000ff7000)='./file0\x00', &(0x7f0000000080)=[&(0x7f0000000040)='\'\x00'], &(0x7f000034bff8)=[&(0x7f0000ff7000)="00000000000000060804002000fffc0c6565643b799365005f1b76"], 0x1000) 2018/03/21 23:55:24 executing program 0: pipe(&(0x7f0000055000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x0) rt_sigprocmask(0x0, &(0x7f0000834000)={0x7fffffff}, &(0x7f00000c1000), 0x8) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000080)="af", 0x1}], 0x1, 0x0) write(r1, &(0x7f00000000c0)="f80d4a9457f521884928498faf3df80cf2d0e361d6a00466f34d7d1f5e2a63d4b45c34103433e2e21d5ae8d1542078638ce22df1541a47fcc3e4244655393d4f9e", 0xfffffffffffffe13) dup2(r1, r0) [ 77.517249] binder: 9156:9160 unknown command -2128417986 [ 77.526455] binder: 9156:9160 ioctl c0306201 20012000 returned -22 2018/03/21 23:55:24 executing program 1: mmap(&(0x7f000000c000/0x6000)=nil, 0x6000, 0x1, 0x200000000000032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, 0xffff7fffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) exit_group(0x1000) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/21 23:55:24 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000636000)=0xa9) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0xfb, 0x0, 0x0, 0x100, 0x8}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x3}, 0x8) [ 77.564274] binder: 9156:9160 unknown command 1074563086 [ 77.574475] binder: 9156:9160 ioctl c0306201 20008fd0 returned -22 [ 77.597966] binder: BINDER_SET_CONTEXT_MGR already set [ 77.608645] binder: 9156:9173 unknown command -2128417986 [ 77.611405] binder: 9156:9160 ioctl 40046207 0 returned -16 [ 77.622437] binder: 9156:9173 ioctl c0306201 20012000 returned -22 [ 77.643444] binder: 9156:9160 unknown command 1074563086 [ 77.649263] binder: 9156:9160 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:24 executing program 0: openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) r0 = syz_open_dev$sg(&(0x7f000028fff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r0, 0x5d, &(0x7f0000000080)="ed03651363d945efa74d840a938352651cb7fd42697b181e8b0a8b1f079b") 2018/03/21 23:55:24 executing program 3: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x2, 0x32, 0xffffffffffffffff, 0x0) seccomp(0x2000000000020005, 0x0, &(0x7f0000000ff0)={0x0, &(0x7f00000000c0)}) r0 = open(&(0x7f0000000000)='./file0\x00', 0x40040, 0x84) r1 = syz_open_dev$urandom(&(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x10800) sendfile(r0, r1, &(0x7f0000000080)=0x59, 0x3) 2018/03/21 23:55:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/21 23:55:24 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80, 0x40000) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x4}}, 0x2, 0xfffffffffffffffb, 0xcd1, 0x200, 0xff}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="0400745242c6593605a194080006000800030004"], &(0x7f00000001c0)=0x18) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000000b05fdff000000e1000000000000000089ec9dba2c28bda98bc4ba03d0850359b29add63f9cfe6a52cf6a90242a559517c221ad93114822c6fe7f128937a8e9b8a120844c04c4eab5c5de4dc1b9e7e53b9e242ff5c0bcd2dc0b181d8efe53bd28f91b1ac63c3026867c5e9a3e3a2249f1f5d0f6ca32f623537c01918c5bf4ddd5ab90586ffcbaa3a944e3c24b7aa7a71df6cb917bc2a01000100f0cfb91eb81f22d2f8e3525388fe07b215e6fb714b27be4e336fd8faf87846f5fd39c804c8dd48f9e67759fc91f9460411b66d8121d6c40962ba93113b1d14aeadebbd8cac7b32002587769cf8"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) mincore(&(0x7f0000ffa000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/63) 2018/03/21 23:55:24 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f0000000000)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:24 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200040, 0x0) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r3 = memfd_create(&(0x7f00000000c0)='-\x00', 0x2) syz_open_dev$usbmon(&(0x7f0000000200)='/dev/usbmon#\x00', 0x1000, 0x101000) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r3, 0x50, &(0x7f0000000100)={0x0, 0x0}}, 0x10) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000240)) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)=r4, 0x4) 2018/03/21 23:55:24 executing program 5: socket$inet6(0xa, 0x5, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x100, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={0x1f, {0x2, 0x4e23, @rand_addr=0x4}, {0x2, 0x4e23, @multicast2=0xe0000002}, {0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x7, 0x8000, 0x1, 0x7f, &(0x7f0000000080)='ip6gretap0\x00', 0x9, 0x3, 0x6}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000140)=""/169, &(0x7f0000000200)=0xa9) 2018/03/21 23:55:24 executing program 0: madvise(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x11) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) dup2(r0, r0) recvmsg(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000009000)}, 0x0) ioctl$sock_netrom_SIOCGSTAMP(r0, 0x8906, &(0x7f0000005ffc)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000013fd8)={'vcan0\x00', 0x0}) clock_gettime(0x10, &(0x7f000000a000)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f0000011000)={&(0x7f0000004000)={0x1d, r1}, 0xfffffffffffffef0, &(0x7f0000012ff0)={&(0x7f000000afb8)={0x1, 0x7, 0x4, {0x0, r2/1000+30000}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a3f9fee90201ab9d"}}, 0x48}, 0x1}, 0xfffffffffffffffc) 2018/03/21 23:55:24 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x1, 0x0) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000080)=0x1, &(0x7f0000000140)=0x2) ioctl$KVM_GET_XCRS(r0, 0x8188aea6, &(0x7f00000001c0)={0x3, 0x1f, [{0x4, 0x0, 0x5}, {0x6, 0x0, 0x8}, {0xc97, 0x0, 0x7}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000280)=0xffffffff00000000, 0x4) set_mempolicy(0x8000, &(0x7f0000000240)=0xfffffffffffffffd, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="ff7f060001000800030000007f000800875eec9692e991fe315c751aee75dec7daa657ebaec0866a3c33ec52b9e4f3f7c65e59af46b4e60e75cff41fb17d00000000000000000000"], &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={r2, @in={{0x2, 0x4e21}}, 0x0, 0x5, 0x1, 0x49ca, 0x6}, &(0x7f0000000400)=0x98) connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10) 2018/03/21 23:55:24 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x3, 0xfb, 0x0, 0x1, 0x4}, &(0x7f0000000100)=0x14) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 78.113508] QAT: Invalid ioctl [ 78.119859] binder: 9203:9210 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 78.130333] binder: BINDER_SET_CONTEXT_MGR already set [ 78.140099] binder: 9203:9210 ioctl 40046207 0 returned -16 [ 78.154405] binder: 9203:9220 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:24 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0xfffffffffffffffd, 0x0, 0x7, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/mls\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r1, 0xae03, 0x4) ioctl$KVM_GET_MP_STATE(r1, 0x8004ae98, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/21 23:55:24 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) setsockopt$inet6_int(r0, 0x29, 0x11, &(0x7f0000c0dffc), 0x4) 2018/03/21 23:55:24 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) getdents64(r2, &(0x7f0000000100)=""/160, 0xa0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:24 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x218000, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000636000)=0xa9) [ 78.162262] QAT: Invalid ioctl [ 78.205939] binder: 9238:9239 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 78.217421] FAULT_FLAG_ALLOW_RETRY missing 30 [ 78.222086] CPU: 0 PID: 9229 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 78.224811] binder: BINDER_SET_CONTEXT_MGR already set [ 78.229368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.229374] Call Trace: [ 78.229393] dump_stack+0x194/0x24d [ 78.229412] ? arch_local_irq_restore+0x53/0x53 [ 78.229433] ? __lock_is_held+0xb6/0x140 [ 78.229453] ? handle_userfault+0xb97/0x2490 [ 78.229471] handle_userfault+0xbd9/0x2490 [ 78.267584] ? handle_userfault+0x1864/0x2490 [ 78.272093] ? userfaultfd_ioctl+0x4520/0x4520 [ 78.276673] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 78.281873] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 78.287409] ? print_irqtrace_events+0x270/0x270 [ 78.292162] ? print_irqtrace_events+0x270/0x270 [ 78.296909] ? update_load_avg+0x249/0x2d80 [ 78.301224] ? trace_hardirqs_off+0x10/0x10 [ 78.305536] ? resched_curr+0x13e/0x1a0 [ 78.309507] ? perf_trace_lock+0xd6/0x900 [ 78.313650] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 78.319198] ? __lock_acquire+0x664/0x3e00 [ 78.323431] ? __lock_acquire+0x664/0x3e00 [ 78.327667] ? trace_hardirqs_off+0x10/0x10 [ 78.331999] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 78.337205] ? find_held_lock+0x35/0x1d0 [ 78.341277] ? __handle_mm_fault+0x2ded/0x38c0 [ 78.345855] ? lock_downgrade+0x980/0x980 [ 78.350001] ? lock_release+0xa40/0xa40 [ 78.353972] ? __lock_acquire+0x664/0x3e00 [ 78.358208] ? do_raw_spin_trylock+0x190/0x190 [ 78.362784] ? userfaultfd_ctx_put+0x740/0x740 [ 78.367383] __handle_mm_fault+0x2dfa/0x38c0 [ 78.371784] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 78.376976] ? __pmd_alloc+0x4e0/0x4e0 [ 78.381031] ? trace_hardirqs_off+0x10/0x10 [ 78.385361] ? trace_event_raw_event_lock+0x340/0x340 [ 78.390551] ? find_held_lock+0x35/0x1d0 [ 78.394617] ? handle_mm_fault+0x35b/0xb10 [ 78.398844] ? lock_downgrade+0x980/0x980 [ 78.403025] ? handle_mm_fault+0x2f8/0xb10 [ 78.407271] handle_mm_fault+0x44a/0xb10 [ 78.411331] ? __handle_mm_fault+0x38c0/0x38c0 [ 78.415903] ? vmacache_find+0x5f/0x280 [ 78.419878] ? find_vma+0x30/0x150 [ 78.423417] __do_page_fault+0x5c9/0xc90 [ 78.427489] ? mm_fault_error+0x2c0/0x2c0 [ 78.431630] ? lock_release+0xa40/0xa40 [ 78.435600] ? trace_hardirqs_off+0x10/0x10 [ 78.439927] do_page_fault+0xee/0x730 [ 78.443721] ? __do_page_fault+0xc90/0xc90 [ 78.447946] ? avc_has_perm+0x43e/0x680 [ 78.451922] ? find_held_lock+0x35/0x1d0 [ 78.455992] ? __might_fault+0x110/0x1d0 [ 78.460054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 78.464905] page_fault+0x25/0x50 [ 78.468350] RIP: 0010:__get_user_4+0x21/0x30 [ 78.472746] RSP: 0018:ffff8801cc087be8 EFLAGS: 00010206 [ 78.478102] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 78.485360] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 78.492622] RBP: ffff8801cc087c88 R08: ffff8801be29ce08 R09: 1ffff10039810f5a [ 78.499879] R10: ffff8801cc087a98 R11: 0000000000000000 R12: 0000000020012000 [ 78.507136] R13: 1ffff10039810f80 R14: dffffc0000000000 R15: ffff8801af162680 [ 78.514421] ? __might_fault+0x188/0x1d0 [ 78.518492] ? udp_lib_getsockopt+0x8e/0x440 [ 78.522893] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 78.527390] ? __schedule+0x1ec0/0x1ec0 [ 78.531365] udp_getsockopt+0x71/0x80 [ 78.535163] sock_common_getsockopt+0x95/0xd0 [ 78.539660] SyS_getsockopt+0x178/0x340 [ 78.543635] ? SyS_setsockopt+0x360/0x360 [ 78.547787] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 78.553321] ? do_syscall_64+0xb7/0x940 [ 78.557309] ? SyS_setsockopt+0x360/0x360 [ 78.561458] do_syscall_64+0x281/0x940 [ 78.565352] ? __do_page_fault+0xc90/0xc90 [ 78.569574] ? _raw_spin_unlock_irq+0x27/0x70 [ 78.574066] ? finish_task_switch+0x1c1/0x7e0 [ 78.578553] ? syscall_return_slowpath+0x550/0x550 [ 78.583474] ? syscall_return_slowpath+0x2ac/0x550 [ 78.588394] ? prepare_exit_to_usermode+0x350/0x350 [ 78.593402] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 78.598766] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 78.603613] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 78.608787] RIP: 0033:0x454239 [ 78.611965] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 78.619660] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 78.626916] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 78.634174] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 78.641440] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 78.648711] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:25 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x3, 0xfb, 0x0, 0x1, 0x4}, &(0x7f0000000100)=0x14) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:25 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000636000)=0xa9) fcntl$dupfd(r1, 0x0, r1) 2018/03/21 23:55:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x42) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x341, @remote={0xfe, 0x80, [], 0xbb}, 0x8001}, @in6={0xa, 0x4e20, 0x75, @empty, 0x62}, @in6={0xa, 0x4e21, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffffffd}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e24, @rand_addr=0x5e37}], 0xa0) accept$ax25(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'erspan0\x00', r4}) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xb2d1, 0x40000) r5 = getpid() ptrace$setsig(0x4203, r5, 0x4, &(0x7f0000000200)={0x3f, 0x6, 0x0, 0x7ff}) 2018/03/21 23:55:25 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) recvmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000080)=@ax25, 0x80, &(0x7f0000000440)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000200)=""/142, 0x8e}, {&(0x7f00000002c0)=""/84, 0x54}, {&(0x7f0000000340)=""/240, 0xf0}], 0x5, &(0x7f00000004c0)=""/133, 0x85, 0x2}, 0x2002) getegid() mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x2000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001080)={r0, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000010c0)={r2, 0x9, 0x8}, 0xc) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) pipe(&(0x7f00000005c0)={0xffffffffffffffff}) accept4$packet(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000700)=0x14, 0x80000) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000740)={r4, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14, 0x18}}, 0xc) 2018/03/21 23:55:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) 2018/03/21 23:55:25 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="05044000400000005b82061dfde0a59e57bcd11c0df50d659f03423c6b63"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x80000000, 0x80800) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, &(0x7f0000000080)) 2018/03/21 23:55:25 executing program 2: r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)) getsockname$llc(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000140)=0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000080)='./file0\x00', 0xe029, 0x3f27) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r2) 2018/03/21 23:55:25 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0x1, 0x3d11ff42ca359a24) execveat(r1, &(0x7f0000000600)='./file0\x00', &(0x7f00000006c0)=[&(0x7f0000000640)='/dev/random\x00', &(0x7f0000000680)='&\\&\x00'], &(0x7f00000008c0)=[&(0x7f0000000700)='(()\x00', &(0x7f0000000740)='/selinux/mls\x00', &(0x7f0000000780)='%\x00', &(0x7f00000007c0)='system.-\x00', &(0x7f0000000800)='proc^cgroupvboxnet0wlan0cpuset\x00', &(0x7f0000000840)='\x00', &(0x7f0000000880)='ppp0\x00'], 0x400) r2 = getpgrp(0x0) io_setup(0x1000, &(0x7f0000000040)=0x0) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r4, 0xc1105518, &(0x7f0000000480)={{0x8000, 0x6, 0x5, 0x9e, "ac374db428ab2b92f1849301490ef7c5aad89156da8fa100bd597e629759cb2cc45c811027d43572d134b5d3", 0x28000000000000}, 0x0, 0x0, 0x800, r2, 0x1ff, 0xffffffffffff15b5, "befef43d89a18d26c42615effaf2aea2351d8ceed7f723033e4ec2b41d467d9201e3e7fc7621b1d51e9851e26fc3a4b7c7519a4c6eb3d3feee815b59ac39d5b1", &(0x7f0000000380)='/selinux/mls\x00', 0xd, [], [0x9, 0x9, 0x71f, 0x382]}) r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/mls\x00', 0x0, 0x0) r8 = syz_open_dev$midi(&(0x7f00000003c0)='/dev/midi#\x00', 0x4, 0x480) io_submit(r3, 0x4, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0xa, 0x5, r0, &(0x7f0000000080)="8d57d889df741a56508ba5bdfd37589220e2e5325de1abdd0990e8a86b89104aec9fa26abc75eca067a88b2ec797c44219311209169e71644bb204d100c8d9", 0x3f, 0xb4, 0x0, 0x1, r5}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x800, r0, &(0x7f0000000140)="a06cdeba99c1231641ebf27289226a4a16ead7c2c6ce0fa2c99775b6957d008ba9a942037c4b5ed06ba794032c4b13fb7449788b82b5594ed63e26e982ef241e26db4a1cd1319d2e72", 0x49, 0x9, 0x0, 0x1, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000200)="8f3303325e8681d5586d93453527e26cc439eab2821fd5bcf4082fc9fda65986b0f5f9ef496e802f712415b4675539637f0bd941222a4bf29a146f11a06363e412ecf969cc8101c4461528ab0447d4c6f8edda89d5d61f686c83ea37fd5c0a8fcf684fa8a725480b619d3c9398756a99d4ad28c0f8decf1d1c03b1e662ac3403511840f706310e6d44def4b70d4e14a4114d742064c7ac37639ce3063e31a615ea76b41f64b2df97a40b8e3b44fd5e5904c27f9984947ce4c58797306ecfab0ccff0e93370846478a5a90d6503747dea1a22159bb7dd95f51d25c93af9c787dca8bc8d4563", 0xe5, 0x2, 0x0, 0x1, r7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x647f, r0, &(0x7f0000000380), 0x0, 0x80000001, 0x0, 0x1, r8}]) getpriority(0x1, r2) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) syz_open_dev$random(&(0x7f0000000000)='/dev/random\x00', 0x0, 0x80201) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sched_getscheduler(r2) getsockopt$inet_udp_int(r9, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000013000/0x3000)=nil, 0x3000}) [ 78.660746] binder: 9238:9239 ioctl 40046207 0 returned -16 [ 78.667976] binder: 9238:9247 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:25 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000700)=ANY=[@ANYBLOB="6e617400000000000000000000000000000000000000000000000000000000001b00000005000000580300000000000018020000ffffffffc800000018020000c0020000c0020000ffffffffc0020000c002000005000000", @ANYPTR=&(0x7f0000002fb0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000c8000000000000000000000000000000000000000000000000002000736f636b65740000000000000000000000000000000000000000000000003800444e41540000000000000000000000000000000000000000000000000000010000000000000000000000ac14ffbb0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000000000000038005245444952454354000000000000000000000000000000000000000000000100000000000000ac14ffbbe00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000000000000038004e45544d41500000000000000000000000000000000000000000000000000100000009000000e0000002ac14ffaa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000a80000000000000000000000000000000000000000000000000038004e45544d41500000000000000000000000000000000000000000000000000100000005000000ac14ffaaac1400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000d7184b"], 0x3b8) syz_emit_ethernet(0x2a, &(0x7f000000a000)={@broadcast=[0xff, 0xe0, 0xff, 0xff, 0xff, 0xff], @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0xffffff88, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @multicast1=0xe0000001}, @udp={0x4e20, 0x4e20, 0x8}}}}}, 0x0) r2 = epoll_create(0xffffffffffff6c25) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x8000, 0x0) r4 = dup3(r3, r2, 0x80000) ioctl$ASHMEM_GET_PIN_STATUS(r3, 0x7709, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r4, 0x84, 0x21, &(0x7f0000000680), &(0x7f00000006c0)=0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r3, 0x800442d3, &(0x7f0000000140)={0x3, 0xff, 0xe2, @random="6cc61191d45f", 'syz_tun\x00'}) sendmsg(r0, &(0x7f0000000080)={&(0x7f00000001c0)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000b80)="39f96df64bbf65c37554e9cb464822715b7a427e9a3ca07a5df38a8b018f79b31e9cda9faafb5bdc1c4528a1375ec4f4b871ce1325665cff8520726a7bc3ad38a85cae9fa521eb2facf34b442194fd80e2fc3665095191dfa10dd77adeac39f3516f70b19eeae9af371f92421ccf142913d92ad6d74b66134dd29fe7f182921c285a87b31c103aa13667ece687baa383a0e59538df67ce2d3357cb221d57fc308d36442770f62f14da0c069b03409289a7cf1aa7271a91291b6b52f861ff9846b7478d2a27a1809d7856fdf7162e3c294894421409428e932ad741f1ae1099e87e016fbae13f85142f1ecf9646284820cfa3e3cc1421ec559446a77326485d7e7784c52b46cb48a707b58f0f1bba699ce661051a65c3ed4f2bbf076e422ffe37c81012804cd700575a23e4a765c2698c3cc78636960bb23d37231b15dd1e52773e7872da472fbc55bb2ceeadea99144a099bb27c9cbda149b511287b4f678d5aa9701ca6910dc78d63a060cc88b158d7c042a43398ca0f5ddd01774ad82505f0a596cea1760067652bf5b82a8d6fee2c4a5276ae7e5d64ed2b6dd826777d4733dee1d96747eeed4cc4338705973363e2c156102de55dba050e52b4836d66fa35aedc12d291ef34ac04e61a1e80bfd62fd8a0d98b5c84169b8cee35c4d2bc8627d7091aac513d2ee14c978716cc08d9c6caebde53aed805e36dde65837d559d1714ee5460647c4bd9f187763f5ccc3fa788feea3f3d512ba3ba3fc3e3b35025bb731a412883ff32979432f98aadd7d1d46ff3bd8d0f6f1dc216edfdbbbfb1cf6b5e12a4e06b8765e2668764ba05adc97549577f8702714d9fb4ddbeb9378eb84e437692fd3b0180169d9edd6fc471d8e9d4eceeb7e332872580ed2c615b016476739be24e2ef3a62ba305a2aea89d1abd6273aaf308d2ffed869e6034ed3aa89688f9f21cd0698c11e077b2f9bb74fd29301447e2b9d9cd8e5a9bad66b2d027b5513107ae17cf0df124a094d05281900d0ed8b3ea1df702817fa4cd0ba112dcfe896054f59c96254d0379d5bd7e7640260d6c42f913206a623817baa46dc93867fd0e134e49ddece0f0747a68c40fdf45e72f957c7bf5a56644447fd73ff513f6ee152812e0beefa4f9b836d912f0796e4fb52f4b6a12925d6fd523a79b46bf4fd5dead9ecc95834ce1e58344e307d19e0e41deb90258ddf9280efb8b02632b40f90e83c5534a19545444ecda73a02b9eaf4990f8c12851acd6a50d1f9fc3a9a1f9e66d3a8ee389e14865949224c58ea13efad1785ae131de4fbe1a80cdfb155835d44ef222c428bb1a744b4bcd0284b1323a758ed971b2422209f3016148cfa79a4cbad8f08166302fba6836170aa8e7f7f664a078262cebf39ceb6df6587235a4dc7a2aea855d2e7738cf5b7b8f3e2650ff0fd252018451bbdc9f4c3ac6a91e07e6d489e7016d2f95bf1c51d8d1abf9bd0d3cf8ac03e3fa33a5f8e8cfbe448d22fa01276bafa2aa4c5f6200971524eb96c8a18496f75a7c922e7c0996981850786961818899f3dff4f7ebf0af740d893bb3325b76d278f12b46690099811fe68d63a243354d32cf809e4d5857410ab43ee44ec1177eedd3941828a02a995b9eb9f07214f8f3c0e6decf2fbaf670971995b6747caaaba6a0ce46205443f430ecb4e2da3d00bfc39766b478202e96705eb0b55c50637064dd98d82e82d98650c828c537b0905a8850e0ff78b7733a31a39488039e0b77a7e71e5c1cc4377c801c83da4492931f52d0f0964b930a1016d4a94ecf82fcea73e3ccd86cbd952325c720421cdf3bdf1265c96dd55ac138f0d9324ec98d63b490c7cb4326ce21ff86fd2ac4bb53c7baf5079bc7764b6a5fcc5265d5e51f1e6e31224f1a6b04137314ae4ceabe3e1abc445df568ebfb7fd6be25bdba6375a1f3fb2bf6ae9b59bae7db0b984e027b3963b26965a5af2d1078c6061522e01d39dbb3771400768c4d6a38f9c966f62e7f0723e78ccbf23a90a407ab53e93cdd268b5030bb0277cb01b5c06df8425541122df78785528a045c15933f2d939bdc95deb9eba5613f7a8359d76a6d347aaf9b7cc5b92185b2a1230525ff12b9bdf8d9e2075ef5ee1f187b1ddc2b8901c392819459f04cb2ef4189c61dbe1655539f74c5fda18e0b16188e1f694ca9f840f24725a68d5818233abf1ad4580195d1f651ee21356ebc6e37a390e08a26ed27b90fcae5bf8233793dd9c9e77ef38e64347af4a5e8a386356ca3dc95702fdfffcfa47c9ca85a1e75e693529a65ae5bbd103f9f0eff3995b526c128f4c60c91444b770f2291eb13ff732a65e19919d447af7f1c5de50e5e8d7eec5406e800174a4ccddb8600d677000ea27256cec16beb8d26da83b51508d488d3a9f48015b56ac4761a6a4527a7f327400f3ffb212a9ecb138a1e23cdee5224867bfb20a3cfd6d12ac8ad3a8af3b997bc8e0e164fbbf5922e885059d24a25dd3b7fa3def084ceb6ec9ac8e52e25a91589123671e1fe7e6d3e283527366d073236bab2d1a0f192535f375d6355062b45afff7e19010548a362ac033e66869afdc00fe3fd1d39466250d93e0234e774e272d5347512298b3231b6b1031c9ff7b1ba59e66a583821f853ccc4967eef1a407dbab03fbefe62fcba175f6881c6db0b09b819baa8ca3bf8f05104d76d0fef765fb1022614d61fa7ff07d6eed511e22173b1630b5ed4270f697524f8ad84a9f7deb8a76cbee53669bafefed51a427b1482b620a3b97faa064a6a38781d0104535f91ceb23a782b0cb8724560f3c200ad0f1c1ad74a23a6d82fc6f484c87c1c629d4c82114383ed10acdd3fc13b01800702f487d87d46ea7599516fdc24c584b681432af7c72c61f5413dca83e8a5f0aacb497f2fb4363f919a36afba79c1726448caf9e0643ccd2831182302c59581af9e866aec4e7cb4e320286525c41928be02e50ef5b6db322044583733f153ffefff4f00be77d6bc0dc78aa7fdb60be18178d818fcbfabd895be506e53a19507a960e6065937fff1a92160a5b881a4009a25de101a5079c08ce612867293db479307403b28143c902e71e5c759214f4fbbeb5a30579ac309a2030f5ec87fe3f14dd47429d74bbdb5dbe557a758f390280e661c1bcefe7690e9a5586a710dd328c57c5358db437ec3a21bdb043173f3362b13f0b533ab91d225f48cac02e256fb08b7a33583288ed0baec32de15383c0f227959c3494368d310501c0785e5f94d575f76c340ad32f1d80fab83f22adbcc30ba0a45a0595302531cb9597da9cce6f8e044eb9cb03b0df7f0df53adf67f2c3e3dac9db9a8440ee26c7081386fe9f6633da6c4ff7a84911eba0c3d66599a69880136c1e2bcf643fa35fcb2dd6bbe3e173b2ba9b9ed52ff37cc1bb4c35acddab7a8df00075f80a25455259f0b3e1ca1c1aa09dc2e5396dc11652414bb5a07beba683bb64e529f6ec1e522e8e3f919010915d1c58990bbbb5c6ec8a5dcb799236e0784b3e8d5adba70f344c0281ecf9b32c77fd7c3993a6f803ba930d781fd4988777f7a6cb16226c3aaf2c9d9425615a9dd76fb1308d3a03c9a19855a878c4ddac15f0ff4685ff78ab8ea07f958b35092d899fc7dc8ed6e1e7b88952587e94dace92e28fdb8d83ea94b550c76b52b89db4cd4e28fc4002b311a103d21f9c52e834562552f209e4bb9d52fa08eaf76862f32c5841aff92baa834dc4ca6fdf4a078a7689d8c2bdc79d25c8590260b494435d281657618fb87de31e5b72b9fdd2286e1350b0ef5bb7b3150ef1e7a58db7d793e13cb4f831464c37cbb4a632467daa4a7b9ff920985b620699d58050f5af7bd0968f92d240ead354b8c209fefda9b79e12dcd843468507aaddc1b4772bf4284550edeeae7c757dcd098fd41cc1f6ac111d899273d5ac65592c11cc3b3c99051c9b3a78ea8419197a9714cea29921100040dce95d61175a44cf8e1053d78da224eea365bb21e3adce25f42fb8980c2b6aef368fbf459d71376e5f9a3f8b0afca0041096c7c7c7b5a844f86806aeb569ccb02088d21972520bec6131f78f5cee6277ae57ebdf05837ecb345d9cabf980088f50ec882d3a30ac53b62329f4b4bffef6aa84bbe1cb4897edf77bb02d87afe401722bfc91b4fa3978a6260f885d502cbccd2bc4a03b36b10a39d14f9851aba26dbcc739392f6d033fdf3b94d1bcb184a6bb879179aa4712da703b29f79e2f9f3ca4bb6246809e232fe6a8c5d2df2d7a48be7bbd734a01d9561a075154d76eb6356153e6b8a1bad0170a43b5d6ee014cbed06edbe196b2c7aa77d76cb7183f98d7f01fa2e170377ba915545042a9c26d2c9965e51926ee36df2d5999e61e7e2a702d20c096c8e2d21a28760ca25b3893586b7013563da12bda6bc7ba1413827497aaebbcfa23f254c4d29c9d67f953413c7151161c2d4c03944219aacc6cf8f45376f4eddb47b1121f3ac9e8d1a51709a8473d7b6f1f11e925a60e91cedf8352d18686124fdc6ffde8a562de68bb3c7d322a7e7bff54d69b4d4ac5c2627081b6521fbf35a95bc899bb1324d8a80b44c80abf5cb064d3a2aad80a4f1aded947281e8f7e456916d00f7bdce0ffce4aeb57a594164b2ac463bc7e929096980b4d40cb09adc765265f00db3dbf85192c7b4fe2fa59852cf4d97684bd3c8a3371287cdca800f72753ad5c9d3ad8dd0c22f8c6187ad2609db4d4f04db31451f9fa37d549f4dcbc7a20c1bc089394858e1e53cf085ecb9d361485fc61ee3548035e6c561cfadf45bfcb96dd4d96a7044319302daf10957fc603ae8979838525be7809941e25dec23d66720b91b495f1386e81e797c92216d18905d7163ef361e4fd00064028067308d0568038bfe589acbb7f8773784e5dd9f574a4f640ac1193d277fc9dcb0c97ee5160c30c7f42451f40d30964a9fb9e4b3cda83ce18bfd0c22803c428e74789fa957ff660fb2433cf9ed83dd2a34b6000a1aece06f78d0e776e2eecc9d180a7f0150ddc62a4a228e3f8280a1df6ce4e029bd7694abc7d57e6b4cee8fcba2392a49a080955c0421e46e505df3864498aa17e6677dcd854c06b3bb2257ac3dd28e13be7f4d6e688e73127647093b5b24ff67c0a27d60ff4f96cecc499305c45744ee0e49d06a5a41c26049b2b267bc6b0ec7283414514f36e1c72a2081dceb376f00d8f57aeddd3c7cf70e5263d740af7e91bad4138fb4e8c0fa688f204b889c8dfc46b200f9c4b95bd2d906861b04b5ca0a9fc20fc0079f99d2f3007326f253871dc5a497782ee140af713b47dfed118b53a54f515161a0eb2183536705997d6d5fc4ef9ce97f18175e931bc1b5652a6a90c8e95ac6f8cf30342f1a9c458b58b4c70af876369c5f5b9b3eb6107485d700cd6b04b272867049975ae7a19cd2c77a9cb25927c7f8525532b8cc9a8597a98665744d01394db20e78e0d146eb6a9a291818dd254bdc8131b468367c9811ef7ed44e85697778d20e28e683f7a318d1776558cd55585950e15e82cb78389e162791867795a333fd78d5e8177c33772fe0489df108c1df20f810548ca72f02f413bc4fdcd1ac32fddc1f7562f2b1a208518bac7b5d4dd80cc9a63758150d055cfdd65b0cd0e44d44ee42973ad5331060b18377749b7a304bd12dd5cdf17c7eefb4c2065d3dd0ca89c9c149b31da5cb10e8f2735f6b9bb07526d33ffdd0fa260695febd36538b209e68e85ef71e411c96b86ff8cc75591e929ae82ca652212b69f70c115a5d81f7b59d831b0792c13d03bc16da9bcba797d76557c7f0324056b6", 0x1000}, {&(0x7f0000000240)="45ef3bb3c40574d66ffb5b0efe3653de65da5cb47d8aabfbfcbefb7aa26ba54304f84d9e1cc4f814a335d494a390f1ceb214afb399071191a887636488f8fb35dbec781d2ed8bc", 0x47}, {&(0x7f00000002c0)="12961b71c95fc7121bd49ac5186bc832dc9dc0cb2146c7af1bbf8e0ee5d3b433ab39e5019007d13c9c4a393ba50f52677f9e4dd5a270112d29db5c9c6edb96efca5ed965494b0c1f2b772b25", 0x4c}, {&(0x7f0000000340)="38f44aa2929f1e28d9b88cc6ebb01213fc4d56a9dcb4edef8cb7814a1b0c4781d713ac8a5e544aa1a3c786ee1f83716f8f6260485896b302dcb0be2f17457b7141efe41322f7e7a05831088c7cf9b8658de89fcd4475b387bdb0a9d28b6238640fbe62e77fd2c95662662bed2d4882f9e9aa2ff6ccbdc3163f37e2d9bbcbdc6307f131b1c03968c61bc7bfa05483aebeda16990486d25632b03c7b2fe9fd775f36cab4aa59", 0xa5}, {}, {&(0x7f0000000400)="d365873624e29e6c794924352b0295ae8e03b4716f830b75fbe6982dc4f82ed3141355224cd3904c9a78c8085bf43a5fa5d5679b103f9a3ceaaf434ad57f655556a514c30b49cdf5d65e22b71e4d07c8df838235ad7dcc5e626702fc", 0x5c}, {&(0x7f0000000480)="dad183b5cfab289de58e50717d19c18067c5cbc04ea50ba8226789f586abd1c7a93f69892d7d18e867f73a055d2d66a5d64e1e24d3c62c4d17a6e7776d4eb594895ee881a27d5c34be087cc4182482a96b18cccc82bdc8cae53a5bda1c4b332a758d1bed799d152cf9adc2db08b390babccac1d1c79da26e5639e67a291cd253c1d4758a6df95934c5c2ff0f", 0x8c}, {&(0x7f0000001b80)="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", 0x1000}, {&(0x7f0000000540)="7e6793db672c3014bb7f3aa9f7e1cd929fba5ea72dafe610185982519a001487b24a7cee5669577f88bc835c0e0408ddab2cb7eeac58c7568c4e2efef2b3281d4ada0e4079dbf618a7a1d6411b5927d4e43ac3aabc1b4143d6805912adf8b3", 0x5f}], 0x9, &(0x7f0000002b80)=[{0xc8, 0x111, 0xffffffff8e9d6b31, "6be9831bf729d8621680460c905548a158bd03c737b7c2e9c9cc73d56a28f872bd89e037455899037014f4246271931008bfb65fef32dcf8dff6520379b4d91ba2efbf6f3ef5b97dff3605a362966436af5d51424a0a7d907eac587818422ec4808cf24601f3a827a848d9b4d18fc145b48acb1c407869860c1f694c52cf55c4e928ff561381bc139b97c76b98116ce495b3ff936125a0da86111fe200dec0a3dca421d5d33e6d9d7eafe022973220415efc72ced090"}, {0x10, 0x0, 0x4}, {0x60, 0x13f, 0x6, "037763e32af35ef1dfbdefe13f8deb131e37868d97b4127782b2fac4f22a487143e33fbc477f33d048a0ac402d3264c5dc176f07dc2852690f2cd5966f5fa8a4790568dff82ce78e6109"}, {0xf0, 0x29, 0x6a5, "2b56afd45807ca069b90e51028f6618c491fe389df95349b77cce644686b0ca90995e9cddfa6d020df20f8a5bbd4afc707f60e9dcb5f9f4869ffd9d911763a7c2bcec1d593d575d3439f8f448fc4da0a497a43f82504636b677f6441db8c584e6c68ba5919fd688b3bc6e210ed89cd6a213e2e698fa7e30a5c1227a112d62405a41fce3754e913963dcce0038146eee5dc6913dbf2289d4d789f0bbd329f2a5c28f72064e9ed3d22e0c2c40c7df446f83f50c946f4506428fac204f3ef8908fe50dd04895000654b9185cb61f5c4e4273301eca4bbd3f7db10fe41e6eaf765"}], 0x228, 0x8000}, 0x40) 2018/03/21 23:55:25 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) socketpair(0xb, 0x804, 0x7fffffff, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x80000001, r0, 0x1}) 2018/03/21 23:55:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x42) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x341, @remote={0xfe, 0x80, [], 0xbb}, 0x8001}, @in6={0xa, 0x4e20, 0x75, @empty, 0x62}, @in6={0xa, 0x4e21, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffffffd}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e24, @rand_addr=0x5e37}], 0xa0) accept$ax25(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'erspan0\x00', r4}) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xb2d1, 0x40000) r5 = getpid() ptrace$setsig(0x4203, r5, 0x4, &(0x7f0000000200)={0x3f, 0x6, 0x0, 0x7ff}) 2018/03/21 23:55:25 executing program 5: r0 = socket$inet6(0xa, 0x5, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f000081c000)=""/169, &(0x7f0000636000)=0xa9) keyctl$set_reqkey_keyring(0xe, 0x6) [ 78.732680] binder: 9254:9265 unknown command 4195333 [ 78.738580] binder: 9254:9265 ioctl c0306201 20012000 returned -22 [ 78.751405] binder: 9254:9265 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 78.780709] FAULT_FLAG_ALLOW_RETRY missing 30 [ 78.782557] binder: BINDER_SET_CONTEXT_MGR already set [ 78.785372] CPU: 1 PID: 9263 Comm: syz-executor3 Not tainted 4.16.0-rc6+ #361 [ 78.794327] binder: 9254:9280 unknown command 4195333 [ 78.797894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 78.797899] Call Trace: [ 78.797916] dump_stack+0x194/0x24d [ 78.797937] ? arch_local_irq_restore+0x53/0x53 [ 78.797959] ? handle_userfault+0xb97/0x2490 [ 78.797976] handle_userfault+0xbd9/0x2490 [ 78.797987] ? handle_userfault+0x1864/0x2490 [ 78.836501] ? userfaultfd_ioctl+0x4520/0x4520 [ 78.841076] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 78.846254] ? __schedule+0x8d0/0x1ec0 [ 78.850197] ? __sched_text_start+0x8/0x8 [ 78.854350] ? print_irqtrace_events+0x270/0x270 [ 78.859103] ? print_irqtrace_events+0x270/0x270 [ 78.863849] ? trace_hardirqs_off+0x10/0x10 [ 78.868159] ? plist_check_list+0xa0/0xa0 [ 78.872308] ? perf_trace_lock+0xd6/0x900 [ 78.876476] ? __lock_acquire+0x664/0x3e00 [ 78.880706] ? __lock_acquire+0x664/0x3e00 [ 78.884948] ? trace_hardirqs_off+0x10/0x10 [ 78.889297] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 78.894496] ? find_held_lock+0x35/0x1d0 [ 78.898568] ? __handle_mm_fault+0x2ded/0x38c0 [ 78.903146] ? lock_downgrade+0x980/0x980 [ 78.907322] ? lock_release+0xa40/0xa40 [ 78.911303] ? __lock_acquire+0x664/0x3e00 [ 78.915539] ? do_raw_spin_trylock+0x190/0x190 [ 78.920112] ? userfaultfd_ctx_put+0x740/0x740 [ 78.924717] __handle_mm_fault+0x2dfa/0x38c0 [ 78.929114] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 78.934304] ? __pmd_alloc+0x4e0/0x4e0 [ 78.938177] ? trace_hardirqs_off+0x10/0x10 [ 78.942492] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 78.947604] ? find_held_lock+0x35/0x1d0 [ 78.951676] ? handle_mm_fault+0x35b/0xb10 [ 78.955902] ? lock_downgrade+0x980/0x980 [ 78.960076] ? handle_mm_fault+0x2f8/0xb10 [ 78.964315] handle_mm_fault+0x44a/0xb10 [ 78.968374] ? __handle_mm_fault+0x38c0/0x38c0 [ 78.972945] ? vmacache_find+0x5f/0x280 [ 78.976942] ? find_vma+0x30/0x150 [ 78.980510] __do_page_fault+0x5c9/0xc90 [ 78.984595] ? mm_fault_error+0x2c0/0x2c0 [ 78.988761] ? lock_release+0xa40/0xa40 [ 78.992754] ? trace_hardirqs_off+0x10/0x10 [ 78.997080] do_page_fault+0xee/0x730 [ 79.000878] ? __do_page_fault+0xc90/0xc90 [ 79.005101] ? avc_has_perm+0x43e/0x680 [ 79.009078] ? find_held_lock+0x35/0x1d0 [ 79.013151] ? __might_fault+0x110/0x1d0 [ 79.017211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.022066] page_fault+0x25/0x50 [ 79.025513] RIP: 0010:__get_user_4+0x21/0x30 [ 79.029909] RSP: 0018:ffff8801ae4bfbe8 EFLAGS: 00010206 [ 79.035274] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 79.042532] RDX: ffffffffffffffff RSI: ffffc90002c3f000 RDI: 0000000000000282 [ 79.049791] RBP: ffff8801ae4bfc88 R08: ffff8801aedf2188 R09: 1ffff10035c97f5a [ 79.057050] R10: ffff8801ae4bfa98 R11: 0000000000000000 R12: 0000000020012000 [ 79.064308] R13: 1ffff10035c97f80 R14: dffffc0000000000 R15: ffff8801b524cc80 [ 79.071593] ? __might_fault+0x188/0x1d0 [ 79.075663] ? udp_lib_getsockopt+0x8e/0x440 [ 79.080067] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 79.084577] udp_getsockopt+0x71/0x80 [ 79.088377] sock_common_getsockopt+0x95/0xd0 [ 79.092874] SyS_getsockopt+0x178/0x340 [ 79.096849] ? SyS_setsockopt+0x360/0x360 [ 79.100996] ? move_addr_to_kernel+0x60/0x60 [ 79.105404] ? do_syscall_64+0xb7/0x940 [ 79.109372] ? SyS_setsockopt+0x360/0x360 [ 79.113511] do_syscall_64+0x281/0x940 [ 79.117390] ? __do_page_fault+0xc90/0xc90 [ 79.121616] ? _raw_spin_unlock_irq+0x27/0x70 [ 79.126103] ? finish_task_switch+0x1c1/0x7e0 [ 79.130589] ? syscall_return_slowpath+0x550/0x550 [ 79.135512] ? syscall_return_slowpath+0x2ac/0x550 [ 79.140432] ? prepare_exit_to_usermode+0x350/0x350 [ 79.145440] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 79.150803] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.155650] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 79.160825] RIP: 0033:0x454239 [ 79.164004] RSP: 002b:00007f0f31c82c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 79.171705] RAX: ffffffffffffffda RBX: 00007f0f31c836d4 RCX: 0000000000454239 2018/03/21 23:55:25 executing program 7: socketpair$inet6_icmp(0xa, 0x2, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x279b, 0x40000) sendmmsg$alg(r2, &(0x7f0000001ec0)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)="35ef5c7c8d6ae728c775228e7d89b0e206851f550166c5e47d359cb94a22dc0b22c7dd92be5c1d372ab4dbfab8700cf9a5cd90be5a05725ac67c2608409a26d37e10fe67d5876312c8fcdce8749715ca", 0x50}], 0x1, &(0x7f0000000980)=[@op={0x18, 0x117, 0x3}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x68, 0x117, 0x2, 0x4e, "4510ccaeb3c4d8622ae9c6e7afa39f53af38e56ab4be096bb1c739686a158f9869959db084b77d77597a03269fe690cb4ec58b468c1195cec64108f80aa3ccd549973636704ba1893851722acd46"}, @assoc={0x18, 0x117, 0x4, 0x8000}, @assoc={0x18, 0x117, 0x4, 0x3}, @assoc={0x18, 0x117, 0x4, 0x2}], 0xe0, 0x8811}, {0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="590fbae88b64620d5fc1476129dce38beabb41002124b15fc2e8efea7190201451e6c717d72bccb4120e8476bbc93e14eaf0c7bc205b23f6995e1016ee04252fc8d5831282fd2391c7eee16cbfe5d72b636d892ea37e14e47eceb5d934d5927e330911d8c19dac9c29aa2ecdb4df36031bb72f27a14b792533ecccb1dceeb3029b393ee8cdcec11e1be9edd93d8cc4290f35858a4d04de96b5c9e6546329518f46fadfdf29d41fa9b90511f79aad8056bd5b3955eb3fdcf158331a31c8eec4e4ed158691bf6d29a262148f2217a6b263187f869590e8cc75641a2813c2da08aecde608ce3c13c985", 0xe8}, {&(0x7f0000001b80)="f81aa4b344b00642d1b5b39b37edde513b5cf7ee0d71126878610e5513b4f1c303b5c064435c9715ca2a6f23ff348550e6a20ca38e29a3323e54bc354f1208302f004fa55a235b38c86ccb3f62f7295967859ac2993870b23b398b67b51e46c4d7f501db1244fa3eb196d864b605eb37529a9864362d31ab311f5a08699625af21e932395a5491127e75e9f2a0b153c130cfd370250fa4706a9aabb7e1be6c85e6e38f5089f94341a2694851151805301b2651d09154f2f9e3d57b9fa3f152e1", 0xc0}, {&(0x7f0000001c40)="3293d0a88dd142fc6c0f2c127c6c06645a300620667350f23f49931e3d34dcce334b0203d99456c5fa67e8cc3b595f2ea54ea92a76ba27027c12537975db49858eed04b42f79eee402891274f44fcbb94aebf9", 0x53}, {&(0x7f0000001cc0)}, {&(0x7f0000001d00)="c1819a2eb5", 0x5}, {&(0x7f0000001d40)="7f59d272f225f1494442022c74df0bbd1aea1e5ae69ae2ecf8f2aa33ce6ad99d532c9b9ab20adfcf1db7e8c706b6a2304b4896a62f814650a71fa9e0977444535ee415a6d829fbb7efc43bb221a7b7983ff877fbc36b53b4263dfa3a7216c632997b767bef20e873ab53430b682b7f159a9379524eac3a592a56a1b6a7b2c0d738eb9812850f00", 0x87}], 0x7, &(0x7f0000001e80), 0x0, 0x4000040}], 0x2, 0xc080) sendmsg$nl_netfilter(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="148000000b05000002dfef2c19adcadd14491273d5000000"], 0x14}, 0x1}, 0x0) sendmsg(r0, &(0x7f0000000880)={&(0x7f00000001c0)=@llc={0x1a, 0x7, 0x1, 0xe0, 0x4, 0x2, @random="67a3b2fd98e7"}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000240)="94222f13e2f7296e962db61ee46ab46d51d843bb4b369b25377b924472343eb2274be019d88d3a07e28f06bb62586134f9dbfa5565198f638f106fc0056710a441f0b35a9ea0636263d6132483d6db1556d882cc1177d9baff273d6b7e033b8f78e76c8d047cb277d2b77c763b6d8cbe6afdb389e749ea42d3fb0a91772543f33c7dc8ddfa860256068382911f1c382372822a939c0f00137f460f0aa6289c9d260bf2ef87f6bc6f183ccc84c41a", 0xae}, {&(0x7f0000000300)="d6417142331cb62298d0e0b330941b0b764b96e1c99f49b48a5af872fc33c793e4c34234ffcbfeb5116902c77e3a9e548c38116246bf7f618fcd2f8c4bdadd13f82b73a0f0f5b56e0ec3afc4adf1a03c4892408766e7e50c927173d22cbdef56f233b273a2a6d134b71170ae43e8ce1fd5d13c8496d88eea929f36eb5e6f9dcaeded2ef107615ba42921be704a0a3b6b900c039c673c3e9408aedfa714ef7aa6e10dd0b7dbe58e483fcdeaee16ab73298df6e340feb1a235e3f648a2546c415d703bac780af9c3abb72380c36b8bd1b4b92d01a7787152e992b00093e1778a8f85c14829d2be6b2989086f264cf213133470c3117d937544fc21", 0xfa}, {&(0x7f0000000080)="e4d46f88154d9f504ccd768f", 0xc}, {&(0x7f0000000400)="ebfe2a3881b04b7cfec8cd8410f43d4808780b10b2604dc6ae68d1a8231b3b5787ea62ae62677dbb17d2014303a319dbe2f8ff558391d874e4decc4cc98f577d22ea0ea238181d5b67636e852c7cb65cc64eb7c1f39841b45851183b46e95531159fcfb80522b3150a8710cb6f1b52f5b01619fcfd3b4af3b090f74d5ec52f510c6af85189a845e8234ef7ae69274550034f703ee8cdd33e617547f7a3e1460546c621979e0ec91020b2ae05532576f5ebce59cb18c501d1b12f769ad6d9b1753bbad6931e68a9505584064401a53abddee21bccbfcb90b48267c107d5e2f9027005fbf1", 0xe4}, {&(0x7f0000000500)="7f391ce6ca3521cf009c2cf3fd28086aecb63dd588574e756c3a8de8102064e87081daa3ccff444946de5a266bb6f6ecadfe06e612b8c7e3ef48da7f9d4f04efdd15a3a8eed3fe2a9ebee8a6069bd2d5e9a84eb3e2025782ea28e688219bf2a99dca636cd589bce1cb2301e604399d0f598f9d9a8024a7c54d970ff7e3d2cd6ae4d89622f162efd1434ea411d3974be9e5f64a09520f81818455bd2e50b75189745c56f64f77aeed925ede5745d66581d3b9881444ad1d77ebf414b141107a306014c6c85c2d033653bad7", 0xcb}, {&(0x7f0000000140)}, {&(0x7f0000000600)="90427b84c3597f390a36e6a42fb727eaee963d56480704846879e761992a735d0b56d7425ce661e82ac7f82e29ec573850d79450eaa3ff9cdd90d8a985f47698fdd950f0f8cb587e609dea8b439e71519660cff73b862a8d316cb4dce254527ed4241cfae59d8faafb6dc7a2c6b23d6bb019afa57e5764a25a94efdcbbf727de8ab0263f76675afc87330de435991aaf0645adb9cc47574753a45335cb5d912308f73c1aaf394c181ec5b7222b1e85e9e88c58576b1f9019e50e55101b0896331a31924068ca147e2a28ca3806c035fec9a5fdc94b4c55b39a5c674ebc84d44929fd583a22431906066ab549edfa", 0xee}, {&(0x7f0000000700)="83dd3a1df799712ad4d4b243cc7335a9bce5b866df03a3175867685aa72b8833a2a64c02958fc99a8c00e6fdbd2cb46335e146cd4e9565cab4ba855259ebb31ca3f479263a0b4f892e7acb489f67d5250b8f390998e147e1e2e2d79ecb1c9285610efa029efd1f7df45688b8e40eb736526712fe6dd65d033ea7a76fb27672ba272579a001299e35e4b94baabe927108fc659c1767862c469b5c04f5d7ad13f35ec3cc0c0aac8829fd245f01e25da1849bbc8282412495ccb38d323b46ebc179948ad2e0e7af7e965efd20dd8ee2157197e6923e6924e774082de8d5ad6a0c851030d43a2f3bc93f1ce811713ea292", 0xef}], 0x8, 0x0, 0x0, 0x44811}, 0x4000) 2018/03/21 23:55:25 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f0000000180)=0x4, 0x4) connect$pppoe(r1, &(0x7f00000001c0)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x3, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ip6_vti0\x00'}}) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000000), &(0x7f0000000080)=0x10) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$audion(&(0x7f0000000500)='/dev/audio#\x00', 0x5, 0x42) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e23, 0x341, @remote={0xfe, 0x80, [], 0xbb}, 0x8001}, @in6={0xa, 0x4e20, 0x75, @empty, 0x62}, @in6={0xa, 0x4e21, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x3}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x8, @ipv4={[], [0xff, 0xff]}, 0xfffffffffffffffd}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e24, @rand_addr=0x5e37}], 0xa0) accept$ax25(r3, &(0x7f0000000100), &(0x7f0000000140)=0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000340)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000480)={'erspan0\x00', r4}) syz_open_dev$sndpcmp(&(0x7f0000000300)='/dev/snd/pcmC#D#p\x00', 0xb2d1, 0x40000) r5 = getpid() ptrace$setsig(0x4203, r5, 0x4, &(0x7f0000000200)={0x3f, 0x6, 0x0, 0x7ff}) 2018/03/21 23:55:25 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0e63f874eb628212c029a89e94d0b60c400000409be490476a2f509a1a85670713ae321ca5fa898ea7ea366ec494c82aa9611493b45093de00dec1812945cdce1dfa976c09b749d1a328ebf6c0a4b45d90a396dd4eff0c1628d2721078212cb029dad6d1e843fb43ac78269a1506ea140514342582793f00a9be21b92448efb7ea207f6eb32d132a1d830f163f8ab1ca042fdaacf4c8f30507b1602b34a69af6012fa81e535e2981fce530cd17324f4f622fad071e"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)=0x10000) [ 79.178959] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 79.186215] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 79.193472] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 79.200732] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 79.208533] binder: 9254:9265 ioctl 40046207 0 returned -16 [ 79.211971] binder: 9254:9281 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 79.216680] binder: 9254:9280 ioctl c0306201 20012000 returned -22 2018/03/21 23:55:26 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000180)=0x7ff, 0x4) ioctl$TIOCCONS(r2, 0x541d) syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0xfaf6, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@random={'osx.', '\x00'}, &(0x7f0000000100)=""/68, 0x44) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000000240)={&(0x7f0000011000/0x4000)=nil, 0x4000}) 2018/03/21 23:55:26 executing program 0: mmap(&(0x7f0000000000/0x19000)=nil, 0x19000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x40000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x0, 0x7}) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x2, 0x0, {0xa, 0x4e20, 0x400, @ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}}}}, 0x3a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040), 0x0) 2018/03/21 23:55:26 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x12000, 0x0) 2018/03/21 23:55:26 executing program 3: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x28) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000000c0)={r3, 0x3, 0xfb, 0x0, 0x1, 0x4}, &(0x7f0000000100)=0x14) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:26 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x0, 0x0) ioctl$KVM_GET_CPUID2(r0, 0xc008ae91, &(0x7f00000001c0)={0x7, 0x0, [{}, {}, {}, {}, {}, {}, {}]}) keyctl$read(0x10, 0xfffffffffffffffd, &(0x7f0000000000)=""/4, 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x400, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000140)={0x2, [0xf7e6, 0x1ff]}, 0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x7fffffff, 0x89aa, 0x6, 'queue0\x00', 0x2}) 2018/03/21 23:55:26 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x441, 0x0) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000100)={{0x401, 0x7, 0x5, 0x1, "1bbbb6542bb0e2d0fac0a5974d20f87bd28f35c1944f0e62a9d807d7571e245f3a91f1a58113d29e66fcd6bb"}, 0x0, 0x0, 0x2, r1, 0x4, 0x1, "f31fe6d2b50c090fa072cad13cf71e1cd5d09171b8732b47d1800fbf0c4d888c03d22b79eddf6ff27fae5ec0a10427ad3c4d0a42287b42f47bd14dfee6e02309", &(0x7f00000000c0)='system\x00', 0x7, [], [0x6, 0x9, 0x6, 0x9]}) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) write$selinux_create(r2, &(0x7f0000000000)=@objname={'system_u:object_r:ping_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x37, 0x34, 0x20, './file0\x00'}, 0x3b) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) utimensat(r0, &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000280), 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r5 = fcntl$getown(r3, 0x9) getpriority(0x0, r5) ioctl$UFFDIO_ZEROPAGE(r3, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:26 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304c08bd1e4f7"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:26 executing program 7: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000240)=0xc) tgkill(r1, r2, 0x14) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffa) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x100, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r4, 0x40405514, &(0x7f00000002c0)={0x7, 0x1, 0x7ff, 0x9, "779a4af0fbda5736c418065bbae1ce76c57fb055d32317eb927319fe194f67126bba4eff5cbb575b811dde96", 0x10000}) keyctl$read(0xb, r3, &(0x7f0000000140)=""/34, 0x22) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r5, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400e15ab4461657334646"], 0x14}, 0x1}, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r4, 0x111, 0x1, 0xfffffffffffff800, 0x4) 2018/03/21 23:55:26 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) [ 79.315561] binder: 9299:9308 unknown command 1962435342 [ 79.321405] binder: 9299:9308 ioctl c0306201 20008fd0 returned -22 [ 79.329652] binder: 9299:9308 ioctl 5473 20000000 returned -22 [ 79.338570] binder: BINDER_SET_CONTEXT_MGR already set [ 79.344112] binder: 9299:9308 ioctl 40046207 0 returned -16 [ 79.346413] binder: 9299:9310 unknown command 1962435342 [ 79.355541] binder: 9299:9310 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:26 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000ffefa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00003bcfd0)="d3ab27191a01002356ba602dff05000bfef9b9d2a4b20079fffffffffffffe000225070097c11ed4c2c4dc42ffa86eb9", 0x30) sendmmsg$alg(r1, &(0x7f0000002c80)=[{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) write(r1, &(0x7f00000000c0)="791f7dfde08186d67d777a649298a8fb2ad96c735b539d025e309b4949b81f36919e0bc93e876c5cf313aeda8e6bdb5e", 0x30) recvmsg(r1, &(0x7f0000158000)={&(0x7f00002fffa0)=@nfc_llcp, 0x60, &(0x7f0000b9c000)=[{&(0x7f000080f000)=""/4096, 0x1000}], 0x1, &(0x7f0000da2000)}, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f0000000240)={0x0, 0x1000, "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"}, &(0x7f0000000040)=0x1008) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3, 0xb3}, &(0x7f0000000100)=0x8) 2018/03/21 23:55:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000040ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x7) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="f647d2eeea1470df6709280000000000000000000000000000000000000000000000000000000000000000000000000000000000000050090000002ea53b3f6447fc72fb6dba41a4713b2b1515745f76c79a9401c8e3a5ae8478c620b75d23c9063508bb1b90f9e5d8c9363625b80759876445884c80855b095647401a012722e9be29c737e9924b93c8779b1082e6b5d8747db6a8cd996146f95b1ec26dcabbd76c889aff6daf40e681cedefa4adfd3bf74e4a086f6bc9b4eb0c1312e35f1945c404e5b2778f079401816d6d13cf180daa800d61d47f09dbe"]}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r6 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r4, r5, r6}, 0xc) getsockopt$inet_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000080)=""/191, &(0x7f0000000140)=0xbf) 2018/03/21 23:55:26 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x101, 0x0) ioctl$KVM_GET_TSC_KHZ(r1, 0xaea3) [ 79.403427] binder: 9321:9330 unknown command -1073454331 [ 79.409386] binder: 9321:9330 ioctl c0306201 20012000 returned -22 [ 79.420948] binder: 9321:9330 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 79.433044] binder: BINDER_SET_CONTEXT_MGR already set [ 79.434681] FAULT_FLAG_ALLOW_RETRY missing 30 [ 79.442747] binder: 9321:9340 unknown command -1073454331 [ 79.442946] CPU: 1 PID: 9327 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 79.455732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 79.457082] binder: 9321:9330 ioctl 40046207 0 returned -16 [ 79.465088] Call Trace: [ 79.465106] dump_stack+0x194/0x24d [ 79.465121] ? arch_local_irq_restore+0x53/0x53 [ 79.465136] ? __lock_is_held+0xb6/0x140 [ 79.465148] ? handle_userfault+0xb97/0x2490 [ 79.465165] handle_userfault+0xbd9/0x2490 [ 79.465173] ? handle_userfault+0x1864/0x2490 [ 79.465198] ? userfaultfd_ioctl+0x4520/0x4520 [ 79.474375] binder: 9321:9340 ioctl c0306201 20012000 returned -22 [ 79.477106] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 79.477132] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 79.477147] ? print_irqtrace_events+0x270/0x270 [ 79.477162] ? print_irqtrace_events+0x270/0x270 [ 79.477169] ? update_load_avg+0x249/0x2d80 [ 79.477180] ? trace_hardirqs_off+0x10/0x10 [ 79.538627] ? resched_curr+0x13e/0x1a0 [ 79.542606] ? perf_trace_lock_acquire+0xe3/0x980 [ 79.547438] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 79.552981] ? __lock_acquire+0x664/0x3e00 [ 79.557212] ? __lock_acquire+0x664/0x3e00 [ 79.561442] ? trace_hardirqs_off+0x10/0x10 [ 79.565782] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 79.570985] ? find_held_lock+0x35/0x1d0 [ 79.575069] ? __handle_mm_fault+0x2ded/0x38c0 [ 79.579646] ? lock_downgrade+0x980/0x980 [ 79.583792] ? lock_release+0xa40/0xa40 [ 79.587763] ? perf_trace_lock_acquire+0xe3/0x980 [ 79.592601] ? do_raw_spin_trylock+0x190/0x190 [ 79.597177] ? userfaultfd_ctx_put+0x740/0x740 [ 79.601775] __handle_mm_fault+0x2dfa/0x38c0 [ 79.606175] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 79.611368] ? __pmd_alloc+0x4e0/0x4e0 [ 79.615249] ? trace_hardirqs_off+0x10/0x10 [ 79.619572] ? __lock_is_held+0xb6/0x140 [ 79.623623] ? nohz_balance_exit_idle.part.95+0x70/0x70 [ 79.628988] ? find_held_lock+0x35/0x1d0 [ 79.633062] ? handle_mm_fault+0x35b/0xb10 [ 79.637293] ? lock_downgrade+0x980/0x980 [ 79.641465] ? handle_mm_fault+0x2f8/0xb10 [ 79.645710] handle_mm_fault+0x44a/0xb10 [ 79.649773] ? __handle_mm_fault+0x38c0/0x38c0 [ 79.654343] ? vmacache_find+0x5f/0x280 [ 79.658316] ? find_vma+0x30/0x150 [ 79.661880] __do_page_fault+0x5c9/0xc90 [ 79.665956] ? mm_fault_error+0x2c0/0x2c0 [ 79.670100] ? lock_release+0xa40/0xa40 [ 79.674069] ? trace_hardirqs_off+0x10/0x10 [ 79.678389] do_page_fault+0xee/0x730 [ 79.682183] ? __do_page_fault+0xc90/0xc90 [ 79.686411] ? avc_has_perm+0x43e/0x680 [ 79.690387] ? find_held_lock+0x35/0x1d0 [ 79.694457] ? __might_fault+0x110/0x1d0 [ 79.698519] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.703390] page_fault+0x25/0x50 [ 79.706844] RIP: 0010:__get_user_4+0x21/0x30 [ 79.711237] RSP: 0018:ffff8801d8be7be8 EFLAGS: 00010206 [ 79.716593] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 79.723864] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 79.731122] RBP: ffff8801d8be7c88 R08: 0000000000000000 R09: 1ffff1003b17cf5a [ 79.738400] R10: ffff8801d8be7a98 R11: 0000000000000000 R12: 0000000020012000 [ 79.745661] R13: 1ffff1003b17cf80 R14: dffffc0000000000 R15: ffff8801d1ed8080 [ 79.752949] ? __might_fault+0x188/0x1d0 [ 79.757026] ? udp_lib_getsockopt+0x8e/0x440 [ 79.761432] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 79.765933] ? __schedule+0x1ec0/0x1ec0 [ 79.769911] udp_getsockopt+0x71/0x80 [ 79.773710] sock_common_getsockopt+0x95/0xd0 [ 79.778206] SyS_getsockopt+0x178/0x340 [ 79.782183] ? SyS_setsockopt+0x360/0x360 [ 79.786332] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 79.791867] ? do_syscall_64+0xb7/0x940 [ 79.795856] ? SyS_setsockopt+0x360/0x360 [ 79.799997] do_syscall_64+0x281/0x940 [ 79.803884] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 79.809422] ? syscall_return_slowpath+0x550/0x550 [ 79.814349] ? syscall_return_slowpath+0x2ac/0x550 [ 79.819281] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 79.824648] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 79.829497] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 79.834678] RIP: 0033:0x454239 [ 79.837856] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 79.845561] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 2018/03/21 23:55:26 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) r1 = dup2(r0, r0) ioctl$DRM_IOCTL_MARK_BUFS(r1, 0x40206417, &(0x7f0000000080)={0x6, 0x200, 0x1f, 0x8, 0xb, 0x7}) 2018/03/21 23:55:26 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x6, 0x4) r1 = fcntl$getown(r0, 0x9) r2 = getpgid(0x0) setpgid(r1, r2) sched_getaffinity(r2, 0x8, &(0x7f0000000080)) sendto$inet6(r0, &(0x7f0000000040)="4f00070000000000000085980400000000", 0x11, 0x0, &(0x7f0000005fe4)={0xa, 0x4e20, 0x100000002, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 2018/03/21 23:55:26 executing program 3: add_key$user(&(0x7f0000893000)='user\x00', &(0x7f0000be6000)={0x73, 0x79, 0x7a}, &(0x7f0000f28000), 0x0, 0x0) prctl$getreaper(0x3f, &(0x7f000094f000)) 2018/03/21 23:55:26 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000040ff8)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x7) perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shutdown(r2, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="f647d2eeea1470df6709280000000000000000000000000000000000000000000000000000000000000000000000000000000000000050090000002ea53b3f6447fc72fb6dba41a4713b2b1515745f76c79a9401c8e3a5ae8478c620b75d23c9063508bb1b90f9e5d8c9363625b80759876445884c80855b095647401a012722e9be29c737e9924b93c8779b1082e6b5d8747db6a8cd996146f95b1ec26dcabbd76c889aff6daf40e681cedefa4adfd3bf74e4a086f6bc9b4eb0c1312e35f1945c404e5b2778f079401816d6d13cf180daa800d61d47f09dbe"]}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000340)=0xe8) r6 = getegid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={r4, r5, r6}, 0xc) getsockopt$inet_dccp_buf(r3, 0x21, 0x0, &(0x7f0000000080)=""/191, &(0x7f0000000140)=0xbf) [ 79.852820] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000015 [ 79.860076] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 79.868387] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 79.875650] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:26 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x1, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f00000000c0)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r2 = shmget(0x2, 0x4000, 0x54000028, &(0x7f0000013000/0x4000)=nil) shmctl$SHM_LOCK(r2, 0xb) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCSKEYCODE_V2(r3, 0x40284504, &(0x7f0000000040)={0x7ff, 0x16, 0x9, 0x7, "a5ebc537d60d15e67d76567fef7c2e831c8e6bc8043a3b7bb1f08ae7bd42e74d"}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:26 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="5c7ee70e630c40"], 0x0, 0x0, &(0x7f0000000f4d)}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000100)=0xc) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x7, 0x4002) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x4, 0x9, 0x40, 0xfff, 0x0, 0x2, 0x400, 0xe, 0x860, 0x3, 0x96c, 0x7, 0x800, 0x1, 0x3f, 0x80000001, 0x3, 0x3, 0x2, 0x0, 0xcd7, 0x0, 0xc, 0x20, 0x5, 0x4669, 0x2, 0x8000, 0x10001, 0x8, 0xbac, 0x5b88, 0x6, 0x5, 0x1, 0x0, 0x0, 0x57, 0x6, @perf_config_ext={0x9, 0x3f}, 0x1622, 0x2, 0x2, 0x7, 0x0, 0x80000001, 0x7}, r2, 0xb3c7, r3, 0x9) [ 79.981619] binder: 9367:9371 unknown command 250052188 [ 79.987479] binder: 9367:9371 ioctl c0306201 20008fd0 returned -22 [ 79.995194] binder: BINDER_SET_CONTEXT_MGR already set [ 80.000647] binder: 9367:9371 ioctl 40046207 0 returned -16 [ 80.007594] FAULT_FLAG_ALLOW_RETRY missing 30 [ 80.012174] CPU: 0 PID: 9368 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 80.019461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.028825] Call Trace: [ 80.032445] dump_stack+0x194/0x24d [ 80.036068] ? arch_local_irq_restore+0x53/0x53 [ 80.040726] ? _raw_spin_unlock_irq+0x27/0x70 [ 80.045211] ? finish_task_switch+0x1c1/0x7e0 [ 80.049687] ? finish_task_switch+0x182/0x7e0 [ 80.054172] ? handle_userfault+0xb97/0x2490 [ 80.058572] handle_userfault+0xbd9/0x2490 [ 80.062793] ? handle_userfault+0x1864/0x2490 [ 80.067288] ? userfaultfd_ioctl+0x4520/0x4520 [ 80.071856] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.077033] ? __schedule+0x8d0/0x1ec0 [ 80.080918] ? __sched_text_start+0x8/0x8 [ 80.085053] ? print_irqtrace_events+0x270/0x270 [ 80.089798] ? print_irqtrace_events+0x270/0x270 [ 80.094538] ? trace_hardirqs_off+0x10/0x10 [ 80.098842] ? plist_check_list+0xa0/0xa0 [ 80.103000] ? perf_trace_lock_acquire+0xe3/0x980 [ 80.107843] ? perf_trace_lock+0x900/0x900 [ 80.112061] ? __lock_acquire+0x664/0x3e00 [ 80.116287] ? __lock_acquire+0x664/0x3e00 [ 80.120513] ? trace_hardirqs_off+0x10/0x10 [ 80.124835] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.130026] ? find_held_lock+0x35/0x1d0 [ 80.134083] ? __handle_mm_fault+0x2ded/0x38c0 [ 80.138652] ? lock_downgrade+0x980/0x980 [ 80.142790] ? lock_release+0xa40/0xa40 [ 80.146749] ? perf_trace_lock_acquire+0xe3/0x980 [ 80.151580] ? perf_trace_lock_acquire+0xe3/0x980 [ 80.156407] ? do_raw_spin_trylock+0x190/0x190 [ 80.160976] ? perf_trace_lock+0x900/0x900 [ 80.165207] __handle_mm_fault+0x2dfa/0x38c0 [ 80.169600] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.174783] ? __pmd_alloc+0x4e0/0x4e0 [ 80.178659] ? trace_hardirqs_off+0x10/0x10 [ 80.182965] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 80.188062] ? find_held_lock+0x35/0x1d0 [ 80.192119] ? handle_mm_fault+0x35b/0xb10 [ 80.196340] ? lock_downgrade+0x980/0x980 [ 80.200497] ? handle_mm_fault+0x2f8/0xb10 [ 80.204730] handle_mm_fault+0x44a/0xb10 [ 80.208783] ? __handle_mm_fault+0x38c0/0x38c0 [ 80.213348] ? vmacache_find+0x5f/0x280 [ 80.217315] ? find_vma+0x30/0x150 [ 80.220846] __do_page_fault+0x5c9/0xc90 [ 80.224903] ? mm_fault_error+0x2c0/0x2c0 [ 80.229043] ? lock_release+0xa40/0xa40 [ 80.233004] ? trace_hardirqs_off+0x10/0x10 [ 80.237322] do_page_fault+0xee/0x730 [ 80.241108] ? __do_page_fault+0xc90/0xc90 [ 80.245331] ? avc_has_perm+0x43e/0x680 [ 80.249297] ? find_held_lock+0x35/0x1d0 [ 80.253352] ? __might_fault+0x110/0x1d0 [ 80.257407] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 80.262940] page_fault+0x25/0x50 [ 80.266383] RIP: 0010:__get_user_4+0x21/0x30 [ 80.270772] RSP: 0018:ffff8801b355fbe8 EFLAGS: 00010206 [ 80.276122] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 80.283382] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 80.290634] RBP: ffff8801b355fc88 R08: 0000000000000000 R09: 1ffff100366abf5a [ 80.297888] R10: ffff8801b355fa98 R11: 0000000000000000 R12: 0000000020012000 [ 80.305143] R13: 1ffff100366abf80 R14: dffffc0000000000 R15: ffff8801c706b340 [ 80.312420] ? __might_fault+0x188/0x1d0 [ 80.316487] ? udp_lib_getsockopt+0x8e/0x440 [ 80.320885] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 80.325393] udp_getsockopt+0x71/0x80 [ 80.329187] sock_common_getsockopt+0x95/0xd0 [ 80.333673] SyS_getsockopt+0x178/0x340 [ 80.337640] ? SyS_setsockopt+0x360/0x360 [ 80.341781] ? move_addr_to_kernel+0x60/0x60 [ 80.346176] ? do_syscall_64+0xb7/0x940 [ 80.350137] ? SyS_setsockopt+0x360/0x360 [ 80.354271] do_syscall_64+0x281/0x940 [ 80.358145] ? __do_page_fault+0xc90/0xc90 [ 80.362365] ? _raw_spin_unlock_irq+0x27/0x70 [ 80.366852] ? finish_task_switch+0x1c1/0x7e0 [ 80.371332] ? syscall_return_slowpath+0x550/0x550 [ 80.376247] ? syscall_return_slowpath+0x2ac/0x550 [ 80.381161] ? prepare_exit_to_usermode+0x350/0x350 [ 80.386164] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 80.391518] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 80.396354] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 80.401529] RIP: 0033:0x454239 [ 80.404705] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 80.412401] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 80.419656] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000017 [ 80.426912] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 80.434165] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 80.441420] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 80.452375] binder: 9367:9372 unknown command 250052188 [ 80.466369] binder: 9367:9372 ioctl c0306201 20008fd0 returned -22 [ 80.470066] FAULT_FLAG_ALLOW_RETRY missing 30 [ 80.477330] CPU: 0 PID: 9368 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 80.484610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 80.493966] Call Trace: [ 80.496559] dump_stack+0x194/0x24d [ 80.500197] ? arch_local_irq_restore+0x53/0x53 [ 80.504865] ? _raw_spin_unlock_irq+0x27/0x70 [ 80.509362] ? finish_task_switch+0x1c1/0x7e0 [ 80.513858] ? finish_task_switch+0x182/0x7e0 [ 80.518355] ? handle_userfault+0xb97/0x2490 [ 80.522779] handle_userfault+0xbd9/0x2490 [ 80.527010] ? handle_userfault+0x1864/0x2490 [ 80.531528] ? userfaultfd_ioctl+0x4520/0x4520 [ 80.536108] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.541297] ? __schedule+0x8d0/0x1ec0 [ 80.545206] ? __sched_text_start+0x8/0x8 [ 80.549360] ? print_irqtrace_events+0x270/0x270 [ 80.554130] ? print_irqtrace_events+0x270/0x270 [ 80.558886] ? trace_hardirqs_off+0x10/0x10 [ 80.563196] ? plist_check_list+0xa0/0xa0 [ 80.567345] ? perf_trace_lock_acquire+0xe3/0x980 [ 80.572210] ? perf_trace_lock+0x900/0x900 [ 80.576435] ? __lock_acquire+0x664/0x3e00 [ 80.580663] ? __lock_acquire+0x664/0x3e00 [ 80.584894] ? trace_hardirqs_off+0x10/0x10 [ 80.589311] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.594510] ? find_held_lock+0x35/0x1d0 [ 80.598578] ? __handle_mm_fault+0x2ded/0x38c0 [ 80.603152] ? lock_downgrade+0x980/0x980 [ 80.607295] ? lock_release+0xa40/0xa40 [ 80.611255] ? perf_trace_lock_acquire+0xe3/0x980 [ 80.616094] ? perf_trace_lock_acquire+0xe3/0x980 [ 80.620926] ? do_raw_spin_trylock+0x190/0x190 [ 80.625501] ? perf_trace_lock+0x900/0x900 [ 80.629744] __handle_mm_fault+0x2dfa/0x38c0 [ 80.634138] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 80.639328] ? __pmd_alloc+0x4e0/0x4e0 [ 80.643206] ? trace_hardirqs_off+0x10/0x10 [ 80.647515] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 80.652619] ? find_held_lock+0x35/0x1d0 [ 80.656686] ? handle_mm_fault+0x35b/0xb10 [ 80.661694] ? lock_downgrade+0x980/0x980 [ 80.665866] ? handle_mm_fault+0x2f8/0xb10 [ 80.670105] handle_mm_fault+0x44a/0xb10 [ 80.674165] ? __handle_mm_fault+0x38c0/0x38c0 [ 80.678731] ? vmacache_find+0x5f/0x280 [ 80.682703] ? find_vma+0x30/0x150 [ 80.686239] __do_page_fault+0x5c9/0xc90 [ 80.690306] ? mm_fault_error+0x2c0/0x2c0 [ 80.694448] ? lock_release+0xa40/0xa40 [ 80.698414] ? trace_hardirqs_off+0x10/0x10 [ 80.702734] do_page_fault+0xee/0x730 [ 80.706526] ? __do_page_fault+0xc90/0xc90 [ 80.710753] ? avc_has_perm+0x43e/0x680 [ 80.714729] ? find_held_lock+0x35/0x1d0 [ 80.718794] ? __might_fault+0x110/0x1d0 [ 80.722851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 80.727701] page_fault+0x25/0x50 [ 80.731140] RIP: 0010:__get_user_4+0x21/0x30 [ 80.735531] RSP: 0018:ffff8801b355fbe8 EFLAGS: 00010206 [ 80.740883] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 80.748139] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 80.755396] RBP: ffff8801b355fc88 R08: 0000000000000000 R09: 1ffff100366abf5a [ 80.762652] R10: ffff8801b355fa98 R11: 0000000000000000 R12: 0000000020012000 [ 80.769914] R13: 1ffff100366abf80 R14: dffffc0000000000 R15: ffff8801c706b980 [ 80.777194] ? __might_fault+0x188/0x1d0 [ 80.781260] ? udp_lib_getsockopt+0x8e/0x440 [ 80.785661] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 80.790148] ? userfaultfd_read+0x220/0x220 [ 80.794484] udp_getsockopt+0x71/0x80 [ 80.798282] sock_common_getsockopt+0x95/0xd0 [ 80.802775] SyS_getsockopt+0x178/0x340 [ 80.806748] ? SyS_setsockopt+0x360/0x360 [ 80.810892] ? security_file_ioctl+0x7d/0xb0 [ 80.815290] ? security_file_ioctl+0x89/0xb0 [ 80.819696] ? do_syscall_64+0xb7/0x940 [ 80.823665] ? SyS_setsockopt+0x360/0x360 [ 80.827808] do_syscall_64+0x281/0x940 [ 80.831681] ? __do_page_fault+0xc90/0xc90 [ 80.835903] ? _raw_spin_unlock_irq+0x27/0x70 [ 80.840392] ? finish_task_switch+0x1c1/0x7e0 [ 80.844878] ? syscall_return_slowpath+0x550/0x550 [ 80.849799] ? syscall_return_slowpath+0x2ac/0x550 [ 80.854723] ? prepare_exit_to_usermode+0x350/0x350 [ 80.859737] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 80.865105] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 80.869952] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 80.875128] RIP: 0033:0x454239 [ 80.878308] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 2018/03/21 23:55:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0xa380) r1 = signalfd(r0, &(0x7f0000000080), 0x8) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x80) ioctl$TUNSETLINK(r2, 0x400454cd, 0x1) epoll_create(0x51) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0x10000012}) signalfd(r1, &(0x7f0000b9fff8), 0x8) [ 80.886011] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 80.893272] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 000000000000001c [ 80.900529] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 80.907789] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 80.915045] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:27 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000026c0)='/dev/cuse\x00', 0x40000, 0x0) setsockopt$inet_int(r1, 0x0, 0x31, &(0x7f0000002700), 0x4) r2 = socket$pppoe(0x18, 0x1, 0x0) recvmmsg(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/13, 0xd}, {&(0x7f0000000080)=""/254, 0xfe}, {&(0x7f0000000180)=""/52, 0x34}], 0x3, &(0x7f0000000200)=""/248, 0xf8, 0x40}, 0xffffffffffffff7f}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/126, 0x7e}, {&(0x7f0000000380)=""/254, 0xfe}], 0x2, &(0x7f00000004c0)=""/236, 0xec, 0x9}, 0x3f}, {{&(0x7f00000005c0)=@ipx, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000640)=""/155, 0x9b}, {&(0x7f0000000700)=""/145, 0x91}, {&(0x7f00000007c0)=""/198, 0xc6}, {&(0x7f00000008c0)=""/158, 0x9e}, {&(0x7f0000000980)=""/35, 0x23}, {&(0x7f00000009c0)=""/254, 0xfe}, {&(0x7f0000000ac0)=""/33, 0x21}, {&(0x7f0000000b00)=""/6, 0x6}, {&(0x7f0000000b40)=""/177, 0xb1}, {&(0x7f0000000c00)=""/54, 0x36}], 0xa, &(0x7f0000000d00)=""/138, 0x8a}, 0x80000001}, {{&(0x7f0000000dc0)=@nfc, 0x80, &(0x7f0000000f80)=[{&(0x7f0000000e40)=""/184, 0xb8}, {&(0x7f0000000f00)=""/86, 0x56}], 0x2, &(0x7f0000000fc0)=""/129, 0x81, 0x34cb}, 0x4}, {{&(0x7f0000001080)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001240)=[{&(0x7f0000001100)=""/242, 0xf2}, {&(0x7f0000001200)=""/54, 0x36}], 0x2, &(0x7f0000001280)=""/75, 0x4b, 0x6}, 0xffffffffffffcad1}, {{0x0, 0x0, &(0x7f0000002440)=[{&(0x7f0000001300)=""/181, 0xb5}, {&(0x7f00000013c0)=""/61, 0x3d}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/37, 0x25}], 0x4, &(0x7f0000002480)=""/153, 0x99, 0x5}, 0x9}], 0x6, 0x2000, 0x0) setsockopt$llc_int(r1, 0x10c, 0x9, &(0x7f0000002740)=0x80000000, 0x4) 2018/03/21 23:55:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:27 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x4) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000080)=0x6, 0x2) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) 2018/03/21 23:55:27 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") sendmmsg$unix(0xffffffffffffffff, &(0x7f000000b3c0)=[{&(0x7f0000009e00)=@abs, 0x6e, &(0x7f000000b200)=[{&(0x7f0000009f00)="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", 0x117}], 0x1, &(0x7f000000b380)}], 0x1, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0x0, &(0x7f0000d1cfff)) preadv(r1, &(0x7f000031d000)=[{&(0x7f0000b47f68)=""/152, 0x98}, {&(0x7f0000fb9000)=""/223, 0xdf}], 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:27 executing program 5: mkdir(&(0x7f0000c4e000)='./file0\x00', 0x0) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000033ff8)='./file0\x00', 0x0) inotify_init1(0x80000) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f0000432ff2)='./file0/file0\x00', &(0x7f00003c9000)='./file0\x00', &(0x7f000010bff7)='hostfs\x00', 0x1001, &(0x7f0000a06000)) fallocate(r1, 0x0, 0x10000, 0x0) unlinkat(r0, &(0x7f000057d000)='./file0\x00', 0x200) mount(&(0x7f0000d56ffb)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000556ffb)='omfs\x00', 0x6000, &(0x7f0000ad5000)) accept4(r0, &(0x7f0000000080)=@ax25, &(0x7f0000000100)=0x80, 0x0) 2018/03/21 23:55:27 executing program 0: r0 = socket$inet(0x2, 0x2, 0x10000000000000) r1 = dup2(r0, r0) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000180)=""/4096) recvfrom$inet6(r1, &(0x7f000001c000), 0x154, 0x0, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x7, &(0x7f0000000040)="a5910f3ee51fa20847e5912473060567c501947e0c677e56b91a2cc36166840ef31e064ae0ff5e035d223facdc7be47c702bb07bf52d61265769604504a60bde99225840e2673368e29e3bc92e473a58ef0a2efc430b6ae3e130a3c38f2ffc349352077d99ad0b812480bc801296d0a4467a5776ae5fe9dfd06e83b53661e081b04fa29782ae881bbabf35342c04ffc95b1d52c1e4fb57a18380e64b3ba4360fd20feeaa1b94293f1f9642b05aeafdea202a22d0d708cee166df7d0760b3efd50786f837f28c92e3b5cb65bfc2e8eeee29db8f9f748a575679caba4a2c7285596fcf3090874960fe5c651dc58f434a903080b22afe2fd4b994c2ea559efcd871cebeb6da59f0330429554b93436a0b9f92aed258712ddb82b623e1b728227662e7a3cac9a58f5a1a", 0x128) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000000)=0x3, 0x4) bind$inet(r0, &(0x7f000000f000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) sendto$inet(r0, &(0x7f0000004000), 0x33f, 0x0, &(0x7f0000002000)={0x2, 0x4e23}, 0x10) 2018/03/21 23:55:27 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0xfffffffffffffffc) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x80000, 0x44) ioctl$sock_inet_SIOCDELRT(r1, 0x890c, &(0x7f0000000040)={0x29, {0x2, 0x4e20, @multicast2=0xe0000002}, {0x2, 0x4e21, @broadcast=0xffffffff}, {0x2, 0x4e22, @broadcast=0xffffffff}, 0x2, 0xb83, 0x83b1, 0x100, 0x0, 0x0, 0x4, 0x69, 0x800000000}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:27 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev\x00') ioctl$KVM_SET_PIT(r0, 0x8048ae66, &(0x7f0000000040)={[{0x6, 0x8, 0x1ff, 0x7, 0x755, 0x1, 0x8, 0x3f, 0x9, 0x6e28, 0x729a, 0x7, 0x100000000}, {0xffff, 0x800, 0x4, 0x7, 0x8, 0xfffffffffffffff9, 0x3, 0x6, 0x0, 0x7fffffff, 0x1ffe000000, 0x2, 0x8}, {0x9, 0x89e, 0x1, 0x400, 0x40, 0x3, 0x101, 0x10000, 0xfffffffffffffff8, 0xffff, 0x4, 0x293, 0x6}], 0x9a5}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000001180)=0x9ad0, &(0x7f00000011c0)=0x4) ptrace$setregset(0x4205, r1, 0x6, &(0x7f0000001140)={&(0x7f0000000140)="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", 0x1000}) syz_emit_ethernet(0x3a, &(0x7f000000bfc5)={@empty, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x2f, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}, @rand_addr}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x7, 0x0, 0x5, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [], "63d8fc101d49e954"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}, 0x0) 2018/03/21 23:55:27 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x40000000001f}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b050992080000e1008c2cb52c000000"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:27 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f00000001c0)='/dev/sg#\x00', 0x3ff, 0x400006) readahead(r1, 0x8, 0x40) accept$ipx(r1, 0x0, &(0x7f0000000040)) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000240)="2837f97030e3e281b35f2070688e951ae6c56d61c1336e0d518eac6cb6b13521e5fa7bb98780304df87658a7ce9197e6ff102f751e108b81babea42ca55aeb46cf16f248bb00604adadc1fd3a6a3ab1a4434070145f7b9f0eaf611209a841036eb15acd6d0f9d5c2cf0917db29b9d84083494d1bc21f1aa3e33450cd28134d2c5c053125a29fce5ad9a56fcb98fd702db32a733112d920502824138657ff30a56a4ed00cd0ab71486def262a6e2a6ea6adc94b8e2ea9422e39283e887721758d28242ae4c4982fe17b06423f7ff17196d050b20717c031e6e027d83400b636cc", 0xe0, 0xfffffffffffffffc) keyctl$read(0xb, r2, &(0x7f0000000340)=""/143, 0x8f) setsockopt$ax25_int(r1, 0x101, 0x0, &(0x7f0000000080)=0x5, 0x4) r3 = request_key(&(0x7f0000000100)='pkcs7_test\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000180)='system\x00', 0xfffffffffffffff9) keyctl$set_timeout(0xf, r3, 0xff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) 2018/03/21 23:55:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fadvise64(r0, 0x0, 0xfff, 0x2) setsockopt$inet_buf(r0, 0x0, 0x8000000000010, &(0x7f0000000000)="17000000020001000003be8c5ee17688a3000008010300ec1f030000000000000098fc5ad9485bbb6a8800000000dba67e0600000000000200df018000000000f5009cee4a5acb3da400611fb700670000000000000000000609edffffffffffff02df9eebe7ec7ee87cccebf6ba000840024f0298e9e90554062a80e605007f71174aa9516cbf320ec39f02d47c59cc16198b6026eb4bf7ba2112ce68bf17a6e019b7487067c12f162abd9ce053989d755a753b6dca4490", 0xb8) 2018/03/21 23:55:27 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x80000, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x2) sched_setattr(0x0, &(0x7f0000000040)={0x2, 0x8000000}, 0x0) 2018/03/21 23:55:27 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x9, 0x201) ioctl$TIOCGLCKTRMIOS(r1, 0x5456, &(0x7f0000000040)={0x2, 0x9, 0xbc, 0x100000000, 0xf947, 0x1, 0xefc, 0x3, 0x4, 0x7, 0x5, 0x8}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000280)) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="57000000c9dc3e652bcfccd64aa0a5228b6a5d8f3fb669644040673a2fc1cc21241cbfd8ae2367ce89af65e185d7fac3a1ce0fb53cbe128679a934ba1c1de391653f2fcfc0fd13349903caf30d841ef2ad0001c5e54f991f211f7747ae9211021496740b95e1f9e1ba3327d3840310e3b5363da8a40639e5"], &(0x7f0000000080)=0x5f) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000000c0)={r3, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x1, 0x0, 0xffffffff, 0x80000001, 0x0, 0xffffffffab4f9ce9, 0xfffffffffffffff9, 0x72c4, 0x1ff, 0x9, 0x0, 0x5, 0x0, 0x7]}, &(0x7f00000001c0)=0x100) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 80.997318] binder: 9378:9388 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 81.021155] binder: BINDER_SET_CONTEXT_MGR already set [ 81.031667] binder: 9378:9403 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 81.035418] binder: 9378:9388 ioctl 40046207 0 returned -16 2018/03/21 23:55:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e23, @multicast1=0xe0000001}}) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:27 executing program 2: eventfd(0x1ff) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) r3 = dup(r1) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="060000000000000019000080002400006e86000004010000090000000000000007000040050000007f0000000300000008000000000000000700008005000000090000000080000000000000000000000f00000008000000ff070000080000000000000000000000040000000300000040000000ffffffff00000100000000000400870fb24aeacc00007f0000000200000006000000ffff000000000000"]) 2018/03/21 23:55:27 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) [ 81.133101] FAULT_FLAG_ALLOW_RETRY missing 30 [ 81.137729] CPU: 1 PID: 9424 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 81.145013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.154377] Call Trace: [ 81.156976] dump_stack+0x194/0x24d [ 81.160623] ? arch_local_irq_restore+0x53/0x53 [ 81.165308] ? __lock_is_held+0xb6/0x140 [ 81.169390] ? handle_userfault+0xb97/0x2490 [ 81.173818] handle_userfault+0xbd9/0x2490 [ 81.178069] ? handle_userfault+0x1864/0x2490 [ 81.182599] ? userfaultfd_ioctl+0x4520/0x4520 [ 81.187181] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 81.192369] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 81.197912] ? print_irqtrace_events+0x270/0x270 [ 81.202673] ? print_irqtrace_events+0x270/0x270 [ 81.207417] ? update_load_avg+0x249/0x2d80 [ 81.211724] ? trace_hardirqs_off+0x10/0x10 [ 81.216034] ? resched_curr+0x13e/0x1a0 [ 81.219995] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 81.225524] ? update_cfs_group+0x5e0/0x5e0 [ 81.229831] ? __lock_acquire+0x664/0x3e00 [ 81.234054] ? __lock_acquire+0x664/0x3e00 [ 81.238273] ? trace_hardirqs_off+0x10/0x10 [ 81.242589] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 81.247771] ? find_held_lock+0x35/0x1d0 [ 81.251824] ? __handle_mm_fault+0x2ded/0x38c0 [ 81.256401] ? lock_downgrade+0x980/0x980 [ 81.260539] ? lock_release+0xa40/0xa40 [ 81.264494] ? __lock_acquire+0x664/0x3e00 [ 81.268764] ? do_raw_spin_trylock+0x190/0x190 [ 81.273333] ? userfaultfd_ctx_put+0x740/0x740 [ 81.277913] __handle_mm_fault+0x2dfa/0x38c0 [ 81.282308] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 81.287485] ? __pmd_alloc+0x4e0/0x4e0 [ 81.291363] ? trace_hardirqs_off+0x10/0x10 [ 81.295678] ? __lock_is_held+0xb6/0x140 [ 81.299731] ? nohz_balance_exit_idle.part.95+0x70/0x70 [ 81.305085] ? find_held_lock+0x35/0x1d0 [ 81.309137] ? handle_mm_fault+0x35b/0xb10 [ 81.313355] ? lock_downgrade+0x980/0x980 [ 81.317512] ? handle_mm_fault+0x2f8/0xb10 [ 81.321737] handle_mm_fault+0x44a/0xb10 [ 81.325785] ? __handle_mm_fault+0x38c0/0x38c0 [ 81.330348] ? vmacache_find+0x5f/0x280 [ 81.334308] ? find_vma+0x30/0x150 [ 81.337836] __do_page_fault+0x5c9/0xc90 [ 81.341891] ? mm_fault_error+0x2c0/0x2c0 [ 81.346033] ? lock_release+0xa40/0xa40 [ 81.350002] ? trace_hardirqs_off+0x10/0x10 [ 81.354322] do_page_fault+0xee/0x730 [ 81.358110] ? __do_page_fault+0xc90/0xc90 [ 81.362326] ? avc_has_perm+0x43e/0x680 [ 81.366291] ? find_held_lock+0x35/0x1d0 [ 81.370344] ? __might_fault+0x110/0x1d0 [ 81.374399] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.379250] page_fault+0x25/0x50 [ 81.382688] RIP: 0010:__get_user_4+0x21/0x30 [ 81.387082] RSP: 0018:ffff8801b3d37be8 EFLAGS: 00010206 [ 81.392427] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 81.399680] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 81.406939] RBP: ffff8801b3d37c88 R08: 0000000000000000 R09: 1ffff100367a6f5a [ 81.414193] R10: ffff8801b3d37a98 R11: 0000000000000000 R12: 0000000020012000 [ 81.421447] R13: 1ffff100367a6f80 R14: dffffc0000000000 R15: ffff8801da514080 [ 81.428723] ? __might_fault+0x188/0x1d0 [ 81.432777] ? udp_lib_getsockopt+0x8e/0x440 [ 81.437176] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 81.441662] ? __schedule+0x1ec0/0x1ec0 [ 81.445623] udp_getsockopt+0x71/0x80 [ 81.449412] sock_common_getsockopt+0x95/0xd0 [ 81.453900] SyS_getsockopt+0x178/0x340 [ 81.457866] ? SyS_setsockopt+0x360/0x360 [ 81.462002] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 81.467530] ? do_syscall_64+0xb7/0x940 [ 81.471488] ? SyS_setsockopt+0x360/0x360 [ 81.475623] do_syscall_64+0x281/0x940 [ 81.479495] ? __do_page_fault+0xc90/0xc90 [ 81.483715] ? _raw_spin_unlock_irq+0x27/0x70 [ 81.488200] ? finish_task_switch+0x1c1/0x7e0 [ 81.492679] ? syscall_return_slowpath+0x550/0x550 [ 81.497593] ? syscall_return_slowpath+0x2ac/0x550 [ 81.502506] ? prepare_exit_to_usermode+0x350/0x350 [ 81.507506] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 81.512860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 81.517698] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 81.522876] RIP: 0033:0x454239 [ 81.526053] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 2018/03/21 23:55:28 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ptrace(0x4207, r1) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) [ 81.533750] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 81.541015] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 81.548284] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 81.555540] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 81.562793] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:28 executing program 6: r0 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x91, 0x4000) getsockopt$inet_dccp_buf(r0, 0x21, 0xf, &(0x7f00000002c0)=""/199, &(0x7f0000000180)=0xc7) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) open_by_handle_at(r1, &(0x7f0000000000)={0x8e, 0x6, "93a133f1e4116d314a8eca9c4c3e601d3a5ab977de4310d14ac96ce3085713d85c2c23e7751f28f49697b3f937261a54179a1d6c7c876da40155c3baed9b58396b033237f8e57b759199e1cf8c8a0bd9feaba6128f0ea7e7df40eb520c00e2aa5bfa3f7ef294304f7f34a19644063c964dadc7775dfa63f5830152f7ef153984e0c9e20208cd"}, 0x200) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xffffffffffffff4e, 0x0, &(0x7f0000000000)=ANY=[], 0x0, 0x0, &(0x7f0000000200)="1a1a8d7baef8e97977ed9e3718d0a2e30489837cb459f049ef763eb2059198581e34d273fc673245386bbc6094a2f167698c5880e82b3ce87565784a1f512ac0bfed9576a47ee22ee0f51114ec08070ee9be80f6129c16ed2e0bccbb4b0d06de1102a5c1b3c61d02b3b59090b6c64a06331f12b90a7afa4101ebad747d6e7e19fb13d6a7fb5aa02983a7f46f872557ba2f2c8e4ad05fcbe532fcd4672adf7fbab9e50c47bfbe48195b5e65b900000000000000"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) write$selinux_context(r2, &(0x7f0000000100)='system_u:object_r:newrole_exec_t:s0\x00', 0x24) 2018/03/21 23:55:28 executing program 3: syz_open_dev$usbmon(&(0x7f0000000280)='/dev/usbmon#\x00', 0x8, 0x80) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f0000000000), 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000384ff7)='/dev/ppp\x00', 0x101002, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000040)=""/169, 0xa9}, {&(0x7f0000000100)=""/62, 0x5e1}, {&(0x7f0000000140)=""/169, 0xfffffee1}, {&(0x7f0000000200)=""/53, 0x35}], 0x4, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b94000)=""/246) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) pwritev(r0, &(0x7f0000000040), 0x19d, 0x0) 2018/03/21 23:55:28 executing program 0: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@local={0xfe, 0x80, [], 0xaa}, 0x6, 0x0, 0x0, 0x6, 0x3ff, 0x2, 0x9}, 0xfe2a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in=@dev={0xac, 0x14, 0x14}}, 0x0, @in=@broadcast=0xffffffff}}, 0x49a) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f00000000c0)={0x100000001, 0x1, 0x6, 0x7fffffff}, 0xc) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f0000000040)) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@empty, 0x2, 0x0, 0x0, 0x8, 0x9, 0x5, 0x4}, &(0x7f0000000140)=0x20) 2018/03/21 23:55:28 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x7, 0x200) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x7, 0x20, 0x0, 0x7749, 0xc4, 0x2, 0xffff}, 0x1c) 2018/03/21 23:55:28 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000087e9"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:28 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80000) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20000, 0x10) ioctl$KDENABIO(r2, 0x4b36) setsockopt$ax25_int(r1, 0x101, 0x6, &(0x7f0000000200)=0xb71, 0x4) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0xffffffffffffff87, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0xc1, &(0x7f0000010000/0x3000)=nil, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000280)) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x4, @ipv4={[], [0xff, 0xff]}, 0x7fffffff}, @in={0x2, 0x4e20}], 0x2c) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x11}}}, 0x6, 0x3f, 0x8, 0x5, 0xc8}, &(0x7f0000000380)=0x98) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value={r4, 0x5}, 0x8) 2018/03/21 23:55:28 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() ptrace$setregset(0x4205, r1, 0x206, &(0x7f0000000000)={&(0x7f0000000080)="0da204dba6e242a021a93822c5638a21688db90bd63d2eb7a883220c8d8eff280b9d117fcc12ccdd078d54bbe61a1e1dfa934f29d7a82d5924737a6ea1059ed949a7cb0a04cc482fa0b6f81730d387a5ad63c35f2a78d293184d1b96daf87b442fc1147805807d571f120142b91cebaf515d6f7185cf9a61f12bddef8af772426b93a3b7b62b9e9e5db686b5fa8b6b4e80dccf482c8aa6f2d7aa030394a152c519f0ef6602cfb71b3032e35a9dd0ef488767c73d4927206e48e6fd8dcbc657ff237a7ecd853063", 0xc7}) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:28 executing program 7: syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x200, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b05fdff000000e10000000000000000"], 0x14}, 0x1}, 0x0) 2018/03/21 23:55:28 executing program 2: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4000000000000, @perf_config_ext={0xfffffffffffffffc, 0x7f}, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000040)=0x7) r1 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x8b6b, 0x80400) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f00000000c0)=""/4096) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r0) [ 81.609585] binder: 9444:9448 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 81.621203] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 81.636254] binder: BINDER_SET_CONTEXT_MGR already set [ 81.644952] binder: 9444:9448 ioctl 40046207 0 returned -16 2018/03/21 23:55:28 executing program 7: r0 = semget$private(0x0, 0x3, 0x0) semop(r0, &(0x7f000002efe2)=[{0x0, 0x9}], 0x1) semop(r0, &(0x7f000001a000)=[{}], 0x1) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x9, 0x2002) ioctl$VT_OPENQRY(r1, 0x5600, &(0x7f0000000040)) semctl$IPC_RMID(r0, 0x0, 0x0) 2018/03/21 23:55:28 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000d19fee)='/dev/input/event#\x00', 0x0, 0x2) read(r0, &(0x7f0000000040)=""/24, 0x18) write$evdev(r0, &(0x7f0000057fa0)=[{{0x77359400}, 0x5, 0x100000001}, {}], 0x30) 2018/03/21 23:55:28 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000001c0)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000040)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000000)={0x4, r1, 0xf643fa6ac1a8df1}) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f00000000c0)=0x9cac, 0x1) [ 81.666502] binder: 9444:9459 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 81.679526] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 2018/03/21 23:55:28 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socket$bt_cmtp(0x1f, 0x3, 0x5) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x2, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x6, 0x3, 0x0, 0xff, 0xb2b, 0x8}, 0x6}, 0xa) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="2d2357235981c536"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:28 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x20000000000016) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f00000014c0)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000001e000)=@ipv6_newroute={0x30, 0x18, 0x501, 0x0, 0x0, {0xa}, [@RTA_GATEWAY={0x14, 0x5, @loopback={0x0, 0x1}}]}, 0x30}, 0x1}, 0x0) 2018/03/21 23:55:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000536ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x12000, &(0x7f0000000080), 0x2, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000500)={0x0, &(0x7f000002d000), 0x2, r2, 0xb}) 2018/03/21 23:55:28 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000080), &(0x7f0000012000)=0xfffffcff) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:28 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f000051d000)='ns/user\x00') ioctl$VT_RELDISP(r0, 0xb703) sendmsg$nfc_llcp(r0, &(0x7f0000003700)={&(0x7f0000000000)={0x27, 0x0, 0x2, 0x5, 0x8, 0x2, "a05f16f337419e502fb202c422b93a5a5cde0e7f40e770a107fdd6a78221d3e6b1cd85d0d25e7f80b83585ae48618d34b1cd1f6ff053f29c8bec66967022b8", 0x6}, 0x60, &(0x7f0000002600)=[{&(0x7f0000000080)="dccc2552aa174bc39b3739c952468a7973229629d63d617dfab748019b93d0578cb304e29b27df668fb8fc0e83fecb10c394d1ae7fadd77928b9344414b5c3287e838d99379f17d35189864301378e743397d0009ca255d801b46e29373f8c97795102c2dd4bc48122e4d7f5a624347ce5d6be1e2b02da9a9514207544c78619cfed646f4f92c1353a4391b63bc2ef2b0d5ca4382703be9358dce5a7a42bfad51e94d4144cdbdb3da80dca0db6090bcde2f65920e3b2e2", 0xb7}, {&(0x7f0000000140)="99a83ba9a130cc878faf1bf385aa75430d909c3508f2c26dc2f24e17df1c7c5ec9bf6c7faa8a0e275dac73f8c5290fb39d57a30c4d0c50655b16e450174b1a46a2aafeb9887f240dba0e3d4168e3595a7e9169512119fe5f3f1841b0b68fa030a215f551221919fb523994682bc26753bdb412dd795af36a3708b77aa55b1732683807046a66e7c696ce88fd56d53be239e4c7968be461a8ab459be372c05ec948941f9de19293ca", 0xa8}, {&(0x7f0000000200)="78cd1ca8c6d56281d1a17a5dca0e1a60645398e95f61c877cb1753b727b7ce1499e1d7ee1146eb69879b99cf62fdc6ef17d4b2bdaa5d5d5f08d39a66e214d1b258357dc46768b744b2c54778fde28581011242c272e1a641d33115cdf474bc678e6883234b3900d895c4af0d2b60f5729d77493b2fa950fb7dda3fab99abb5fab2aa8312f7e11bda710498488fc0866fb7a126097d01e9e606517228994749ae61c61d582066773019c2d33c78e8a34cf15cbce684b97171c9aaf07249b161033afbea10ec7f3e2256dcc2c42016d1fabcb63b117334d98e87705cf91329", 0xde}, {&(0x7f0000000300)="511908da0ce552d7295af606f2d42d2d3eaab61452dedd3c44270e42c12ecefdf0b32e355c960312e765285a06b661e5b4b62f99a27d1d631d6472d1e97e12fdfb8c33ff78185dd6fac9e3637bbc897d9446b85117ca7b2f7d3d5fc14de58b6026b7ec860f33e3a16040610e9979e4d14ffb8a56c51bd7e07cf252def24ee5475f4cd6c3e456b89be7f76691b3cb32da9391431eb95f59761d5c4ac9dd19c464c12f387f75733a07373fc96ab9f64fee22b569166ad4c7c27f9dfe6e6623949abb937c63b28acbf79c105c3f0a90a1699214a88601b90eb3d9baf29fc40897bf407606312a", 0xe5}, {&(0x7f0000000400)="0da7d29db2df0ca3af1a1a17676fb53faba10167d0ec7ec245f282e04ac5118c7c9ad47dac5f6e3fd43669642320ae8f5091b2d91b13ace26b6ea78e0f6fd070468e65410da100470f", 0x49}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="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", 0x1000}, {&(0x7f0000002480)="0274d59638e5817f5e525c579f02c50c0b9d01da11e4e92aad80ef", 0x1b}, {&(0x7f00000024c0)="09d7a7d48874", 0x6}, {&(0x7f0000002500)="466333a0c7d4d7e5b92d5879b8dbed27e71c3e8df08cd3e17afc4719906e84f8ff510ce48a541a2989f55a71461a4b95464ce932c00fdbedaa6267f53cc6633f9545344a911edd86afe999d7c71c763e545db4cdac5d54075b144c16c51aa725b6de7b21b8bade9cee8a0a251ddcd4a4e482c3cb9627651f3b9219d97d0f595e48d1b0db45638b71cb1e0a7db8bce309d118f2937d02cbd9f01f8b699dee9a5c25a217074c7da66eb6ae4538a1e209f64f6499b1052e475d3adbe47a76d879eda1ea6707e8d02ecccb6ee7357975b4b1476b49cb38d5ea2a4466684dfcc88a70", 0xe0}], 0xa, &(0x7f00000026c0)={0x1010, 0x13f, 0x81, "0417399f50aa8fde6514bd7060092d052080296c96825c56bc18caa20694e6c692a216549205ebc5d0b5849f5d49807d6280fb6003028a197855ff49df938fdabc64da76229a868e000b789c6d0e95125fa05dbfc1abcf2142f7e7e46e63b9543d0add059349ea4f6c1ce3b26a8347ce8c6f57bd0313cc59f8ea863067dd9bd9f26ee19fed84960d119c025c7db527d058fee20131babcea63769902aef83820d82963430d4f35cbd9dd01c37688866e293181e2d4212928c5bca58c9cccb311ad5d9c8b63b3e66f0104d0091b4521b5d73bd078f34e7f452b7e9979c4a6c9f42555e13a6fbfa1bff2208eda87f4ef88557298e3235710b7655093938f78fb40b13b74c1a0f35d575f38533044b0b283483778701bc88c8c9e71c58e58c3cb7e823fdf911d1eb720797e80443d93b364b3b1576ff606d7f911f76d303d0a48bd7d21adabd8d96ca61ced2b9581c5140f380fc13216245f939a9d0c53ae51f8c0bfe0909fc5ca8376f6ca6c51c4b5c6edf504dfb4eb4c7643c824f8d1da52a0865b7dfb2b9e7d0f147289590a29662ea7be7cc2fbc8777af07f57b64df2c4021002190ebeefdc1d24df9f3dfd42433e6d6b694740c9bd39cfa3a1fa7802cbe53a3cd58fd6e92f35753e8bd64db253aa2e3266177b27513ef1941fe0a4ae00c8e4806e6335972fe1991fa98ef2d80d777ad06ab96dac3bddac3cabdc72e4590de11bd37464bc13769b20023e2ef0b41b1348fdb91b2f57a1a290011a5d2693154c344e66c0cd56a47007154a3e7bfaad32866b100e5de98d9f56f3f334f684fefd30eb87419a3b6c3f460ec0f7a0886f9b9307d33fbbd6edb58f0fa938521634192772ae11dca503c5a7580e6d5ddc571940e94c272222213f8fc16d73e6aa7c598f0b5972b9d71247f94dc3551b5acf020656ddff2d2996886972d2389db940ea0c99f3e4964f057afcf8f4235c88d661b160d9cf69befe601cc783ab61fc987b78486fda8ab40ca5ec875465fb499972a9939392e9b6892e60c5bb3d2a4d2d9d9d130505ffbe5f4f8d977b5e59d5d020e3636f95f054194410b9ac3cea112d50a334adc6bce106b78a3e6f53fa6ac836139db64986e53c3c57c68edbfaa4c6c870e5891ccf16c7a3a7600b36a24748ed8804c6590e4d9ccfeea08e0ee445eed28867a57fcdffa880bfe5ce7b28e60d546fc9ceaa99aaf2d18fd9a250709bc920d607c97433192e4dede33fede905997d51a0e2cad96832a1366ce66730285bda59207a6a45d9439bbe0f06aa06990f2f0be67b4f7891d0233f667d016063184d24b402b6d89acfb375950853fdb2c878f9cecb0909f5e2a017094ca3755448964241009f9aed35f42a8819476127e98e7f58fd5b2700f7d5cae5582eb79bcff4f0a5be310ff9cafcb7b9cfe4a459f5ec1a600fce7c79afdfa744e46e225be6d33af1215f710e78f9e44db7ee80287e98b9eb757784f6b0a95885b6711fe0a4040ca274a079bb5b7bc72d14412fa5d2f92e8860b16e0d075bc28804b9366a2cc95beb3a5e89efe6bc797c92671b5cc0bf3c42d451baababe52b9c57b2d436c72928e42e8bbe0f4613d4ce0793058bae121e8f22f9cbd4bbbf4e08406681fe51ceccb760af217dd939b781ab6262dd5be145692fd853d279998eb244fc2f04973f1a9228158be5d01632005e1e8acfffab55f7f3be8dc64f5fc21ece5a6a32ccefeaa8dfa8af0dbb89f82676a97fcd6e897f8e6822c1bc2dc4b698fbfff2dd81789ad9cab7323947f0228d3b7389879ed64bcda4ec5ba682346e8af26d9de44302850d45a61d82f3abd79c6841f6f8bd973413c18b1d6f6e94c168f918ea18a4f6e129c6ff2b909c9d31aceab1bab8534e989f345e5602eabc40826b3f8f5d42700d348d5f6fcd5d95f33ee65e8f078b0f2ccb812ab2a334f77525b97d7849ac63f3ea099133c16236239aef521c9c6cdac6de2db471fa4c9dda62aa0237cc541ef8a7acf10f92786320593ee2aec9ebdad393116efdbd4dc8da458f8fa750afe349ebe9fdd7fc52387e5d2e6de23c580709e93cc2c07db760f0d450ceb954efd5b31f6b26d7bc143c42020cb75f03b01d90cd73b911e1aef2f6de8ea6d1daa7c7a9faf9adfc0557ebd4bc420199020c8c5f15284348025d8656a08f9bd7a1d5c28a4e847d862a59f7c976deef20665d3dd051164f9b00220bb4243fde963e8effd934b25b785264991ddab05a3fd3a6244ede84edff236666828adaa24c8aad43f356d1435821ffa17510670f9985495cd01d0209d91ead04d9d8ac09ba75dac5014d2af2382b9c18442c1339a6f6e2664f68618d88e46bbbbbd90b0e32c1a1797d3b7ea76fcc7513cbeea3d9a70ac582a758581aff17ee3aec2513754dda9347c60df19a5ee379c6456dacabec6710ec261e3ca4a883e17dd4d60f02a3aa6681eb3774fad206908b2ff768555968670e65d61837fb937b624482688db5b1d27cd4f07d9436ea1b6673a140f0832cbced31d9d34c80759ee69e19b872063041261e872bb42819189086b5be196ad64c2ab97e0c1143d58a1b1698d14821ec5648e6b0f9c65c57891a322acdbeab04c70e8e42577418a5171a3118daa237c04c41fd1995b627471488f4bdfe6329ea61f91197432ceada556d2c677d05f4dd87cf6915c31f8cccc984a14219a301770d0fd9c2d84762a6c05e813e44fe524aedc38f15678d1e24819c68a58ac6c7860f3919b199d5aa5989b596372e3336ea7ad2b634b8c7e85cace279d383a27cd9eabf124737a43e93dbefecfeea25f598cb03d62faf70650bb90418c4282c9f10852d5f19ebe5f41ea46aeed9fa9f21ae875fb511c828ca73f79bbc83651657a18ca510e65f7a5284b3f5ab0330e841321005d81ad6ab48d2ae1d43cc869baf5e374b0f5a4aeb31df7a0864d783786e5aacff4a25a5e4ce5712cc1e224f314cd209e61559690aa70b4980f9c0d09e9952cc710987f054796f91ecd6731a73a5444dab56255cdeb985ce6b298358d505ffacec489515ca5743d11fe40a579e6b511a582080645f20aed87ea9e020afe19077e7448c1e519ac63fdd39319884d2f96e3ca2140367b0848a03264247d75175c90290eaf5f1f6a9fbfec5fd46c7b880464bf0b93e91e6956086ba25dc3d18579fec0d3d3a6fcfdaac1f1b0038901cd7fe1a6b37bc3854d1c774de23d35bed40890268dec05bb26a316f5992b3a1aae7302eb70d2bc740b9aee3c0d0f8b2f1eae852b30281be5ecc4bf86258ae1c4f511f362315be7f2e2a5083f452cf294515df238284541cf1c26ba900cd2ddde0d56811d5625ca0774aba564e86b005e31e4fded692eea0f5c371bc2139b154cb5540fd4addd470c918552f058fe620a4e66a6b3381da84f7d1155520e79dc3ac512a666a55a7589fe15fe7b7b553798ac19a01081947c1b6aac80aa8769fcbb3a99f06299b0036f6b1e170f613d4d0451e3a6b5538cb2baec50c7ec024a671c1b26eda9ad317dfcb4c16286643023ba43f4fb061b3d9ca5eb01a02c8d3c8ddb5256678aee5859c168f392d5e5ffe8adb099b8e30d2c5da5cd56e2f1a69e99ae1fd7aa2b301b36ab53b1fc7a688c5e98c24b9e7636fd51323ec9b27b64472758cdcaafb9aeaa6bf5139bb37f74d7da4b51b54f565d385248be82f68481d7f6e39ca423f3c6d69493a952c5982fa6c4f8b68341e229d8b26146ee677dab49d07a76fc45fc4360c4124a8b81dbf5222f287dc5a181721881d43783698fb8b2a957fdc327ac67d6d0b6472d97a2ca3600b1d5951748b103975b0b1ad7d0a07e69f4b94a8af5b7224efccff2ac2cb7915381e7f1aa88e19ef7aa5879eb7e41087791492c99191b21784b07c30360219faab706e9eb76fb09d6e229d6bfb33bee26e8dbf987031c612f978372ec3e2e882aa6e2d0daa04cc371f63566d725ef6e4d08349463da3333a765ee7d8957262403b0fabff0a8ca9f2aa13b13ae5c5ed507d6ad270a9a1a101bba98472554d93828acd2bc8b738d45a769afd59d7382fde9a7bb436c02d220bd9f5535c0d8c1b786cafc2ccaa1dfcc91cb36c0586eb359c1636bc96ec2b4e65cbdfc352a647d2678ef290c1776146f46a0d70a01b756e6f7244a6137e2ed5a1b64794fc2aebcab56faa5f00b4fe1b995fcdcf1bda475a8141e0866a27d7e8b1b1c06b08fc03ba0ccabe9a737e42491219b23dbc4bfb7ccde18d5e7c65856289b992fbb7a347ca302c607ffdfc126b370e55c6d2511d9fdca7fd9bd4090c17083d4f828422b186386c3027c1a18a7987c9a34141d73982b336530d33364605022dd144c6638532c729eebdb59c766e5ee83b6b6599ba19d301ed7e859adea388bef62ad9a129c828f4bdb983d15d7a6b5f6cc3863b28157137b034a3769dbe717106d32ab73736b9b9a316436793f2fc68af6382777776b65a69296580abd1667e58d334ac0eb01f283bf0a4f95c016288b87aea09ebb948f36a9c8b5b61080545a3c8a89768f312248d999b7852b3f92d9f77fc44476a39ee39ec9e3c226864d4f5fa299ed5b4a90ca915a48dc5620fc51fa6e2e2b0a1c2b33982fa38b44e8a36c16b5a7b9e1e6f54bde87794870d80cd32c893b32e7160af0992fac37980769b802f41fef57eaafa014f0f6019458db9effdff8f2998268301d8d61c13ae6853c8cd030d504fbad1b66eb5c14f357fa8b570fcab740dacdcbbb84e464e8df30f656ca168b2b5c544708c35f54a7c12ab5b62250c600b36b5b45529b5987073e4969a866923aac0df64bddfa843d4ded5c7734589ae1b073d03e954e69acd685b4f87f9f5d9b7b1c6056934f2299e7c7a2f93b8f99a5f2d89fbac9a459b5dbc0b0c2bcf379c6d44151e3254c430bc7e9f42fda0e0c6468e8dd9c459c99a5d8def80fb848960c0d7e9b10696bc39eb851840fa8114d471cbdfc94001d0dc2a2dee88714c2ab5172fb543fbfa5c7ea8b998a76286d0e90d90b3fad066a56929c4c8612ef27f7ee3e10a0e0947f8df13df446b9c0a895876bf8a806c76e648caf64d25f8fa034a3662e51e7456196625c81a908418ff891d30483033d43b24d9ef11a36c134476a4390c5cb9b461b1859c49d637bdbf078e5dc3e04496410c53ba622de084d793987866dd75f7b42e1f391626d872c0ebd7e113ec98f325ad4502b01a8ed7cbbc7544f6fbb886cb55f9b6a3c6b521b30eadb99f448b041395b15d73a40834e1c1c254ea437f7ef7bf07bd29cf9366f84d0da5f449c1a9f182a12d84726db4d716800031a41c2bedbb97c53c530373fbff161b41121686428ea06addeb74a68fc4f49a06cf6d3a5ed13fb2e569737a38e4fe0b9a51cf575c6483ee5d614ff9efc4fc321e4c9649b8586356633f5e733aeab7d21bf6ad45696143e7d43f943adf3d0283689f25fa3b48579016f308daaba40cea9b6719ad0b67f15c8985eb00b71ef872ed30a7c75b49a4a621da371f42b6d654429f567d2ee228211d781736b23db1885e12efa5b087990da9602d6fae6fb91c793fb4920a62967202e32ae5c20fa6a89782a25a435b2cedb72017394bd9685200ae4afed45848091c0f681dd368d4f2292c7a804f8fa85db8d5ca1595edf87808406d34166732eb54c355fc89a30eec0ab2286aecc66177f4f8b8f662f21ebd031bf903c6ba24f215c34cf84cb3b1dc21ab4708b0e10b1a9970a46e40eff27d96b36ab2d5bc8e4bbf1039ab17a5281329cda6948718e222305a012fc036528a0be2a65fe416e553d65fc4e7d3fac2a084218d697f"}, 0x1010, 0x1}, 0x0) [ 81.768191] binder: 9489:9498 unknown command 592913197 [ 81.776590] binder: 9489:9498 ioctl c0306201 20012000 returned -22 [ 81.783883] binder: 9489:9498 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 81.800542] FAULT_FLAG_ALLOW_RETRY missing 30 [ 81.805230] CPU: 0 PID: 9499 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 81.812514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 81.821882] Call Trace: [ 81.823672] binder: BINDER_SET_CONTEXT_MGR already set [ 81.824481] dump_stack+0x194/0x24d [ 81.824503] ? arch_local_irq_restore+0x53/0x53 [ 81.824524] ? __lock_is_held+0xb6/0x140 [ 81.824536] ? handle_userfault+0xb97/0x2490 [ 81.824554] handle_userfault+0xbd9/0x2490 [ 81.850815] ? handle_userfault+0x1864/0x2490 [ 81.855317] ? userfaultfd_ioctl+0x4520/0x4520 [ 81.859891] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 81.865092] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 81.870622] ? print_irqtrace_events+0x270/0x270 [ 81.875371] ? print_irqtrace_events+0x270/0x270 [ 81.880212] ? update_load_avg+0x249/0x2d80 [ 81.884525] ? trace_hardirqs_off+0x10/0x10 [ 81.888837] ? resched_curr+0x13e/0x1a0 [ 81.892806] ? perf_trace_lock_acquire+0xe3/0x980 [ 81.897641] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 81.903176] ? perf_trace_lock+0x900/0x900 [ 81.907396] ? __lock_acquire+0x664/0x3e00 [ 81.911619] ? __lock_acquire+0x664/0x3e00 [ 81.915844] ? trace_hardirqs_off+0x10/0x10 [ 81.920163] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 81.925353] ? find_held_lock+0x35/0x1d0 [ 81.929412] ? __handle_mm_fault+0x2ded/0x38c0 [ 81.934589] ? lock_downgrade+0x980/0x980 [ 81.938728] ? lock_release+0xa40/0xa40 [ 81.942686] ? perf_trace_lock_acquire+0xe3/0x980 [ 81.947521] ? perf_trace_lock_acquire+0xe3/0x980 [ 81.952351] ? do_raw_spin_trylock+0x190/0x190 [ 81.956925] ? perf_trace_lock+0x900/0x900 [ 81.961159] __handle_mm_fault+0x2dfa/0x38c0 [ 81.965556] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 81.970742] ? __pmd_alloc+0x4e0/0x4e0 [ 81.974618] ? trace_hardirqs_off+0x10/0x10 [ 81.978924] ? __lock_is_held+0xb6/0x140 [ 81.982967] ? nohz_balance_exit_idle.part.95+0x70/0x70 [ 81.988327] ? find_held_lock+0x35/0x1d0 [ 81.992389] ? handle_mm_fault+0x35b/0xb10 [ 81.996611] ? lock_downgrade+0x980/0x980 [ 82.000766] ? handle_mm_fault+0x2f8/0xb10 [ 82.004998] handle_mm_fault+0x44a/0xb10 [ 82.009057] ? __handle_mm_fault+0x38c0/0x38c0 [ 82.013627] ? vmacache_find+0x5f/0x280 [ 82.017593] ? find_vma+0x30/0x150 [ 82.021124] __do_page_fault+0x5c9/0xc90 [ 82.025184] ? mm_fault_error+0x2c0/0x2c0 [ 82.029322] ? lock_release+0xa40/0xa40 [ 82.034122] ? trace_hardirqs_off+0x10/0x10 [ 82.038444] do_page_fault+0xee/0x730 [ 82.042233] ? __do_page_fault+0xc90/0xc90 [ 82.046452] ? avc_has_perm+0x43e/0x680 [ 82.050424] ? find_held_lock+0x35/0x1d0 [ 82.054485] ? __might_fault+0x110/0x1d0 [ 82.058537] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 82.063380] page_fault+0x25/0x50 [ 82.066818] RIP: 0010:__get_user_4+0x21/0x30 [ 82.071207] RSP: 0018:ffff8801b10afbe8 EFLAGS: 00010206 [ 82.076562] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 82.083818] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 82.091075] RBP: ffff8801b10afc88 R08: 0000000000000000 R09: 1ffff10036215f5a [ 82.098332] R10: ffff8801b10afa98 R11: 0000000000000000 R12: 0000000020012000 [ 82.105587] R13: 1ffff10036215f80 R14: dffffc0000000000 R15: ffff8801c706ad00 [ 82.112862] ? __might_fault+0x188/0x1d0 [ 82.116922] ? udp_lib_getsockopt+0x8e/0x440 [ 82.121325] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 82.125817] ? __schedule+0x1ec0/0x1ec0 [ 82.129785] udp_getsockopt+0x71/0x80 [ 82.133594] sock_common_getsockopt+0x95/0xd0 [ 82.138088] SyS_getsockopt+0x178/0x340 [ 82.142058] ? SyS_setsockopt+0x360/0x360 [ 82.146201] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 82.151730] ? do_syscall_64+0xb7/0x940 [ 82.155697] ? SyS_setsockopt+0x360/0x360 [ 82.159838] do_syscall_64+0x281/0x940 [ 82.163712] ? __do_page_fault+0xc90/0xc90 [ 82.167937] ? finish_task_switch+0x1c1/0x7e0 [ 82.172421] ? syscall_return_slowpath+0x550/0x550 [ 82.177351] ? syscall_return_slowpath+0x2ac/0x550 [ 82.182271] ? prepare_exit_to_usermode+0x350/0x350 [ 82.187279] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 82.192641] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 82.197482] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 82.202660] RIP: 0033:0x454239 [ 82.205836] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 82.213534] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 82.220792] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 82.228053] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 82.235317] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 82.242582] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 82.259771] binder: 9489:9506 ioctl 40046207 0 returned -16 2018/03/21 23:55:29 executing program 7: r0 = semget$private(0x0, 0x20000000104, 0x0) semget$private(0x0, 0x0, 0x80) semtimedop(r0, &(0x7f0000000000)=[{0x0, 0x8091}, {}], 0x2, &(0x7f0000034000)={0x77359400}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x280, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000080)) semop(r0, &(0x7f0000035000)=[{0x0, 0x81}, {0x0, 0x0, 0x1800}], 0x2) 2018/03/21 23:55:29 executing program 0: perf_event_open(&(0x7f000001d000)={0x200000002, 0x78, 0xc568, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x200, 0x20003) write$vnet(r0, &(0x7f0000000200)={0x1, {&(0x7f0000000080)=""/203, 0xcb, &(0x7f0000000180)=""/94, 0x2, 0x7}}, 0x68) 2018/03/21 23:55:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000536ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x12000, &(0x7f0000000080), 0x2, r2, 0xa}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000500)={0x0, &(0x7f000002d000), 0x2, r2, 0xb}) 2018/03/21 23:55:29 executing program 6: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000540)={0x0}, &(0x7f0000000580)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000440)="6e65000000136d7036004270cddeef1727f869caaadaa698d7a49ac42fe8b7d1af301e989f282120de9afb1b6760ee3b8a0457fd5c1ed5d0e6da9158c0208604db493f2940fb9eca435caf25b98b0db1848b450fd3343f30fb8a887d60be734193a49e078b8f27a0c06f8a2a0700c88b6a940f878c602af03cb35fe1a94cf03049a718e0df8b2b7473a9ee756cff5ca03f7c312615ab390250c3a4abb6491a17a983f25cfc59ebb7453cd5a0fedbe4e3187be2d3c2f19942c491c54266d3ee260d66") perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/202, 0xca}], 0x1, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) finit_module(r2, &(0x7f0000000240)='/\x00', 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x0) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000040)={0x4, 0x8, 0x5b1, 0x2, 0x7ff, 0x2000000000000000}) r4 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="e762044000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000002c0)=0x14) 2018/03/21 23:55:29 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x1000)=nil, 0x1000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:29 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000186fe4)={0xa, 0x4e20, 0x2, @empty, 0xfffffffffffffffe}, 0xfffffffffffffec2) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x100, 0x600480) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x100000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0x40}, &(0x7f0000000180)=0x8) r3 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x75, &(0x7f0000bb9000)={0x0, 0x7}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000280)={0x2}) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000002c0)={r2, 0xffffffff}, &(0x7f0000000300)=0x8) sendto$inet6(r3, &(0x7f0000ff8fff)="e1", 0x1, 0x0, &(0x7f000069ffe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00003f7000)={0x0, 0x6}, 0x8) write$evdev(r3, &(0x7f0000000100)=[{}], 0x18) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000000)={'NETMAP\x00'}, &(0x7f0000000240)=0x1e) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f00000001c0)=0x100, 0x102) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000200), 0x4) 2018/03/21 23:55:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="e44399a479adac21a7b545ce18be8e84", 0x10) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}}, &(0x7f00000001c0)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r2, 0x4}, 0x8) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x80000001, 0x4) tkill(r1, 0x1000000000016) ioctl$sock_bt(r0, 0x8907, &(0x7f0000000080)="071b644930b600790c73c46a553819ac733338e0ab7ef123cec9cf848dc1c548a84bd78db376ebc89c5bc4b4") getsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000240), &(0x7f0000000280)=0x4) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:29 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140)={0x1d}, 0x7) sendmsg$can_raw(r0, &(0x7f0000001fc8)={&(0x7f000000a000)={0x1d}, 0xffd1, &(0x7f0000000ff0)={&(0x7f000000a000)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5f700000000000000004e2f9663a918fa1efd9b0b"}, 0xfeb8}, 0x1}, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x6, 0x14000) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x55, 0x5, 0x7fff}, &(0x7f0000000080)=0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0)={r2, 0x4, 0x800}, 0x8) [ 82.276949] binder: 9489:9506 unknown command 592913197 [ 82.282664] binder: 9489:9506 ioctl c0306201 20012000 returned -22 2018/03/21 23:55:29 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x3ff, 0x40, 0x1, 0x4, 0x5d23, 0x5, 0xffffffffffff7fff, 0x9, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000140)={r2, 0xda, "870e0f918d2b4cf0d7d9aa549a075cd663993a7feaa231a804b4be8792c5d63cca2f019fb6ec69df842a9d97e0ff7d47fb1ff37ea7276514c497a5978fc609c31641e57dc90cbb139367a98fe65b349cbaae1a4423a813d0485f36b0fe7f30b344c40c6089b306543037bb57523f7455af55ecadb8619ac769cecfec129a6039840420b1166a468151dea6ec293b77869f2cf0cea7cde12a5575b31fc2793698e590b847edff09ff16879c5bf3d0b2a8749ea83e88dcaf370f38132da7c4b76b6010da0f0816ed6d3575379e37af73d69906dca64586b8e2b7b1"}, &(0x7f0000000240)=0xe2) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f00000003c0)=0x10, 0x4) bind$nfc_llcp(r1, &(0x7f0000000040)={0x27, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, "b34aa54a16553be510a67ea856b71384afbd0b0fb772523d85f84a03573fe2be99148e5190223e8f3e6bfa9471d2ff88382817f3b27987394c6b31aa3015aa", 0x18}, 0x60) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000b0a0000000000000000000000030006e3ff01000000000000000002000100000100000000000000030005002100000002004e20e089e201000000000000000000000000000000000000000000a39dbca644626f97cc394d0abf6e3d3dd9a07ebbb039cd47e411c30f43aa7f77f1e3a350261d6526194431ca371280"], 0x50}, 0x1}, 0x0) bind$bt_l2cap(r1, &(0x7f0000000280)={0x1f, 0x3, {0x8, 0x7, 0x8001, 0x7, 0x7fff, 0x2}, 0x4, 0xfffffffffffffff9}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000340)={r2, 0x7c, &(0x7f00000002c0)=[@in={0x2, 0x4e22, @multicast1=0xe0000001}, @in={0x2, 0x4e20}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x19}}, @in={0x2, 0x4e21, @rand_addr=0x6}, @in6={0xa, 0x4e22, 0x8, @remote={0xfe, 0x80, [], 0xbb}, 0x1}, @in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e21, @loopback=0x7f000001}]}, &(0x7f0000000380)=0x10) 2018/03/21 23:55:29 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000040)=0x101) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:29 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) munlockall() r1 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x7, 0x40480) getsockname$inet6(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000100)=0x1c) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f000000d379)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000018000100000000000000000000000000"], 0x14}, 0x1}, 0x0) [ 82.331677] binder: 9517:9523 unknown command 1074029287 [ 82.363935] binder: 9517:9535 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 82.373070] binder: 9517:9523 ioctl c0306201 20012000 returned -22 [ 82.403760] FAULT_FLAG_ALLOW_RETRY missing 30 [ 82.408471] CPU: 1 PID: 9538 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 82.413680] binder: BINDER_SET_CONTEXT_MGR already set [ 82.415784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 82.415789] Call Trace: [ 82.415834] dump_stack+0x194/0x24d [ 82.415855] ? arch_local_irq_restore+0x53/0x53 [ 82.415871] ? __lock_is_held+0xb6/0x140 [ 82.425613] binder: 9517:9535 unknown command 1074029287 [ 82.430512] ? handle_userfault+0xb97/0x2490 [ 82.430535] handle_userfault+0xbd9/0x2490 [ 82.430545] ? handle_userfault+0x1864/0x2490 [ 82.430573] ? userfaultfd_ioctl+0x4520/0x4520 [ 82.433316] binder: 9517:9543 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 82.436753] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 82.436782] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 82.436798] ? print_irqtrace_events+0x270/0x270 [ 82.436820] ? print_irqtrace_events+0x270/0x270 [ 82.436829] ? update_load_avg+0x249/0x2d80 [ 82.436839] ? trace_hardirqs_off+0x10/0x10 [ 82.436849] ? resched_curr+0x13e/0x1a0 [ 82.436864] ? perf_trace_lock+0xd6/0x900 [ 82.444528] binder: 9517:9535 ioctl c0306201 20012000 returned -22 [ 82.445584] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 82.445607] ? trace_event_raw_event_lock+0x340/0x340 [ 82.445622] ? __lock_acquire+0x664/0x3e00 [ 82.451246] binder: 9517:9523 ioctl 40046207 0 returned -16 [ 82.455476] ? __lock_acquire+0x664/0x3e00 [ 82.455491] ? trace_hardirqs_off+0x10/0x10 [ 82.455520] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 82.455549] ? find_held_lock+0x35/0x1d0 [ 82.455574] ? __handle_mm_fault+0x2ded/0x38c0 [ 82.562440] ? lock_downgrade+0x980/0x980 [ 82.566601] ? lock_release+0xa40/0xa40 [ 82.570568] ? __lock_acquire+0x664/0x3e00 [ 82.574808] ? do_raw_spin_trylock+0x190/0x190 [ 82.579417] __handle_mm_fault+0x2dfa/0x38c0 [ 82.583819] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 82.589014] ? __pmd_alloc+0x4e0/0x4e0 [ 82.592895] ? trace_hardirqs_off+0x10/0x10 [ 82.597214] ? trace_event_raw_event_lock+0x340/0x340 [ 82.602408] ? find_held_lock+0x35/0x1d0 [ 82.606479] ? handle_mm_fault+0x35b/0xb10 [ 82.610713] ? lock_downgrade+0x980/0x980 [ 82.614895] ? handle_mm_fault+0x2f8/0xb10 [ 82.619135] handle_mm_fault+0x44a/0xb10 [ 82.623200] ? __handle_mm_fault+0x38c0/0x38c0 [ 82.627771] ? vmacache_find+0x5f/0x280 [ 82.631750] ? find_vma+0x30/0x150 [ 82.635289] __do_page_fault+0x5c9/0xc90 [ 82.639365] ? mm_fault_error+0x2c0/0x2c0 [ 82.643510] ? lock_release+0xa40/0xa40 [ 82.647483] ? trace_hardirqs_off+0x10/0x10 [ 82.651816] do_page_fault+0xee/0x730 [ 82.655619] ? __do_page_fault+0xc90/0xc90 [ 82.659849] ? avc_has_perm+0x43e/0x680 [ 82.663832] ? find_held_lock+0x35/0x1d0 [ 82.667907] ? __might_fault+0x110/0x1d0 [ 82.671973] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 82.676833] page_fault+0x25/0x50 [ 82.680277] RIP: 0010:__get_user_4+0x21/0x30 [ 82.684672] RSP: 0018:ffff8801d8be7be8 EFLAGS: 00010206 [ 82.690031] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 82.697293] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 82.704551] RBP: ffff8801d8be7c88 R08: ffff8801cf0dc7c8 R09: 1ffff1003b17cf5a [ 82.711809] R10: ffff8801d8be7a98 R11: 0000000000000000 R12: 0000000020012000 [ 82.719071] R13: 1ffff1003b17cf80 R14: dffffc0000000000 R15: ffff8801d82e92c0 [ 82.726358] ? __might_fault+0x188/0x1d0 [ 82.730427] ? udp_lib_getsockopt+0x8e/0x440 [ 82.734835] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 82.739333] ? __schedule+0x1ec0/0x1ec0 [ 82.743310] udp_getsockopt+0x71/0x80 [ 82.747110] sock_common_getsockopt+0x95/0xd0 [ 82.751605] SyS_getsockopt+0x178/0x340 [ 82.755579] ? SyS_setsockopt+0x360/0x360 [ 82.759729] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 82.765263] ? do_syscall_64+0xb7/0x940 [ 82.769234] ? SyS_setsockopt+0x360/0x360 [ 82.773376] do_syscall_64+0x281/0x940 [ 82.777248] ? __do_page_fault+0xc90/0xc90 [ 82.781468] ? _raw_spin_unlock_irq+0x27/0x70 [ 82.785953] ? finish_task_switch+0x1c1/0x7e0 [ 82.790442] ? syscall_return_slowpath+0x550/0x550 [ 82.795365] ? syscall_return_slowpath+0x2ac/0x550 [ 82.800295] ? prepare_exit_to_usermode+0x350/0x350 2018/03/21 23:55:29 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000300)={r1, &(0x7f0000000200)=""/199}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0xffffffffffffff9c, 0x1, &(0x7f0000000080)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={r3, 0x1, 0x18}, 0xc) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, &(0x7f0000000140)=""/58) prctl$getreaper(0x19, &(0x7f0000000340)) 2018/03/21 23:55:29 executing program 3: io_setup(0xba, &(0x7f0000000000)) r0 = socket(0x2, 0x803, 0x1) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78, 0x1e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget(0xffffffffffffffff, 0x1000, 0xa26, &(0x7f0000ffc000/0x1000)=nil) eventfd2(0x7f, 0x80000) setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x100, 0x4) msgget$private(0x0, 0x2c4) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000140)) msgctl$IPC_RMID(0x0, 0x0) 2018/03/21 23:55:29 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x40, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/106) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) [ 82.805307] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 82.810677] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 82.815526] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 82.820702] RIP: 0033:0x454239 [ 82.823879] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 82.831577] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 82.838839] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 82.846098] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 82.853356] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 82.860613] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 82.876456] binder: 9553:9557 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 82.900052] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:29 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) munlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x8000, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x0}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000100)={r1, 0x2}) 2018/03/21 23:55:29 executing program 0: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 'erspan0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f00000043c0)=[{{&(0x7f0000001d40)=@can={0x1d}, 0x80, &(0x7f0000002380), 0x0, &(0x7f0000002440), 0x0, 0x4000000}}, {{&(0x7f0000002a00)=@can={0x1d}, 0x80, &(0x7f0000003e00), 0x0, &(0x7f0000003e80)}, 0x7}], 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$setopts(0x4200, r1, 0x6, 0x0) 2018/03/21 23:55:29 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000040)={0x0, 0x9, 0x10000, {0x77359400}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)}) 2018/03/21 23:55:29 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:29 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x6, 0x80) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000080)) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:29 executing program 3: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00003d4ff6)='/dev/cuse\x00', 0x2002, 0x0) write$fuse(r0, &(0x7f0000e0bfe4)={0x1c, 0x5, 0x0, @fuse_notify_inval_entry_out}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f0000000000)=@rc={0x1f, {0x9, 0x80, 0x4, 0x100000000, 0x0, 0x800}, 0x184c}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000080)="e14870724bb534b108b08605032c87f3430ec7c7bd1f126e18", 0x19}, {&(0x7f00000000c0)="5a8dc0f2777896b122822c74f6328e3a93db1577c0ffb8592b36936562873b0bc6375d6352acd0dd9a552d7627e6520c69df203428e37dc6be5a36f6846f3dbd1d1f5bf5b8cf3a94d3cb9f4c130819cc4a20cdf1707c538b15648209acc8e27775f907dcf6086beae786b4aea3d01f345011c79f76748b21d3d23903e141f52f3f2cc86bf95f3349eaab3e007fbd6051512d9a2a585dc90845f385ad737d363f14e873b2e6aa84c3e2c0fce1e33abfb7ffdf6467d6b023f85a88e6f52bb3ef51d03b60cedb774329464418782d70a6946bfffe9f4556d05b81134e66039abc9ec4aeb03ac3e81702e93e47334db4b76a53ebe89e995e357b6c150e65f031f35cd91d135bbd79308b9f3c8079a4f0927d9aacc28cd4f759d1db002717034c6952dc0ac81a3e143303cf4224b9900aa7a8406ad8227586822e2af00d03aa3a0b863618969e3064a62e792273fb0516ec78383cf0566c323eb1579ac974bd00e3f63d4252aa83b997204dd7b9dac471ad99499e001fd1250d77bef86fac093f0e850c75ceee9bed60434b65702da29f0f5c07640a1866f2ed35a5af9e55f9ff6af143619e461923356438d7433027c05116f20b6c5fa652028c04027cd9bbb3a0ecc61f48658b41b87c6d252ca9ac0c6462274381513545de089d22dcff7277382dabf3ecf55aa0a7e49cbf6c4079a268d3a5bdcf8e2cf5e4ef0cf7b7007b46cb10d683dd19f0b42228d8e2b81644e6c5364c8926dd0cadc48e51a9262c3d45f5689a60d288cacb68cf7ed370b66425d47342513c2a0de010c0c40b88250740012bf298d9f203bef6f479e024bf0b5ac0108a629f89e23e2c6deb9834e113c3af4705f92e67cf02e46133840ec0a64c3a76d152ba13a93c13c257e03d1c61007c73d0a70253cca102a8cceb6e97925c4b77642da9f7d218b31f9d815cf49ce05c2d7b625ac3e7a187c10044fcb25d12ccb51211530ec26caf4bc9bbe0f0f80a38c60ff9e86368113ce913b8b01faadbe8f1fe8dbebeda16638c4ea6280eeba13ca38ef0ae7bb1688ec9b4dc235cbdd3c9895a461e455224a9edd7226ce0beb0e27cbc186fb539b0b9c7b009d89b3a3bfecaef3aebb3ca14ad7db1bed8e4c933379571ad5702544fd70bd26921549de3d9606899ff18df9a26eae2cd3a745020c39921f28bff1325e3fafe0c3fd5dabeab5417da37725038396309884515f0feb79a2e9dbe5d0212c9cbaa6c11d9d1a6414af4c885025e29d4c0615a9b120c109e17809a6df927dc3fe3057b99cd2609a8bddda9c977d94ecf2d98daef19d19de3818ffacbd95b78472d41107c620b895895696bb9c6f62652de5bcab8b9b2400809f764bbd7c85a8dfc238396a561a6a382641019b9887589fae18264ba5eb860f466cd7c5aac3b59aef2bed3cbaefafd43089908156d9f9e337852311c5b27c50debf98c37688889e2c51b5294a10fc6d488297816083b3cbdc92ce3934edb27c4ea38a076f582911aa3dd6784f02d955ed9f3fe8d473257752eaf6994ccd5118554558e59b9877ec3a94f0db416b9f46957f181b7f5f714f0f1b60cba1ca5cf82d8f5f4282773611146c29e89fbb6350423547aca0bc7a11b75d0984f1ec70fdcaac6514fcdc7f85394d110ff37e183e069bcc57ad9389d04ee8da1a10e28359a56b79ccd36d043480dbd99fa7492ad6ee32f84ae1887e532c575f29026bad05d8e97d288c9da878562698a5f06ecb7da5cb2786513db1ce4dc609ff8a5de1974296664e55a8b1d55e65019f717aa2fc42110c44e73605af72f4eb370ab0a2878a6625df0b6f5609e7875048f2e27dcd71e3e074fa417d4539ea60b4b9fdad5d6ce718ce028442450757a4c8d6e37cc2652a9f67b8d580fe0c1cbec52262cd1234e876eb0f6d5fc0c51510b2667955e6ccb739ae17e627456e51630cb64f836b081c6a6ba68aebec4f9ca5247f51a70bebdc3a9be3dd4f013d01ea668bc334ca6b27b57cf1ae2d3738596243533f8287776aade30eaf4b2db20ce456120fa7ba5d3f4bbd89fbc329c102d637b60ba7d4c758d29ed066f334dd053d28af92b2ddc0ca28c87c1e1538f9fd74ec3376704c525149931b29e9ae8e0fd7b976fa4043775c9aba04152be2260762ec6014d9bf71ef3de3d342ab8b630d669eb94fb2bbfbfede91fc6ba8d9c07acb0bef904a091e46029531608d4bb69302fb7d03730d43cda15d0a93113f7d6344b6df1435c3ae7e72a1456b13f06d2da35ab46cf2c33f3ce03a3b7e707019f95979a4d2370dabd579cdc4f9408755e826e664e2ca24a6558ab036a07443a7138abd2da2bcdbfd9faddaff5a56b88f1dc5ea1231ddf5af65e3a9e41ceef93f037a397965292259ab1089e0271570122ee2af10b457d7dcc050497b768b75b2b2e835b1a1463d29654acb0d0b4ac24531de880212f3d554269b5516067817a0f6fddce402e305030876c974f62fdc86037276d8b4644af8b766367f8aaf12fbaf1fdb279f3856df43a4385d8df56adb001173def37e8f1aebac0150e7772c673c9d0dd7e42690fee449b02a7aced5311f93dd679ca612e29b6e9f32d9d8e3724f39035a387128c87b43f28abc616f057762df04b0bb785a14bcd859f74072657ecd14c5576934e43b71d760312de374f530543a4769c173c1a4753d2af3381ea63129c8e2a04c0886ca74f1b3e5ae3e07d844aadb0029b3065db05f41af5e1023d6acdd8f0433103eddac7f750afb05fdc8ac9c46875e1ac0961fe74fe7ea9532e1592866ab149f067e682fa2cbf9d725cfae75451c4e5993d0f155e8e79a6eea565de9b91eefb19eb28f225517b5198b5d89a018dd5e2cb8856867922d6825f856d5b66b3bdba596aa64e5baa8612feff531eadf4985962af12e2420a7b67da137d77f76c835d7ed8a8c68441c4431a4654ca09ab1e75b17acb5ce3fb3c8c2b60bd743e7d8f8642c2e79b92c8866f34a08bffdaa8be87553354817b6ae87666853c2f3ee602d678808901af582b37fcc1d866488135533b2dd7e43091aee6e30011fe4744078077666d5d5ca66b9cb11a1ae2d4beff409a9e3c51812f3531182bea758e09eae9835a7a31b73420c8bb37e8b09c04233700079092affe524e45f777d8ec3442333849e5b1937d73dc2cc19463bf28b416a19b6b508a3f6630d61d2fd41321109ddf76ec04baca176a824d4689fb7aece45a538a69c114e56c893b4c6eec94b26f94d42658f8d124f8718a7678a0e4308abf5d015eb71206b140815b6e3210c62fae0f60e297ef2ece85c3939ea735c1c6c73429082e06bcd3b3f81495f83afc4ffc1e111abfe1c49dc453ce48bb822d1bfda62ae04683f74060325204f36015b2c299b82c60d21799777ec22b6627d7b09039959779221f9f01cd9f57a9b1902397d72f7f911de4c0e021d78bc8a8733137605a9bfbeadd8f90424fbe69e74b86f5dac6e818971f8ca7451c3580458f8b3550df1aa6be5a78b48d843e26305267ef1d7d93a48d35a1a14a3a1b4e894c7f4d7f9db760c6fe5e3f3e5e228dc3e93c8349eb868fe42246ad5a68dc8515bc4003bb7ce11eafab1aa8ec1a1f793facefd2341b81ba70c44448130510d662755f78f5d29a57767a7826861cfce2512d21f2a5e0fb8a76b0780e3a69afbff7f6606dbd24bf7110951d73eba12e2f9530dab1ef264e5aa95754898b921622cd1dc8d753a48b3d9563242231ae34fc783c8685a4f4858bcc96f540b350fff88bb97762d57cfb37dc3af2acf5f6ba97ea85568938ff19d93e653ae55698a802c827429d6234137bcdaa10209d961508572fb6f41ffcec638259122f1b422a66286fa1b9495c4252010d8612e3745b1b831b080bbe528e72d1f657398df4ccbf5b838e94c702ad24527419a2b3488260550ac3e6bbddf95ecb62b0785a2033e18d0384dbc09b6cb5c4153a7297cff6e56fff409b7ded33153f776752919cb7239d77acf662c7ca800cbe0a3cc0ebf2451995ada85ea66518cb53a639bbe9db259667cfbd5df66a3af0a686963d0f7cd0cf95d6d659c1de89897b176aba749da91b798b2e3b59e7633f15e090d6fa7eaad53db19cfeab9d5d618dd5ae99aa4f182d03fbe38702ac98927ed7769b218310bfbb6786c3b813ea66aabfb540939def59b04c8ab2412e2095111832faeb90e3ff182460af7df3f43f6a6e63eee6519835722d5c1e0042705bc3ba458220358a7bdb313a7276bc146a9a8505d40fdb82f334ac41a055ccb09270f725d8e49e7e507f1b65c34693cb0912543a7a3e112ad48641244056d9e43b5bf3f2c818891a2c13f85ea1a8b304d551bc7f8ecc503c75fb34917a9793f270b72cf4d6cfc3e7760466ca74f66b58b5ae605476dc397b9198e22d4616072c162993e598de779e0ed3eb19a8e3854e5d3654e0fe1994928d0f9891533be08e34a3230385d9eddd550b4bc04abd135828845ef496e7d1e12034b5a66f990314d8d9b45cca958ca0464ef5a1c3838c22480a8d11e04be07b071f2824aa8229247f831eaa566fc3322034623bb1019cd777ea9ba4c5110e5e00c7f077053bba8858638d9f1222e3cad4bcf8d151a38b0f0651036d968219c043f33d06b76dad984f5c477bfb8ea7c5074abde541ba2e0a16cd564dbd81e766a6931d7e9ad6c260751a33f2d19047695a8a7b61202cba5b3d4e8b0f34f27eb189cecd42bae4fbb5115b64a0f4e9e8d4587d07f2e3090a65e8c7f1b9e9a38f1e6b05992dcd221bbdcccf51139df83c8f85557f9e0b3f74d38ec6a2ed05cbbf04a292aeabb414994a6497a8ecb0f5ff0491ceaa167e865020059bf5b4a03cfd8b540202ae87153d1f1732c01ee0882cea76cedd144dd5b1ce677f137045a5ba2308150b52982ebd7cc9cfa0ca215c1cb010ddf682e6890cb39f96eed81ff419dfacab639d949964dbed587b719e44bce49bb164ee23a3991c162d122649613b10cdd0a07fd3fd3c1d8eddc89f8f1993d87bab7a01beca5714430f11870e987e017654d46f276fdac31c2f0050394e65e67ecaf4ccfb8dcb01cbe47d21d922287ddb87e79961629c151ff8930d2f697dfa8cbb0940b877f9654f976038b0cf6cdb0804bfa847afba9dd6dfedca9e8722df9d876a5c7460ed24d0210acb52af231116c77abff4e423b02e82b86b068fe5ec189bf0505368186e9c211737b901317400c55f25ad1278c0d83290cc846324738fbacd76a4f26df3ce778737fa1a03be8359fc232a5401c8f8fa64ab4ebd44c8f7f32fb4351d7d1bb31db09fe3b6efa9c0a96f49bdc6174156c29a74b20cd16eebf86bad5ba8f18d604b4d11586f25dc185158d48826b771f5cb89dcbcd601815fc27164025f2084281befa8ea6f959af8a3cf2583e8eed69862ba68f7d2ca9e35d8908670c34652adb7d3c56148ac65ae6e42f908b615236558838f44bcedfd39d359393cec72a26622652990482ac0eecac1c0ae661048c196125cc758957426c5ea006275bad16a2c2dab4c85edc872ba05053336c1633e0313db5b99187e9c91289aebaf4061feb991ec5e84406fbae6deab354e1d2aca00c20b21a1d589f107b7432fb8786188c9ec79701382907928e89a99bfb03ac21f8b253037aa891402f707639f28908e9ae869760dc1e75aa59ee4c8cf68e1b25b096094e3bb80786bc0edd00de61ddd4c773ab0af972571eda6f2c298c808bf206a2d99855a9baaf665a6a93af41ff0093bcf8276f90a976b140992c0dce954c9e510050620a677ef25b6ae909b8e6d863ad95c10b1774a9875", 0x1000}, {&(0x7f00000010c0)="d59f34ab292871091d2c4817125d659da1d22c51777fcdf080cdbacdd9532c", 0x1f}], 0x3, &(0x7f0000001140)=[{0x38, 0x1, 0x6, "a56c68cb808b057a5457d31e21f445590bc8fa35126f3d39d6006b7c67f9b16c6c"}, {0x38, 0x197, 0x1, "ecfe8316f406832a89fd88c45f5992c7c156db7fcd2ac32697222eb46dc22b3973db8d7dde"}, {0x58, 0x0, 0x1, "76948a0192f31f17e3855cfb86e4815cccebddd45449c0508ec2ebeb864f56124705eef85cfada834bf6f24ce13d0503c992c262c657bb46d7906d0049cebe506d"}, {0xf8, 0x0, 0x800, "2f8b9680475864489c43ddf4a61990faab02ec1a54b48a8cc73ff0fec61f4a270fdb8f060468c9c7f4b0e04fe639e37cc6d1f25007faece62d7f9c6fb646d1cd1162ff7ff93a81e12ffa44996fe6e68c5513c8f7db543ba3f2012c7c3e3d558c56fd321b6fd7ac64d8bd1a493b8d4f6979dc13b6123b15f3bfe48fe35881a6d5b690e78dd430deafa5161adbd56090b7a8229ee5cb4c6aa9eb8150c75fbc67766f2b2b82bfbc5709809c6d98ec84d4fd32777603d58700cb7001a3a479b11275adbbc07a6e21e010ef5b65da1ce8b993bdea23846fa84677ecd2e5527929ad9a2ce74e10a4"}, {0x18, 0x107, 0x80000000, "c6d5b3643850"}, {0x68, 0x1, 0x9, "883ce7890f20659c50c9dafd0b956a4eb60b6d889cf22658e0ecae7c2f233c908702be2b974eae9a969daae71990f18deb1065fdac8274284b10d409f063e3ae3ec842ab9c7e53f08a16a90869951a2220e926d3063bca"}], 0x240, 0x14}, 0x800) 2018/03/21 23:55:29 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_dccp_buf(r0, 0x21, 0xcc, &(0x7f0000000080)=""/4096, &(0x7f0000000000)=0x1000) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:29 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0x1, &(0x7f0000beeff0)={&(0x7f000065e000)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@multicast2=0xe0000002, @in=@rand_addr, 0x4e20, 0x0, 0x4e20, 0x0, 0x2}, {@in6=@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x0, 0x32}, @in6=@ipv4={[], [0xff, 0xff]}, {}, {}, {}, 0x0, 0x0, 0xa}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1}, 0x0) [ 82.905745] binder: 9553:9557 ioctl 40046207 0 returned -16 2018/03/21 23:55:29 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0xfffffffffffffffe, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x9, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000140)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = getpgrp(0x0) getpeername$inet(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, @broadcast}, &(0x7f00000001c0)=0x10) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f0000000040)) kcmp(r2, r2, 0x0, r0, r1) syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, &(0x7f0000000240)) 2018/03/21 23:55:29 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000006fd0)='/dev/urandom\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in6={0xa, 0x4e20, 0x1000, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e23, 0xffff, @local={0xfe, 0x80, [], 0xaa}, 0x15}]}, &(0x7f0000000100)=0x10) unlinkat(r2, &(0x7f00000001c0)='./file0/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x4, 0xb3f, 0x2, 0x6, 0x6, 0x2, 0x8, 0x6, r3}, 0xfffffffffffffff8) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) fchown(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r4, 0x80000, r2}) pwritev(r1, &(0x7f0000001000)=[{&(0x7f0000006000)='T', 0x1}], 0x1, 0x0) close(r0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0xd000, &(0x7f0000000240), 0x0, r2, 0xa}) 2018/03/21 23:55:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x0, 0x0, 0x0, 'queue0\x00'}) lseek(r0, 0x0, 0x3) r1 = memfd_create(&(0x7f000003e000)='\'', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) r3 = dup2(r2, r2) write$sndseq(r1, &(0x7f0000000300)=[{0x0, 0x0, 0x0, 0x3fd}], 0xfffffe4f) sendfile(r3, r1, &(0x7f0000000040), 0x80000000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f00000000c0)={r4, 0x10}) 2018/03/21 23:55:29 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000340), &(0x7f00000002c0)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00006a6fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40400) dup2(r0, r0) io_setup(0x10000ff, &(0x7f0000000240)=0x0) r3 = getpid() fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x2, 0x1, 0x0, 0x7, r3}) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000200)="f32364", 0x3}]) [ 82.967494] binder: 9567:9577 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 82.985519] binder: BINDER_SET_CONTEXT_MGR already set [ 83.002758] binder: 9567:9577 ioctl 40046207 0 returned -16 [ 83.021466] FAULT_FLAG_ALLOW_RETRY missing 30 [ 83.026121] CPU: 0 PID: 9578 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 83.033408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.042772] Call Trace: [ 83.045366] dump_stack+0x194/0x24d [ 83.048986] ? arch_local_irq_restore+0x53/0x53 [ 83.053647] ? __lock_is_held+0xb6/0x140 [ 83.057695] ? handle_userfault+0xb97/0x2490 [ 83.062096] handle_userfault+0xbd9/0x2490 [ 83.066318] ? handle_userfault+0x1864/0x2490 [ 83.070818] ? userfaultfd_ioctl+0x4520/0x4520 [ 83.075390] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 83.080583] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 83.086110] ? print_irqtrace_events+0x270/0x270 [ 83.090853] ? print_irqtrace_events+0x270/0x270 [ 83.095595] ? update_load_avg+0x249/0x2d80 [ 83.099902] ? trace_hardirqs_off+0x10/0x10 [ 83.104208] ? resched_curr+0x13e/0x1a0 [ 83.108171] ? perf_trace_lock_acquire+0xe3/0x980 [ 83.113000] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 83.118536] ? __lock_acquire+0x664/0x3e00 [ 83.122759] ? __lock_acquire+0x664/0x3e00 [ 83.126983] ? trace_hardirqs_off+0x10/0x10 [ 83.131306] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 83.136492] ? find_held_lock+0x35/0x1d0 [ 83.140549] ? __handle_mm_fault+0x2ded/0x38c0 [ 83.145120] ? lock_downgrade+0x980/0x980 [ 83.149259] ? lock_release+0xa40/0xa40 [ 83.153222] ? perf_trace_lock_acquire+0xe3/0x980 [ 83.158053] ? do_raw_spin_trylock+0x190/0x190 [ 83.162622] ? userfaultfd_ctx_put+0x740/0x740 [ 83.167207] __handle_mm_fault+0x2dfa/0x38c0 [ 83.171603] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 83.176792] ? __pmd_alloc+0x4e0/0x4e0 [ 83.180666] ? trace_hardirqs_off+0x10/0x10 [ 83.184971] ? __lock_is_held+0xb6/0x140 [ 83.189020] ? nohz_balance_exit_idle.part.95+0x70/0x70 [ 83.194375] ? find_held_lock+0x35/0x1d0 [ 83.198429] ? handle_mm_fault+0x35b/0xb10 [ 83.202652] ? lock_downgrade+0x980/0x980 [ 83.206802] ? handle_mm_fault+0x2f8/0xb10 [ 83.211034] handle_mm_fault+0x44a/0xb10 [ 83.215089] ? __handle_mm_fault+0x38c0/0x38c0 [ 83.219656] ? vmacache_find+0x5f/0x280 [ 83.223622] ? find_vma+0x30/0x150 [ 83.227151] __do_page_fault+0x5c9/0xc90 [ 83.231204] ? mm_fault_error+0x2c0/0x2c0 [ 83.235338] ? lock_release+0xa40/0xa40 [ 83.239302] ? trace_hardirqs_off+0x10/0x10 [ 83.243615] do_page_fault+0xee/0x730 [ 83.247406] ? __do_page_fault+0xc90/0xc90 [ 83.251624] ? avc_has_perm+0x43e/0x680 [ 83.255588] ? find_held_lock+0x35/0x1d0 [ 83.259643] ? __might_fault+0x110/0x1d0 [ 83.263693] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 83.268534] page_fault+0x25/0x50 [ 83.271970] RIP: 0010:__get_user_4+0x21/0x30 [ 83.276360] RSP: 0018:ffff8801cbdb7be8 EFLAGS: 00010206 [ 83.281706] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 83.288957] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 83.296210] RBP: ffff8801cbdb7c88 R08: 0000000000000000 R09: 1ffff100397b6f5a [ 83.303466] R10: ffff8801cbdb7a98 R11: 0000000000000000 R12: 0000000020012000 [ 83.310721] R13: 1ffff100397b6f80 R14: dffffc0000000000 R15: ffff8801b8e1f940 [ 83.317991] ? __might_fault+0x188/0x1d0 [ 83.322052] ? udp_lib_getsockopt+0x8e/0x440 [ 83.326449] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 83.330938] ? __schedule+0x1ec0/0x1ec0 [ 83.334902] udp_getsockopt+0x71/0x80 [ 83.338705] sock_common_getsockopt+0x95/0xd0 [ 83.343195] SyS_getsockopt+0x178/0x340 [ 83.347161] ? SyS_setsockopt+0x360/0x360 [ 83.351307] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 83.356835] ? do_syscall_64+0xb7/0x940 [ 83.360802] ? SyS_setsockopt+0x360/0x360 [ 83.364938] do_syscall_64+0x281/0x940 [ 83.368809] ? __do_page_fault+0xc90/0xc90 [ 83.373032] ? _raw_spin_unlock_irq+0x27/0x70 [ 83.377516] ? finish_task_switch+0x1c1/0x7e0 [ 83.381997] ? syscall_return_slowpath+0x550/0x550 [ 83.386918] ? syscall_return_slowpath+0x2ac/0x550 [ 83.391834] ? prepare_exit_to_usermode+0x350/0x350 [ 83.396841] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 83.402195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 83.407036] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 83.412215] RIP: 0033:0x454239 [ 83.415389] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 2018/03/21 23:55:29 executing program 5: perf_event_open(&(0x7f0000220000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000d1c000), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa}, 0x1c) connect$inet6(r0, &(0x7f0000f6dfe4)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x2}, 0x1c) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x80000) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x9, 0x10000036b) 2018/03/21 23:55:30 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) sendto$packet(r1, &(0x7f0000000100)="4e70b0894a1267775b5fda2926cc793bdecb6c7e057f77a77b92031da5213192eb31a1e4cf046c075fcadfc95fe9383f5b7484c2ed4918736567153017d8e0b690ae9e6dcdaf91d58b127aa57a3d6739880af5852efab3f9a7d781ae01ae4660469a605bebed56dd415455381ac3147d6ecb973a0b64a72cc971a3f07621f4a1c6bcff803430bec0af9ffba0906bbb6a57a4fd9bbdca039a04151e005f2d999dda0ee91cf64baa9972d85b731e7518ef41d3cb37624219def5e3ba49cde1cb553d6ed8f3492de690327cfc0afb61ef8d0b6db3b73eb3fee5c8d31f6af7f2dbf9b4444437db6692559a36", 0xea, 0x20048040, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000040)={0x0, 0x9, 0x10000, {0x77359400}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)}) 2018/03/21 23:55:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/156, 0x9c) r0 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000280)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x3, 0x2, 0x7, 0x1}) recvfrom(r0, &(0x7f00000002c0)=""/75, 0x4b, 0x10000, &(0x7f0000000340)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x1, 0x4, 0x0, 0x4, {0xa, 0x4e22, 0x5, @mcast2={0xff, 0x2, [], 0x1}, 0x20}}}, 0x80) r1 = userfaultfd(0x0) setns(r0, 0x44000000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa, 0xfffffffffffffffe}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f00000003c0)={{0x0, 0x1f000, 0xe, 0x0, 0xffffffff80000000, 0x2, 0x1000, 0x8, 0xa00000000000000, 0x101, 0x100000001}, {0x110000, 0xf001, 0xf, 0x6, 0xdd, 0x0, 0x3, 0x2, 0x0, 0x7, 0x737, 0x3f}, {0x100001, 0xf000, 0xc, 0xffffffffffffffff, 0x100000001, 0x8, 0xa7, 0x8, 0xfffffffffffffc00, 0x7f, 0x2, 0x5}, {0x2, 0x4000, 0x0, 0x3, 0x9, 0x6, 0x6, 0x401, 0x80000000, 0x7, 0x5, 0xffffffff}, {0x0, 0xd000, 0xf, 0x8, 0x6, 0x3, 0x1, 0x1ff, 0x5, 0x1f, 0x1, 0x5}, {0x6000, 0x100000, 0xb, 0xff, 0x8, 0x7, 0x1, 0x10001, 0x3, 0xffffffffffffffff, 0x6, 0x400}, {0x2, 0x0, 0xf, 0x3f, 0x8, 0xfffffffffffffffb, 0x80, 0xf5, 0x18, 0x20, 0x7, 0x7}, {0x1, 0x0, 0xe, 0x8001, 0xd37e, 0x4, 0x81, 0x40, 0x7, 0xff, 0x2, 0xf43}, {0xf000, 0x5001}, {0x6000, 0x5005}, 0xe0010001, 0x0, 0x5000, 0x200000, 0x9, 0x4000, 0x10000, [0x0, 0x80, 0x9, 0x7ff]}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:30 executing program 2: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0xffffffffffffffff, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x4, 0x2000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2000008) r3 = msgget(0x2, 0x40) msgrcv(r3, &(0x7f00000002c0)={0x0, ""/244}, 0xfc, 0x0, 0x1800) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="04a39cc4e27c1f9cd5654c4d4fdd17f5f8d2cacd559cf097587952ebfcf0e89a7005b17218fc1bd7579c22ce6feb086ecf21803fa23af629959018", 0x3b}], 0x1, 0x50) dup2(r0, r2) [ 83.423082] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 83.430338] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 83.437595] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 83.444848] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 83.452109] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000000000000e1f0ffff070000000000976df7d60000010000007f000000000000000000000000000000000000000000000000000000000000000300000000000000000000000200000003000000200000000000000000000000000000000000000000000000"]) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x7, 0x0, 0x1f, 0x8001, 0x14}, &(0x7f0000000000)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3}, &(0x7f0000000200)=0x8) [ 83.505438] binder: 9604:9611 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 83.563713] binder: BINDER_SET_CONTEXT_MGR already set [ 83.569513] binder: 9604:9611 ioctl 40046207 0 returned -16 [ 83.570868] binder: 9604:9630 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:30 executing program 3: sendmsg$alg(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000100)="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", 0xf11}], 0x1}, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x4edf, 0x0) accept4$packet(r0, &(0x7f0000006ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000006f00)=0x14, 0x800) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000006f40)={@mcast1={0xff, 0x1, [], 0x1}, 0x2d, r1}) getdents64(r0, &(0x7f0000003900)=""/123, 0x7b) r2 = socket(0x11, 0x4000000000080003, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400, 0x0) ioctl$KDSKBLED(r3, 0x4b65, 0xf414) r4 = getpgrp(0x0) recvmmsg(r0, &(0x7f0000003800)=[{{&(0x7f0000001180)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002440)=[{&(0x7f00000010c0)=""/13, 0xd}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/235, 0xeb}, {&(0x7f0000002300)=""/28, 0x1c}, {&(0x7f0000002340)=""/232, 0xe8}], 0x5, &(0x7f00000024c0)=""/4096, 0x1000, 0x186}, 0xffffffffffffffff}, {{&(0x7f00000034c0)=@l2, 0x80, &(0x7f0000003740)=[{&(0x7f0000003540)=""/118, 0x76}, {&(0x7f00000035c0)=""/162, 0xa2}, {&(0x7f0000003680)=""/153, 0x99}], 0x3, &(0x7f0000003780)=""/121, 0x79, 0x200}, 0x1}], 0x2, 0x10000, 0x0) process_vm_readv(r4, &(0x7f000001df80)=[{&(0x7f000001d000)=""/109, 0x6d}], 0x1, &(0x7f000001dfa0)=[{&(0x7f000001df93)=""/110, 0x6e}], 0x1, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x7, 0x4) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/autofs\x00', 0x8000, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000001080)={@reserved=0x1}) 2018/03/21 23:55:30 executing program 5: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0xdd81}, &(0x7f0000000100)=0x8) timer_create(0x1, &(0x7f0000b2ffa0)={0x0, 0x0, 0x1, @thr={&(0x7f0000c28000), &(0x7f000085e000)}}, &(0x7f000029effc)) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) timer_settime(0x0, 0x0, &(0x7f0000031fe0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000cbde6c)) 2018/03/21 23:55:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1c9, 0x10000) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) pkey_alloc(0x0, 0x1) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000013000/0x1000)=nil, 0x1000}) 2018/03/21 23:55:30 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000000)={0x0, r0, 0x1}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x8, 0x1, [0x4]}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={r2}, &(0x7f0000000140)=0x8) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:30 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000fe8)={0xaa}) r1 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r1) r2 = memfd_create(&(0x7f0000006fd0)='/dev/urandom\x00', 0x0) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20}, @in6={0xa, 0x4e24, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in6={0xa, 0x4e20, 0x1000, @loopback={0x0, 0x1}, 0x8}, @in6={0xa, 0x4e23, 0xffff, @local={0xfe, 0x80, [], 0xaa}, 0x15}]}, &(0x7f0000000100)=0x10) unlinkat(r2, &(0x7f00000001c0)='./file0/file0\x00', 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x4, 0xb3f, 0x2, 0x6, 0x6, 0x2, 0x8, 0x6, r3}, 0xfffffffffffffff8) openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/create\x00', 0x2, 0x0) fchown(r2, 0x0, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r2, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000200)={r4, 0x80000, r2}) pwritev(r1, &(0x7f0000001000)=[{&(0x7f0000006000)='T', 0x1}], 0x1, 0x0) close(r0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000280)={0xd000, &(0x7f0000000240), 0x0, r2, 0xa}) 2018/03/21 23:55:30 executing program 2: pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2)=[{0xffffffffffffffff, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) fcntl$setstatus(r0, 0x4, 0x2000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x2000008) r3 = msgget(0x2, 0x40) msgrcv(r3, &(0x7f00000002c0)={0x0, ""/244}, 0xfc, 0x0, 0x1800) openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x0, 0x0) pwritev(r0, &(0x7f0000000080)=[{&(0x7f0000000040)="04a39cc4e27c1f9cd5654c4d4fdd17f5f8d2cacd559cf097587952ebfcf0e89a7005b17218fc1bd7579c22ce6feb086ecf21803fa23af629959018", 0x3b}], 0x1, 0x50) dup2(r0, r2) 2018/03/21 23:55:30 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) 2018/03/21 23:55:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000040)={0x0, 0x9, 0x10000, {0x77359400}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)}) 2018/03/21 23:55:30 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet(0x10, 0x2, 0x9) sendto$inet(r1, &(0x7f000000b000)="00000000e80307000700860000020000", 0x10, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x1}) fcntl$getown(0xffffffffffffffff, 0x9) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000200)={0xf9, 0x0, [0x5, 0x2, 0x7, 0x5]}) r3 = dup2(r1, r0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000080)={0x3f, {{0xa, 0x4e24, 0x100000000, @dev={0xfe, 0x80, [], 0xd}, 0x7ff}}, 0x0, 0x1, [{{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}, 0x875c}}]}, 0x110) 2018/03/21 23:55:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000040)={0x0, 0x9, 0x10000, {0x77359400}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008000)={0x0, 0x0, &(0x7f0000004fbc), 0x0, 0x0, &(0x7f0000009000)}) 2018/03/21 23:55:30 executing program 6: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x6, 0x4000) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000100)=0x42, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1a0c044000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) setsockopt$packet_int(r1, 0x107, 0x1b, &(0x7f0000000040)=0x3, 0x377) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGMRU(r3, 0x80047453, &(0x7f0000000000)) [ 83.694970] binder: 9642:9652 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 83.705232] binder: BINDER_SET_CONTEXT_MGR already set [ 83.711162] binder: 9642:9652 ioctl 40046207 0 returned -16 2018/03/21 23:55:30 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r10, 0x402c5342, &(0x7f0000000040)={0x0, 0x9, 0x10000, {0x77359400}}) 2018/03/21 23:55:30 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x10000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=""/117) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x17, 0xa, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0xfffffffffffffffc}, [@generic="43e2a5d701eb6196a2f9abf9d1be3378b3f69116b154854c8c2599099ef500d07ee457bc6276ca458bb0def04c43d2e660372193407a4f1995ccbd8f7693e0cc0194545c1e3e63349b5c86b2a43f4ac84824fef94152da2d853ab3d63886828a30b08c9b0ea49d576d50de369f94dc9001252dcc1d5d90735adbb79fc0fcd6c21da7c7d697d261aed5c371002c2460f74e7f95976a007b389a09c4c618c5fa060de6"]}, 0xfffffe86}, 0x1, 0x0, 0x0, 0x20040084}, 0x4) [ 83.744310] binder: 9666:9667 unknown command 1074007066 [ 83.753431] binder: 9666:9667 ioctl c0306201 20012000 returned -22 [ 83.760899] binder: 9666:9667 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 83.795668] binder: BINDER_SET_CONTEXT_MGR already set [ 83.797103] binder: 9666:9677 unknown command 1074007066 [ 83.805560] binder: 9666:9667 ioctl 40046207 0 returned -16 [ 83.822272] binder: 9666:9683 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 83.835556] binder: 9666:9677 ioctl c0306201 20012000 returned -22 [ 83.873062] FAULT_FLAG_ALLOW_RETRY missing 30 [ 83.877642] CPU: 0 PID: 9682 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 83.884906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 83.894248] Call Trace: [ 83.896832] dump_stack+0x194/0x24d [ 83.900451] ? arch_local_irq_restore+0x53/0x53 [ 83.905122] ? _raw_spin_unlock_irq+0x27/0x70 [ 83.909610] ? finish_task_switch+0x1c1/0x7e0 [ 83.914107] ? finish_task_switch+0x182/0x7e0 [ 83.918592] ? handle_userfault+0xb97/0x2490 [ 83.922991] handle_userfault+0xbd9/0x2490 [ 83.927215] ? handle_userfault+0x1864/0x2490 [ 83.931705] ? userfaultfd_ioctl+0x4520/0x4520 [ 83.936279] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 83.941453] ? __schedule+0x8d0/0x1ec0 [ 83.945338] ? __sched_text_start+0x8/0x8 [ 83.949472] ? print_irqtrace_events+0x270/0x270 [ 83.954214] ? print_irqtrace_events+0x270/0x270 [ 83.958952] ? trace_hardirqs_off+0x10/0x10 [ 83.963269] ? plist_check_list+0xa0/0xa0 [ 83.967410] ? trace_hardirqs_off+0x10/0x10 [ 83.971730] ? __lock_acquire+0x664/0x3e00 [ 83.975953] ? __lock_acquire+0x664/0x3e00 [ 83.980179] ? trace_hardirqs_off+0x10/0x10 [ 83.984493] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 83.989677] ? find_held_lock+0x35/0x1d0 [ 83.993746] ? __handle_mm_fault+0x2ded/0x38c0 [ 83.998331] ? lock_downgrade+0x980/0x980 [ 84.002479] ? lock_release+0xa40/0xa40 [ 84.006448] ? __lock_acquire+0x664/0x3e00 [ 84.010675] ? do_raw_spin_trylock+0x190/0x190 [ 84.015253] ? userfaultfd_ctx_put+0x740/0x740 [ 84.019835] __handle_mm_fault+0x2dfa/0x38c0 [ 84.024244] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 84.029448] ? __pmd_alloc+0x4e0/0x4e0 [ 84.033329] ? trace_hardirqs_off+0x10/0x10 [ 84.037641] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 84.042743] ? find_held_lock+0x35/0x1d0 [ 84.047496] ? handle_mm_fault+0x35b/0xb10 [ 84.051743] ? lock_downgrade+0x980/0x980 [ 84.055903] ? handle_mm_fault+0x2f8/0xb10 [ 84.060138] handle_mm_fault+0x44a/0xb10 [ 84.064199] ? __handle_mm_fault+0x38c0/0x38c0 [ 84.068774] ? vmacache_find+0x5f/0x280 [ 84.072743] ? find_vma+0x30/0x150 [ 84.076278] __do_page_fault+0x5c9/0xc90 [ 84.080335] ? mm_fault_error+0x2c0/0x2c0 [ 84.084482] ? lock_release+0xa40/0xa40 [ 84.088453] ? trace_hardirqs_off+0x10/0x10 [ 84.092767] do_page_fault+0xee/0x730 [ 84.096562] ? __do_page_fault+0xc90/0xc90 [ 84.100785] ? avc_has_perm+0x43e/0x680 [ 84.104751] ? find_held_lock+0x35/0x1d0 [ 84.108803] ? __might_fault+0x110/0x1d0 [ 84.112854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.117692] page_fault+0x25/0x50 [ 84.121130] RIP: 0010:__get_user_4+0x21/0x30 [ 84.125521] RSP: 0018:ffff8801b33bfbe8 EFLAGS: 00010206 [ 84.130886] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 84.138138] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 84.145398] RBP: ffff8801b33bfc88 R08: 0000000000000000 R09: 1ffff10036677f5a [ 84.152660] R10: ffff8801b33bfa98 R11: 0000000000000000 R12: 0000000020012000 [ 84.159925] R13: 1ffff10036677f80 R14: dffffc0000000000 R15: ffff8801d82e8c80 [ 84.167200] ? __might_fault+0x188/0x1d0 [ 84.171267] ? udp_lib_getsockopt+0x8e/0x440 [ 84.175662] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 84.180142] ? rcu_pm_notify+0xc0/0xc0 [ 84.184044] udp_getsockopt+0x71/0x80 [ 84.187841] sock_common_getsockopt+0x95/0xd0 [ 84.192337] SyS_getsockopt+0x178/0x340 [ 84.196303] ? SyS_setsockopt+0x360/0x360 [ 84.200441] ? do_vfs_ioctl+0x1520/0x1520 [ 84.204575] ? do_syscall_64+0xb7/0x940 [ 84.208538] ? SyS_setsockopt+0x360/0x360 [ 84.212674] do_syscall_64+0x281/0x940 [ 84.216553] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 84.222080] ? syscall_return_slowpath+0x550/0x550 [ 84.227004] ? syscall_return_slowpath+0x2ac/0x550 [ 84.231944] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 84.237304] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.242144] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 84.247325] RIP: 0033:0x454239 [ 84.250496] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.258192] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 84.265445] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 2018/03/21 23:55:31 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) r1 = dup(r0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000002c0)=r2, 0x4) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x2000000, 0x32, r0, 0x0) r3 = userfaultfd(0x0) r4 = accept$ax25(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x10) ioctl$sock_SIOCGIFBR(r4, 0x8940, &(0x7f00000000c0)=@generic={0x5, 0x3ff, 0x6}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000200)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) sysfs$1(0x1, &(0x7f0000000000)='\x00') setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000140)={0x0, 0x2}, 0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r5, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r3, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:31 executing program 3: r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x5, 0x80000) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000100)) r1 = socket$inet(0x2, 0x80804, 0x6dc7) getsockopt$ARPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x63, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={r2, 0x1}, 0xb6) setsockopt$inet_int(r1, 0x0, 0x12, &(0x7f0000000040), 0x4) 2018/03/21 23:55:31 executing program 0: mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_buf(r0, 0x0, 0x484, &(0x7f00003d1fe8)=""/24, &(0x7f0000f08ffc)=0x18) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) 2018/03/21 23:55:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000000000)="90a043ab7178f714bfebb7cdc3363590cabce67fe29ba968a7a2fa5493d3504707cb8d971aa86312f4ee329701eec20ee396c6e8c2eee2ca554fae7d6beddbfc0084ce35d70872aeabac2a296782d8647ce3e7fa597b05f482b1a464036d0b6f8fd9f025ae6ccf1132a9e1a44b0c1a2e73bf043e57bba334524a90ad2b5f") madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/03/21 23:55:31 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = dup(r0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x2) 2018/03/21 23:55:31 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x5, 0x84) 2018/03/21 23:55:31 executing program 2: r0 = socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f000062b000)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x420800) write$vnet(r1, &(0x7f0000000200)={0x1, {&(0x7f0000000040)=""/231, 0xe7, &(0x7f0000000140)=""/171, 0x3, 0x1}}, 0x68) connect$inet(r0, &(0x7f0000481ff0)={0x2, 0x4e20}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bcsf0\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@broadcast=0xffffffff, @in=@broadcast=0xffffffff, 0x4e24, 0xffffffff7fffffff, 0x4e22, 0x1f, 0x2, 0x80, 0xa0, 0x3f, r2, r3}, {0x3ff, 0x5, 0x4185, 0x0, 0x4, 0x4, 0x10001, 0x1}, {0x7f, 0xfffffffffffffff8, 0x0, 0x3ff}, 0x0, 0x0, 0x2, 0x0, 0x3, 0x1}, {{@in=@multicast2=0xe0000002, 0x4d5, 0xff}, 0x0, @in=@multicast1=0xe0000001, 0x0, 0x0, 0x0, 0x1, 0x1800000000, 0x20, 0xad31}}, 0xe8) listen(r0, 0x0) 2018/03/21 23:55:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) [ 84.272703] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 84.279964] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 84.287227] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:31 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x2000000000000, 0x80100) mmap(&(0x7f000000a000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}) madvise(&(0x7f000000a000/0x4000)=nil, 0x4000, 0xb) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='/dev/sg#\x00') 2018/03/21 23:55:31 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000f56000)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000333f88)={0x2, 0x1, 0x0, 0x0, 0xa, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, [@sadb_x_sa2={0x2, 0x13, 0xfffffffffffffffe}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1=0xe0000001}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @multicast1=0xe0000001}}]}, 0x50}, 0x1}, 0x0) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000000)) [ 84.335580] binder: 9695:9705 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 84.343943] binder: 9695:9705 ioctl 40086200 20000000 returned -22 [ 84.352367] binder: BINDER_SET_CONTEXT_MGR already set [ 84.368709] binder: 9695:9705 ioctl 40046207 0 returned -16 2018/03/21 23:55:31 executing program 2: clone(0x200, &(0x7f000074a000), &(0x7f0000744000), &(0x7f0000f8b000), &(0x7f0000000100)) prctl$setfpexc(0xc, 0x100000) mknod(&(0x7f0000000000)='./file0\x00', 0x8, 0x0) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f00006fcff0)) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r0 = open(&(0x7f0000000080)='./file0\x00', 0x2, 0x2) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f00000000c0)={0xfffffffffffff000, 0x1e7d}) 2018/03/21 23:55:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) dup2(r0, r1) 2018/03/21 23:55:31 executing program 6: r0 = gettid() ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x101000, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000140)={r3, r4, 0x9228}) r5 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r5, 0x40046207, 0x0) r6 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:31 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000040)={0x2, 0xfffffffffffffff7, 0x716, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 'ipddp0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 84.386945] binder: 9695:9715 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 84.399423] binder: 9695:9712 ioctl 40086200 20000000 returned -22 2018/03/21 23:55:31 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev, 0x0}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0)=0x0, &(0x7f0000000200), &(0x7f0000000240)) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000380)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x4e23, 0x0, 0x4e23, 0x3, 0xa, 0x80, 0x20, 0x16, r8, r9}, {0x7fffffff, 0x100, 0x8e7, 0xa4e0, 0x10000, 0x53, 0x4, 0xffffffff}, {0x0, 0xfffffffffffffe01, 0x1000, 0x1}, 0x5, 0x6e6bc0, 0x3, 0x1, 0x3, 0x3}, {{@in, 0x4d3, 0xff}, 0xa, @in=@multicast2=0xe0000002, 0x3505, 0x6, 0x0, 0x5, 0x1f, 0x8, 0x3}}, 0xe8) r10 = dup2(r0, r1) write$sndseq(r10, &(0x7f0000e6ffd0)=[{0x1e, 0x0, 0x0, 0x3fd, @time}], 0x30) 2018/03/21 23:55:31 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req3={0x3, 0xff, 0x7, 0x2, 0x9, 0x8000, 0x7}, 0x1c) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) ptrace$setsig(0x4203, r1, 0xe45, &(0x7f0000000140)={0x2b, 0xfa, 0x1ff, 0xab7}) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000080)={'security\x00'}, &(0x7f0000000100)=0x54) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:31 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f00000000c0)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r3 = dup3(r2, r0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) socket$inet_udp(0x2, 0x2, 0x0) fsetxattr(r3, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)="0411b62c4b7b4a03870253599d58f3a6fa4fda4a98b7744d93823244e07b451434b39cbddc7cb73de71149379a195c7f249a93781d", 0x35, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000000240)="c744240000100000c744240200000000c7442406000000000f011424f30f09b90f0200000f32b805000000b9080000000f01c1c744240091979297c7442402fe9f0000c7442406000000000f0114240fb5200f35650f01cac4c37bf0bfa5310000d8b8fbffffff0f23c80f21f8350c0030000f23f8", 0x75}], 0x1, 0x0, &(0x7f0000000140), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) fsync(r0) 2018/03/21 23:55:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev}, &(0x7f0000000180)=0x14) getresuid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)) dup2(r0, r1) [ 84.472254] binder: 9729:9734 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:31 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c, 0x80000) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffff9c, 0x84, 0x71, &(0x7f0000000080)={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r3, 0xa7, 0x1}, &(0x7f0000000340)=0xc) r4 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x3, 0x100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) r7 = getgid() getgroups(0x9, &(0x7f0000000280)=[0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff]) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000002040)=@nat={'nat\x00', 0x1b, 0x5, 0x1628, 0x0, 0x1418, 0xffffffff, 0x1278, 0x110, 0x1558, 0x1558, 0xffffffff, 0x1558, 0x1558, 0x5, &(0x7f0000000100), {[{{@uncond, 0x0, 0xc8, 0x110}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x8, @ipv6=@dev={0xfe, 0x80, [], 0xe}, @ipv4=@broadcast=0xffffffff, @port=0x4e20, @port=0x4e20}}}, {{@uncond, 0x0, 0x1120, 0x1168, 0x0, {}, [@common=@unspec=@cgroup1={0x1030, 'cgroup\x00', 0x1, {0x0, 0x1, 0x0, 0x1, "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", 0x0, 0x9}}, @common=@icmp6={0x28, 'icmp6\x00', 0x0, {0xf, 0x8001, 0x8}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x11, @ipv4=@rand_addr=0x8, @ipv6, @gre_key=0x9, @gre_key=0x6}}}, {{@uncond, 0x0, 0x158, 0x1a0, 0x0, {}, [@common=@inet=@hashlimit1={0x58, 'hashlimit\x00', 0x1, {'bpq0\x00', {0x8, 0x8001, 0x80000001, 0x6, 0x7, 0x0, 0x7, 0x0, 0x78}, 0x7f}}, @common=@unspec=@owner={0x38, 'owner\x00', 0x0, {r5, r6, r7, r8, 0x5, 0x1}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@loopback=0x7f000001, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}, @port=0x4e21, @icmp_id=0x67}}}, {{@ipv6={@dev={0xfe, 0x80, [], 0x17}, @dev={0xfe, 0x80, [], 0xb}, [0xffffff00, 0x5572a6050b95a4ac], [0xff000000, 0xffffff00, 0xffffff00, 0xffffffff], 'bcsh0\x00', 'nr0\x00', {0xff}, {0xff}, 0x0, 0x4, 0x7, 0x61}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@frag={0x30, 'frag\x00', 0x0, {0x8, 0x6, 0x43e, 0x21, 0x1}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x4, @ipv4=@dev={0xac, 0x14, 0x14, 0x18}, @ipv4=@broadcast=0xffffffff, @icmp_id=0x67, @gre_key=0x4}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x1688) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)='!', 0x1) r1 = add_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="c358676ccee85e602d4a90c8a20db8972cbb8d8142e43214494f1cf8fdb6a0d34df2fa29e3ab5c5642d4c40fc4743e5cfd465cdd72df70d7a0226cef488e9b19fd9aecf659c00936bb9875e7bd8c2d97114f6bfa613ead337f029563843bc70ab9a52801149b19a08a816fb974a796eb4bcfa68b4251ccf00c430f8e2c242c769fe182d4f75915aee9b75b10b62cd08ec2ec8f8547e7f660294377cdae2493b3047ae0747788a70b0be6fb86edfd989ed6cfc075ca3edddf", 0xb8, 0xfffffffffffffff8) keyctl$read(0xb, r1, &(0x7f0000000200)=""/53, 0x35) r2 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0xb738, 0x80) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000140)) clock_nanosleep(0x7, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f00000000c0)) [ 84.546667] binder: BINDER_SET_CONTEXT_MGR already set [ 84.558442] binder: 9729:9734 ioctl 40046207 0 returned -16 [ 84.561649] binder: 9729:9760 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 84.586883] FAULT_FLAG_ALLOW_RETRY missing 30 [ 84.591547] CPU: 0 PID: 9759 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 84.598838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 84.608208] Call Trace: [ 84.610825] dump_stack+0x194/0x24d [ 84.614480] ? arch_local_irq_restore+0x53/0x53 [ 84.619169] ? _raw_spin_unlock_irq+0x27/0x70 [ 84.623688] ? finish_task_switch+0x1c1/0x7e0 [ 84.628199] ? finish_task_switch+0x182/0x7e0 [ 84.632723] ? handle_userfault+0xb97/0x2490 [ 84.637165] handle_userfault+0xbd9/0x2490 [ 84.641416] ? handle_userfault+0x1864/0x2490 [ 84.645954] ? userfaultfd_ioctl+0x4520/0x4520 [ 84.650554] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 84.655751] ? __schedule+0x8d0/0x1ec0 [ 84.659639] ? __sched_text_start+0x8/0x8 [ 84.663775] ? print_irqtrace_events+0x270/0x270 [ 84.668519] ? print_irqtrace_events+0x270/0x270 [ 84.673260] ? trace_hardirqs_off+0x10/0x10 [ 84.677572] ? plist_check_list+0xa0/0xa0 [ 84.681715] ? perf_trace_lock_acquire+0xe3/0x980 [ 84.686556] ? perf_trace_lock+0x900/0x900 [ 84.690774] ? __lock_acquire+0x664/0x3e00 [ 84.695000] ? __lock_acquire+0x664/0x3e00 [ 84.699238] ? trace_hardirqs_off+0x10/0x10 [ 84.703557] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 84.708744] ? find_held_lock+0x35/0x1d0 [ 84.712805] ? __handle_mm_fault+0x2ded/0x38c0 [ 84.717376] ? lock_downgrade+0x980/0x980 [ 84.721518] ? lock_release+0xa40/0xa40 [ 84.725478] ? perf_trace_lock_acquire+0xe3/0x980 [ 84.730308] ? perf_trace_lock_acquire+0xe3/0x980 [ 84.735139] ? do_raw_spin_trylock+0x190/0x190 [ 84.739713] ? perf_trace_lock+0x900/0x900 [ 84.743947] __handle_mm_fault+0x2dfa/0x38c0 [ 84.748341] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 84.753528] ? __pmd_alloc+0x4e0/0x4e0 [ 84.757401] ? trace_hardirqs_off+0x10/0x10 [ 84.761709] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 84.766807] ? find_held_lock+0x35/0x1d0 [ 84.770865] ? handle_mm_fault+0x35b/0xb10 [ 84.775088] ? lock_downgrade+0x980/0x980 [ 84.779247] ? handle_mm_fault+0x2f8/0xb10 [ 84.783479] handle_mm_fault+0x44a/0xb10 [ 84.787533] ? __handle_mm_fault+0x38c0/0x38c0 [ 84.792098] ? vmacache_find+0x5f/0x280 [ 84.796064] ? find_vma+0x30/0x150 [ 84.799596] __do_page_fault+0x5c9/0xc90 [ 84.803657] ? mm_fault_error+0x2c0/0x2c0 [ 84.807792] ? lock_release+0xa40/0xa40 [ 84.811756] ? trace_hardirqs_off+0x10/0x10 [ 84.816078] do_page_fault+0xee/0x730 [ 84.819870] ? __do_page_fault+0xc90/0xc90 [ 84.824090] ? avc_has_perm+0x43e/0x680 [ 84.828060] ? find_held_lock+0x35/0x1d0 [ 84.832124] ? __might_fault+0x110/0x1d0 [ 84.836178] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.841029] page_fault+0x25/0x50 [ 84.844471] RIP: 0010:__get_user_4+0x21/0x30 [ 84.848862] RSP: 0018:ffff8801aeacfbe8 EFLAGS: 00010206 [ 84.854213] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 84.861472] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 84.868729] RBP: ffff8801aeacfc88 R08: 0000000000000000 R09: 1ffff10035d59f5a [ 84.875994] R10: ffff8801aeacfa98 R11: 0000000000000000 R12: 0000000020012000 [ 84.883261] R13: 1ffff10035d59f80 R14: dffffc0000000000 R15: ffff8801cd756640 [ 84.890538] ? __might_fault+0x188/0x1d0 [ 84.894597] ? udp_lib_getsockopt+0x8e/0x440 [ 84.898998] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 84.903507] udp_getsockopt+0x71/0x80 [ 84.907301] sock_common_getsockopt+0x95/0xd0 [ 84.911790] SyS_getsockopt+0x178/0x340 [ 84.915755] ? SyS_setsockopt+0x360/0x360 [ 84.919890] ? __might_sleep+0x95/0x190 [ 84.923859] ? __might_fault+0x188/0x1d0 [ 84.927906] ? do_syscall_64+0xb7/0x940 [ 84.931870] ? SyS_setsockopt+0x360/0x360 [ 84.936010] do_syscall_64+0x281/0x940 [ 84.939890] ? __do_page_fault+0xc90/0xc90 [ 84.944112] ? _raw_spin_unlock_irq+0x27/0x70 [ 84.948597] ? finish_task_switch+0x1c1/0x7e0 [ 84.953082] ? syscall_return_slowpath+0x550/0x550 [ 84.958003] ? syscall_return_slowpath+0x2ac/0x550 [ 84.962927] ? prepare_exit_to_usermode+0x350/0x350 [ 84.967931] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 84.973289] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 84.978132] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 84.983309] RIP: 0033:0x454239 [ 84.986482] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 84.994178] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 85.001431] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 85.008687] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 85.015944] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 85.023198] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:31 executing program 0: r0 = epoll_create1(0x20000002) r1 = timerfd_create(0x0, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000579ff4)) timerfd_settime(r1, 0x1, &(0x7f0000765000)={{}, {0x0, 0x989680}}, &(0x7f0000037000)) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f000003cff4)={0x7}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000140)=0x8ef) poll(&(0x7f0000000040)=[{r0, 0x8000}], 0x1, 0x2) r2 = socket$packet(0x11, 0x0, 0x300) setsockopt(r2, 0x0, 0x1, &(0x7f0000000bc0)="661671f37f36dbf22432c71c2b464e927336978f38cf0a6a2a72f6170d5f50fb1dd12a7043cf451b545712c75f16a613501a5f16bb7d9ebe776947ea85bffc703be0dc0222330113304564a0c417", 0x4e) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, &(0x7f0000000180)={0x6, 0x1f, 0xec0, 'queue0\x00', 0x7}) ioctl$LOOP_CLR_FD(r3, 0x4c01) 2018/03/21 23:55:31 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080)={0x0, 0xdf, "36c61ba729008ab6a64d8a180d920e75df905ab99cb4a4a8b314558a66fc6886f8c7a52af788b5839b2a5761d06977e0e9d29cdfc52d6dd4a3f9f186186c4765960d9aea1a699ea499f69849d8e277a72516ae5d3ab900711a875beca6caf65bc20207d2b69e3f8d160bbafc4bc440a3a0b6ffaad6dab7e24797dd3842f6d79a5e6a958a32d6a044c1e5f33d8724a88d11f732052c2fa08a6a19b80f9e8b4c54aade0e61edb2cf0e1c4c594b8b1d4c726c692d93e4f513d209b4b09daaaa3aea822ee4b75ff2285108dfc25c9b85b64632f9d32006ac8bd62e61acd4a2b0a6"}, &(0x7f0000000000)=0xe7) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e23, 0x7e28, @remote={0xfe, 0x80, [], 0xbb}, 0x3ff}}}, 0x84) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:31 executing program 5: syz_open_procfs(0x0, &(0x7f0000d69ff7)='net/unix\x00') syz_open_dev$loop(&(0x7f000091dff5)='/dev/loop#\x00', 0x0, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f000000d000)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f00001a2000/0xc00000)=nil, 0xc00000, 0x4000000000000008) clone(0x0, &(0x7f0000001f37), &(0x7f0000001ffc), &(0x7f0000001000), &(0x7f0000000000)="90a043ab7178f714bfebb7cdc3363590cabce67fe29ba968a7a2fa5493d3504707cb8d971aa86312f4ee329701eec20ee396c6e8c2eee2ca554fae7d6beddbfc0084ce35d70872aeabac2a296782d8647ce3e7fa597b05f482b1a464036d0b6f8fd9f025ae6ccf1132a9e1a44b0c1a2e73bf043e57bba334524a90ad2b5f") madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x10200000008) 2018/03/21 23:55:31 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB='7%c\f@\x00\x00\x00'], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000100)={0x7, 0x0, [{0x6, 0x95, 0x7, 0xffffffff80000001, 0x40}, {0x0, 0x6, 0x101, 0xfffffffffffffb8d, 0x1ff}, {0x0, 0x100000000, 0x9, 0x1, 0xfffffffffffffffc}, {0x0, 0x200, 0x5, 0x1, 0x800}, {0x8000000f, 0x7f, 0x400, 0x6, 0x101}, {0xf, 0xd4, 0xbd, 0xee6, 0x5f}, {0x80000001, 0xffffffffffffc27d, 0x8, 0x0, 0x31}]}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:31 executing program 3: r0 = getpgrp(0x0) r1 = gettid() rt_sigprocmask(0x0, &(0x7f0000032ff8)={0xfffffffffffffffe}, 0x0, 0x8) rt_tgsigqueueinfo(r0, r1, 0x7, &(0x7f000058a000)={0x0, 0x0, 0x4}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'syz_tun\x00', {0x2, 0x4e24, @rand_addr=0xbbe}}) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000006000)={0x7fffffff}, 0x8, 0x0) readv(r3, &(0x7f00000011c0)=[{&(0x7f00000001c0)=""/4096, 0x1000}], 0x1) 2018/03/21 23:55:31 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0xccd0, 0x2) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000000100)) 2018/03/21 23:55:31 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0xca7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f00000a5000), &(0x7f0000ef4000), &(0x7f0000996000), &(0x7f0000000040)) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x9000000) 2018/03/21 23:55:31 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000100)={@dev}, &(0x7f0000000180)=0x14) dup2(r0, r1) 2018/03/21 23:55:31 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x100000000a, &(0x7f000042b000), 0x4) [ 85.093797] binder: 9783:9786 unknown command 207824183 [ 85.113360] binder: 9783:9786 ioctl c0306201 20012000 returned -22 [ 85.137936] FAULT_FLAG_ALLOW_RETRY missing 30 [ 85.142637] CPU: 1 PID: 9794 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 85.149929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.160026] Call Trace: [ 85.162617] dump_stack+0x194/0x24d [ 85.166245] ? arch_local_irq_restore+0x53/0x53 [ 85.170902] ? _raw_spin_unlock_irq+0x27/0x70 [ 85.175390] ? finish_task_switch+0x1c1/0x7e0 [ 85.179868] ? finish_task_switch+0x182/0x7e0 [ 85.184359] ? handle_userfault+0xb97/0x2490 [ 85.188769] handle_userfault+0xbd9/0x2490 [ 85.192997] ? handle_userfault+0x1864/0x2490 [ 85.197508] ? userfaultfd_ioctl+0x4520/0x4520 [ 85.202087] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 85.207268] ? __schedule+0x8d0/0x1ec0 [ 85.211159] ? __sched_text_start+0x8/0x8 [ 85.215298] ? print_irqtrace_events+0x270/0x270 [ 85.220051] ? print_irqtrace_events+0x270/0x270 [ 85.224795] ? trace_hardirqs_off+0x10/0x10 [ 85.229102] ? plist_check_list+0xa0/0xa0 [ 85.233234] ? trace_hardirqs_off+0x10/0x10 [ 85.237541] ? resched_curr+0x12a/0x1a0 [ 85.241508] ? perf_trace_lock+0xd6/0x900 [ 85.245641] ? perf_trace_lock_acquire+0xe3/0x980 [ 85.250480] ? trace_event_raw_event_lock+0x340/0x340 [ 85.255661] ? perf_trace_lock+0x900/0x900 [ 85.259889] ? __lock_acquire+0x664/0x3e00 [ 85.264114] ? trace_hardirqs_off+0x10/0x10 [ 85.268441] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 85.273630] ? find_held_lock+0x35/0x1d0 [ 85.277694] ? __handle_mm_fault+0x2ded/0x38c0 [ 85.282267] ? lock_downgrade+0x980/0x980 [ 85.286408] ? lock_release+0xa40/0xa40 [ 85.290377] ? do_raw_spin_trylock+0x190/0x190 [ 85.294953] ? __sanitizer_cov_trace_pc+0x44/0x50 [ 85.299795] __handle_mm_fault+0x2dfa/0x38c0 [ 85.304193] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 85.309380] ? __pmd_alloc+0x4e0/0x4e0 [ 85.313254] ? trace_hardirqs_off+0x10/0x10 [ 85.317563] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 85.322662] ? find_held_lock+0x35/0x1d0 [ 85.326731] ? handle_mm_fault+0x35b/0xb10 [ 85.330955] ? lock_downgrade+0x980/0x980 [ 85.335117] ? handle_mm_fault+0x2f8/0xb10 [ 85.339351] handle_mm_fault+0x44a/0xb10 [ 85.343406] ? __handle_mm_fault+0x38c0/0x38c0 [ 85.347971] ? vmacache_find+0x5f/0x280 [ 85.351937] ? find_vma+0x30/0x150 [ 85.355475] __do_page_fault+0x5c9/0xc90 [ 85.359540] ? mm_fault_error+0x2c0/0x2c0 [ 85.363677] ? lock_release+0xa40/0xa40 [ 85.367640] ? trace_hardirqs_off+0x10/0x10 [ 85.371959] do_page_fault+0xee/0x730 [ 85.375748] ? __do_page_fault+0xc90/0xc90 [ 85.379972] ? avc_has_perm+0x43e/0x680 [ 85.383944] ? find_held_lock+0x35/0x1d0 [ 85.388008] ? __might_fault+0x110/0x1d0 [ 85.392069] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 85.396911] page_fault+0x25/0x50 [ 85.400352] RIP: 0010:__get_user_4+0x21/0x30 [ 85.404745] RSP: 0018:ffff8801d7917be8 EFLAGS: 00010206 [ 85.410098] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 85.417355] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 85.424611] RBP: ffff8801d7917c88 R08: ffff8801d7291408 R09: 1ffff1003af22f5a [ 85.431866] R10: ffff8801d7917a98 R11: 0000000000000000 R12: 0000000020012000 [ 85.439122] R13: 1ffff1003af22f80 R14: dffffc0000000000 R15: ffff8801ad568c80 [ 85.446396] ? __might_fault+0x188/0x1d0 [ 85.450457] ? udp_lib_getsockopt+0x8e/0x440 [ 85.454857] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 85.459357] udp_getsockopt+0x71/0x80 [ 85.463155] sock_common_getsockopt+0x95/0xd0 [ 85.467645] SyS_getsockopt+0x178/0x340 [ 85.471614] ? SyS_setsockopt+0x360/0x360 [ 85.475755] ? move_addr_to_kernel+0x60/0x60 [ 85.480158] ? do_syscall_64+0xb7/0x940 [ 85.484124] ? SyS_setsockopt+0x360/0x360 [ 85.488265] do_syscall_64+0x281/0x940 [ 85.492148] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 85.497683] ? syscall_return_slowpath+0x550/0x550 [ 85.502621] ? syscall_return_slowpath+0x2ac/0x550 [ 85.507551] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 85.512909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 85.517754] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 85.522929] RIP: 0033:0x454239 [ 85.526106] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 85.533805] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 2018/03/21 23:55:32 executing program 3: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xffff, 0x200000) recvfrom$llc(r0, &(0x7f0000000080)=""/92, 0x5c, 0x40000000, &(0x7f0000000100)={0x1a, 0x31f, 0x7ff, 0x2, 0x5, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x10) r1 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00003d6ff4)) open(&(0x7f0000000000)='./bus\x00', 0x82, 0x0) [ 85.541063] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 85.548319] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 85.555582] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 85.562836] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 85.570478] binder: 9783:9786 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 85.585377] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:32 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) timerfd_settime(r5, 0x1, &(0x7f00000004c0)={{0x77359400}, {r6, r7+30000000}}, &(0x7f0000000500)) dup2(r0, r1) 2018/03/21 23:55:32 executing program 0: perf_event_open(&(0x7f0000418000)={0x2, 0x70, 0x84, 0x6896f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000007ff7)='/dev/sg#\x00', 0x0, 0x805) write$evdev(r0, &(0x7f0000813fd0)=[{{}, 0x0, 0x2}, {}], 0x30) 2018/03/21 23:55:32 executing program 2: syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x0, 0x200080) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0x20, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) 2018/03/21 23:55:32 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/104) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) io_setup(0x9, &(0x7f0000000000)=0x0) io_cancel(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x3, 0x3, r0, &(0x7f0000000100)="d19803d046b39f4ac2bf2f6425f1cd2cbbe9a41cd61bd3c553b390a79d270ce89910b1653f5dd2a1ff0ffb47d1b089ba29d4fe0fcdc4fb80b7c6d8213f523cdd19b1842450b12f45ba4f17fa71c5e0a2631237b1e11b27f3ad77d880cef22cfd38921029938794796d56725d81073b40a19e5e342bebe97e93374d29d3a29bd3adb44decd52e44f6ff52d5b212ad90367c0a16faf553e4d6b73ddc2d95dd6b65f96fd9338e3dce111d7472d38f", 0xad, 0x7f, 0x0, 0x0, r0}, &(0x7f0000000200)) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:32 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) get_thread_area(&(0x7f0000000040)={0x1f, 0xffffffff, 0x0, 0x60a, 0x7, 0x5, 0x20, 0x4, 0xff, 0x5}) sendmsg(r0, &(0x7f0000013000)={&(0x7f0000013fe4)=@in6={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c, &(0x7f0000012f70), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="28000000a1319be02900000039000000000202010000007efe800000000000005200100000000000"], 0x28}, 0x0) [ 85.590912] binder: 9783:9786 ioctl 40046207 0 returned -16 [ 85.609553] binder: 9783:9799 unknown command 207824183 [ 85.623972] binder: 9783:9799 ioctl c0306201 20012000 returned -22 2018/03/21 23:55:32 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000003c0)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000040)={{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xd}}, {0xa, 0x4e21, 0x8, @mcast2={0xff, 0x2, [], 0x1}, 0xcc}, 0xfffffffffffffff9, [0x7fff, 0x0, 0xffffffffffffffe1, 0x6, 0x825, 0x8, 0x6, 0x4]}, 0x5c) r1 = userfaultfd(0x2000080800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f00000000c0)={0x10001, 0x0, &(0x7f0000012000/0x4000)=nil}) bind$ax25(r0, &(0x7f0000000240)={0x3, {"eb00021e00e1db"}, 0x10005}, 0xd0ef2703e14f9b5c) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r0, &(0x7f0000000100)="8fac249d9e57391b51d47849f88df437bcea4370d64f8217b8477c595135a52e1a1f66a09733a56ec0064d7a354f2bc4ef90869a3dcdcce2989d613d1d62f6da50fe7d424cbeb792fbaa66e0d71162313ed1e48bfb70007b7fe2f986a33bea2807a7c2f3122553ae8c32a6b8c5a537cc579e32"}, 0x10) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) clock_adjtime(0x5, &(0x7f0000000280)={0x8001, 0xf794, 0x9, 0x8, 0x6, 0x46, 0x20, 0xfda, 0x3, 0x1, 0x5, 0x0, 0x3cf3, 0x81, 0x3, 0x1f, 0x4, 0x9, 0x100000000, 0xfffffffffffffffd, 0x13e7, 0x3ff, 0xff, 0x400, 0x40, 0x7f}) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0xb) openat$vnet(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vhost-net\x00', 0x2, 0x0) geteuid() 2018/03/21 23:55:32 executing program 0: perf_event_open(&(0x7f0000418000)={0x2, 0x70, 0x84, 0x6896f02, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000007ff7)='/dev/sg#\x00', 0x0, 0x805) write$evdev(r0, &(0x7f0000813fd0)=[{{}, 0x0, 0x2}, {}], 0x30) 2018/03/21 23:55:32 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) sched_setscheduler(r2, 0x6, &(0x7f00000001c0)=0x40b) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000140)=""/52) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="152a5d3f41f04595645caa6f01221e0349d2a28be2ac1f73faf0ba3e73ffedc6cee8ac73fb4cc2775d4ea554648c05adb982153b6da3b6a6e6a4b914718ca2e7a4790d651466762d563319f11f1c9e6fd7b53436b3435a55719cdeb2b35b86e65ce3dcb89b076ad4c5f768c5488113cf61ac24793f560aa1a79f1a5f828bedca7f74db418821d3434254d5da2bcc"], 0x0, 0x0, &(0x7f0000000f4d)}) fcntl$addseals(r0, 0x409, 0x4) 2018/03/21 23:55:32 executing program 2: socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) accept(r0, &(0x7f0000000040)=@ipx, &(0x7f0000000100)=0x80) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x40040, 0x0) statx(r1, &(0x7f0000000180)='./file0\x00', 0x800, 0xb0, &(0x7f00000001c0)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x7, 0x4) 2018/03/21 23:55:32 executing program 3: r0 = socket(0x20000000000000a, 0x2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(r0, &(0x7f00006b2000)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) getsockopt$inet6_mreq(r0, 0x29, 0x18, &(0x7f0000aa0fec)={@remote}, &(0x7f0000067000)=0x14) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000040)={0x5d3, 0x80, 0x5, 0x3f}, 0x10) 2018/03/21 23:55:32 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) clock_gettime(0x0, &(0x7f0000000480)) dup2(r0, r1) 2018/03/21 23:55:32 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) ptrace$getregs(0xe, r1, 0x20, &(0x7f0000000480)=""/133) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, &(0x7f0000000080)={"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"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:32 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-vsock\x00', 0x2, 0x0) lseek(r0, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8200, 0x0) accept4(r1, &(0x7f0000000080)=@pptp={0x0, 0x0, {0x0, @loopback}}, &(0x7f0000000140)=0x80, 0x80000) [ 85.788917] binder: 9840:9849 unknown command 1063070229 [ 85.804676] binder: 9840:9849 ioctl c0306201 20008fd0 returned -22 [ 85.826952] FAULT_FLAG_ALLOW_RETRY missing 30 [ 85.831696] CPU: 1 PID: 9846 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 85.838997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 85.848353] Call Trace: [ 85.850934] dump_stack+0x194/0x24d [ 85.854565] ? arch_local_irq_restore+0x53/0x53 [ 85.859223] ? _raw_spin_unlock_irq+0x27/0x70 [ 85.864660] ? finish_task_switch+0x1c1/0x7e0 [ 85.869153] ? finish_task_switch+0x182/0x7e0 [ 85.873639] ? handle_userfault+0xb97/0x2490 [ 85.878047] handle_userfault+0xbd9/0x2490 [ 85.882271] ? handle_userfault+0x1864/0x2490 [ 85.886770] ? userfaultfd_ioctl+0x4520/0x4520 [ 85.891340] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 85.896515] ? __schedule+0x8d0/0x1ec0 [ 85.900399] ? __sched_text_start+0x8/0x8 [ 85.904535] ? print_irqtrace_events+0x270/0x270 [ 85.909280] ? print_irqtrace_events+0x270/0x270 [ 85.914028] ? trace_hardirqs_off+0x10/0x10 [ 85.918337] ? plist_check_list+0xa0/0xa0 [ 85.922487] ? perf_trace_lock_acquire+0xe3/0x980 [ 85.927330] ? perf_trace_lock+0x900/0x900 [ 85.931547] ? __lock_acquire+0x664/0x3e00 [ 85.935776] ? __lock_acquire+0x664/0x3e00 [ 85.939998] ? trace_hardirqs_off+0x10/0x10 [ 85.944326] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 85.949516] ? find_held_lock+0x35/0x1d0 [ 85.953585] ? __handle_mm_fault+0x2ded/0x38c0 [ 85.958155] ? lock_downgrade+0x980/0x980 [ 85.962297] ? lock_release+0xa40/0xa40 [ 85.966260] ? perf_trace_lock_acquire+0xe3/0x980 [ 85.971095] ? perf_trace_lock_acquire+0xe3/0x980 [ 85.975939] ? do_raw_spin_trylock+0x190/0x190 [ 85.980515] ? perf_trace_lock+0x900/0x900 [ 85.984751] __handle_mm_fault+0x2dfa/0x38c0 [ 85.989146] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 85.994328] ? __pmd_alloc+0x4e0/0x4e0 [ 85.998205] ? trace_hardirqs_off+0x10/0x10 [ 86.002515] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 86.007617] ? find_held_lock+0x35/0x1d0 [ 86.011679] ? handle_mm_fault+0x35b/0xb10 [ 86.015909] ? lock_downgrade+0x980/0x980 [ 86.020067] ? handle_mm_fault+0x2f8/0xb10 [ 86.024324] handle_mm_fault+0x44a/0xb10 [ 86.028382] ? __handle_mm_fault+0x38c0/0x38c0 [ 86.032984] ? vmacache_find+0x5f/0x280 [ 86.036963] ? find_vma+0x30/0x150 [ 86.040495] __do_page_fault+0x5c9/0xc90 [ 86.044553] ? mm_fault_error+0x2c0/0x2c0 [ 86.048697] ? lock_release+0xa40/0xa40 [ 86.052665] ? trace_hardirqs_off+0x10/0x10 [ 86.056993] do_page_fault+0xee/0x730 [ 86.060787] ? __do_page_fault+0xc90/0xc90 [ 86.065009] ? avc_has_perm+0x43e/0x680 [ 86.068979] ? find_held_lock+0x35/0x1d0 [ 86.073044] ? __might_fault+0x110/0x1d0 [ 86.077098] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.081942] page_fault+0x25/0x50 [ 86.085389] RIP: 0010:__get_user_4+0x21/0x30 [ 86.089795] RSP: 0018:ffff8801b14efbe8 EFLAGS: 00010206 [ 86.095148] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 86.102403] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 86.109658] RBP: ffff8801b14efc88 R08: 0000000000000000 R09: 1ffff1003629df5a [ 86.116916] R10: ffff8801b14efa98 R11: 0000000000000000 R12: 0000000020012000 [ 86.124171] R13: 1ffff1003629df80 R14: dffffc0000000000 R15: ffff8801ad568000 [ 86.131453] ? __might_fault+0x188/0x1d0 [ 86.135512] ? udp_lib_getsockopt+0x8e/0x440 [ 86.139910] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 86.144406] udp_getsockopt+0x71/0x80 [ 86.148202] sock_common_getsockopt+0x95/0xd0 [ 86.152695] SyS_getsockopt+0x178/0x340 [ 86.156662] ? SyS_setsockopt+0x360/0x360 [ 86.160808] ? move_addr_to_kernel+0x60/0x60 [ 86.165210] ? do_syscall_64+0xb7/0x940 [ 86.169181] ? SyS_setsockopt+0x360/0x360 [ 86.173324] do_syscall_64+0x281/0x940 [ 86.177202] ? __do_page_fault+0xc90/0xc90 [ 86.181425] ? _raw_spin_unlock_irq+0x27/0x70 [ 86.185916] ? finish_task_switch+0x1c1/0x7e0 [ 86.190404] ? syscall_return_slowpath+0x550/0x550 [ 86.195327] ? syscall_return_slowpath+0x2ac/0x550 [ 86.200252] ? prepare_exit_to_usermode+0x350/0x350 [ 86.205261] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 86.210625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.215470] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 86.220668] RIP: 0033:0x454239 [ 86.223870] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 86.231569] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 2018/03/21 23:55:32 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, 0xffffffffffffffff) [ 86.238827] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000015 [ 86.246085] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 86.253345] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 86.260604] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 86.280921] binder: BINDER_SET_CONTEXT_MGR already set [ 86.292107] binder: 9840:9858 ioctl 40046207 0 returned -16 [ 86.304684] binder: 9840:9863 unknown command 1063070229 [ 86.314471] binder: 9840:9863 ioctl c0306201 20008fd0 returned -22 [ 86.349550] FAULT_FLAG_ALLOW_RETRY missing 30 [ 86.354183] CPU: 1 PID: 9862 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 86.361468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 86.370831] Call Trace: [ 86.373418] dump_stack+0x194/0x24d [ 86.377039] ? arch_local_irq_restore+0x53/0x53 [ 86.381699] ? _raw_spin_unlock_irq+0x27/0x70 [ 86.386187] ? finish_task_switch+0x1c1/0x7e0 [ 86.390683] ? finish_task_switch+0x182/0x7e0 [ 86.395178] ? handle_userfault+0xb97/0x2490 [ 86.399581] handle_userfault+0xbd9/0x2490 [ 86.403801] ? handle_userfault+0x1864/0x2490 [ 86.408292] ? userfaultfd_ioctl+0x4520/0x4520 [ 86.412861] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 86.418040] ? __schedule+0x8d0/0x1ec0 [ 86.421926] ? __sched_text_start+0x8/0x8 [ 86.426064] ? print_irqtrace_events+0x270/0x270 [ 86.430814] ? print_irqtrace_events+0x270/0x270 [ 86.435558] ? trace_hardirqs_off+0x10/0x10 [ 86.439864] ? plist_check_list+0xa0/0xa0 [ 86.444006] ? perf_trace_lock_acquire+0xe3/0x980 [ 86.448847] ? __lock_acquire+0x664/0x3e00 [ 86.453070] ? __lock_acquire+0x664/0x3e00 [ 86.457302] ? trace_hardirqs_off+0x10/0x10 [ 86.461618] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 86.466806] ? find_held_lock+0x35/0x1d0 [ 86.470867] ? __handle_mm_fault+0x2ded/0x38c0 [ 86.475439] ? lock_downgrade+0x980/0x980 [ 86.479580] ? lock_release+0xa40/0xa40 [ 86.483567] ? perf_trace_lock_acquire+0xe3/0x980 [ 86.488407] ? do_raw_spin_trylock+0x190/0x190 [ 86.492981] ? userfaultfd_ctx_put+0x740/0x740 [ 86.497568] __handle_mm_fault+0x2dfa/0x38c0 [ 86.501965] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 86.507150] ? __pmd_alloc+0x4e0/0x4e0 [ 86.511032] ? trace_hardirqs_off+0x10/0x10 [ 86.515356] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 86.520461] ? find_held_lock+0x35/0x1d0 [ 86.524522] ? handle_mm_fault+0x35b/0xb10 [ 86.528748] ? lock_downgrade+0x980/0x980 [ 86.532900] ? handle_mm_fault+0x2f8/0xb10 [ 86.537130] handle_mm_fault+0x44a/0xb10 [ 86.541195] ? __handle_mm_fault+0x38c0/0x38c0 [ 86.545767] ? vmacache_find+0x5f/0x280 [ 86.549740] ? find_vma+0x30/0x150 [ 86.553280] __do_page_fault+0x5c9/0xc90 [ 86.557340] ? mm_fault_error+0x2c0/0x2c0 [ 86.561478] ? lock_release+0xa40/0xa40 [ 86.565446] ? trace_hardirqs_off+0x10/0x10 [ 86.569772] do_page_fault+0xee/0x730 [ 86.573562] ? __do_page_fault+0xc90/0xc90 [ 86.577784] ? avc_has_perm+0x43e/0x680 [ 86.581749] ? find_held_lock+0x35/0x1d0 [ 86.585809] ? __might_fault+0x110/0x1d0 [ 86.589888] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.594735] page_fault+0x25/0x50 [ 86.598180] RIP: 0010:__get_user_4+0x21/0x30 [ 86.602571] RSP: 0018:ffff8801b8647be8 EFLAGS: 00010206 [ 86.607920] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 86.615186] RDX: ffffffffffffffff RSI: ffffc90001a1b000 RDI: 0000000000000282 [ 86.622455] RBP: ffff8801b8647c88 R08: 0000000000000000 R09: 1ffff100370c8f5a [ 86.629713] R10: ffff8801b8647a98 R11: 0000000000000000 R12: 0000000020012000 [ 86.636973] R13: 1ffff100370c8f80 R14: dffffc0000000000 R15: ffff8801ad568000 [ 86.644252] ? __might_fault+0x188/0x1d0 [ 86.648312] ? udp_lib_getsockopt+0x8e/0x440 [ 86.652711] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 86.657199] ? userfaultfd_read+0x220/0x220 [ 86.661524] udp_getsockopt+0x71/0x80 [ 86.665321] sock_common_getsockopt+0x95/0xd0 [ 86.669820] SyS_getsockopt+0x178/0x340 [ 86.673790] ? SyS_setsockopt+0x360/0x360 [ 86.677929] ? security_file_ioctl+0x7d/0xb0 [ 86.682325] ? security_file_ioctl+0x89/0xb0 [ 86.686721] ? do_syscall_64+0xb7/0x940 [ 86.690690] ? SyS_setsockopt+0x360/0x360 [ 86.694827] do_syscall_64+0x281/0x940 [ 86.698704] ? _raw_spin_unlock_irq+0x27/0x70 [ 86.703275] ? finish_task_switch+0x1c1/0x7e0 [ 86.707760] ? syscall_return_slowpath+0x550/0x550 [ 86.712678] ? syscall_return_slowpath+0x2ac/0x550 [ 86.717596] ? prepare_exit_to_usermode+0x350/0x350 [ 86.722599] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 86.727954] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 86.732795] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 86.737977] RIP: 0033:0x454239 [ 86.741161] RSP: 002b:00007fa640c90c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 2018/03/21 23:55:33 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia-generic)\x00'}, 0x58) 2018/03/21 23:55:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)={0x7, 0x0, [{0x400, 0x7, 0x0, 0x0, @sint={0x10}}, {0x3, 0x4, 0x0, 0x0, @sint={0x0, 0x2}}, {0x81, 0x4, 0x0, 0x0, @msi={0x5, 0x80, 0x9}}, {0x0, 0x1, 0x0, 0x0, @adapter={0x1ff, 0x7, 0x200, 0x2e, 0x2}}, {0x20, 0x3, 0x0, 0x0, @irqchip={0x3, 0x543}}, {0xffffffffffffffff, 0x3, 0x0, 0x0, @adapter={0x7fff, 0x80, 0xffffffff00000000, 0x7f, 0xccc5}}, {0x2, 0x4, 0x0, 0x0, @sint={0x4b68b362, 0x9}}]}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0x400000000000d000) 2018/03/21 23:55:33 executing program 2: r0 = socket$inet(0x2, 0x80006, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000780)=@broute={'broute\x00', 0x20, 0x2, 0x2a0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000800], 0x0, &(0x7f0000000000), &(0x7f0000000800)=[{}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x0, 0x0, 0x0, 'lo\x00', 'syzkaller1\x00', 'irlan0\x00', 'ip_vti0\x00', @random="dc7b26c44732", [], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], 0x198, 0x198, 0x210, [@comment={'comment\x00', 0x100}]}}, @common=@nflog={'nflog\x00', 0x50, {{0x8000, 0x0, 0x7fffffff, 0x0, 0x0, "fc70e2553f1af897d4184a31d5b1936b06babbc2de5647450066a1ca41a638a571521b0fe8161762b765e3c2622d0ef308c19d96f84e74547ebf377a83b01cbd"}}}}]}, {0x0, '\x00', 0x2}]}, 0x318) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x20000, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000080)={0xfffffffffffeffff, 0x1ff, 0x40, 0x1000, 0x2, 0x8, 0x7, 0x8, 0x3, 0x7, 0x81, 0x8}) 2018/03/21 23:55:33 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() prctl$setname(0xf, &(0x7f0000000000)='*!:selinuxppp1\x00') timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:33 executing program 1: socket$unix(0x1, 0x7, 0x0) r0 = eventfd2(0x1, 0x80001) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x40000) r1 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xfffffffffffffffe, 0x32, r1, 0x2000) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000000c0)) getsockopt$inet_udp_int(r3, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x8002, 0x0) ioctl$sock_netrom_TIOCOUTQ(r4, 0x5411, &(0x7f0000000040)) 2018/03/21 23:55:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) dup2(r0, r1) 2018/03/21 23:55:33 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = eventfd(0x7) fcntl$dupfd(r0, 0x406, r1) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 2018/03/21 23:55:33 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e9f2b9f70002f"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x101, 0x42800) ioctl$KDDISABIO(r2, 0x4b37) [ 86.748856] RAX: ffffffffffffffda RBX: 00007fa640c916d4 RCX: 0000000000454239 [ 86.756113] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000015 [ 86.763370] RBP: 000000000072c010 R08: 0000000020012000 R09: 0000000000000000 [ 86.770629] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 86.777889] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000002 2018/03/21 23:55:33 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f000063bff8)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r1, &(0x7f0000000000)="20a1326c8494f765aa4341ebecf7d2ddacccc4c79d48b6241e3f61407f776ca806ef6ef1a2249af15abcc0e24b5d59f5ed6ffed7a449ec247b9ec8de294c90d2e95d32cb9f52817dc80acb", 0x1, 0x0, 0x0, 0x319) write(r1, &(0x7f000034d000)='j', 0x1) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000100)=@nat={'nat\x00', 0x1b, 0x5, 0x5d0, 0x3f8, 0x2c0, 0xffffffff, 0x0, 0x3f8, 0x500, 0x500, 0xffffffff, 0x500, 0x500, 0x5, &(0x7f0000000080), {[{{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@mh={0x28, 'mh\x00', 0x0, {0x93, 0x3}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1c, @ipv6, @ipv6=@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, @gre_key=0xff, @icmp_id=0x67}}}, {{@uncond, 0x0, 0x140, 0x188, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x3dd, 0x1, 0x1, [0xff, 0x8, 0x9, 0x7, 0x80000000, 0xfffffffffffffffe, 0xfffffffffffffc00, 0x8, 0x0, 0x967, 0x9, 0x6, 0x2, 0xfffffffffffffffd, 0x0, 0xfdc], 0xd}}, @common=@frag={0x30, 'frag\x00', 0x0, {0x4, 0x2, 0x2, 0x1, 0x1}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x4, @ipv6, @ipv4=@multicast2=0xe0000002, @port=0x4e23, @port=0x4e23}}}, {{@ipv6={@empty, @loopback={0x0, 0x1}, [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffff00, 0x0, 0xff, 0xff000000], 'ifb0\x00', 'dummy0\x00', {0xff}, {}, 0x33, 0x4, 0x5, 0x21}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hl={0x28, 'hl\x00', 0x0, {0x2, 0x400}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x16, @ipv4=@broadcast=0xffffffff, @ipv4=@rand_addr=0xed, @port=0x4e24, @icmp_id=0x64}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @local={0xfe, 0x80, [], 0xaa}, [0xff000000, 0xff000000, 0xff000000, 0xffffffff], [0xffffff00, 0xff, 0xffffffff, 0xff000000], 'bridge0\x00', '\x00', {}, {0xff}, 0x0, 0x1, 0x6, 0x20}, 0x0, 0xc8, 0x108}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x100, 0x1, 0xad1, 0x6, 0x9, 0x2, 0x4aa5, 0x1]}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x630) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000780)) [ 86.840714] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 86.849084] binder: 9883:9888 unknown command -1624531186 2018/03/21 23:55:33 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000100)='/dev/input/event#\x00', 0x3, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000200)={0x100, 0x3, 0x0, 0x7, &(0x7f0000000140)=[{}, {}, {}]}) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000e94ffc)) r2 = dup(r0) ioctl$TIOCSBRK(r2, 0x40044591) 2018/03/21 23:55:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r0, r1) 2018/03/21 23:55:33 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) dup2(r0, r1) [ 86.883565] kernel msg: ebtables bug: please report to author: EBT_ENTRY_OR_ENTRIES shouldn't be set in distinguisher [ 86.917441] binder: 9883:9888 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:33 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @loopback=0x7f000001}, 0x10) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:33 executing program 2: unshare(0x20020000) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000037000)='./file0\x00', &(0x7f0000c4fff8)='./file0\x00', &(0x7f000002effa)='ramfs\x00', 0xffffd, &(0x7f0000ce3000)) mount(&(0x7f000052f000)='./file0\x00', &(0x7f00008fcfff)='.', &(0x7f00003a2ffa)="0700cc667300", 0x1000, 0x0) mount(&(0x7f0000c6bff8)='./file0\x00', &(0x7f000092f000)='./file0\x00', &(0x7f0000dcd000)='ramfs\x00', 0x8ff8c, &(0x7f000002f000)) mmap(&(0x7f0000000000/0xdf5000)=nil, 0xdf5000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f000000a000)='.', &(0x7f0000852000)='.', &(0x7f0000a60000)='ramfs\x00', 0xff8c, &(0x7f00008a7000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4000, 0x40) poll(&(0x7f00007a7fe8), 0x0, 0x7f) rmdir(&(0x7f0000d19000)='./file0\x00') 2018/03/21 23:55:33 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) memfd_create(&(0x7f000003e000)='\t', 0x0) dup2(r0, r1) 2018/03/21 23:55:33 executing program 3: r0 = syz_open_dev$amidi(&(0x7f0000001380)='/dev/amidi#\x00', 0x5, 0x101000) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001600)={0x0, 0x4}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000001680)=ANY=[@ANYRES32=r1, @ANYBLOB="7f050000ff03"], &(0x7f00000017c0)=0xa) r2 = socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = perf_event_open(&(0x7f0000000300)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x8000, 0x0, 0xfffffffffffffffe, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8c9, 0x0, 0x0, 0xfffffffffffffffc, @perf_bp, 0x0, 0x0, 0x20000000000, 0x7, 0x8, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = fcntl$getown(r0, 0x9) ptrace$peekuser(0x3, r4, 0x4) socketpair(0x8000000000001e, 0x1, 0x0, &(0x7f0000affff8)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r5, &(0x7f0000001740)=[{{&(0x7f0000000040)=@alg, 0x630, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/207, 0xcf}], 0x1, &(0x7f0000000200)=""/85, 0xfffffffffffffe02}}, {{&(0x7f0000000280)=@ipx, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/4096, 0xfffffd3c}], 0x1, &(0x7f00000016c0)=""/70, 0x46}}], 0x2, 0x0, 0x0) io_setup(0x9, &(0x7f0000001480)=0x0) io_cancel(r7, &(0x7f0000001580)={0x0, 0x0, 0x0, 0xf, 0xff, r0, &(0x7f00000014c0)="c04558079778849b52fd0bc305d6441dd790660c4224fb65057380d260b4225548d193abe09e7197847d06757a81c65df6b1629bcd2c67c9b9e7422df4340689b5b1f8e78c1bb7e24e3bf2d2200ba12fecfdc3131b858b1ce77018b74a7e0ad991eec5c77e9252ae5e8d59caea6b9ed63ee3b653ad0d96e5c8fa087362a9edbe7e1def99f9bbca7ae0f8384b40716418f776d53b5445bb87eb25cc894e7cf39b", 0xa0, 0x7, 0x0, 0x1, r6}, &(0x7f00000015c0)) writev(r3, &(0x7f0000001440)=[{&(0x7f00000013c0)="4c17d866341f124c76c83fce6d02dcdb71cbb7ad437e8717c0743d21cb8efac2effe067e13238b0873ea582521d5ea4466caae605e09838ebe1736011883fece97", 0x41}], 0x1) [ 86.935773] binder: BINDER_SET_CONTEXT_MGR already set [ 86.942527] binder: 9883:9895 ioctl 40046207 0 returned -16 [ 86.943656] binder: 9883:9911 unknown command -1624531186 2018/03/21 23:55:33 executing program 0: socket$alg(0x26, 0x5, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009cc000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x3, 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x10000, 0x0, {0x0, 0x3, 0x1f, 0x3, 0x31}}) dup3(r1, r0, 0x0) unshare(0x20000400) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f00001da000), 0x8}) [ 87.013575] binder: 9883:9911 ioctl c0306201 20008fd0 returned -22 [ 87.043644] FAULT_FLAG_ALLOW_RETRY missing 30 [ 87.048323] CPU: 0 PID: 9924 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 87.055611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.064966] Call Trace: [ 87.067549] dump_stack+0x194/0x24d [ 87.071174] ? arch_local_irq_restore+0x53/0x53 [ 87.075828] ? _raw_spin_unlock_irq+0x27/0x70 [ 87.080314] ? finish_task_switch+0x1c1/0x7e0 [ 87.084793] ? finish_task_switch+0x182/0x7e0 [ 87.089277] ? handle_userfault+0xb97/0x2490 [ 87.093678] handle_userfault+0xbd9/0x2490 [ 87.097902] ? handle_userfault+0x1864/0x2490 [ 87.102402] ? userfaultfd_ioctl+0x4520/0x4520 [ 87.106979] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 87.112156] ? __schedule+0x8d0/0x1ec0 [ 87.116043] ? __sched_text_start+0x8/0x8 [ 87.120180] ? print_irqtrace_events+0x270/0x270 [ 87.124923] ? print_irqtrace_events+0x270/0x270 [ 87.129663] ? trace_hardirqs_off+0x10/0x10 [ 87.133974] ? plist_check_list+0xa0/0xa0 [ 87.138114] ? save_stack+0xa3/0xd0 [ 87.141733] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.146575] ? perf_trace_lock+0x900/0x900 [ 87.150794] ? __lock_acquire+0x664/0x3e00 [ 87.155026] ? __lock_acquire+0x664/0x3e00 [ 87.159252] ? trace_hardirqs_off+0x10/0x10 [ 87.163572] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 87.168764] ? find_held_lock+0x35/0x1d0 [ 87.172823] ? __handle_mm_fault+0x2ded/0x38c0 [ 87.177398] ? lock_downgrade+0x980/0x980 [ 87.181537] ? lock_release+0xa40/0xa40 [ 87.185498] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.190331] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.195165] ? do_raw_spin_trylock+0x190/0x190 [ 87.199736] ? perf_trace_lock+0x900/0x900 [ 87.203969] __handle_mm_fault+0x2dfa/0x38c0 [ 87.208361] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 87.213544] ? __pmd_alloc+0x4e0/0x4e0 [ 87.217416] ? trace_hardirqs_off+0x10/0x10 [ 87.221725] ? drop_futex_key_refs.isra.13+0x63/0xb0 [ 87.226821] ? find_held_lock+0x35/0x1d0 [ 87.230876] ? handle_mm_fault+0x35b/0xb10 [ 87.235099] ? lock_downgrade+0x980/0x980 [ 87.239254] ? handle_mm_fault+0x2f8/0xb10 [ 87.243487] handle_mm_fault+0x44a/0xb10 [ 87.247542] ? __handle_mm_fault+0x38c0/0x38c0 [ 87.252115] ? vmacache_find+0x5f/0x280 [ 87.256087] ? find_vma+0x30/0x150 [ 87.259617] __do_page_fault+0x5c9/0xc90 [ 87.263674] ? mm_fault_error+0x2c0/0x2c0 [ 87.267811] ? lock_release+0xa40/0xa40 [ 87.271774] ? trace_hardirqs_off+0x10/0x10 [ 87.276091] do_page_fault+0xee/0x730 [ 87.279882] ? __do_page_fault+0xc90/0xc90 [ 87.284105] ? avc_has_perm+0x43e/0x680 [ 87.288095] ? find_held_lock+0x35/0x1d0 [ 87.292160] ? __might_fault+0x110/0x1d0 [ 87.296217] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.301061] page_fault+0x25/0x50 [ 87.304503] RIP: 0010:__get_user_4+0x21/0x30 [ 87.308896] RSP: 0018:ffff8801b50ffbe8 EFLAGS: 00010206 [ 87.314245] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 87.321500] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 87.328765] RBP: ffff8801b50ffc88 R08: 0000000000000000 R09: 1ffff10036a1ff5a [ 87.336025] R10: ffff8801b50ffa98 R11: 0000000000000000 R12: 0000000020012000 [ 87.343283] R13: 1ffff10036a1ff80 R14: dffffc0000000000 R15: ffff8801d71b7340 [ 87.350560] ? __might_fault+0x188/0x1d0 [ 87.354621] ? udp_lib_getsockopt+0x8e/0x440 [ 87.359024] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 87.363524] udp_getsockopt+0x71/0x80 [ 87.367322] sock_common_getsockopt+0x95/0xd0 [ 87.371810] SyS_getsockopt+0x178/0x340 [ 87.375797] ? SyS_setsockopt+0x360/0x360 [ 87.379958] ? do_syscall_64+0xb7/0x940 [ 87.383923] ? SyS_setsockopt+0x360/0x360 [ 87.388064] do_syscall_64+0x281/0x940 [ 87.391937] ? __do_page_fault+0xc90/0xc90 [ 87.396164] ? _raw_spin_unlock_irq+0x27/0x70 [ 87.400651] ? finish_task_switch+0x1c1/0x7e0 [ 87.405151] ? syscall_return_slowpath+0x550/0x550 [ 87.410070] ? syscall_return_slowpath+0x2ac/0x550 [ 87.414991] ? prepare_exit_to_usermode+0x350/0x350 [ 87.420004] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 87.425371] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.430215] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 87.435393] RIP: 0033:0x454239 [ 87.438570] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 87.446265] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 87.453519] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 2018/03/21 23:55:34 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xe5, 0x541000) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f00000000c0)=0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ptrace$pokeuser(0x6, r3, 0x4, 0x6) 2018/03/21 23:55:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) dup2(r0, r1) 2018/03/21 23:55:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) membarrier(0x60, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @multicast1=0xe0000001}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) ptrace$setsig(0x4203, r1, 0xffffffff, &(0x7f0000000080)={0x2d, 0x3, 0xf2be, 0x3}) [ 87.460773] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 87.468030] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 87.475287] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:34 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0xdcf2, 0x7, 0x1000}, 0x4) r1 = memfd_create(&(0x7f0000000340)='$\x00', 0x0) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000001ff8)=0x3) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000140)) [ 87.505859] binder: 9938:9942 Acquire 1 refcount change on invalid ref 0 ret -22 [ 87.514558] binder: 9938:9942 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 87.523795] binder: BINDER_SET_CONTEXT_MGR already set [ 87.530397] binder: 9938:9942 ioctl 40046207 0 returned -16 [ 87.544312] binder: 9938:9943 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 87.552017] binder: 9938:9942 Acquire 1 refcount change on invalid ref 0 ret -22 2018/03/21 23:55:34 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) dup2(r0, r1) 2018/03/21 23:55:34 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r1, &(0x7f00000000c0)={0x20000000}) sendto$ax25(r3, &(0x7f0000000100)="5b66ed0207b8807c105bf4ae461ca8e4af1e37431f4efb763091c12a922441bac9a0ceff73a00df6692a18892f15fff85063d63aa92587ba4ee808a2591bdc135962f1c7810571fde430fcf6", 0x4c, 0x0, &(0x7f0000000180)={0x3, {"0798a504fe45b4"}, 0x8000}, 0x10) 2018/03/21 23:55:34 executing program 3: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a}, 0x0, 0x0, r0) r2 = add_key$user(&(0x7f00003bd000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000facfff)="06", 0x1, r1) socketpair$inet6(0xa, 0x2, 0xd0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff}) bind(r3, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x0, 0x2, 0x4, 0x4}}, 0x80) r5 = add_key$user(&(0x7f0000fc0ffb)='user\x00', &(0x7f0000752ffb)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00003eb000)="b3", 0x1, r1) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x3, &(0x7f0000ffc000/0x4000)=nil) keyctl$update(0x2, r5, &(0x7f00000004c0)="df02754677212dfc3e2abcb24473e8e1cfef09742258cbae7b26fdc3ffa615d9da494137e175e9f2780ac5e2a09f43a1fcebf272a5a135de92bf4a9033933824f6e6aa0238014e3293535d1c0066d28e0f275188b4b4c187e18774fc2227cbb6610fc6697f5337726164c8fbe1181e6d50986cd98a5c44ac0ec375deb27eafcf7d06438f2525100400000003e7dc2f8fd85adcd88ca30e75b1e143262d94defa187e482a9b9a9a387353df7a21affce4e9149e040000000000000065afd979e9", 0xc0) keyctl$dh_compute(0x17, &(0x7f0000000240)={r2, r5, r5}, &(0x7f0000001580)=""/4096, 0x1000, 0x0) 2018/03/21 23:55:34 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) munmap(&(0x7f0000ff7000/0x7000)=nil, 0x7000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) r5 = memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f00000000c0)={'ip6gretap0\x00', 0x200}) dup2(r0, r1) 2018/03/21 23:55:34 executing program 0: r0 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x6, 0x105000) setsockopt(r0, 0x1, 0x40000000000000, &(0x7f0000000440)="d0d1e1913eb5fd3f18564fd1169f5b38a35271bc2e8080c2928bc7615a17a85de2c5f2", 0x23) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000007d000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r2, &(0x7f00003f6000)={0x0, 0x0, &(0x7f0000f39fc0)=[{&(0x7f0000c44000)='2', 0x1}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000e4effc)=0x4, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='security.ima\x00', &(0x7f00000001c0)=""/233, 0xe9) recvmsg(r1, &(0x7f0000001600)={&(0x7f0000000140)=@nfc_llcp, 0x80, &(0x7f0000001480), 0x0, &(0x7f0000001500)=""/206, 0xce}, 0x0) fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) fcntl$getown(r1, 0x9) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000300)) getpid() ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f00000003c0)) getpgid(0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000380)=0x0) r4 = getpgrp(r3) r5 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x2, 0x2000) bind$vsock_dgram(r5, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) fcntl$F_SET_RW_HINT(r5, 0x40c, &(0x7f0000000100)) fcntl$setown(r1, 0x8, r4) 2018/03/21 23:55:34 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x107, 0x1, &(0x7f0000dfaff0)="010000000300060000071a00009139cc", 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) dup3(r2, r0, 0x0) 2018/03/21 23:55:34 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) ioctl$sock_netrom_TIOCINQ(r0, 0x541b, &(0x7f0000000000)) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @multicast2=0xe0000002}}, 0x0, 0x3, 0xffffffffffff4b31, 0x0, 0x98}, &(0x7f00000003c0)=0x98) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0xfffffffffffffffb, 0x81}, &(0x7f0000000440)=0x8) getsockopt$inet_dccp_int(r0, 0x21, 0x3, &(0x7f00000005c0), &(0x7f0000000600)=0x4) sendmsg$inet_sctp(r0, &(0x7f0000000540)={&(0x7f0000000100)=@in6={0xa, 0x4e22, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffff7fff}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="801c75f53fef76e296b7222b51a7771701aac6cc99fb79e561e37165d7a21e2391141a254c5ec7bef2f0c2e06c2e27d712fd05", 0x33}, {&(0x7f0000000180)="45c3092914b90d159f69461d58e11cc8308d20a391d9cb04ee176c3c40c5e3482826fb7e8b495dc636ae954e9b660cba89c99ba8436db7e3b9f94b2ffa3f1823d0ba020cd1f39818bc139f693c42f36b286dc519255b47d9da43db06f00ec261dada44461485bf331918d2f153763bb9b9eb761e239f37801fb1b400c31dbc21276cd54aae04", 0x86}], 0x2, &(0x7f0000000480)=[@sndrcv={0x30, 0x84, 0x1, {0x43b, 0x1, 0x8008, 0x10000, 0x7, 0x4, 0x2, 0x7fff, r2}}, @sndinfo={0x20, 0x84, 0x2, {0xa1, 0x8002, 0xd3c5, 0x3, r3}}, @init={0x18, 0x84, 0x0, {0x1, 0x1, 0x40, 0x40}}, @sndinfo={0x20, 0x84, 0x2, {0xffffffffffffffe1, 0x8000, 0x3, 0x9644, r4}}], 0xc0}, 0x20000000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ftruncate(r0, 0xff) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000580), 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 2018/03/21 23:55:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) memfd_create(&(0x7f000003e000)='\t', 0x0) syz_open_dev$sndseq(&(0x7f000011c000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) dup2(r0, r1) [ 87.646333] device lo entered promiscuous mode [ 87.653384] binder: 9958:9967 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 87.663211] device lo left promiscuous mode [ 87.670213] binder: BINDER_SET_CONTEXT_MGR already set [ 87.676432] binder: 9958:9967 ioctl 40046207 0 returned -16 [ 87.683612] FAULT_FLAG_ALLOW_RETRY missing 30 [ 87.688267] CPU: 0 PID: 9966 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 87.695555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 87.704920] Call Trace: [ 87.707508] dump_stack+0x194/0x24d [ 87.711145] ? arch_local_irq_restore+0x53/0x53 [ 87.715814] ? __lock_is_held+0xb6/0x140 [ 87.719869] ? handle_userfault+0xb97/0x2490 [ 87.724281] handle_userfault+0xbd9/0x2490 [ 87.728510] ? handle_userfault+0x1864/0x2490 [ 87.733040] ? userfaultfd_ioctl+0x4520/0x4520 [ 87.737618] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 87.742819] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 87.748342] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 87.753699] ? print_irqtrace_events+0x270/0x270 [ 87.758452] ? print_irqtrace_events+0x270/0x270 [ 87.763718] ? update_load_avg+0x249/0x2d80 [ 87.768034] ? trace_hardirqs_off+0x10/0x10 [ 87.772346] ? resched_curr+0x13e/0x1a0 [ 87.776320] ? perf_trace_lock+0xd6/0x900 [ 87.780458] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.785291] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 87.790843] ? trace_event_raw_event_lock+0x340/0x340 [ 87.796034] ? perf_trace_lock+0x900/0x900 [ 87.800259] ? __lock_acquire+0x664/0x3e00 [ 87.804496] ? __lock_acquire+0x664/0x3e00 [ 87.808730] ? trace_hardirqs_off+0x10/0x10 [ 87.813071] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 87.818271] ? find_held_lock+0x35/0x1d0 [ 87.822359] ? __handle_mm_fault+0x2ded/0x38c0 [ 87.826937] ? lock_downgrade+0x980/0x980 [ 87.831085] ? lock_release+0xa40/0xa40 [ 87.835047] ? perf_trace_lock_acquire+0xe3/0x980 [ 87.839891] ? do_raw_spin_trylock+0x190/0x190 [ 87.844471] ? perf_trace_lock+0x900/0x900 [ 87.848720] __handle_mm_fault+0x2dfa/0x38c0 [ 87.853117] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 87.858313] ? __pmd_alloc+0x4e0/0x4e0 [ 87.862190] ? trace_hardirqs_off+0x10/0x10 [ 87.866525] ? trace_event_raw_event_lock+0x340/0x340 [ 87.871721] ? find_held_lock+0x35/0x1d0 [ 87.875790] ? handle_mm_fault+0x35b/0xb10 [ 87.880025] ? lock_downgrade+0x980/0x980 [ 87.884205] ? handle_mm_fault+0x2f8/0xb10 [ 87.888462] handle_mm_fault+0x44a/0xb10 [ 87.892527] ? __handle_mm_fault+0x38c0/0x38c0 [ 87.897097] ? vmacache_find+0x5f/0x280 [ 87.901078] ? find_vma+0x30/0x150 [ 87.904620] __do_page_fault+0x5c9/0xc90 [ 87.908693] ? mm_fault_error+0x2c0/0x2c0 [ 87.912839] ? lock_release+0xa40/0xa40 [ 87.916807] ? trace_hardirqs_off+0x10/0x10 [ 87.921137] do_page_fault+0xee/0x730 [ 87.924934] ? __do_page_fault+0xc90/0xc90 [ 87.929163] ? avc_has_perm+0x43e/0x680 [ 87.933145] ? find_held_lock+0x35/0x1d0 [ 87.937222] ? __might_fault+0x110/0x1d0 [ 87.941283] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 87.946142] page_fault+0x25/0x50 [ 87.949585] RIP: 0010:__get_user_4+0x21/0x30 [ 87.953979] RSP: 0018:ffff8801a38d7be8 EFLAGS: 00010206 [ 87.959337] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 87.966600] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 87.973865] RBP: ffff8801a38d7c88 R08: ffff8801c9032108 R09: 1ffff1003471af5a [ 87.981140] R10: ffff8801a38d7a98 R11: 0000000000000000 R12: 0000000020012000 [ 87.988401] R13: 1ffff1003471af80 R14: dffffc0000000000 R15: ffff8801d71b6d00 [ 87.995692] ? __might_fault+0x188/0x1d0 [ 87.999766] ? udp_lib_getsockopt+0x8e/0x440 [ 88.004178] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 88.008692] ? __schedule+0x1ec0/0x1ec0 [ 88.012671] udp_getsockopt+0x71/0x80 [ 88.016486] sock_common_getsockopt+0x95/0xd0 [ 88.020995] SyS_getsockopt+0x178/0x340 [ 88.024991] ? SyS_setsockopt+0x360/0x360 [ 88.029164] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 88.035834] ? do_syscall_64+0xb7/0x940 [ 88.039818] ? SyS_setsockopt+0x360/0x360 [ 88.043973] do_syscall_64+0x281/0x940 [ 88.047858] ? __do_page_fault+0xc90/0xc90 [ 88.052092] ? _raw_spin_unlock_irq+0x27/0x70 [ 88.056604] ? finish_task_switch+0x1c1/0x7e0 [ 88.061104] ? syscall_return_slowpath+0x550/0x550 [ 88.066044] ? syscall_return_slowpath+0x2ac/0x550 [ 88.070975] ? prepare_exit_to_usermode+0x350/0x350 [ 88.075990] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 88.081366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.086224] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 88.091405] RIP: 0033:0x454239 2018/03/21 23:55:34 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0563044000000000e6ff8fd2f79dba5fdb93b29d"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:34 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) clock_adjtime(0x1, &(0x7f0000000000)={0x4, 0x5, 0x9, 0xfff, 0x5, 0x3ff, 0x0, 0x7, 0x80, 0x9cc3, 0x40c2, 0x9, 0x4, 0x4, 0x2, 0x3, 0xe33, 0x9, 0x9, 0x8, 0x8, 0x7, 0x9, 0x7, 0x7f, 0x10001}) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) [ 88.094588] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 88.102292] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 88.109556] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 88.116819] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 88.124087] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 88.131351] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:34 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup2(r0, r1) 2018/03/21 23:55:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x402000, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)) r3 = semget(0x0, 0x0, 0x40) semctl$SEM_INFO(r3, 0x3, 0x13, &(0x7f00000001c0)=""/196) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f00000002c0)="51855376946fc1ba4d180e78c7eac494db7c9a991931b804b2ab8d06cf2c6f7aefbd10ebe1ce65ebf02fabb32a7f8a82eaf11cf5f633ae762a9a00d52aa4da2479fb440ae832b96e849501b9f7c64a869075f0c9719f31c06bfae4fe896d983ee709f16e03e12a10e2c4dcab6801a521d29512908dae8593c6d011a0087fbf3c9222434c1ab1ac647299d04422e8745e8d6e37aa19472e4292946fa97f17d791a6157b6f781058dab6b6bc2ca92f", 0xae) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000086c000/0x18000)=nil, &(0x7f0000de9000)=[@text32={0x20, &(0x7f0000f59fc6)="0fc75fedc4c3c968fb6c0f9cfbb9040100c00f3266b842008ee80f230064672ec015dec4e245bea5d41e6082f9440f20c03506000000440f22c0", 0x3a}], 0x1, 0x0, &(0x7f0000886fe0), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2018/03/21 23:55:34 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f000093f000)=@abs={0x1}, 0x8) connect$unix(r1, &(0x7f0000941000)=@abs={0x1}, 0x8) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) accept$ax25(r3, &(0x7f0000000080), &(0x7f00000000c0)=0x10) uselib(&(0x7f0000000200)='./file0\x00') ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000100)={0x800, 0x1, 0x0, 0x3, 0x4, [{0x4, 0x9, 0x3fe0698}, {0x9, 0xfffffffffffffc00, 0x7, 0x0, 0x0, 0x80}, {0x80000000, 0x40, 0x9, 0x0, 0x0, 0x2100}, {0x100, 0x7, 0x5, 0x0, 0x0, 0x2404}]}) r4 = getpgid(0x0) sched_setparam(r4, &(0x7f0000000240)=0xfffffffffffffffa) 2018/03/21 23:55:34 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) memfd_create(&(0x7f000003e000)='\t', 0x0) dup2(r0, r1) 2018/03/21 23:55:34 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = shmget(0x2, 0x13000, 0x450, &(0x7f0000fed000/0x13000)=nil) shmctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/205}) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x28001) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000001000)={0x1240, 0x3c, 0x228, 0x70bd2d, 0x25dfdbfd, {0x14}, [@generic="d4e0b4cf520edb7323dc88d4abe75192", @generic="b918163d91985f864be95bf5c28a4a80632963f800e97226376a4d46b3a73d5ce3dc6754802d3eaeb9de1746dbb6efd4882f4a73d932f924a87a6ab446c0056efcf15a7a5bb5057d0df2ef09430cd4a65686e44b6b4b5cdba5f72d20109143fdc9fe7d96f56ae96a9af60583be68755ed57e3d260a18228a58ffd9b85b3f0cbcfd752a7afed25fba3882d9ff3c19c269be803b529c6cc633c2dda4f374a3777072c4a7680d8479a272a8", @generic="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", @typed={0x8, 0x88, @uid=r4}, @generic="444b5d9d2037a9d70c0df68399171686739388aca001eb1b0f6d36b6ec57f5bd0cc7d329bdd9f9b14bcd7929adc78d5c895b9952a5214149db99f21d3ffce82abf543d197f606096e5872085035ce027c7e12aa2a4eef53f2b7dffb5e63069e2c891afd84e6a976df8104cf0ec9fc71021762da0539b5c38ff3499059b7696b4b6408b6643e0bcbc55ad1896458e53c16c3fef866d82948513ef82167c888a4596590ff7f95b4d9b81d1d7afcec68637bb9cb5495962ea105288a9c8f5caa37993e0", @generic="63c20e9c059a6ec6032ee0b3aa094c8ea495922ab27752697d9f0a53405809b4e3807209858bc30589f2f8560c154db42a3a0b2b9d5f58318182db35c8ac577e1812c0869ead989b2995043a1575", @nested={0x58, 0x30, [@typed={0x8, 0x23, @fd=r1}, @typed={0xc, 0x21, @u64=0x4}, @typed={0x14, 0x1b, @ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @generic="aaa5c49d5172c82f16c0ed16346946595d42beb1a7d80185085bb30416c242fe221ff87a62d0a89aa0f0"]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x80}, 0x24008094) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) close(r6) open(&(0x7f0000b3b000)='./bus\x00', 0x0, 0x0) dup2(r5, r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x4000, 0x0) [ 88.186685] binder: 9984:9987 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 88.224169] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:35 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r3, r2) dup2(r0, r1) [ 88.247191] binder: 9984:10000 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 88.248928] binder: 9984:9997 ioctl 40046207 0 returned -16 [ 88.283379] FAULT_FLAG_ALLOW_RETRY missing 30 [ 88.288081] CPU: 1 PID: 9996 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 88.295378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.304731] Call Trace: [ 88.307315] dump_stack+0x194/0x24d [ 88.310938] ? arch_local_irq_restore+0x53/0x53 [ 88.315605] ? __lock_is_held+0xb6/0x140 [ 88.319667] ? handle_userfault+0xb97/0x2490 [ 88.324074] handle_userfault+0xbd9/0x2490 [ 88.328297] ? handle_userfault+0x1864/0x2490 [ 88.332801] ? userfaultfd_ioctl+0x4520/0x4520 [ 88.337372] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 88.342568] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 88.348102] ? print_irqtrace_events+0x270/0x270 [ 88.352855] ? print_irqtrace_events+0x270/0x270 [ 88.357596] ? update_load_avg+0x249/0x2d80 [ 88.361911] ? trace_hardirqs_off+0x10/0x10 [ 88.366222] ? resched_curr+0x13e/0x1a0 [ 88.370196] ? perf_trace_lock+0xd6/0x900 [ 88.374339] ? perf_trace_lock_acquire+0xe3/0x980 [ 88.379171] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 88.384709] ? trace_event_raw_event_lock+0x340/0x340 [ 88.389893] ? perf_trace_lock+0x900/0x900 [ 88.394120] ? __lock_acquire+0x664/0x3e00 [ 88.398351] ? __lock_acquire+0x664/0x3e00 [ 88.402579] ? trace_hardirqs_off+0x10/0x10 [ 88.406909] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 88.412100] ? find_held_lock+0x35/0x1d0 [ 88.416167] ? __handle_mm_fault+0x2ded/0x38c0 [ 88.420743] ? lock_downgrade+0x980/0x980 [ 88.424892] ? lock_release+0xa40/0xa40 [ 88.428863] ? perf_trace_lock_acquire+0xe3/0x980 [ 88.433708] ? do_raw_spin_trylock+0x190/0x190 [ 88.438287] ? perf_trace_lock+0x900/0x900 [ 88.442527] __handle_mm_fault+0x2dfa/0x38c0 [ 88.446927] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 88.452125] ? __pmd_alloc+0x4e0/0x4e0 [ 88.456009] ? trace_hardirqs_off+0x10/0x10 [ 88.460325] ? __lock_is_held+0xb6/0x140 [ 88.464376] ? nohz_balance_exit_idle.part.95+0x70/0x70 [ 88.469747] ? find_held_lock+0x35/0x1d0 [ 88.473814] ? handle_mm_fault+0x35b/0xb10 [ 88.478046] ? lock_downgrade+0x980/0x980 [ 88.482214] ? handle_mm_fault+0x2f8/0xb10 [ 88.486453] handle_mm_fault+0x44a/0xb10 [ 88.490512] ? __handle_mm_fault+0x38c0/0x38c0 [ 88.495088] ? vmacache_find+0x5f/0x280 [ 88.499065] ? find_vma+0x30/0x150 [ 88.502606] __do_page_fault+0x5c9/0xc90 [ 88.506669] ? mm_fault_error+0x2c0/0x2c0 [ 88.510809] ? lock_release+0xa40/0xa40 [ 88.514777] ? trace_hardirqs_off+0x10/0x10 [ 88.519096] do_page_fault+0xee/0x730 [ 88.522888] ? __do_page_fault+0xc90/0xc90 [ 88.527119] ? avc_has_perm+0x43e/0x680 [ 88.531088] ? find_held_lock+0x35/0x1d0 [ 88.535153] ? __might_fault+0x110/0x1d0 [ 88.539211] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.544063] page_fault+0x25/0x50 [ 88.547504] RIP: 0010:__get_user_4+0x21/0x30 [ 88.551900] RSP: 0018:ffff8801cb257be8 EFLAGS: 00010206 [ 88.557254] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 88.564514] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 88.571776] RBP: ffff8801cb257c88 R08: 0000000000000000 R09: 1ffff1003964af5a [ 88.579037] R10: ffff8801cb257a98 R11: 0000000000000000 R12: 0000000020012000 [ 88.586303] R13: 1ffff1003964af80 R14: dffffc0000000000 R15: ffff8801d71b66c0 [ 88.593583] ? __might_fault+0x188/0x1d0 [ 88.597650] ? udp_lib_getsockopt+0x8e/0x440 [ 88.602054] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 88.606549] ? __schedule+0x1ec0/0x1ec0 [ 88.610514] udp_getsockopt+0x71/0x80 [ 88.614310] sock_common_getsockopt+0x95/0xd0 [ 88.618800] SyS_getsockopt+0x178/0x340 [ 88.622771] ? SyS_setsockopt+0x360/0x360 [ 88.626915] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 88.632441] ? do_syscall_64+0xb7/0x940 [ 88.636408] ? SyS_setsockopt+0x360/0x360 [ 88.640545] do_syscall_64+0x281/0x940 [ 88.644419] ? __do_page_fault+0xc90/0xc90 [ 88.648641] ? _raw_spin_unlock_irq+0x27/0x70 [ 88.653131] ? finish_task_switch+0x1c1/0x7e0 [ 88.657620] ? syscall_return_slowpath+0x550/0x550 [ 88.662536] ? syscall_return_slowpath+0x2ac/0x550 [ 88.667462] ? prepare_exit_to_usermode+0x350/0x350 [ 88.672478] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 88.677851] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 88.682698] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 88.687881] RIP: 0033:0x454239 [ 88.691064] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 2018/03/21 23:55:35 executing program 1: r0 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000080)="f32038f06741982ac634d9f428104861e2d2eb0091a95c02fc11854b021c16ed5b73282fb659b31a218c9592310b264fab3b7c11fd4a57309a5bd9f8994c02a40cfabf4b17d65d9f0ae3cc9ae71144073bc184609d85ce75d994aa63fa2d8ce4073c7cf31533ccdf9e64dda71a2acbf2aba458ee8bbb49a1c113534af147d357f91f99575ada54bc16b17c60c9b94b5abb0fbd651d06bd9adf26c66efe78937a93d33ea74b4756", 0xa7, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:35 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000540)=0xfffffffffffffffe, 0x4) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000000)=""/10, 0xa}, {&(0x7f0000000100)=""/30, 0x1e}, {&(0x7f0000000140)=""/158, 0x9e}, {&(0x7f0000000200)=""/243, 0xf3}, {&(0x7f0000000300)=""/162, 0xa2}, {&(0x7f00000003c0)=""/75, 0x4b}], 0x7, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f00000004c0)) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r0, 0x4c80, r3) [ 88.698763] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 88.706020] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 88.713274] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 88.720531] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 88.727784] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 88.811472] FAULT_FLAG_ALLOW_RETRY missing 30 [ 88.816176] CPU: 0 PID: 10021 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 88.823552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 88.832910] Call Trace: [ 88.835492] dump_stack+0x194/0x24d [ 88.839118] ? arch_local_irq_restore+0x53/0x53 [ 88.843780] ? __lock_is_held+0xb6/0x140 [ 88.847834] ? handle_userfault+0xb97/0x2490 [ 88.852242] handle_userfault+0xbd9/0x2490 [ 88.856465] ? handle_userfault+0x1864/0x2490 [ 88.860980] ? userfaultfd_ioctl+0x4520/0x4520 [ 88.865551] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 88.870756] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 88.876277] ? __update_load_avg_se.isra.27+0x56a/0x7c0 [ 88.881634] ? print_irqtrace_events+0x270/0x270 [ 88.886386] ? print_irqtrace_events+0x270/0x270 [ 88.891127] ? update_load_avg+0x249/0x2d80 [ 88.895437] ? trace_hardirqs_off+0x10/0x10 [ 88.899746] ? resched_curr+0x13e/0x1a0 [ 88.903712] ? perf_trace_lock+0xd6/0x900 [ 88.907847] ? perf_trace_lock_acquire+0xe3/0x980 [ 88.912677] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 88.918212] ? trace_event_raw_event_lock+0x340/0x340 [ 88.923400] ? __lock_acquire+0x664/0x3e00 [ 88.927633] ? __lock_acquire+0x664/0x3e00 [ 88.931861] ? trace_hardirqs_off+0x10/0x10 [ 88.936191] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 88.941385] ? find_held_lock+0x35/0x1d0 [ 88.945453] ? __handle_mm_fault+0x2ded/0x38c0 [ 88.950031] ? lock_downgrade+0x980/0x980 [ 88.954179] ? lock_release+0xa40/0xa40 [ 88.958152] ? perf_trace_lock_acquire+0xe3/0x980 [ 88.962987] ? do_raw_spin_trylock+0x190/0x190 [ 88.967571] ? print_irqtrace_events+0x270/0x270 [ 88.972334] __handle_mm_fault+0x2dfa/0x38c0 [ 88.976731] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 88.981920] ? __pmd_alloc+0x4e0/0x4e0 [ 88.985793] ? trace_hardirqs_off+0x10/0x10 [ 88.990124] ? find_held_lock+0x35/0x1d0 [ 88.994189] ? handle_mm_fault+0x35b/0xb10 [ 88.998416] ? lock_downgrade+0x980/0x980 [ 89.002585] ? handle_mm_fault+0x2f8/0xb10 [ 89.006822] handle_mm_fault+0x44a/0xb10 [ 89.010896] ? __handle_mm_fault+0x38c0/0x38c0 [ 89.015464] ? vmacache_find+0x5f/0x280 [ 89.019435] ? find_vma+0x30/0x150 [ 89.022973] __do_page_fault+0x5c9/0xc90 [ 89.027046] ? mm_fault_error+0x2c0/0x2c0 [ 89.031184] ? lock_release+0xa40/0xa40 [ 89.035151] ? trace_hardirqs_off+0x10/0x10 [ 89.039472] do_page_fault+0xee/0x730 [ 89.043265] ? __do_page_fault+0xc90/0xc90 [ 89.047488] ? avc_has_perm+0x43e/0x680 [ 89.051459] ? find_held_lock+0x35/0x1d0 [ 89.055525] ? __might_fault+0x110/0x1d0 [ 89.059583] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 89.064434] page_fault+0x25/0x50 [ 89.067877] RIP: 0010:__get_user_4+0x21/0x30 [ 89.072272] RSP: 0018:ffff8801ae7b7be8 EFLAGS: 00010206 [ 89.077627] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 89.084884] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 89.092139] RBP: ffff8801ae7b7c88 R08: ffff8801c0296dc8 R09: 1ffff10035cf6f5a [ 89.099394] R10: ffff8801ae7b7a98 R11: 0000000000000000 R12: 0000000020012000 [ 89.106647] R13: 1ffff10035cf6f80 R14: dffffc0000000000 R15: ffff8801d6ddac80 [ 89.113928] ? __might_fault+0x188/0x1d0 [ 89.117995] ? udp_lib_getsockopt+0x8e/0x440 [ 89.122402] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 89.126902] ? __schedule+0x1ec0/0x1ec0 [ 89.130872] udp_getsockopt+0x71/0x80 [ 89.134676] sock_common_getsockopt+0x95/0xd0 [ 89.139169] SyS_getsockopt+0x178/0x340 [ 89.143145] ? SyS_setsockopt+0x360/0x360 [ 89.147294] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 89.152839] ? do_syscall_64+0xb7/0x940 [ 89.156807] ? SyS_setsockopt+0x360/0x360 [ 89.160949] do_syscall_64+0x281/0x940 [ 89.164823] ? __do_page_fault+0xc90/0xc90 [ 89.169045] ? _raw_spin_unlock_irq+0x27/0x70 [ 89.173530] ? finish_task_switch+0x1c1/0x7e0 [ 89.178022] ? syscall_return_slowpath+0x550/0x550 [ 89.182946] ? syscall_return_slowpath+0x2ac/0x550 [ 89.187871] ? prepare_exit_to_usermode+0x350/0x350 [ 89.192881] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 89.198245] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 89.203096] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 89.208271] RIP: 0033:0x454239 [ 89.211461] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 89.219161] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 89.226416] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000014 [ 89.233675] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 89.240933] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 89.248188] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 2018/03/21 23:55:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x0) times(&(0x7f0000000080)) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x600540, 0x0) r2 = semget(0x1, 0x0, 0x0) semctl$GETPID(r2, 0x7, 0xb, &(0x7f00000001c0)=""/94) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000040)={0x17, 0x9d, &(0x7f0000000100)="42ac08f3c37d495c04808b188134c594313d20df49c554d663bb2d963c303ae3ec3e5235e66ecb263fca4f77539aefad72f77801ffd1f82693dacccf7eace50e92cd790e8e09affc603141416eab4e4ebb2439b082471516502357b30eee0d3227dfa216b8e182926ea961d25956219e297de3381eb5da92b7109db9040210502a81ea2eea1dba6d7bb225ba101269b190995dd0760fdf8eb2040858f6"}) 2018/03/21 23:55:36 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000159ff1)='comm\x00') ioctl(r0, 0x1, &(0x7f0000000000)="2214f77d0000000036a580fcc99c30058a571170ed8e21a8ddcdd1d29120f5055cfcbb09d85b75d9f7b072bbdde0da07852e0e742f94253c82e262ff8c7744a52c5791b8623afa1d1a3dad397639378b53819c2c69c2f71ec3201031cc3d0fd2f1457eaba076ee73f61daffb24a471fe99b014a71dc3a4a91c7505b62a090000") ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[0x3d3, 0x9]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000080)={0x9, 0x0, 0x1, 0x5}) ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f0000000200)={r1, 0x5}) connect$rds(r0, &(0x7f0000000180)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) ioctl$VT_RELDISP(r0, 0x5605) 2018/03/21 23:55:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000008000)={0x8, {{0x2, 0x4e20, @multicast2=0xe0000002}}}, 0x90) mprotect(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x4) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x400042, 0x0) sendto$unix(r1, &(0x7f0000000040)="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", 0x1000, 0x4, &(0x7f0000001040)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000008000), &(0x7f0000007ffd)) 2018/03/21 23:55:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r3, r2) dup2(r0, r1) 2018/03/21 23:55:36 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) r4 = dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000002c0)={0x8000, 0x100000001, 0x1, "7108009165310000000000000000000000000000200000000000000008000f000000000000000000000100004e087af47467e46a000000008100", 0x6}) dup2(r0, r1) 2018/03/21 23:55:36 executing program 3: socketpair(0x0, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = shmget(0x2, 0x13000, 0x450, &(0x7f0000fed000/0x13000)=nil) shmctl$IPC_RMID(r2, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000380)={0x0, &(0x7f0000000280)=""/205}) r3 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x0, 0x28001) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast1, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@loopback}}, &(0x7f0000000080)=0xe8) sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000001000)={0x1240, 0x3c, 0x228, 0x70bd2d, 0x25dfdbfd, {0x14}, [@generic="d4e0b4cf520edb7323dc88d4abe75192", @generic="b918163d91985f864be95bf5c28a4a80632963f800e97226376a4d46b3a73d5ce3dc6754802d3eaeb9de1746dbb6efd4882f4a73d932f924a87a6ab446c0056efcf15a7a5bb5057d0df2ef09430cd4a65686e44b6b4b5cdba5f72d20109143fdc9fe7d96f56ae96a9af60583be68755ed57e3d260a18228a58ffd9b85b3f0cbcfd752a7afed25fba3882d9ff3c19c269be803b529c6cc633c2dda4f374a3777072c4a7680d8479a272a8", @generic="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", @typed={0x8, 0x88, @uid=r4}, @generic="444b5d9d2037a9d70c0df68399171686739388aca001eb1b0f6d36b6ec57f5bd0cc7d329bdd9f9b14bcd7929adc78d5c895b9952a5214149db99f21d3ffce82abf543d197f606096e5872085035ce027c7e12aa2a4eef53f2b7dffb5e63069e2c891afd84e6a976df8104cf0ec9fc71021762da0539b5c38ff3499059b7696b4b6408b6643e0bcbc55ad1896458e53c16c3fef866d82948513ef82167c888a4596590ff7f95b4d9b81d1d7afcec68637bb9cb5495962ea105288a9c8f5caa37993e0", @generic="63c20e9c059a6ec6032ee0b3aa094c8ea495922ab27752697d9f0a53405809b4e3807209858bc30589f2f8560c154db42a3a0b2b9d5f58318182db35c8ac577e1812c0869ead989b2995043a1575", @nested={0x58, 0x30, [@typed={0x8, 0x23, @fd=r1}, @typed={0xc, 0x21, @u64=0x4}, @typed={0x14, 0x1b, @ipv6=@ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, @generic="aaa5c49d5172c82f16c0ed16346946595d42beb1a7d80185085bb30416c242fe221ff87a62d0a89aa0f0"]}]}, 0x1240}, 0x1, 0x0, 0x0, 0x80}, 0x24008094) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000d000)={0xffffffffffffffff, 0xffffffffffffffff}) mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) close(r6) open(&(0x7f0000b3b000)='./bus\x00', 0x0, 0x0) dup2(r5, r0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400)='/proc/self/net/pfkey\x00', 0x4000, 0x0) 2018/03/21 23:55:36 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) statfs(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=""/31) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r1, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc\x00', 0x2000, 0x0) connect$bt_rfcomm(r2, &(0x7f0000000180)={0x1f, {0xd4a6, 0x8, 0x7f, 0x3, 0x3, 0x32ed}, 0x8}, 0xa) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) 2018/03/21 23:55:36 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f00000016c0), 0x1, 0x0) getpeername$unix(r0, &(0x7f00000016c0), &(0x7f0000001740)=0x6e) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x2a) ioctl$TIOCMSET(r0, 0x5418, &(0x7f0000001780)=0x5) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000001580)={0xa35, 0x4, 0x100000000, 0xe4, [], [], [], 0x4, 0x80000000, 0x56d7, 0x9, "0198299b1416b79de85aadf634f7cac2"}) process_vm_readv(r1, &(0x7f0000001440)=[{&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000180)=""/100, 0x64}, {&(0x7f0000000200)=""/119, 0x77}, {&(0x7f0000000280)=""/140, 0x8c}, {&(0x7f0000000340)=""/4096, 0x1000}, {&(0x7f0000001340)=""/236, 0xec}], 0x6, &(0x7f0000000000)=[{&(0x7f00000014c0)=""/176, 0xb0}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:36 executing program 2: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x81, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000000c0)) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0x7}, 0x1c) [ 89.398005] binder: BINDER_SET_CONTEXT_MGR already set [ 89.421932] binder: 10032:10052 ioctl 40046207 0 returned -16 2018/03/21 23:55:36 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000140)={0xffffffffffffff9c}) sendmsg$nl_crypto(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=@upd={0x108, 0x12, 0x304, 0x70bd25, 0x25dfdbfb, {{'rfc4106-gcm-aesni\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0x3f}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x8}, {0x8, 0x1, 0x9}, {0x8, 0x1, 0x80000000}]}, 0x108}, 0x1}, 0xc001) r2 = creat(&(0x7f0000000080)='./file0\x00', 0xcd) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e21, 0x5, @remote={0xfe, 0x80, [], 0xbb}, 0x2}, @in6={0xa, 0x4e20, 0xe0000000000000, @loopback={0x0, 0x1}}, @in={0x2, 0x4e20, @loopback=0x7f000001}], 0x48) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r3}) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000040)={0x7}, 0x1) getsockopt$inet_udp_int(r3, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r0, r1) 2018/03/21 23:55:36 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x5, &(0x7f0000ec5000)={0x0, 0x12, 0xfffffffffffffffb, @thr={&(0x7f0000000280)="51aeacbf0e6f42cdb317a284ca28f593d9242456c9d6c2115e8095d52517e1eb8151bdb7c713068526d773557629d024debac756ce5ed91e126a36627f5fa50307eab32e23fe1da2a3af4c25a4212b44daf5ff0e89b887f0a7a04dd195acdca9e68fe0de8b437581de3cb749ebaf0ea80d03dbcdf6f9a36c12f89d52673c459317219d51219ced31f39b4b41054eaf985aa0716162a2c9674bf5fa42afdfeec3", &(0x7f0000000340)="ca7c3ca5f2459111d4df3f4abd4300724f0cef7d69b986b1c893accfe2aa1c5abb87db8e824c86033e50a3f30e35d430282f1f92c5f540d723c187c3cf169f5b3e0ea4714bd4ca9d30cc6021be3925388acb1d5ddf56a5855518bf9970f2af63f3aa15ccca7c4130ae942da964ded0576418ad5d47265ab65e3671acfd"}}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=r1) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:36 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x100000000, 0x3, [0x8001, 0x8, 0x6]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000d80)={r3, 0x51db}, &(0x7f0000000dc0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000042d000), 0xc) 2018/03/21 23:55:36 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820faeb995298992ea54c7beef9f5d56534c90c2", 0x18) r1 = accept$alg(r0, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="73797374654c98726e6700"], &(0x7f0000000100)='drbg_pr_hmac_sha512\x00', 0x14, 0x2) sendmmsg$alg(r1, &(0x7f0000925000)=[{0x0, 0x0, &(0x7f0000d60f80), 0x0, &(0x7f0000f06000)=[@assoc={0x18, 0x117, 0x4, 0x20}], 0x18}], 0x1, 0x0) sendmsg$can_raw(r1, &(0x7f0000477000)={&(0x7f0000523000)={0x1d}, 0x10, &(0x7f0000f9f000)={&(0x7f00002d5fb8)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "78107cf7ba34bb907619bca78c327758e0977d56a0428fcd2086f76c15e8bbf0272ad8184a3924c666339f8e3d1c1631d81bb612a655343ecf2221f317fc71e1"}, 0x36}, 0x1}, 0x0) recvfrom(r1, &(0x7f000069cfc1)=""/63, 0xffffffffffffff2e, 0x0, &(0x7f0000098000)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha512\x00'}, 0x80) 2018/03/21 23:55:36 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r3, r2) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) dup2(r0, r1) 2018/03/21 23:55:36 executing program 2: mkdir(&(0x7f0000efa000)='./file0\x00', 0x0) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00008bf000)='./file0\x00', &(0x7f000008aff8)='./file0\x00', &(0x7f00000000c0)="000007fb00", 0x100000, &(0x7f0000000000)) r0 = creat(&(0x7f000016cff8)='./file0/file0\x00', 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) tgkill(r1, r1, 0x40) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10280040}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=@getstats={0x14, 0x5e, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4) setsockopt$inet6_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000ff0)="2be6000900ffff01000092c5001d8d9a", 0x10) getsockopt$inet6_tcp_int(r2, 0x6, 0x21, &(0x7f0000f8e000), &(0x7f0000000ffc)=0x4) sched_setscheduler(r1, 0x0, &(0x7f0000000040)=0x3) mount(&(0x7f0000a3dff2)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', &(0x7f00002e0000)="616e6f6e5f696e6f6402000000", 0x1000, &(0x7f0000c6d000)) ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f00000001c0)=0x7) socket$inet_sctp(0x2, 0x71bd6f1ac0749fd2, 0x84) sendto$llc(r0, &(0x7f0000000100)="f7b8d5ec79d6eda3ec061c81b8a5a5aa6eeac5bae4730283562449f1842c2f30b4bb817375362e2d84e4930fa689ae548de46b241ab32d54e37979a5e362dfc43b7d390044d09077ea427f1b1722ed82d29f9193d996d51d7c0ddebd9d105f20674ffd9280", 0x65, 0x4010, &(0x7f0000000180)={0x1a, 0x307, 0x13e, 0xa8e, 0x0, 0xfffffffffffffffe, @link_local={0x1, 0x80, 0xc2}}, 0x10) mount(&(0x7f000035cff2)='./file0\x00', &(0x7f000020fff2)='./file0\x00', &(0x7f00000d1000)='Ouns\x00', 0x2000, &(0x7f0000a50f14)) 2018/03/21 23:55:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) [ 89.502704] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 89.507126] binder: BINDER_SET_CONTEXT_MGR already set [ 89.535151] FAULT_FLAG_ALLOW_RETRY missing 30 [ 89.537399] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 89.539766] CPU: 1 PID: 10059 Comm: syz-executor1 Not tainted 4.16.0-rc6+ #361 [ 89.539775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 89.539783] Call Trace: [ 89.567420] dump_stack+0x194/0x24d [ 89.571072] ? arch_local_irq_restore+0x53/0x53 [ 89.575765] ? __lock_is_held+0xb6/0x140 [ 89.579869] ? handle_userfault+0xb97/0x2490 [ 89.584296] handle_userfault+0xbd9/0x2490 [ 89.588525] ? handle_userfault+0x1864/0x2490 [ 89.593045] ? userfaultfd_ioctl+0x4520/0x4520 [ 89.597621] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 89.602819] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 89.608352] ? print_irqtrace_events+0x270/0x270 [ 89.613107] ? print_irqtrace_events+0x270/0x270 [ 89.617852] ? update_load_avg+0x249/0x2d80 [ 89.622163] ? trace_hardirqs_off+0x10/0x10 [ 89.626472] ? resched_curr+0x13e/0x1a0 [ 89.630445] ? perf_trace_lock_acquire+0xe3/0x980 [ 89.635278] ? update_cfs_rq_load_avg.part.68+0x2d0/0x2d0 [ 89.640822] ? perf_trace_lock+0x900/0x900 [ 89.645048] ? __lock_acquire+0x664/0x3e00 [ 89.649294] ? __lock_acquire+0x664/0x3e00 [ 89.653523] ? trace_hardirqs_off+0x10/0x10 [ 89.657852] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 89.663057] ? find_held_lock+0x35/0x1d0 [ 89.667131] ? __handle_mm_fault+0x2ded/0x38c0 [ 89.671717] ? lock_downgrade+0x980/0x980 [ 89.675865] ? lock_release+0xa40/0xa40 [ 89.679829] ? perf_trace_lock_acquire+0xe3/0x980 [ 89.684665] ? perf_trace_lock_acquire+0xe3/0x980 [ 89.689496] ? do_raw_spin_trylock+0x190/0x190 [ 89.694071] ? perf_trace_lock+0x900/0x900 [ 89.698316] __handle_mm_fault+0x2dfa/0x38c0 [ 89.702712] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 89.707902] ? __pmd_alloc+0x4e0/0x4e0 [ 89.711775] ? trace_hardirqs_off+0x10/0x10 [ 89.716097] ? __lock_is_held+0xb6/0x140 [ 89.720145] ? nohz_balance_exit_idle.part.95+0x70/0x70 [ 89.725517] ? find_held_lock+0x35/0x1d0 [ 89.729588] ? handle_mm_fault+0x35b/0xb10 [ 89.733818] ? lock_downgrade+0x980/0x980 [ 89.738000] ? handle_mm_fault+0x2f8/0xb10 [ 89.742245] handle_mm_fault+0x44a/0xb10 [ 89.746309] ? __handle_mm_fault+0x38c0/0x38c0 [ 89.750876] ? vmacache_find+0x5f/0x280 [ 89.754848] ? find_vma+0x30/0x150 [ 89.758383] __do_page_fault+0x5c9/0xc90 [ 89.762455] ? mm_fault_error+0x2c0/0x2c0 [ 89.766597] ? lock_release+0xa40/0xa40 [ 89.770567] ? trace_hardirqs_off+0x10/0x10 [ 89.774890] do_page_fault+0xee/0x730 [ 89.778684] ? __do_page_fault+0xc90/0xc90 [ 89.782913] ? avc_has_perm+0x43e/0x680 [ 89.786886] ? find_held_lock+0x35/0x1d0 [ 89.790959] ? __might_fault+0x110/0x1d0 [ 89.795028] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 89.799880] page_fault+0x25/0x50 [ 89.803323] RIP: 0010:__get_user_4+0x21/0x30 [ 89.807715] RSP: 0018:ffff8801d3e0fbe8 EFLAGS: 00010206 [ 89.813073] RAX: 0000000020012003 RBX: 0000000000000064 RCX: ffffffff819c1738 [ 89.820329] RDX: ffffffffffffffff RSI: ffffc90001919000 RDI: 0000000000000282 [ 89.827588] RBP: ffff8801d3e0fc88 R08: 0000000000000000 R09: 1ffff1003a7c1f5a [ 89.834847] R10: ffff8801d3e0fa98 R11: 0000000000000000 R12: 0000000020012000 [ 89.842109] R13: 1ffff1003a7c1f80 R14: dffffc0000000000 R15: ffff8801b8e1e680 [ 89.849396] ? __might_fault+0x188/0x1d0 [ 89.853466] ? udp_lib_getsockopt+0x8e/0x440 [ 89.857867] ? udp_lib_setsockopt+0x4e0/0x4e0 [ 89.862363] ? __schedule+0x1ec0/0x1ec0 [ 89.867215] udp_getsockopt+0x71/0x80 [ 89.871025] sock_common_getsockopt+0x95/0xd0 [ 89.875522] SyS_getsockopt+0x178/0x340 [ 89.879497] ? SyS_setsockopt+0x360/0x360 [ 89.883647] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 89.889182] ? do_syscall_64+0xb7/0x940 [ 89.893156] ? SyS_setsockopt+0x360/0x360 [ 89.897301] do_syscall_64+0x281/0x940 [ 89.901175] ? __do_page_fault+0xc90/0xc90 [ 89.905400] ? _raw_spin_unlock_irq+0x27/0x70 [ 89.909887] ? finish_task_switch+0x1c1/0x7e0 [ 89.914375] ? syscall_return_slowpath+0x550/0x550 [ 89.919300] ? syscall_return_slowpath+0x2ac/0x550 [ 89.924227] ? prepare_exit_to_usermode+0x350/0x350 [ 89.929238] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 89.934612] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 89.939464] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 89.944641] RIP: 0033:0x454239 [ 89.947817] RSP: 002b:00007fa640cd2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 2018/03/21 23:55:36 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r3, r2) dup2(r0, r1) 2018/03/21 23:55:36 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x3f) r2 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x6c5a, 0x2101) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r2, 0xc10c5541, &(0x7f0000000100)={0xee, 0x1, 0x8, 0x0, 0x0, [], [], [], 0x6, 0x6}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x5, 0x9}, &(0x7f0000000340)=0x10) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)={r3, 0x8000, 0x3, [0x3, 0x100000000, 0x5]}, &(0x7f00000003c0)=0xe) fallocate(r0, 0x0, 0x6, 0x9) connect$unix(r1, &(0x7f0000001180)=@abs, 0x6e) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000240)=@assoc_value={0x0, 0x6}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000002c0)={r4, 0x7f9c}, 0x8) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x89, 0x400) ioctl$KVM_NMI(r5, 0xae9a) geteuid() 2018/03/21 23:55:36 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x100000000, 0x3, [0x8001, 0x8, 0x6]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000d80)={r3, 0x51db}, &(0x7f0000000dc0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000042d000), 0xc) 2018/03/21 23:55:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:36 executing program 3: r0 = mq_open(&(0x7f0000000000)='/proc\x00', 0x0, 0x1a, &(0x7f0000000040)={0xbf, 0xfffffffffffffffb, 0x1e, 0xfc, 0xedd, 0x813, 0x5, 0x5}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x401, 0x80) fsync(r1) fadvise64(r0, 0x0, 0x6, 0x0) ioctl$int_out(r0, 0x5462, &(0x7f0000000140)) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x1, 0x0, 0x5, 0x81, "053874d28a7d03354ecba82a71199b8fcf478dc36243ea3d2f66b019bcff8f5e"}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@multicast2}}, &(0x7f00000002c0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000018c0)={{{@in6, @in6=@ipv4={[], [], @loopback}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @broadcast}}, 0x0, @in6=@mcast2}}, &(0x7f00000019c0)=0xe8) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000001a00)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001e00)=0x0) fstat(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001ec0), &(0x7f0000001f00), &(0x7f0000001f40)=0x0) r8 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000001f80)='./file0\x00', &(0x7f0000001fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getegid() r11 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000002040)={{{@in=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f0000002140)=0xe8) r13 = getgid() r14 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002180)='/dev/vcs\x00', 0x20100, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000021c0)=0x0) getresuid(&(0x7f0000002200), &(0x7f0000002240), &(0x7f0000002280)=0x0) lstat(&(0x7f00000022c0)='./file0\x00', &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000002500)={&(0x7f0000000180)=@proc={0x10, 0x0, 0x25dfdbfb, 0x10000000}, 0xc, &(0x7f0000001dc0)=[{&(0x7f0000000300)={0x1598, 0x22, 0xb00, 0x70bd28, 0x25dfdbff, "", [@typed={0x8, 0x3e, @fd=r1}, @typed={0x8, 0x6f, @uid=r2}, @nested={0x121c, 0x44, [@generic="4496846e4e9315f5094aa7fa8fab06bdbbb63cb1ad467be60f023f04b4a758d6ef04022430745b4f82d07777a417a63973dfad3831f442388cae994fc328464bc17004d326786727e188d46664ee5040402c165915f23a36dd0617fcb6b811410ff99f4da08d8a4c01febaed49df3826121bad492554ddcc4183a7441f51f3c64cad1ec07802c216ed8de91b4934da37c21f2d079cd0c2e913751c4fe7475df00b37bb58aefde6b731ac59319ef8cfb42f00ddcda2e5f278c703b64fe83d6a75270b4311ad0a0ee2400e439a53de6a54775e62ddcf8277911d44f189ef228942f941dbc2742fda3babd153", @generic="ed9e50033aea3653886b1edd30302471057523755dd602045ed07076bf7e6b7ef9316ddee62fd365339a4a88d372cd569abe32dc47fb43aac6f76f8d4fa9ed07c54ae66595347c6520aeb42f01bff96113801ffaef097d2854bcec5047833c6ad683c038c53c9c8001dff72c4ab9e5eaee6ac8a881faeaecafb3cc19c5f5b1131335629cdbb0e6e27356280adbce64a29f6dc9febefcf7cbb6daee3ddd52eb60bf2372171fb3a62edac45f8feb4e78911ffb37ce81f507c7822ba1b7fa53df4d218ee3015a2fd03a7846c4865a0fd4c0d1d5eda4d3674a", @typed={0xc, 0x9, @u64=0x3}, @generic="48f127009ae23d677576963961261623f3311afa39fd2c3246b4c62e0367c235211341364329f0ba11d64cc29af068e4496c40653fe694faf6f32446c5", @generic="43622efdf866ca497b9f518545d0eacc30eaf848dd672daaedd59e2b5631de45a89110378a6d0e997b81426947915722ad32727797d0df7b99f6086de758a6c724222b5df5b4551a1945a614d0b1760a2a9e27da65eca7a920055a2f4065d2beb60c1e799c09ea033a65c00b244232f626a0817fe60adb134c7736f0f13a044389888da17b31ac819377eb452c0e55bb4d34f6503cc8d260274e2897e741fe5f31b9b4b00bf08e3187824ffbbc5b8679447e73a3ee0de6e4f09aedf8bc28715bc4ebb44e795b4a19e7db7547a817ae36ca320d7134741aff87a37d3309240f2a991080024297ed386a020d742bea1ef4e17a44e02e12de1fbbeea3eea78d682fe800bb28a2aa5bbc063a05d251d4cf0b1787fc81dc62ba42a7de7c2107bc6207112274e86b67aa26ecc998125b306c8917fcc6720e780b5f9cb66c79bdd0fc76ffde6297e99c4503f0f6cc0a714529163de4a197dbefe5c3f900757979044cc093fd11f53000aada8667009ed9075d424b05b60c816254d068cf993d7145f0e626285f7be1f98afb0e3b80b41945f6f094d00bc90b51b56db959b387c52ded4de897eedb3a2a329a09a948128396f5cb79f6ae65c41f26f1cd623336dd30b1af83204dd8458d7ab0e2af97e5c373026098a23e9faf397ebd30078f1c7682dc0dc6b6808502546f51ce089885fb8b4fb0e294635f4f6425d039c431deafa430e37a3b8919a100e8cbc38e56ee94c1cdad9f162823ac6ee41872d5e05a6a9a1117fc3f87966419ca30b93e17de471ee055382b1daee69899f1dbb2f79c791e668e9d5932099bfe321c35e978076925b446e24043a27d7d973cf6153d92f63b4f6c786ce199fda63960624b85ba4a63d17dab8c46ee5c5eaa97b0259357cfb84d05d45c3d417990fbd051ab39e0cec9679e18999ff74bc07524f116a9670cbf0c1b13bf2d017d616ccfb2606d84393c3718ec107154c7e1d4529f63d889775654acd798704b6fae2261568e6e58780f26d84f05a033e221a1c72718a0881fc8b68be82543b9d15cba12341c4cbb2acc3e2942bc06bc4ed5b497a0f6a07fc6f9eb816a96446f50de95ac5389bfee39361d7562eedf782687e4d966b1861216061c92995365a17ff787ccf3e71d897218d0dc4909b0bc0b7e1851d33771200256487a66b92e5f46d3d003f3e827238698124709e239611c791eed0ad9d81f94d2559d469e68e54cd93a9d77fbe78e67c54666f474eebdfbb8e9e13fde6c8c77ac6be3a02075b156068596614937ee873c4264029ace4bb985ef9886bd25f6b1cb3f677c7b30889391c4661bbe201aad35d549ffb45609f1632466cf28d9e78986fccb15fd05a25472bc5bbaa002b290d498a0b18ea5f2aec37f8b30f0cbe09d69f64d00af80812d6d1caf03a8ccb9cd15b94b5cf4ef4f0b87c9746be8a312e8181927c1309740e78070bd41e9092315bcc5657818fb088f77d0630f86bf9c1feae5a195afc62506a138c688fd964a851966b434d7f314dafdb4b8d38204930c4f269693c98fb3107bd0e75a6bbc6cac52072b0ec9197ec36ba40ac824c6d6c7b77c8d8393fcdb610445e27c60c76ce06180f5b46ec2145431f1ac725756512879dd43a67b0b52d7c5e8a21f56bdb3aa5802a40fbdce5b49eff7614858e6b10ceecae0be35a4694aeca12582fec48e1c651222a7c01dae062aceba7b58511756fca24eb5e14d54b02ac486b155e2234b5a03a8575bec6101ff0a6c804df7d16bddda6cfceecf1f83aa93d0376ad09aa905070fe6a0a6cc42a2910dc5ac0fd978d930cc0b8af56db178567cd4d96cdc4e2030053732855f22bbd30f211a7280796a689dfde9646ab7b1d826f27ede38ac45c235a735e3a946a76860df2886b6123ca54eda7891c5719510e8d4203e2e5f4a7968529986dd88c41371defaea836697d371c15239695d5918f7938713000ce52cde7b620b236346ddab930273de73fcf419491910410cdcfde5948fe1c969f855274d563716d1ef17bbd99177bf0af3d2685e3d1c142f19f3eb4a6f7c6c4a1e35d4c3f896c1e368daacfe5a1e5861720258c010a6698741c845b663e6b8dc9d6396c2a39f490c990b03651de25ad0b73da4c8cc0d426887956bb6b73b7f0eae42dd07ca3a88a472421a8e5c608166e96d838b16293a5d0609accce5c6bd0f4e2330806194e6d0d5de26a4aec1f5634bec46033cd5d9d2df178db023cd0355110b1a2ba3db122e363d0916bd5e7ca1a392c3e527b7111662566c08ace254cccb880142cac89d4c3a0a7cd07732274778713a99eada6d5ef881545ae71d003f2bfd4c8abd5bc8e12dbd287e532432eaf287c18e428812c49b0d66a92a4cf9f8d9b128f13c2eeb3fc094d1689823ed198f8ee8f1dc094792a2d7712796fe2411121fe03277bbe080d323bc1011464424c6acb967bfd3f8c6294b560dc6c6febae267b7c78325fb9b79ee3a9d0cb40e31bae00912cef6760ff43c2b5a23d18db3d25c4c619728563260e8dec49c69476dd98e0012ab3485754597c41853eb7ce7780b1444a8c42f652cc084041dfd1cbab29cd811cdb54411945c8f7c87d20d5066f343a2ef9ed6d8dc4c97dba8f438e0307e0709fac25fbcc1077473e7580882a8b379638cf4f9b4a8701c1818855a2efd97938c38377915a3b7de563d548148777ea96c1e4afd293208a26ecd68976ba8c8fa35ef28137ab953afa65c8bd178ad272ef772ebceb92dfcec8f2fe05f369d288ca183019f814fa869f1a6c7823792f8e18277ba920ca513b56b121964bbe584e0336be1183a98cbb7432311522950a5271b72e2363ea4d4de5980a539fbaffbb0d0d7c431d7995e82ca7ed61e0687e12e6049e5c86626b016bcd2e2dc80853bba897eac576f264b324e4009b366a3ad51f8a86c18ed4ff1961f36ac4defead0cc25ea124c712d7177e7ead5dab91e485f7cb117c2de1c98c2ad5ee2a2c48e0bbc10af32065d6e48024f162803e6230e85d2438366d1ffdb96d1d469bef1ef2c3e8f8cc65200bd543c02dfd695a9512d17f4201f084ff3ca5b8c1733b7cc34be81e542f81cdc40c0b9c53bd0bda876c2f39e1101564ab7c3696d05d92c750b700c56ae830231109905987183ac2abe9f6b5669204eda8bcc79e124cd0ffba9cc92cc5ce4198a8df96e9c89125990b8310e9e8f34c245f7c1490a6856fc44b112336aa484a7d24b0a7d09a67a9d13add7ededffc304f16c6ac61bed6befae9570d20a6991776a3d98d7acbbf6f4ee9f666d32455e2c2a93e25b4494852d7a135c1411cca1334139a5fe5de535672f56a1974f4ae5adc55f680e839cf807949a285b2e722726b61a48f2e57eeb957521da6c5438056467464d0c9eb85e96dc7524203007c8f8ac69c4f4e9bc515136fd0470e754bc2c7ec142595afffb9047462a3fe5aa65309cab8346e35f25831ec07760718418d1f928d89b61ba74b1ee277eccee6070be17512c3751c60d5bd52884d4984aa737aaa22db21e1eccb1a9c2512ba38ee236f1916922b635a51586795339b116590e4b9330683b04207e0159b366fec6a2ae7c99a767a69539ceaa6cdf09a555723ed4ce389aace905b03a3b397970ee9e44549ad55c6de370a381a677f24ac5fc9d1c7ef204e9c620b2d972809ad9135d99c5f64a257f55e7af7e1f3a7887f402dfd71517fe7f021f30162a07726f137bbd4623e2328d5abaff8e76c888a4133a8d4d663104c4c85a6c1bb0db64ea008f758ab2789c4da76cc53989c71dc99d1fb6479e00e32b9509403b07c9295bf9a02d59f0382a442fd9b5ae90a6a6f0fc6c434d356e30a4c501ea11297d880fa38b763f422a27b189bd5bd4fcac510f71c742bef3e7fd0bba84ff4a016713605f9da8f4ffdf2f91f4b37503d7da464cc3963129bbedf63aeaed724a45fb397ba933364f0b4cf6a40cc2c9f4c44d5278ff1ced653f02156d7fc2aeda1b7836b82957a44f6ed4d00b3096306edaa790e2903c78cf2013b7813bf26c4d4e39434f2fde872b16ed8f8dfc1fb06b0a811f290dd6a390873f548dd5522c609053a51c0b9bd42be29320a4f9a033ddee17f47132186c29b1eafe20f9496894fe48d3f2368aa5cbe53eddc0bbbc490c821e0da9492dba086d0ebc31d2d5e6d8969dd8e96ad160efed9c5dc960fc3897dd9f187340a7658dc1febcc63d376d4fd6ebd4191823235d962753ae905a770bec96d1c11408f2bc8d4fc9e0101f9ad0f91ddd58d86a73ab82e7d1b95c0bbbfc4e724f681d8b1b693758392e8c84fbbc2d16c0f1b2f433ddad02d0555f6e0c32c1a56cbd947a2d5e27a6adb118beb1f073903bb2e8be343e917653db7bda97d75eef1181606002477c20f2efd7e240f2c0064b1ec5c72e0a3942caed265079e5a087ea5aa93d291a5b7e2993ae7b210a1f717fe5ccbb533c38eee6eac7a3fc98409af9fb8f4a70a3637c400aaaa9db6e176788e30f766c06ff0e57e1919ccb0f0cf19398eed3a724bee928a3e06d95bc8d1cf72107e3f3b053928d1218825306130f24cdeb4aa87607eb1c60e99113639e4f0e2ceffeee896ff48c16813cc5e3185e90e854a5708a8f9bec1c09fc7628e75181d2508a92a435299c704dd559239816e67a778fb111ac661367c39d47c2c578cd48084be50ba1619c690842338c62d407bd5ef542684bdda79557497f36b04ab410480aba70894f58376f7393ad9cc4a0ad7a2a7c28268f820e607a25993f7250711e08550126abb1e6a34de517cd06530eb4f7f0eaf72f7cb4da989bbee1da03948edf8c3566522335567870e65771e97f02b921923f4d5c66ad767d1710765222533499de77348770a0da18b515a749192088468c1ab68f92d4fdea19494f41c27675febd114d7724c390d8a03dac4605f8ab737af0a820626444e2e459b82c3068c0768a0a289015011c6f017b93c141445c27a0746e15855fead1c42ceb51c672fa7156c86c5ba8d85208f846f5facbff0b92ffb2f25a6f4633aef0c171ff514bd87e9eae09307364fc342461deec0ef06ed8a70a5d28daa07592097737ee1fe08153d8909f8b37f0cf546ccd810bc9183ac648bf5230685709448ccb7a1d7817edd6ff10f849df191b77740b8eda6dfd3a718d5a60da3e6b9e09132d8df70502e8d49decc785dc22e7cb5c634d97970fbc3eb4db14033bf40768e3779324d23e37f8b2099329d741444edc0722f7b283557b16ff69235e52e0cdd8bc61c60fe04e927fcfe4a3b5e34de38ba133aaeaffa08f5a3c3ae125a0e49af711bd9213c04be7ac69d793e80661dc227e52b3bc7bd964da064a323abfdc8b86690377d1b8b06227aecb4fa7222afaddb6c0843f9a1a1e2f40f1103b156e0e95143e1602aef3bce5923f0473f1993ac1ffe53eeb9cf44f868aca6a19057760d374700adb0cdef8489c9773aa166659aa68081f43c5500ce2737dbb953366f73cbd4e535c53abdffb715cc37d3eb02cdca2b1f49508c9ff8266235f0c7c61de3decd9d7e3b8e24612eff7c9e2819e2a6ce8354a55fa4550207b935cdd25a21d7ca7185de0a1ca2cc803334c72af87b505a817409efdba5f1f428ca1895266de8e4e579416bad956a2c2b050c6ac38f89bdf0f6f7a06d1388aaf4c997e4e7e0cc465a4c838ca8cd5f6ad5f70379d10caf268fb3d94cce2de27fac53d405f8478ed99d07507f015b7db0e8ebad315d792a12eb21d9759fe3d7ddd3d5e24a40c44432df782fbb599d72f7cb716d3ccee0f4c415b440eae226dad8eb3a269b8d47d937a2b16", @typed={0x4, 0x11}, @typed={0x8, 0x69, @u32=0x10001}]}, @typed={0x8, 0x5b, @ipv4=@multicast1=0xe0000001}, @nested={0x214, 0x13, [@generic="b81a5367e6aa92edcccc09b1eca0ed4da103406d8668ad8c9697c309b185401bd8e7c751918a506f17d16a5813a8a2a3d7", @generic="4e1de1c006ca4cac7a0eebfdb2e2761a6712eb1a339ca37bf413807fc590588bd3ba6f188b6bbba5c9dbe91c29c591502b66b1029cefbb65b54b2628d6147263da6f25513528bb651adb7012fc3bd7f40841b10bb09b643e06f341858ccd7bcbc595e8ba249c7e85ad6080109183f85c6c2bb74531ed0db4e2b04e02f4c2fde5ec7e0c6281f342728798e577d7e1829c45f313695dddb6b866e5210ad36e055a96cfd684219ca8ca95f7fce62ee7918010ec85a3e0559f48c0fbe2dfde076aff9a5b2d3706583ffe8ec6e1461bf969ac5b65e7c65f093a", @typed={0x8, 0x95, @u32=0xff}, @generic="ebaea0d38c8d9f35bd0df378f7af9c3b6985fab026b4f4a649d926e8e3c1e8d0b2be11abc31a197ce330905e7c9cfdb3a4b6cb3a510e3621fa638448deb1db53a8d0b532745a98228a5620927797e81c8307c7c2f40c7e74963d55a8cc7f705a9021345b732c0fb7b4fbeab9ae124d5e8396838870dcdca121d144e557234bebf40c9b59c62aca362ae5d7745badefe4633bafd7a4a73dd2b30eed6896f89946ac7d", @typed={0x5c, 0x1d, @binary="fbff42c07e4cfd893f10ac0f713ba073d9957bc683594e1c47683be738bdc99cc161fb2c438391cc5b35d8a738ecfb135eb46a77da612a95fd7560683d17396a962afd4c42d2f3d9c916af02848ae29edc33d528124312ce"}]}, @typed={0xc, 0x8a, @u64=0x8}, @typed={0x8, 0x3d, @str='\x00'}, @generic="ed306275eb2825b590d805b656d0fc3955cb7a56574f23b8805f8310843911e2e78454a5761dcc8d515114e762c8f4961e5736b5c81f8a38e2b7293ba099a2c422a0aabc5e", @generic="ad6d7936d7840233c50baf9e045dd595bbf183fbbfc86c6e94356be6f744b40deb7881fa9e3fff758b61e91fb69ef099fd62df1753b9bf4c58d89d36f7693964118a57515d4e92d3a66672e4d2a33d44c86281b7655d9cee5ffac51605b4502346510e3ed382b9c4dedbeac234007c2077ed393fe6a88cc393224f549144d2ef312c006c684d2729631e57fa5b4de64a79ba5ed89d85e42849cbba4bb2f4f697f4407c92ec3c0e334de63cc5b1ffba8a557c8d1d278e8a1c6557b47cb3499f39b99c63f9aba60d9625cb37cd75858453ed973144b4e596dd8070c5e402b3b50a7ee069be147a0a"]}, 0x1598}, {&(0x7f0000001a40)={0x330, 0x30, 0x808, 0x70bd25, 0x25dfdbfc, "", [@generic="48549e62a8e925cf902f61078a4213de8825c91ae88e65f4378d81ae637e38a8e644a207f2a83855ca295d4e4710b5a700bc824141f4112c75fac733d7c0870f4ce51baa8ea68f0cdd09c8abed70c62e1992819c869e28fd7775ce15e8f31f77cfd6a2b8268695089e745a29c88e551da406b5f85e", @nested={0x26c, 0x41, [@typed={0x14, 0x77, @ipv6=@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}}, @typed={0xc, 0x8e, @str='/proc\x00'}, @typed={0x8, 0x80, @uid=r3}, @typed={0xa0, 0x8, @binary="4d1850ce708607372b22419836b29dbdbe84c12e90f7b78ab6498774e6863d98a95a133fe726bd1d531f87a809a06c44fbd4a08b65abcda06154dd1e899f9be78c093d4bd72a4f0ccdd8be40c6885d7afdd446863203c398de59de7d183da10ec5784811bac04566bdfd8bbabfd37ff98969b18c2542dd2f0cdeb584a1cc79d7c856b09a61d69be328b908432ba97554fd8513e14cae2036d2de"}, @generic="711c59198072349782578855e3b5cee66c33710e8a981399283d1ab707c3bd53e9f8e4b574eaefe1e4963c14386fc1f660a9644aaf1982e945e8711df9ba60c207be8d77242c20fe360a31db779fe01cab4777e81a0ca979123374393a578378290a34726057c431d62ea53e39161fd1f6db67c74e84b91c98b06b56821d9de61cfc17781c5c5fb4741f005671943a68dd1e32d825ed007cf6590a0390e539a7c32ac2c088f1c719efc732f715d0916828d95584ef02e9f2e4c074d805a533c64bdc4b112e19fb6bc9e04309a43de130ce481fee2e375c8cc545a496fc1a77", @typed={0x8, 0x3e, @u32=0x8000000000000}, @generic="2f1c27a48073102c7d576bec15cf45e42ce71a6b8fc1ffbff7a7d37f6ed71091a702219815bb006e9985bdc18fa5883b37e7e75baadde41a738905fe48fa2559af3b1ec6a26ca588fa541a4f9df0b6415478c5705a0b178bb07b56e7602fbb05ecf34208f2558200b2195706a24050155d743671086851183fef4fe25f7c9e070e887c0d1512cade07c63d6424b6322fece937cfe84f3741e4a1e617aa31a08c33bdf67a8656d18831d8ef5f99742a00ad", @typed={0x8, 0x7d, @ipv4}]}, @typed={0x8, 0x84, @pid=r4}, @typed={0x8, 0xf, @u32=0x1}, @typed={0x8, 0x2a, @ipv4}, @generic="686e66f17a026d1e8349e299c41ea52317c2eed8b3dda6a1e7a63c399bb7103d3fa5b5d6"]}, 0x330}, {&(0x7f0000002540)=ANY=[@ANYBLOB="100000e914dd54e62aaa57050000020028bd7000fedbdf25"], 0x10}], 0x3, &(0x7f0000002380)=[@rights={0x30, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r14, r1, r1, r0]}, @rights={0x30, 0x1, 0x1, [r0, r1, r0, r0, r0, r1, r0]}, @rights={0x18, 0x1, 0x1, [r1, r1]}, @rights={0x28, 0x1, 0x1, [r0, r1, r0, r1, r1, r1]}, @rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r15, r16, r17}], 0x168, 0x4000000}, 0x14) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000edeff8)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe(&(0x7f0000000100)) fcntl$setstatus(r18, 0x4, 0x2000) 2018/03/21 23:55:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xb4) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) [ 89.955516] RAX: ffffffffffffffda RBX: 00007fa640cd36d4 RCX: 0000000000454239 [ 89.962773] RDX: 0000000000000064 RSI: 0000000000000011 RDI: 0000000000000015 [ 89.970033] RBP: 000000000072bea0 R08: 0000000020012000 R09: 0000000000000000 [ 89.977292] R10: 0000000020000ffc R11: 0000000000000246 R12: 00000000ffffffff [ 89.984556] R13: 0000000000000168 R14: 00000000006f3260 R15: 0000000000000000 [ 89.996747] binder: 10069:10072 ioctl 40046207 0 returned -16 2018/03/21 23:55:36 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000011000/0x2000)=nil, 0x2000, 0x1, 0x32, r0, 0x0) r1 = userfaultfd(0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/load\x00', 0x2, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000002000)={0xaa}) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r1, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:36 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x100000000, 0x3, [0x8001, 0x8, 0x6]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000d80)={r3, 0x51db}, &(0x7f0000000dc0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000042d000), 0xc) 2018/03/21 23:55:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) dup2(r0, r1) 2018/03/21 23:55:36 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x4, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:36 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000080)={{{@in=@dev, @in=@broadcast}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f0000000180)=0xe8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f0000b84000)={0x10, 0x34000}, 0xc, &(0x7f0000220000)={&(0x7f0000000340)=ANY=[@ANYBLOB="1800000023000103ffffffffffffffff160000fb2b000000e2fe723145967fa572b112b5fc2a95920ad6192370a0548e59406ccbc0374482278212751871aaee6e20c64b2e2a9da8017fb2dc777001f91ca2d1f297"], 0x18}, 0x1}, 0x0) r1 = add_key(&(0x7f0000000040)='id_legacy\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r1, &(0x7f0000000240)=""/248, 0xf8) 2018/03/21 23:55:36 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) syz_open_dev$sndseq(&(0x7f0000042000)='/dev/snd/seq\x00', 0x0, 0x0) dup2(r0, r1) [ 90.031602] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.067126] binder: 10093:10096 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 90.101995] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:36 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x100) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000140)=0x60) dup2(r0, r1) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r3, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000012000)=0x4) ioctl$UFFDIO_ZEROPAGE(r2, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) r4 = semget$private(0x0, 0x0, 0x0) semctl$GETPID(r4, 0x0, 0xb, &(0x7f0000000000)=""/94) 2018/03/21 23:55:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) dup2(r0, r1) 2018/03/21 23:55:36 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000196fe4)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000327f68)={0x2, 0x400000000000003, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa}}, @sadb_sa={0x2, 0x1}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}}}]}, 0x70}, 0x1}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x0, 0x0) 2018/03/21 23:55:36 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x100000000, 0x3, [0x8001, 0x8, 0x6]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000d80)={r3, 0x51db}, &(0x7f0000000dc0)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f000042d000), 0xc) [ 90.111774] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.119411] binder: 10093:10112 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 90.120603] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 90.154948] binder: 10093:10096 ioctl 40046207 0 returned -16 2018/03/21 23:55:36 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:36 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:36 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6, 0x8000}, 0x4) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:36 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) r2 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x100000000, 0x3, [0x8001, 0x8, 0x6]}, &(0x7f0000000500)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000d80)={r3, 0x51db}, &(0x7f0000000dc0)=0x8) 2018/03/21 23:55:36 executing program 2: r0 = perf_event_open(&(0x7f0000014f88)={0x1, 0x311, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fchdir(r0) 2018/03/21 23:55:36 executing program 3: r0 = socket(0x40000000015, 0x5, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x1018, 0x26, 0x3, 0x70bd28, 0x25dfdbfe, {0x1a}, [@typed={0x1004, 0x8d, @binary="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"}]}, 0x1018}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c1) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x4e1e, @loopback=0x7f000001}, 0xffffffffffffff7e) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000001180)) sendmsg$alg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000fd0000), 0x0, &(0x7f0000000000)=[@assoc={0x18, 0x117, 0x4}, @assoc={0x18, 0x117, 0x4}], 0x30}, 0x0) shmget$private(0x0, 0x4000, 0x830, &(0x7f0000ffa000/0x4000)=nil) 2018/03/21 23:55:36 executing program 1: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x64, &(0x7f0000000ffc), &(0x7f0000000100)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20400, 0x0) getsockopt(r1, 0xc03, 0x80000000, &(0x7f0000000040)=""/107, &(0x7f00000000c0)=0x6b) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000908ff0)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2018/03/21 23:55:36 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000004000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="050100400000000d"], 0x0, 0x0, &(0x7f00000001c0)}) r2 = getuid() r3 = getegid() syz_fuseblk_mount(&(0x7f00000001c0)='./file0\x00', &(0x7f0000004040)='./file0\x00', 0x6002, r2, r3, 0x101, 0x419, 0x841) recvmmsg(0xffffffffffffffff, &(0x7f0000003d80)=[{{&(0x7f0000000040)=@pppoe, 0x80, &(0x7f0000000400)=[{&(0x7f0000000100)=""/179, 0xb3}, {&(0x7f00000001c0)}, {&(0x7f0000000200)=""/68, 0x44}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/75, 0x4b}], 0x5, &(0x7f0000000480)=""/122, 0x7a, 0x80}, 0x2526950e}, {{&(0x7f0000000500)=@pppoe, 0x80, &(0x7f0000000680)=[{&(0x7f0000000580)=""/215, 0xd7}], 0x1, &(0x7f00000006c0)=""/90, 0x5a, 0x3}}, {{&(0x7f0000000740)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000c00)=[{&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/42, 0x2a}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000900)=""/167, 0xa7}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/99, 0x63}, {&(0x7f0000000ac0)=""/106, 0x6a}, {&(0x7f0000000b40)=""/165, 0xa5}], 0x8, &(0x7f0000000c80)=""/59, 0x3b, 0x7fff}, 0xfd69b40}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)=""/83, 0x53}, {&(0x7f0000000d40)=""/228, 0xe4}], 0x2, &(0x7f0000000e80)=""/188, 0xbc, 0xb804}, 0x3f}, {{&(0x7f0000000f80)=@nfc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002040)=""/165, 0xa5}, {&(0x7f0000002100)=""/191, 0xbf}, {&(0x7f00000021c0)=""/52, 0x34}, {&(0x7f0000002200)=""/201, 0xc9}, {&(0x7f0000002300)=""/163, 0xa3}, {&(0x7f00000023c0)=""/195, 0xc3}], 0x6, &(0x7f0000002540)=""/11, 0xb, 0x907a}, 0x4}, {{&(0x7f0000002580)=@llc={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000002800)=[{&(0x7f0000002600)=""/13, 0xd}, {&(0x7f0000002640)=""/147, 0x93}, {&(0x7f0000002700)=""/141, 0x8d}, {&(0x7f00000027c0)=""/30, 0x1e}], 0x4, &(0x7f0000002840)=""/10, 0xa, 0x1f}, 0x5b7}, {{&(0x7f0000002880)=@pppoe={0x0, 0x0, {0x0, @remote}}, 0x80, &(0x7f0000002940)=[{&(0x7f0000002900)=""/8, 0x8}], 0x1, &(0x7f0000002980)=""/188, 0xbc, 0xead}, 0xe648}, {{&(0x7f0000002a40)=@can, 0x80, &(0x7f0000003ac0)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000003b00)=""/165, 0xa5, 0x7f}, 0x1}, {{&(0x7f0000003bc0)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003c40)=""/5, 0x5}, {&(0x7f0000003c80)=""/79, 0x4f}], 0x2, &(0x7f0000003d40)=""/45, 0x2d, 0x3}}], 0x9, 0x0, &(0x7f0000003fc0)={0x0, 0x989680}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c406dc464"], 0x0, 0x0, &(0x7f0000000f4d)}) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000004240)=[&(0x7f0000004080)="3a657468305d75736572852b5c00", &(0x7f00000040c0)='\x00', &(0x7f0000004100)='/dev/binder#\x00', &(0x7f0000004140)='$-proc\x00', &(0x7f0000004180)='/dev/binder#\x00', &(0x7f00000041c0)='/dev/binder#\x00', &(0x7f0000004200)='/dev/binder#\x00'], &(0x7f00000042c0)=[&(0x7f0000004280)='/dev/binder#\x00']) [ 90.204871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 2018/03/21 23:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x8000}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') r1 = request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)='bcsf0\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r1, 0x1f) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x80, 0x9) 2018/03/21 23:55:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) memfd_create(&(0x7f0000000280)="2f6465762e7309003f880dd3a83fd1d4ae455e00a29f2be8440000000000000000", 0x0) dup2(r0, r1) [ 90.207758] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.280454] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt 2018/03/21 23:55:37 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) unshare(0x20000400) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x541a00, 0x0) setsockopt$RDS_FREE_MR(r1, 0x114, 0x3, &(0x7f0000000080)={{0xffffffffffffff1a, 0xffffffffffffffff}, 0x10}, 0x10) timerfd_gettime(r0, &(0x7f0000000000)) 2018/03/21 23:55:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000004c0)={0x0, 0x100000000, 0x3, [0x8001, 0x8, 0x6]}, &(0x7f0000000500)=0xe) [ 90.304482] audit: type=1400 audit(1521676537.026:54): avc: denied { ioctl } for pid=10153 comm="syz-executor2" path="socket:[26563]" dev="sockfs" ino=26563 ioctlcmd=0x8914 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 90.329316] binder: 10139:10148 unknown command 1073742085 [ 90.353355] binder: 10139:10148 ioctl c0306201 20004000 returned -22 [ 90.367511] binder: 10139:10152 BC_REQUEST_DEATH_NOTIFICATION invalid ref 6603885 2018/03/21 23:55:37 executing program 3: unshare(0x28060400) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x4, 0x303000) ioctl$PIO_FONT(r0, 0x4b61, &(0x7f00000000c0)="7057b00963e88d8f64f44ecad213a0c12fe828ee787d98c5d7cefeb869886c0716166c5b3fc96f872bf24d474e234e9aa9f0c3f259a22f0c23b18ccc9ee546") r1 = memfd_create(&(0x7f0000816fff)='\x00', 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000a76fe8)={r1, &(0x7f0000829000), &(0x7f00003a4000)=""/255}, 0x18) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000140)) utimensat(r1, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{0x0, 0x7530}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x12000, 0x0) 2018/03/21 23:55:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'bond0\x00', 0x8000}) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000200)='bcsf0\x00') ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000080)='bcsf0\x00') r1 = request_key(&(0x7f0000000100)='.request_key_auth\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000001c0)='bcsf0\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r1, 0x1f) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) splice(r0, &(0x7f0000000040), r0, &(0x7f00000000c0), 0x80, 0x9) 2018/03/21 23:55:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f000049d000/0x4000)=nil, 0x4000, 0xfffffffffffffffc, 0x32, r0, 0x0) tkill(r1, 0x1d) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) dup(0xffffffffffffffff) 2018/03/21 23:55:37 executing program 1: r0 = syz_open_dev$loop(&(0x7f00006a5ff7)='/dev/loop#\x00', 0x0, 0x102) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) r2 = getgid() fchown(r0, r1, r2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x8080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r3, 0xc010641d, &(0x7f0000000100)={r4, &(0x7f0000000080)=""/92}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f00000002c0)={r5, 0x2, 0xa2, "a4029e57d59e3a295bebbcf61282804742752882169cb26bbe0bb05dbb80d8e9960ed48e9f04f55057b1e27cf501d159b1a37b65413b54e32c0f2cdcfa30e700ffd860d7a5dc16ec2c5c5aee438426abbcd18ef02a7049129821b425cbe0a9ca6c0e73e5f15b92a21411f3affcccbc076d9e6ee3edb62b64309853d76c6de70d4a5e5c32a8788a31108521416c911c59aad9168dd905742d17c74e306088534ba271"}, 0xaa) setsockopt$inet_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in={{0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x2, 0x1, 0x9, "ae7398cc5448eeb067f8dfbb4e5135b34063b85c777ea321e0215cd10141c886255f29aea37f7148fdbbaee0e8263a2aeb20f243d3f2279ab4cfba6e7b1f8a2d0a10cde5da56c0864ab8ee7b063d7da9"}, 0xd8) r6 = fcntl$getown(r0, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r6, 0x10, &(0x7f0000000480)={0x5}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8a8) 2018/03/21 23:55:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:37 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) 2018/03/21 23:55:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e510c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x81, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0x2}}, [0x4, 0x0, 0x80000000, 0x8, 0xf960, 0x9, 0x11b6, 0x40, 0x2, 0xffffffffffffffc0, 0x5, 0x2, 0x1, 0x4, 0x10000]}, &(0x7f0000000180)=0x100) getsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f00000001c0)=@assoc_value={r3}, &(0x7f0000000200)=0x8) [ 90.397217] binder: 10139:10148 unknown command 1073742085 [ 90.403309] binder: 10139:10148 ioctl c0306201 20004000 returned -22 [ 90.412272] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.418952] binder: 10139:10171 BC_REQUEST_DEATH_NOTIFICATION invalid ref 6603885 2018/03/21 23:55:37 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r0) 2018/03/21 23:55:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) setsockopt$inet_mreqsrc(r1, 0x0, 0x8000000000000026, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:37 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 90.485238] binder: 10180:10186 unknown command 1074549006 [ 90.491154] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.496148] binder: 10180:10186 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:37 executing program 3: r0 = socket(0x1e, 0x4, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0, 0x1b071, 0xffffffffffffffff, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1, 0xfffffffffffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x1}, 0x10) read(r0, &(0x7f0000000000)=""/17, 0x11) r2 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x67, 0x420000) ioctl$PIO_CMAP(r2, 0x4b71, &(0x7f0000000080)={0x4, 0x5, 0x1, 0x9, 0x10000, 0x4}) 2018/03/21 23:55:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:37 executing program 1: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0xe}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000002fe0)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) r1 = syz_open_pts(0xffffffffffffffff, 0x80) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, &(0x7f0000000040)={0x1, 0x2, 0x422}) pipe(&(0x7f0000000000)) clone(0x0, &(0x7f00007d1fff), &(0x7f0000001ffc), &(0x7f0000915ffc), &(0x7f00002d5fff)) getpid() clone(0x0, &(0x7f00007d1fff), &(0x7f0000001ffc), &(0x7f0000915ffc), &(0x7f00002d5fff)) semop(0x0, &(0x7f000002efe2), 0x0) read(r0, &(0x7f0000000200)=""/100, 0x64) 2018/03/21 23:55:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x200}, 0x4) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/92) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000), &(0x7f0000000080)=0x2) socket$inet6_sctp(0xa, 0x0, 0x84) accept4$llc(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x10, 0x800) [ 90.532479] binder: BINDER_SET_CONTEXT_MGR already set [ 90.546253] binder: 10180:10199 unknown command 1074549006 [ 90.552880] binder: 10180:10186 ioctl 40046207 0 returned -16 [ 90.578447] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.581790] binder: 10180:10199 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001100)=@broute={'broute\x00', 0x20, 0x4, 0x598, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001340], 0x0, &(0x7f0000000e00), &(0x7f0000001340)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x24, 0x0, 'sit0\x00', 'vcan0\x00', 'bcsf0\x00', 'nr0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xc}, [0xff], 0xc0, 0x138, 0x170, [@helper={'helper\x00', 0x28, {{0x1, 'amanda\x00'}}}]}, [@common=@nflog={'nflog\x00', 0x50, {{0x0, 0x6, 0x4, 0x0, 0x0, "7b035485775e7803e6131de361974b028d63fd5f08cd3d11f537d9f8cbc6e14e35d8828e504e9c2e8446227c53ceea92ef0c1e6bbfa7165aa17d462d4a54471b"}}}]}, @common=@dnat={'dnat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}}}}, {{{0x1d, 0x21, 0x8986, 'vlan0\x00', 'ip6tnl0\x00', 'rose0\x00', 'syz_tun\x00', @empty, [0xff, 0xff, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x70, 0x1e8, 0x260}, [@common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x0, 0xffffffffffffff91, 0x2}}}, @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x9, 'system_u:object_r:setfiles_exec_t:s0\x00'}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x75, 0x5, 0x4, 0x0, 0x0, "d7d0601e044ad412d1c833151caaee74a8d68843bc6b8ea493196bba67cc399bab127133c410fa5a82e87693466789b8a362f918473241183dddfc85378bed7d"}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffe, 0x1, [{{{0x7, 0x24, 0x6002, 'gre0\x00', 'bcsh0\x00', 'vlan0\x00', 'nr0\x00', @link_local={0x1, 0x80, 0xc2}, [0xff, 0xff, 0x0, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0xff, 0x0, 0xff, 0x0, 0xff], 0x70, 0xc0, 0x138}, [@common=@LED={'LED\x00', 0x28, {{'syz0\x00', 0x1, 0x10000, 0x10000}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x9, 0x7, 0x8, 0x0, 0x0, "5d2c4640cf256f487b59a1ed2a9777470074299a8a1784ca1bb0bdea643c472c4404adf288290035c8254a8a8ad07231f82761b417687eb67424a0f79c2b949e"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe}]}, 0x610) 2018/03/21 23:55:37 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) ioctl$DRM_IOCTL_RM_MAP(0xffffffffffffffff, 0x4028641b, &(0x7f0000000080)={&(0x7f0000ffe000/0x2000)=nil, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x3000)=nil}) bind$alg(r0, &(0x7f0000d35000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000140)=0xffffffffffff0001, 0x4) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xffffffff, 0xac09196cf6868d35) ioctl$KDSKBLED(r2, 0x4b65, 0x200) r3 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000040), 0x59, &(0x7f0000000080), 0x371}], 0x21b, 0x0) 2018/03/21 23:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3ff, 0x80000) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000100)={{0x6, 0x101}, 'port0\x00', 0x4, 0x100400, 0x8d, 0x80, 0xea, 0x18000000000, 0xd08e, 0x0, 0x2, 0x4}) pipe2(&(0x7f0000000700)={0x0, 0x0}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r5, r4, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000753000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="0fc7280f080f20030f01727166ba4200b834000000ef66bad10466edb81da1fb500f23d00f21f835300000050f23f8c4c3194bfc360f20030fc76d08", 0x3c}], 0xaaaaaaaaaaaae4b, 0x0, &(0x7f0000000380), 0x10000181) 2018/03/21 23:55:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000aba000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000831000)=ANY=[@ANYBLOB="2000000000080100ffffffffffffffff000000000000000000000000"], 0x20}, 0x1}, 0x0) 2018/03/21 23:55:37 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, 0xffffffffffffffff) 2018/03/21 23:55:37 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) inotify_init1(0x80000) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:37 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:37 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:37 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(0xffffffffffffffff, r0) 2018/03/21 23:55:37 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001080), &(0x7f00000010c0)=0xc) [ 90.769685] kernel msg: ebtables bug: please report to author: counter_offset != totalcnt [ 90.771816] binder: 10232:10242 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 90.804215] netlink: 12 bytes leftover after parsing attributes in process `syz-executor3'. 2018/03/21 23:55:37 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:37 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0xc000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100)={r1, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = eventfd2(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000280)={{0xffffffffffffffff, 0x7}, {0x8000}, 0x1, 0x2}) write$eventfd(r2, &(0x7f0000000240), 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000000)={r3, 0xbb}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000001c0)={r4, 0xa4a4, 0x45, "b2f9f486e5627ada2c86148b62553e996acc73bfe6158e16c19a6dcfe09347d07cfcf78381299b97a8e92a1a96ed95f16899810a062ae16d0e68c0d41bed0964da06bf09b7"}, 0x4d) 2018/03/21 23:55:37 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:37 executing program 2: syz_open_dev$sndseq(&(0x7f0000fb5ff3)='/dev/snd/seq\x00', 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'erspan0\x00', {0x2, 0x4e20, @broadcast=0xffffffff}}) 2018/03/21 23:55:37 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x5b) r1 = syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x61, 0x200201) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f00000002c0)=0x1, 0x4) r2 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x0, 0x103000) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={0x0, 0x9, 0x1, 0x7f, 0x100, 0x6, 0x7, 0x6, {0x0, @in={{0x2, 0x4e24}}, 0x6, 0x4, 0x4, 0xfffffffffffffffc, 0x8}}, &(0x7f0000000180)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x1000, 0x9, 0x1, 0x8, 0x8000, 0x10000, 0x0, 0x10001, r3}, &(0x7f0000000200)=0x20) ioctl$TIOCLINUX3(r2, 0x541c, &(0x7f0000000240)=0x3) r4 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00001cffc8)={0x0, 0x0, &(0x7f0000102fb0), 0x0, &(0x7f0000216f88)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg(r4, &(0x7f0000214fc8)={&(0x7f0000214fec)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000140fd0)=[{&(0x7f0000214f7d)=""/131, 0x83}], 0x1, &(0x7f0000214000)=""/155, 0x9b}, 0x0) [ 90.831281] binder: BINDER_SET_CONTEXT_MGR already set [ 90.890455] binder: 10232:10252 ioctl 40046207 0 returned -16 2018/03/21 23:55:38 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) getresgid(&(0x7f0000000fc0), &(0x7f0000001000), &(0x7f0000001040)) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c077c71e661f919434a9227b5e64488067016be2f695497ac1f95c93bf410155756d088056a937a12be3f847f45b94fde491a8c90a9cee431ead4b643ead7cb7827faf6c0541ea001533c6fa67f3235701a957a879ec29d8f748fd2e466a2"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:38 executing program 1: r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod(&(0x7f0000001f80)='./file0\x00', 0x20000, 0x0) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)=""/76, 0x4c) r1 = dup3(r0, r0, 0x80000) sendto$unix(r1, &(0x7f0000000000)="afd549f1975ef3a35c11574c1d8c36da5ee17851bc732a77fc9077448c7da998b32c8a5db819cddef14c8b37a8c6010f32db498844d7f8b228fea9eb8675308f507bf116f106d6fc53153b3893", 0x4d, 0x40, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) 2018/03/21 23:55:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:38 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) r1 = fcntl$getown(0xffffffffffffffff, 0x9) stat(&(0x7f00000002c0)='./file0\x00', &(0x7f0000002480)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000002500), &(0x7f0000002540), &(0x7f0000002580)=0x0) sendmsg$unix(r0, &(0x7f0000002600)={&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002400)=[{&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="a8528aaa86cc23346be262afb809c9155c03f1ea6ee14c60f79e7f703baed7b95376a82b8b6458b0c9abf1f8ce22a6a834a7fe9a276a33353995be7586741ef95fc8a8b128bc1f8f6f17b2b13f621290115846edf4feca93ed820d20bd6a8878f35745d92b58f45dbc9f9fc7276daf50141787e0cd62d9048ab14eaed212a4391e29223826506a24e9ee88ca140ff14694f1d67551047fedd362e739e3710149784c82a9c479eebc48ae65d7b1235e61a2c932e081d3926c99401814dc88168042779cf3f602ca16ab1bc47a99caef0c482e7718440376be1f6ea319277cc813ff48b92bd501e90b819b6b7a602c65968b054e0fd17f68381e1329faf3d6cacfddc96dd4f1049bd677762a6e1ebbedcb8155c8b98ff9c6e926006bffbe262bafd1c5de8eddfeff83abf45b81451b07401301f5ffd51bfde76e73acc3f3b3ebba796a76f3c32710d2aab29c33e372790f7ce954a6abb7cb97b3efffc4f2a9e445c3124adf6c96a46aedd1d977cd54b5c2c33f98ae96017a34ea0a04b4348a9db93fd48be088fa51094060ed812f4548927d626c65795fa2c1cc33ffd3f574b9bcf516560fb82d33e5ecc45a39184bb55c70570b64e93cbf0877ba535e78b22c304b2d05d6a5c2c9d52eb497b84f2a5ad57937c07994bd83f1396c798fc6422f5df82c9157cb139840a3109607840f370e32e7a684b7baa64553cd5bea553d88bd05a98360580110f0e7f53c59b9988b3274ecde29e11f034274b6bdf34dadc9ca893a85bfb5f0f637fd9046bd17889c4c6075ce4fce466392c274875b779e75e55c878b91bd6e0f49bb4a73b58c60b64c134556def319995f4d52bb6d609ac722620793db72ceec377a159eb7cebbbf4049b4fcb9c1b9f79c096c411525a40d09386c6a2413eeb243e0dc02d2d7da32d2613e6fb34abb308a9fffd674f54e3ea85b2514942299ef11d87ee53e350804cb153b044a0d83c12168f9e517a3a1c3a9b4b53036bdde9a7ca717817bcc27034047d30ed2387fc653877c6369cbf46378ff9c70e6caffe26ddfc2368e9eb889c44fcfa1e35c4a006ba38b4a7a798558af5bb5906afda677eef3b9a50d0eb39e2b87388a0433eb6daa31ff0918e1cf19cda910e0d42bac35af5e393057be3cb912f90152cac32cae16a6a1a96e3ae09b9c9419a0a450b752e52d2eeee788dc3400ebab975c1026a62d5de445678c562f9415801948e38fef10d677c0d9284d6549772bc023d439b71337e5155dddfa6b91062743dab7c03ca29165ed86312de5210a2e6c403f10d620b78ca0f686c295ab3cd73232da5a8ddb3c3b33b9e66e5ebb91afccbf4cee30a200d842d7e81a4dc7dd601a71e1b1eeaef24270b36c596387e84d64c73838138586accbb6056ae14215d3b396cd898907b374fd93ae1386e0db6b01ea466cc0aea0de952c0258747edaa6de5a119030ed30fdc462c52fe2c806671a7aa7bcaeeea847171dbf3ae4ea598c0e2fc6fcc19c5ec8b859423ca59305698a7492af9d6e1bd7c8f69aed9ab23e8a591edd5c6c52263da92d7d71efce833a9e585ff7fca6b288184425119a3aa96e0bef5d21168e23993dfe001788a381f3aafb67e6d164c6946b0d87f218ef83fdeb7513cb71b5a47ea32de57a46cc07d57611201b52ff1718c06525a61341a896bf29af4f5a916b2a422c573d0ea8f193b6264b73badb2df7a89353ae91c1c2258b3f8e3925abb89f8f1193a85a967bd919db2ad84ef71b345796577a629cf3537178b5ea7cf361887fa391383c42818486fe51fe14280789e8f3e1edbbe206ef002483357d992d861ccb34072489badff1ebddd2b298e61615680389d8967d379ed859413955052ac2e445c37b2cbd675f47af8d504818c231834da6b4a42f75505473741c7c30516667af23b1e981e06eb569dec710dd70b722b3d5214b8414a59bfed6e5f060579626f8c43c217234733fdbcbcb478d2db21ece1ae432b461c8d5a79c96309df7eb294a410411f1d6c7aea1c2e117564decde0d8016dae6a87ac7c973007f2d050049425aa6feed3ff2d050567cb775b092ce8386d124290adb99b53b849053edd1d1e1b9f708ec83496078454d5d90cdfc6d0bff3a61bdbeb3d09c677bdf5d09ba88c33d9b6dca6094b0888c0b3380017f056526e3781ab3b66159dfd950643a43cf623fa94d92d2af4d12b4d87e71705d05e581ce01e9d451d29dcb80a5da57c981c16610c1e4e2fed6106cc6bf02d1e1c84e270690ff71fe2dd1389504bd1655e096d4878f10316096c13323bc5ac67e69c023a28c905f3a7f4699cbf80da2d27c51959d28b29e8e4c58adc58e3878755561dcae95ae8164393c9d672a0f4586f45b74adea9c3fd55a85450bb10766ed8517e4f3439c4af4a50a0e140754ff7b6950fd4f9a158401d9bec61ab2084649255adc94506df82f50f166e4a050b3af92e60b2a5218d3064380879f4a24befb58c4faa97b06d8f85d2be9fbf1db34fae1e851cb413734d0d4ebee6692f81e6edf2ed67e43038a8943ffe21e775dc22ed64374cfd40cd0d902d513bb06480cce977ef3006b731d123d87375f911d0181f1ae40184adb02b07cabecc39cd931ee21fb24030415555ab4c18c602848817472008a6a8714866f502ce5619c8ea50936cd52b78d7f1155e3cb3ecd50427791b270e4ad5c6c814a1752f831b20f230bd6052a2c1b5f5177e78e9103cbb8fb5cbb19dc086cfd0dc813c78ce580ec41c8d49b0f19dd60ec9448cfa1c13c036ecd9ca9c9ce74230b005d84d21ef2780b222f3e7149d3aeba1f00afa4b67a0a9e6d42ea97fe0785e0370b1bbcae71cd02d27daccb3edfb3e0a9aedf16b73d4110e8459ac80c9a51ce879a1f0c01523fc7120862fe2cb1eab1fb9948eb6e9498f867b139d5d56b83f65ada997c9a9428f091b15d1498f8dfe7698f3d59a30ef419deaf5175fbedefbd7d8a83d494ef5f1a6e8df0e8a1d6098fd34ce327cb20a594bab15e9691cd64a906e340cdbfe12ac787da98e403843bcbe8c82f0536c5d7d1756b7677a049602e5e6797a4bc3ec0a07d76343fe59731bd54e7e3d39d0c09d8a4cd3d16ec10fd5e2787545450059c9ac4aae21f6d08defb3b994c5c91a29641225fa9229f290ec082557cf35e1c0281d78dc04b565fd45d8b46f64fcb2c954b8874c5dc9afb723d0778ad7532eff27ff4ce1e992dac88e91a74a883e7beb754f72df25ab5da1e893b2ef3ebc7bfa32f96002a8d0ca8e5457392a834145552ba316206b2984135eb8bba5f629e76dae21ec28dce264264b2464b417d1ceb47d78278bd8767b1cce62aea16dda4c8ccf072a3aafaf002c6e71aa8747fc56f245afb56debb2ad90ad964bf3b4abac43f1474e988ddda9457eeec06c65e451da4589dca4f67b90f5514cebddceb0c7ed2a568f35e77e31366726ce59ef635d93f42922bb64c89c09ae13affd3a66f773ef7faa0f1401b01665812e913b57d9986110cc4354da6828f4d4b677fadf91f489f78efb160af1e3a63a34e934943a194933348726ea7c3e01e74dd3f2801da4fa0218e9ff1f7fa4ce9249509b040ebeb4e3b0dab27052aba51fce1018d03d3007f29933c0b3715c7b3d10bcfb527cb2d70cc3fcaf9022fb4e5a3f765c7278c6174ea70d44f8646fc55eb3b5e16dda815482408598cd6ab239cbd6208efefeaee19552e43fb671b9275940a00cd1ae6d8b5350c6cb69541d04d813ab575d1043736625e550b6c148a0672acaba9df52bca6c5aebf5e495d8bb1c8868360f26d0d3509fbdfe86099f7bfa30b1780f90197b055ba685a64d2d0e3fdf0b933e694f4aecf83145822924f6e2e1d279fc7150cf8a95836820d7fab6c3b52b7d396a7600deca5a938d1e14d77167b6db572d0f0bd0bef6751a9104d99cb3bf250880441120a67875706d981340658b0dd340bb3f46e5ea48b02f558747179ea5ab5dd85aff91e2c182fe325f5eb493d9230991522dfd2b5dc3445d649084efe2ed2294c05fe8d8b2158d68c3f2c994731f3bcd8e9e9af4c6e4bf88404cd98b09106d028091643a286385f953d1066e5efaea63ee5464788f9d686a4cda488f5c88dbd166eb56099785f7b8744e02a6fcacb23bf69996911ee4ca2ff16c1d20f4a20ba35db69537de6a1ae0fd1fd0a039f4b3a458faec78346992c7f21a9bae9bc48c6f10a53ffb4595c2bb9eb8c72707fa20aeeef05ad3e3e312d6cb42d6a68e163072980e232361017656e987301b1fcf13afffed83b0d624726f61c35f2667933457559b169664a651083ba7e6a31282ac846d43dc0b41118a0babb34dafe20547203ad945f9fbf8d684d6a5e852e67f33cee92732e6bd39abe31705c6af737b179398e12903365fb6fa97a989c9841cf67bd804e70fb33e439f5011d6bc2490c435df97788a1446898e2a899d649f07cf11f6416c16aa7b1f3b0921e11f4e9c3ae2567798352c00f9d3976d8733e1d94ba2ee2ae805a9ca713602a3c45f196572d98a9d96db9973549f7eb511fe9ecf3350259e4c3df5392c44acd3306f9f28a39539bbef1c2ea612ba2142caa8803a3217b2716bfb54a9b2c783b2542e74183da41514e5bb8ab52bc33df60d913473420adef2fa1917f6ea216361ef662a46afe7009f9b7246dfb3ee59a284d735f7bcbf5ca1319c3cb1c35f480ab389d18bc1e7715575119d6a4680fe9d95c7ac635606bad06cbe2ad3f38d589bd1558c50e544adb371d673db5e83648ecca1f6a07a237447d79e2dd75490975b58bed21461179c7e8d6c8020c666dfb59cd48f655bf37cb581c14a339c00c53228331ffcd02a0188243da998bd6e89bdb5ca42583d9d0043a2e608705e5e742c4d6a21047e0c02d7039a1b37233538dc48376e4532f16825926db048fb94dc48401b1efbd1b3e189d864a18b227015b3319f6a898c81f9ae247ea997005f9469c217315c1b9903188b03714c523715965940cb3654243dabb5f49054e52d2f4b1702334016afc1742ac88322d7d7414402296aedeaf8e1ed07cfebd9a7b608f541109bb256cd549cac87320f6d52081f21bb74023ab0e7cc396904b03101c3c53413edecd5fe14de03cdcfa12add0488b6f1249ff0e532217447faf63ab046b3b524353af7cfce8aee4c347edf80487dfe6b317e98ce5b7889ce7e1a3c721a2d658ed9d69586dcc2bf8dca10c872b6bd951eb253cbc941447ed177458bd474506d293559ebc68e2956e935bf7af5f7fde5d18717804610e9e6c6c86ec673470f886cc8228b0298e0afa6b449c7262e79bcdf12de0dc7f55da072efb0b63b9206d2702ba56be30991e3507f936aa7bd1badb3e07d0f09c3eb2e24cdf28264dad9f562b63e0feec1c4774f77e4f453e24149a5d166904c4e0da21ff1af6784ba81a3a1520e8324a4d1093675fe93d8f8c39dd15acdda193eb097f120f4d6f1146c3da5d3a1a64fc5dd77c42e20837f07d16678973ff7b4e10ef71bc4a9d29e4ee3eee137c4870184cda3bb27bee49452cb8aeb2bf1fa5470f0272afdf7de179afc07dff703660a23d08a1728c49b2b0fbfe511f23fdd40674980da51bd9e111e8803216f9798697cb31ae2acc5c8e06330f263c9bf8d501e55b774b09a50024140acb7e5e82f1cc49e5676e79ec5a638e3e417c21425f7c81ab1e9ea404a9c6846acccdbf3081f50299b4a1bad2f4ff957c114c869326c36bc77ebd0ddf1eec40a85ceb85e8911d0c785396be127bb31130163b7f93f7804643237886379c0ac225c58a1a32a81d6167243ab242f8", 0x1000}, {&(0x7f0000000080)="c111e2aee908cc2d94fb2cd765e2832caeacf2d7666dd31c9c4194d832bec876dbd08dc27d5d3eb7bd21829035da2ba1ed399b8bddfb9390bc78a4eac8113d2511d49cf22cd68fe8c9d8f94df74ed99a3ec26ad72bf4ee11d87592a5b59e626bcb77bd221b44dd65d398ed769d66ef043d3c30ed82df22e7b17408b7c9a9", 0x7e}, {&(0x7f0000000140)="57937b1608cda9af10b15d8e7761f94186537aec17f4beafca1fbf3802a98804fbbde367eb68a854e5cd4811400efd3ae62bdee57ab02ca77a87c0aa2c30149fd656f2097bc4963cefb029f978193905671066eb43fb0958d95bdab5bd3e9dcb9dc1cd648a499fbc78e5d9832647ecac98fd986330bc868a41ae6715f99983a59017f36af6b2fdf768951f4515fc1840a6c4cb396c1aa1eb639cf46382", 0x9d}, {&(0x7f0000000200)="3d07edb4c2c702ac85fee820bcfe7f6b67cd07346ec06a7a862cb49fd1d674fe403c4a4f058fa1dc6db2bc929b6313b9585f26f5842577239f7c3037e28a87db1377536f4779bfe0f891eb84df14c6e5264628b2d78618a1b5e1167bf5ad8de3056cc6af2f69d0ef11596ebfa5e0ad98688b6b10c487201983eac32d4bd8bd8db2f0381299915f04c02179fe3d1a7b594881fa2d19c88da5b1f6585992c3f109fc8b054edcba8124c4b51fa3998c3e1895d1ed", 0xb3}, {&(0x7f0000002380)="8f1390c8eb197c85887e4d492ba4ab5fc144e165d025647fb5e253a8971b20505556928523e75ec5de89d52aee141fdbc3ac3e31a9df536bbebf1eee725ed623ecebb497ac0a50f13a14919551f34a5e603085686920aad4816e225c9af3739c53e50f24d895a73338b291", 0x6b}], 0x6, &(0x7f00000025c0)=[@cred={0x20, 0x1, 0x2, r1, r2, r3}], 0x20}, 0x801) syz_emit_ethernet(0x52, &(0x7f0000000300)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}, [], {@ipv6={0x86dd, {0x0, 0x6, "981258", 0x1c, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, {[@fragment={0x0, 0x0, 0xc2}], @tcp={{0x4e20, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, &(0x7f0000000100)) 2018/03/21 23:55:38 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x400, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x5) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f000093cfc7)="390000001100094701bb61e1c30500ff070000000200000045efffff08009b0019001a000f000000220001070000000004e9ff0006000d0005", 0x39}], 0x1) 2018/03/21 23:55:38 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12, 0x0, @thr={&(0x7f0000000080)="ba6c40636dc530476949610f068499aa1dfdf3c7be0c331ef9c12b5359792462b84c1709c48e108a06c0ee30842385ae09c7950aa6444d8574d9291d09a817ded2b48ee0e90499350e0665aa50ec890d319a662ca2f4639eff5598096121391000ef7916222eb265ade5281a97abb56fe8483e31e870473a04c8bc80ff3a796a29147a4304ac8a5a57ce7cf0d35bd598a4762d1766f448726afd943c6b84fc227bfdb9", &(0x7f0000000140)="7791b0ac70981560a771b01d54874f73adab2eef40e50f8b53a177fb68db9ce067bcbdd2d48b7fe7a994ce2a9254df5e31fd3a6241f36ea827051c502e0e98c8d7f900c6ae08d734b0adc031e083accbeb35be534718e5ff3ca04453be84dcf44289e9cf9b1ac561032609c579a5659bf7904ea5499f06955b9d58448df0"}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f00000001c0)={0x7, 0x2, 0x1000, 0x3, "1b7264ceb04b3bd8afa09da863a8a51cb6972c51e9c3abf01a4b8757275f3682967000945628987eda87b805", 0x1000000000000000}) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x1, 0x84) 2018/03/21 23:55:38 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vcan0\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="1300fa00000008010000000000000000"]}) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xf6eb, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x8, 0x7fff, 0x15ff90bb, 0x10, 0x0, 0x4, 0x3, {0x0, @in6={{0xa, 0x4e23, 0x400, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x200}}, 0x6, 0x2f19, 0xa5, 0xfffffffffffffffa, 0x7}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x3ff, 0xffffffffffffffff}, 0x8) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(0xffffffffffffffff, r1) 2018/03/21 23:55:38 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x8000, 0x3) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x200) write(0xffffffffffffffff, &(0x7f0000ff6fe1)="1f0000004a00070100021b0a000008ff0a3f801719ffe320e60000fe441951", 0x1f) fdatasync(0xffffffffffffffff) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000100)={0x7f, 0x0, 0x10001, 0x7fffffff}) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40206435, &(0x7f0000000140)={0x9, r2, 0x0, 0xfffffffffffffe00}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000001700)="fa9a8bf054b8b9698a809cd25ff544646752e78228a347d503c80b742bf9a6b8df8d5a08005fc444d668131f39bf1d6757fde5f3a2a7feb218cd7b245e2999166cb683ebccf16c10b93471f185c73bf9315b339fa46bf9b13284d1ac77393f357c41f92edd07558f0c8a7f784bbb77742df2d860d262b71adbda655be2c23609440bc72a42ac9bb04cfc1376347d25cf196c1b8d0de12f076d13681c98bb9b707732cf32ac83b3beb5851493c69bab76c4d01fe4a189fd6e7801c8bb94337bc0a32d4d7216a361005ad48fc6b00caf3f2122", 0xd2) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000040)=&(0x7f00000000c0)) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000180)=""/181}, {&(0x7f0000000700)=""/4096}, {&(0x7f0000000240)=""/77}, {&(0x7f00000002c0)=""/88}, {&(0x7f0000000340)=""/56}, {&(0x7f0000000380)=""/160}], 0x234) [ 91.348894] binder: 10276:10286 unknown command 1903953692 [ 91.355876] binder: 10276:10286 ioctl c0306201 20012000 returned -22 [ 91.376418] binder: 10276:10294 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:38 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) getresuid(&(0x7f0000000f00), &(0x7f0000000f40), &(0x7f0000000f80)) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) dup2(r0, r1) 2018/03/21 23:55:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x15}) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x4d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc)=0x2, 0x85, 0x0, &(0x7f0000586ff8), &(0x7f0000152ffc), 0x1) [ 91.401255] binder: BINDER_SET_CONTEXT_MGR already set [ 91.417748] binder: 10276:10286 ioctl 40046207 0 returned -16 [ 91.440147] binder: 10276:10306 unknown command 1903953692 2018/03/21 23:55:38 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) fgetxattr(r0, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)=""/163, 0xa3) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getsockopt$inet_buf(r0, 0x0, 0x26, &(0x7f0000000140)=""/139, &(0x7f0000000200)=0x8b) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x6, 0x200003) 2018/03/21 23:55:38 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000079fee)='/dev/input/event#\x00', 0x0, 0x0) socketpair(0x10004, 0x1000000080809, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) r2 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$sock_bt_cmtp_CMTPCONNADD(r1, 0x400443c8, &(0x7f0000000040)={r2, 0x2}) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000fcc000)={0x0, 0x10, &(0x7f0000fcc000)="eb375d06e0aa9f9b211facffffffffff"}) [ 91.446111] binder: 10276:10307 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:38 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="056304400300f500"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:38 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) stat(&(0x7f0000000e40)='./file0\x00', &(0x7f0000000e80)) [ 91.485559] binder: 10276:10306 ioctl c0306201 20012000 returned -22 [ 91.528232] binder: 10322:10325 Acquire 1 refcount change on invalid ref 16056323 ret -22 [ 91.554797] binder: 10322:10330 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 91.574954] binder: BINDER_SET_CONTEXT_MGR already set [ 91.576268] binder: 10322:10330 Acquire 1 refcount change on invalid ref 16056323 ret -22 [ 91.580423] binder: 10322:10325 ioctl 40046207 0 returned -16 [ 91.588924] binder: 10322:10333 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, 0xffffffffffffffff) 2018/03/21 23:55:38 executing program 0: r0 = syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$vsock_dgram(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host=0x2}, 0x10) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000100)={0x15}) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x3, 0x4d031, 0xffffffffffffffff, 0x0) futex(&(0x7f0000000ffc)=0x2, 0x85, 0x0, &(0x7f0000586ff8), &(0x7f0000152ffc), 0x1) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(0xffffffffffffffff, r1) 2018/03/21 23:55:38 executing program 2: writev(0xffffffffffffffff, &(0x7f0000001200)=[{&(0x7f0000000080)="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", 0x127}], 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1a1, 0x0, &(0x7f0000001000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x80440, 0x0) ioctl$sock_ifreq(r0, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', @ifru_data=&(0x7f0000000180)="d61a072afa6a2e6e9105a65cf0b08be4d57565e1a85eff283ee23d954743a2e3"}) 2018/03/21 23:55:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:38 executing program 6: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0xb9}, 0x4) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:38 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$KVM_ENABLE_CAP_CPU(r0, 0x4068aea3, &(0x7f0000000080)={0x7b, 0x0, [0x0, 0x8, 0xc4, 0xffffffff]}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x10000, 0x0, 0x10001, 0x7}) ioctl$DRM_IOCTL_SG_FREE(r0, 0x40106439, &(0x7f0000000100)={0xfffffffffffffff7, r2}) 2018/03/21 23:55:38 executing program 0: syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, 0xffffffffffffffff) 2018/03/21 23:55:38 executing program 2: r0 = creat(&(0x7f0000891ff8)='./file0\x00', 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f00000000c0)) lsetxattr(&(0x7f0000756ff8)='./file0\x00', &(0x7f0000faffe7)=@known='security.capability\x00', &(0x7f0000d9ffec)="0000000201000000000000010400000000000000", 0x14, 0xb4c27bf97cf0a812) accept4(r0, &(0x7f0000000000)=@pppoe={0x0, 0x0, {0x0, @local}}, &(0x7f0000000080)=0x80, 0x80800) [ 91.662992] binder: 10345:10349 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000abe000), 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0xf2f, 0x6, 0xfff, 0x3, 0x4, 0x5699, 0x7fffffff}, 0xc) read(r0, &(0x7f00000000c0)=""/91, 0x286) 2018/03/21 23:55:38 executing program 7 (fault-call:2 fault-nth:0): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 91.720087] binder: BINDER_SET_CONTEXT_MGR already set [ 91.733129] binder: 10345:10349 ioctl 40046207 0 returned -16 2018/03/21 23:55:38 executing program 6: ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r0 = msgget(0x1, 0xd) stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000100)=[0x0]) r3 = geteuid() fstat(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000240)={{0x4, r1, r2, r3, r4, 0xa8, 0xfffffffffffffffd}, 0x1d, 0x1e4c241e, 0x0, 0x3, 0x1, 0x156fcbe5, r5, r6}) r7 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:38 executing program 5 (fault-call:3 fault-nth:0): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:38 executing program 0: syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:38 executing program 1: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tun(&(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0xffffffffffffffff) 2018/03/21 23:55:38 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) getdents64(r0, &(0x7f0000000080)=""/4096, 0x1000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001100)={'teql0\x00', 0x0}) connect$packet(r0, &(0x7f0000001140)={0x11, 0x4, r3, 0x1, 0x228, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x10}}, 0x14) 2018/03/21 23:55:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x1, 0x0, @remote={0xfe, 0x80, [], 0xbb}, 0x5}, 0x5c0) 2018/03/21 23:55:38 executing program 2: mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x10000003, 0x8972, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a93000/0x3000)=nil, 0x3000, 0xe000, 0x3, &(0x7f0000b18000/0xe000)=nil) mremap(&(0x7f0000b18000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000a94000/0x1000)=nil) 2018/03/21 23:55:38 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = accept$netrom(0xffffffffffffff9c, &(0x7f0000000080), &(0x7f00000000c0)=0x10) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0xfd12, &(0x7f0000000140)=0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc\x00', 0x80880, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0x100000001, 0x8, 0x3}, &(0x7f0000000200)=0x14) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000240)={r2, 0xd6}, 0x8) socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = semget$private(0x0, 0x3, 0x82) semop(r3, &(0x7f0000000040)=[{0x3, 0x0, 0x1000}], 0x1) 2018/03/21 23:55:38 executing program 0: syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x80000000) r1 = dup2(r0, r0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000040)=0x80000001, 0x4) fremovexattr(r1, &(0x7f0000000080)=@known='com.apple.FinderInfo\x00') ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f00000000c0)={0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) syz_open_dev$urandom(&(0x7f0000000100)='/dev/urandom\x00', 0x0, 0x20040) [ 91.833482] binder: 10384:10387 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.859672] binder: 10384:10399 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:38 executing program 0: syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6e0, 0x250, 0x3b0, 0x0, 0x3b0, 0x0, 0x830, 0x830, 0x830, 0x830, 0x830, 0x6, &(0x7f00000005c0), {[{{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [], [0x0, 0xff000000, 0xff000000, 0xffffffff], 'yam0\x00', 'tunl0\x00', {0xff}, {0xff}, 0x2c, 0x4, 0x0, 0x5}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@local={0xfe, 0x80, [], 0xaa}, @dev={0xfe, 0x80}, [0xffffffff, 0x0, 0xff0000ff, 0xffffffff], [0x0, 0x0, 0xffffffff, 0xffffffff], 'bond0\x00', 'yam0\x00', {0xff}, {}, 0x84}, 0x0, 0xc8, 0x110}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1={0xff, 0x1, [], 0x1}, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}}}, {{@ipv6={@loopback={0x0, 0x1}, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0xff000000, 0xff000000, 0xff], 'gretap0\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c}, 0x0, 0xc8, 0xf0}, @inet=@DSCP={0x28, 'DSCP\x00'}}, {{@ipv6={@dev={0xfe, 0x80}, @loopback={0x0, 0x1}, [0xffffffff, 0xff000000, 0xffffffff, 0xff000000], [0xffffff00, 0xff, 0xffffff00], 'erspan0\x00', 'ip_vti0\x00', {0xff}}, 0x0, 0xc8, 0x1f0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xfff, 'system_u:object_r:modem_device_t:s0\x00'}}}, {{@ipv6={@empty, @dev={0xfe, 0x80, [], 0xa}, [0xffffffff, 0x0, 0xffffffff, 0xffffff00], [], 'lo\x00', 'vlan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x19}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@icmp6={0x28, 'icmp6\x00', 0x0, {0x3, 0x400}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x10, "fd1e216a8e6ca6af477fab30be24ae2ec363fba9887b8cef25a85ae9da57"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x740) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x36, &(0x7f0000000000)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r0, &(0x7f0000001100)='I', 0x1, 0x0, &(0x7f00000010c0)={0xa, 0xfffffffffffffffe, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x8}, 0x1c) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) listen(r0, 0xfffffffffffffff9) accept4(r0, &(0x7f0000001fc0)=@can, &(0x7f0000002040)=0x31, 0x0) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 91.909257] binder: 10384:10399 Acquire 1 refcount change on invalid ref 0 ret -22 [ 91.933860] binder: 10411:10413 ioctl 400442c9 200000c0 returned -22 [ 91.974955] binder: 10411:10413 ioctl 400442c9 200000c0 returned -22 2018/03/21 23:55:38 executing program 1: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) accept4(0xffffffffffffff9c, 0x0, &(0x7f00000000c0), 0x80800) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x10) r2 = fcntl$getown(r1, 0x9) r3 = syz_open_procfs(r2, &(0x7f0000000140)="2f65786500000000000035abe1e80d903e0d717ac1889a45e581c9e14a5c8f95f5d2968ae8c767e9d18fd69a") r4 = syz_open_dev$binder(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000000)={0x1, r3, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r4, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000280)={{{@in6=@mcast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) sendmsg$nl_netfilter(r0, &(0x7f0000000640)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2001100}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x210, 0xe, 0x7, 0x910, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x9}, [@typed={0x8, 0x3a, @pid=r2}, @typed={0x14, 0x81, @ipv6=@remote={0xfe, 0x80, [], 0xbb}}, @typed={0x8, 0x4e, @uid=r6}, @typed={0x8, 0x34, @fd=r5}, @nested={0x1c4, 0x19, [@generic="ca5faaa9ab5665f9412a9e1719887efe5880c0f9c4b642cfff3d0430f79b6c19f11fcb01ff67693f0e0c732c1bfcb87b9280fd4910ace0e5dcd5040ca75babeeac3edaa26038dd7e443f76dc1782a4cc97a4e7410198ddb535d77ea5c58a3d248ac0478991e78c12ecb56b055e456b7fd67a391def7f9043dfed7c4acb17723d9cc9540adf1cee3dbbfc6eaf2748619f70afa54f1e28cf9c1ceb3de8409bf9a276c1bb6f9f5edf27c03a5468dc", @generic="09f2cfb07bf3e671c84e5f8d63265985f5aa8e60cf095dfa6b7b87be331188f7738e719f32dc1e0f7019bd422cfda1bc2106501d0688dfe45dad7ea0f96dc60b8a793dcbe7615f3032dac184ddf2a81f19d48f060900c6ed4b9f0c6c6a4b8f727c0adf65ed1eac3337c79fc46fccd5970a264d6502de279434c9aa6c74e4767a3f0dcc0bc4127b06dc2be8f71dd13ca9a960e5fa97a6c4accd82096b7d3e3503c258971bcc21e6f1d9a4969811586c674ba238cb6b923fb6c2dab005f315f48f6431301c51553e2471632f", @generic="2b0d6868eca4aa4f897ceecda60bb607e846bbb94e9b7dd9d28ab14f3240a43d3971641a3fad4c2d2891feb81357c8ab63ab8e12bbd178de366fb6b11980a531a29f29b042e0c2e4"]}, @typed={0x8, 0x22, @pid=r2}, @nested={0x4, 0x29}]}, 0x210}, 0x1, 0x0, 0x0, 0x10}, 0x8800) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000001c0)='tls\x00', 0x4) ioctl$KDDISABIO(r3, 0x4b37) ioctl$fiemap(r3, 0x40087602, &(0x7f0000000080)=ANY=[@ANYBLOB="78a29e075c7afcbdffff000000002000000000"]) 2018/03/21 23:55:38 executing program 6: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000002c0)={0x7, 0xffffffffffffff9c, 0x1}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300)=0x4080000000000000, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) alarm(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1063044000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xffffffffffffffc9, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r1], @ANYPTR, @ANYPTR64, @ANYRES16=r1, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="c8e74b03e0dfe9df683b4d495a521c0d5f5e11b3055cb1cc8dc66ef3ec11ee8e2ed42d405b3e2444fad9587541c1fd1d591a9392cbe0186d881e99e7afb9794b260a62a625a2da785f6474f8184376fe54af590647a09eb259f2614550a1074f3f24d625330ee5e770ebcc3055daa01424a0e94b8b950c6683b93948c3986f", @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="ffd5835c7c55dd365cfb3fdbcab2ab4e76927035ef03eddcc9a743f61b18dcbc979d076d629dc9d17c18d9d4b6e5adb587b552d3787593d34cd0dc61765df548f707c448ef033b3d8da1b8e0f8087d69ef4babedc2a2ddca8543f134b1c587c47a84c66ab77909bb0f5e6265316692bc89f41916cbab064fbde731630607514006edaf313ce3af0075b31a5d4c63a0b022a513caf18cc5c39b36", @ANYPTR]]], 0xffffffb4, 0x0, &(0x7f0000000f4d)}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000240)={0x7, r1, 0x1}) mknodat(r2, &(0x7f0000000280)='./file0\x00', 0x8100, 0x5) 2018/03/21 23:55:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) sendto$inet(r2, &(0x7f0000000040)="a79c0c9fb254eedfcae1d225a9db5778b41fea357032dfe90fc78a3bd7264908ebb61a0046392bba61e851ce1d0109635fd2bf8b94f6daf073a489cd34a9a1b9e7a1189377e7dfd29420744506dd923e984210fc5fccfabab1e582013ff0a029dd98c60f2c4b7d68280e62e9b241c70101c7103adf3239ec3bf6f2a3e921555b63d509b50e049bccba129fcae723ccc5547600538a980bca8f73379bed36fa6457253061917bf8698023e1502309af310aa35141738a9bd7be66c5302905afab69e292941040599f876d623668c0590e6b70a84b621bb39dd729d40f8050a7fc3b86efce6dcce16264978ab09e6acf259d5a1c150d4728f3ef7c5c567ac7f8883e08cdb4af4767885883b1ed6e5b67249e3e2d7d8c6c1a9efafab2f8e40ab8d5c35a0fb91cda402d07619e7dd7bbfc9dfbe90cddb7ada2dd89d294bb1572d65e119e882c9fecb9100d2c9cf7c6e7dec43f2c0dbfcf56d056926524c21e91a819b5676614248c835a48b886a99c72e4a6147b9e5eef9fced8c10d85a487a1355afd5c0708d449f093d81c9fc4f5c9f6d6c27da9add61472a6e8678224735fe5e34db828731b4061c0f40ad8b56b6bb8e3c125d294052f7eb6339cc91f719f3250eec149dab36b1eb3f6275d8c1249b951ea902d596b6b6c7495f5ceb061aef7fc2ed624f86677d997e3d66ad8a5f525de34aabd3bc81fdaab007e871a21543e54f888c61e5eed80cba276061a067d767afd263d313193f5ef661f6a9b8ff0a6bead441dc82250dcfc79a358f6ef291001ae4f5639d17d54d7455417be062d784331c0f6e703dff3bdbee88c01c605be58442733fa933f67eb1d575d868a2aa685604ccbbf14bd369b37648bcd9e750a5c38a09dd74604769322d3f35dcfe57acf5d2e7ce4971b5a2fc113dca3a59004952cbce89cfeae39633761e9d46d9682de78db102094b5e706c75dad8802069e7d265db5874016fb13a6770b17a60c95967c8835fee08397a7c495857b6038a13317fefc280ced5859aae8cb47ad68a41c26f4463c5d0638278634c0b5d32e744c732f29af917141680a1b72580fa05a7c04650c4fb7c1885acee1ceab23d18648f849c939a8fac43f3168a72f20b528df5c90bb4d718b337d5cc955d35ce8ff112e569080e3d6edb4264eb3d94697254c879e1ec305b3e0b96ecf04b528d553159d4ed5032e2cd2e2391b3f07c9be8efd6011dce241fbc7bf6ece45cce2f14e45c38dc9582c2f5c3095ea5d6fd8564bcdb6485abab186317df4c050ca19cc8376b96a0c34923af9e40256cef2167bef1533b5e88789b7be4790d458b0bb4c5ac20a869be077650c796ceb20cc19aa1f53e58c71d914c37143cb2c20a88a8ab3a9121ae7249eaf5c59b54a390c1c96939e901f06d071fd8030754aacc010a43f6799cfa11c51d0ad218f08593315b911c1059ba345eff3323673e2d0dec3c8841ba2d6fa117e3577bcf79701404a5621740a42237da4c7aeba668ff5b978d90613708ae926b9deffc9732a79b78254e52ee7534ff6f7bc6dd08b902658ce6c7559f644d9e7e3e05ee037f6e9260a662a4b9e646c34f0aff775594036468540398b239e420d7637ea2eded96ad4bd88affc89e155eca8092cd5d4eee04c98e957fa1d0d812b37065d76d10c7e57f8920fb436af510f1385f7b8cc8f5895f7d4d3333d67b07cc6f0a3db9eee5ae2db61d1ba0ed646b09ead0043def8b9be42240758f38363b8dd8a569316bf8af08e055a10d78fff7e40f8df1e6c91eedf9d212cc05b78bb057eab61b8915f1e1a579382b843aaf036d238d7757e3c915c3ab337381fba23e35bea06d8ae7ef977ea585e00a4d7d5da9516dc3c527d136279ec893972066a306afc2158a231d6a3221df62d07b6c6472df10685fe33e04de5f6a0585d1102e067392578ecfde836f929e87abe029390a86b3a2dc206a10df790af2295689e152fb4ee29de006f56fbad1f951bdfebb499aab447f734acc6bdbc99de52196139c295bd522387c727e4bd35de983bd086de17c0cb46d5c2a72d4ba8ad020cb2803ce66831d40c97215485d134451949f2778eaf12aae3bb3cd429a69548d82e72dffadd962e3b6792148df1bea04e3d153e0f074b54678aa4bc117b137be3c391b939dde1743b84045a8d375f7543ff45bc3df3f18cea10d966b1558d3edf8b679bdeb244619f08aa0659061dc5919437a7cc2ed205ce2784019d02711b8bfc7489f17091878c8930f80c8b195879d6dc2deb2d97a24ff2e747618590fda9d21817db12958e5767f506f7b7a6f30156f2d49970985abcdcacfe7d448b50b81412c6202831c5c346ec631904b964b8e543dcdd6f55b9d3bae73002c1901f0405a4939873277171ec2e1aa3eb8131a10f59f6306648e34ae0969359172c237122b3663df8f8c230fbcc0e579646116f41a230345bc1710a521c628d11f5d28727c02962bc8eeb15b878c5832630769ec4d77b0bd0b2840f88007b6b880ecb2179751c9b86d957d3bf8236ccc5b2c2cdf3d616b1f1a971cdd17bd92ec174c725c0c635601991e0e7cdeb3a386c6463848f29159c21903c1a5d4acf0eb2faa0294972c2fd5f459290bfb5895baed9001a0a3c6d690fdd23766b275125cce691147e55888ea4bef6c069497ac91ac83aeddfa451ef5091d11fb4a1a83e2fd66117e4b2dcda721e175434c6055d7de9632693a929a25d7aaed825c0d8ed5277c0cfe9503ffd3512868f77dc042630c946e64c3395991e715a51bfd125bbfb4893348277921ca85246cc80d9bf7cd4d62fb702cb1fa16abafe633df35cbe7a2baeaf8470571f5d3ac2e0614ec982222cd4be3cc06adda9b4c398dc76355f62784ad8d7876d395ef33a4b366cbdb14a204a9ba8588cdc67ccae197aeccddf79c7bf744e30bc7fe3c5b608ee2501aa63068d10173855e572c4759b24a115e1ceb53c92f76e23f23250cca3ac71d8c0cc5249de3e8781ca49b3ad1c347cc6046e2abdc3abc3764a4a8318a77ac6b58885422a91593b937b8031a90799d0fbcf5758a7c5557b820333b130dacabafbaf5bf467f54e8b7e0bad78ed3ed8356407ce9974609a1d9a9934e40638081ecd6406abf196ac173c6c94d7617876be3e8ab62d7218fe630ea82eadc9c247c6c8dc62ef49ea26561003b4030f22797f560408258f44cac8eb47d32f7d454fa10d6177dfe494f2614dc674170e7cc891518b124231da63cf59de051b25afc7f71920e1941a5931ceb7d482413e1ae2cac6d5dd6e926d4f0f9585d42afcaae6894464258a3700177e64184155cf082451b213a0368eb4d1419a11735ed92d13e9253c1244530169737af4a5b65f55a328dd60cf9773c2535b2307a3a0866c9f6b488bb730f7b19ac27567f4bc51e92353f477fd4c67ea588e9bac0d611876f3d4086833badd37ef6b17a4946fcc8e2499c8adaafb1eb0671089de513f09adf3629013e1ceb37e9d0786aa76585a71605a43994b98bf6fec35a6e02b8b98cbc2f1885852f11b52bd4f525f3a00cd7d63f004f8b2c3062e9c03318322cc5744e97fdcd4ed6b4b22edf36b49c18208a306288e60d938aecee5325f83d8fba68559cdb8815458287d0df9687850606de580ecb2146974c89dd1c3ea6026c90ebff4a2479aac0d2594386fb0003fd38d3a9e4247be90d43abb716f9dc25203363157eed3d54075f5cb753c1f44c636f6b5a3494987b55c1c2b88d6acd8e8df0295c161d9288019331c1be0378bd452ba01596c4ac15376a545e15742582caac4400f25fe587d8b5d7f23ad730d7182fc3d1809b6d61d704dd4a5135d49f461137800fc5a9400f3da5c38e9dad292fe5c3d29b966ff3d9f925f421351d12e8f00d53716e3c8db752918ab80b02612d593319bbdc0dfb1fab770ce3f5386116ada97385f9f5fed1ab855ba1b0edffb100a30794e87aa6e61cbe540888da02dc8bb11c1d38c940bcace5be5219ff35b3a741d4398576faec77127e11ca197251a22b5ab49c81504b25feef4e2c79f6336ec873e4ba64fbf3b51ef5d24b68430bd18dddbaba4bf9e75682d1cbf3611d96080fec3a879e517714f589ace1a2460ece6beacbc692a1bcfb54dfa40aa2f1926fae4608837b7961386832bb0650cb5d0fca08b9dd1704c8a77bdc4457083aefcb3e891c2389e8f0c3f2ec1bebee76c4ab010273d45c81b7171b6471f07030053b6b7a1dd5d292c74b62db85cf17e73196bfba971451e3034512d22b77a458d7f7923292c8de014436081a7462dbe872b4b8606a425f49a8e31a6dbe6e4e7f5ddf8fe31010d495b0bcb206543f95f1e05bdfe920a61697921e068edc63204f988391b6b056cd72dca3abb908b02cb7ff305360fccf1aa61c9192e77347bdb97f29786a5af427bd80be1fbf22565e96bbb7ad5061a1f94ba0a5e3ee3c86d780638601e05690b7ef74d434e607b420e0d80e6dacb7b2acd3d40ef5d5103466b85ced166aa5fd1d29fe46d8711e4a0d1f828e5ee86a722e3c4bba7bef2dcb1a4df430a9be3d25c61448746e92c6108c387e42d0ad66497781384d7b46ae002851e6200545970c5fa24389dfa8df4f7efe202e977197a05dd435f90d10defe7c5d02e1ac468f4329994d57a33856410a7f051bf884927850b6b71c3832f1a549e4084686490bc7a4364e762d7ba3930d9480956f9fb8b960d3d3568030940168b5e7b42e6b8f9099e080b81227b3e986093f95e71324ecd484d56e3e53c41b215a01325a0f3cfaca3a5183ae86ecaba8c46718ad0e5440f309691609b16000461f976ebf4238ec58df686f09fc771699b40c14922f292fe1649c6a8296f006f9d49819e2a7223ebd894ae68d17af39b6c85a7837cb07375d685fed36169d9830308e4af24392df7e21f15ab05e3a960e162f820e6468892fad6adb562a86273e12307e2f1b25049afea63dd7283850563710421ad10c39be1cada86973a37231116dce74a0050319cf0c9e3bc8272fc9d95cdcea56239647f230c933e79f5e7bfa3a33a504a81c61417aba08441ed02c0e9f19490a1d58496b4d69eaaf6c13d302cfec0f7d658b5c281f362205ffabe8aa4c976ec57fe1739d35a38a3daf68425df0d1d879dbf2fe28cadd88a2c69ff3a40ec9a2b4419c44631d6bf16ce52b2b06a3f70bcd1f28e6a3b61b1c6df10602366b7757efe84f73eafd6efdd66f97562247addb5285f692be1838238b572ccef914eb7adf664cd4ca2aedddf05f6ce335e1d2d282bf3ef4de166fac587cfc3efbe83bab63e59c1b1ed7e548fcd5022671ac317254f510689471afb15deeb7180610ae2ae6cdc1d87f0dac12e76c9f08a31426bcc0de2963bc53761987bda091c3afbcb6df22334f6589888d5983317dce0a068b278bf9ba90669f5bfa081b86fa3d1ad11b4e2fad999ef600a6544732023e945ee0167cfa9cf51d02b9eeeb01f331676da72dc36f82212c5701047bf8fb8bf8edee08a97ac0f4d8dbe07eb9d74779e9566ae22ca9a544f3107a581083fbea9512ae8bf5c282e94ae7950fe2cfbb9c0386c476800cca0a465bb06f59bbe9ea99d2d780723004930f96b1cfe5a095b82eb0f03f5a7b682c469be7a67876c03b6efab7ca2077264dc974baac08315a5e9ed136d3b2386de420211c68c30bc65aa77dd4404e7b738de1d1b0037eb632864e609b84e684f50f0436b164e89ba02ff3454d257b5b23658ab3b2111357532b5be1b3f82b91b399899ca71ffde1100e920049be905540c039d6b7ef91579d40086af3a0aba7257bb", 0x1000, 0x0, &(0x7f0000001040)={0x2, 0x4e22, @multicast2=0xe0000002}, 0x10) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x400000, 0x0) getsockopt$inet6_dccp_int(r2, 0x21, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:38 executing program 2: mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x0, &(0x7f0000000200)="eb810de94c00d3d4475fa5c836c70400000000000000e349f9867b60a73dcafba4a7e6394a863ceb01826747db4e9750ac249d8b49eb58c1beecb3181f33ae8d924f6c79fec4d3480db5353ec18b1aac53d8cef942728c443eb1b7ba8d70bda0f2d797cc4458fc943225bcf190b5b33a52af237113c693c75fbd5769ee1d92e238fe") mkdir(&(0x7f0000000280)='.', 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x40, 0x0) getdents(r0, &(0x7f0000000100)=""/50, 0x32) 2018/03/21 23:55:38 executing program 4: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() r3 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) move_pages(r2, 0x2, &(0x7f0000000080)=[&(0x7f00003ff000/0x1000)=nil, &(0x7f00005fe000/0x3000)=nil], &(0x7f00000000c0)=[0xfffffffffffffff7, 0x8], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f000070c000), &(0x7f0000ca4000)=0x8) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r2, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa, 0x10b401) 2018/03/21 23:55:38 executing program 0: syz_open_dev$admmidi(&(0x7f0000000580)='/dev/admmidi#\x00', 0x1fd0160e, 0x801) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 2: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000080)={0x0, 0xfffffffffffffffb, 0x6236}) ioctl$DRM_IOCTL_SET_UNIQUE(r1, 0x40106410, &(0x7f00000001c0)={0xa8, &(0x7f0000000100)="54b4aef66b5f761657025777be9c8119d6ec845b8e3b75aca18136179174cb2f320a41a90b1cedcda1933476cb4437a9f5caa647a767ddf3f08cd7f9849ea3f76e8723100bb37665918485eec6aec946cc9a25907ee6ec09302918c45c66b8420e072d5aec2e156b20c7e753eae290ecca31b52d4b5e4970abfff0cb3167094bd21c0ca51939537e20b77ad6df5b40184a5485245c8d6504a06f8b8a2679f2aee0b35ce8810d17ee"}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000d25ff8), &(0x7f0000000000)=0x8) 2018/03/21 23:55:38 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) socket$inet6_tcp(0xa, 0x1, 0x0) [ 92.081561] binder: 10429:10439 unknown command 1074029328 [ 92.089793] binder: 10429:10439 ioctl c0306201 20012000 returned -22 [ 92.103220] binder: 10429:10439 ioctl c0306201 20008fd0 returned -11 [ 92.124473] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:38 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f000001a000)={0x10}, 0xc, &(0x7f000000e000)={&(0x7f000001cb24)={0x1c, 0x18, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, {0x1}, [@typed={0x8, 0x3}]}, 0x1c}, 0x1}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000000)=0x7fff, 0x4) 2018/03/21 23:55:38 executing program 2: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000280)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000002c0)='net/ip_tables_targets\x00') close(r1) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000240), 0x4) getpgid(0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000200)=0x0) r3 = getpgid(r2) ptrace$setopts(0x200004200, r3, 0xfffffffffffffff5, 0x5) 2018/03/21 23:55:38 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) accept4$inet(r1, &(0x7f0000000040)={0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 92.133363] binder: 10429:10452 unknown command 1074029328 [ 92.133503] audit: type=1400 audit(1521676538.855:55): avc: denied { setattr } for pid=10436 comm="syz-executor1" path="/proc/695" dev="proc" ino=28075 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 92.145961] binder: 10429:10439 ioctl 40046207 0 returned -16 [ 92.175159] binder: 10429:10452 ioctl c0306201 20012000 returned -22 2018/03/21 23:55:38 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:39 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000040)={0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:39 executing program 2: unshare(0x20000400) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2, @thr={&(0x7f0000000000)="14e3a1", &(0x7f0000e75000)}}) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@random={'os2.', 'ppp1\x00'}, &(0x7f00000000c0)='%systemsystem,\x00', 0xf, 0x0) 2018/03/21 23:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000940)='/dev/vcs\x00', 0x200, 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000040)) r3 = semget(0x1, 0x7, 0x0) fstat(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f0000000340)={{0x200, r4, r5, r6, r7, 0x20, 0xc2dea42}, 0x4e3, 0xc}) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000400)={{0x80000001, 0x0, 0x8, 0x38, "765e1269d736ba62c4048824a43b5441a03eaaa7769349ae790ba458f3eb5b6630719c70c66f713d5e549b9a", 0x18f}, 0x100, [0x3, 0x7fffffff, 0x80000000, 0x0, 0x10001, 0x100, 0x5, 0x800, 0x6, 0x1d, 0x4, 0x85b0, 0x1, 0x1f, 0xfff, 0x1, 0x100, 0x6, 0x0, 0x8, 0x0, 0x4, 0x9d72, 0x91, 0x3ff, 0x5, 0x849, 0x7fffffff, 0x200, 0xffffffffffff8001, 0xc9b3, 0x1, 0x5, 0x80, 0x6, 0x2df5, 0x0, 0x98, 0x7, 0x4, 0x2, 0x6, 0x3, 0x0, 0x3, 0x0, 0x6, 0x4, 0x22, 0xa9c, 0x3, 0x1, 0x5, 0x5, 0x2, 0x31, 0x7, 0x3ff, 0x80000001, 0x9, 0x200, 0x5, 0xffff, 0x8, 0xffffffffffffff00, 0x7, 0x8, 0x1ff, 0x7, 0x8, 0x3, 0x7, 0x1, 0x5, 0x80000000, 0x6, 0x8001, 0x80000001, 0x8, 0x2193, 0x9, 0x4a1, 0x5, 0x7, 0x1, 0x0, 0x4, 0x8, 0x80000000, 0x8, 0x88ff60f, 0x100000000, 0xb74, 0x2, 0xeb, 0xfff, 0x5, 0x1, 0x8, 0x2, 0xaed0ca0000000000, 0x7, 0x1000, 0x7, 0xfffffffffffffff7, 0x7, 0x5, 0xea, 0x4, 0x0, 0x1ff, 0xcd68000000000000, 0x0, 0x7ff, 0x0, 0x2, 0x5, 0x7ff, 0x4, 0xfffffffffffffff9, 0x2, 0x80000001, 0x7ff, 0x5, 0x7, 0x40, 0x2, 0x1], {r8, r9+30000000}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:39 executing program 0: ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f00000002c0)={0x7, 0xffffffffffffff9c, 0x1}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000300)=0x4080000000000000, 0x4) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x800) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) alarm(0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="1063044000000000"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xffffffffffffffc9, 0x0, &(0x7f0000000200)=ANY=[@ANYPTR=&(0x7f00000001c0)=ANY=[@ANYPTR=&(0x7f0000000000)=ANY=[@ANYRES16=r1], @ANYPTR, @ANYPTR64, @ANYRES16=r1, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="c8e74b03e0dfe9df683b4d495a521c0d5f5e11b3055cb1cc8dc66ef3ec11ee8e2ed42d405b3e2444fad9587541c1fd1d591a9392cbe0186d881e99e7afb9794b260a62a625a2da785f6474f8184376fe54af590647a09eb259f2614550a1074f3f24d625330ee5e770ebcc3055daa01424a0e94b8b950c6683b93948c3986f", @ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1, @ANYBLOB="ffd5835c7c55dd365cfb3fdbcab2ab4e76927035ef03eddcc9a743f61b18dcbc979d076d629dc9d17c18d9d4b6e5adb587b552d3787593d34cd0dc61765df548f707c448ef033b3d8da1b8e0f8087d69ef4babedc2a2ddca8543f134b1c587c47a84c66ab77909bb0f5e6265316692bc89f41916cbab064fbde731630607514006edaf313ce3af0075b31a5d4c63a0b022a513caf18cc5c39b36", @ANYPTR]]], 0xffffffb4, 0x0, &(0x7f0000000f4d)}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffff9c, 0xc00caee0, &(0x7f0000000240)={0x7, r1, 0x1}) mknodat(r2, &(0x7f0000000280)='./file0\x00', 0x8100, 0x5) 2018/03/21 23:55:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='com.apple.FinderInfo\x00') preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008580)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008540)={0xffffffff}, 0x2, 0xf}}, 0x20) write$rdma_cm(r0, &(0x7f00000085c0)=@resolve_route={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) 2018/03/21 23:55:39 executing program 5: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000000c0)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r1, r2) 2018/03/21 23:55:39 executing program 2 (fault-call:1 fault-nth:0): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:39 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000040)=0x6) dup2(r0, r1) 2018/03/21 23:55:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = dup2(r0, r1) ioctl$VT_ACTIVATE(r2, 0x5606, 0x2) [ 92.306252] binder: 10488:10492 unknown command 1074029328 [ 92.306591] binder: BINDER_SET_CONTEXT_MGR already set [ 92.320398] binder: 10488:10492 ioctl c0306201 20012000 returned -22 [ 92.324431] binder: 10486:10493 ioctl 40046207 0 returned -16 [ 92.338779] binder: 10486:10493 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:39 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) r1 = dup2(r0, r0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e22, 0xbd4, @local={0xfe, 0x80, [], 0xaa}, 0x5}, {0xa, 0x4e22, 0xffa, @dev={0xfe, 0x80, [], 0x13}, 0x3}, 0xae8, [0x7, 0x9, 0x5d, 0x6e952327, 0x7ff, 0x100000001, 0x4, 0x3ff]}, 0x5c) ioctl$TIOCSCTTY(r0, 0x4c03, 0x0) ioctl$KVM_GET_XSAVE(r1, 0x9000aea4, &(0x7f0000000100)) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7ff, 0x8000) 2018/03/21 23:55:39 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$rdma_cm(r0, &(0x7f0000008580)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000008540)={0xffffffff}, 0x2, 0xf}}, 0x20) write$rdma_cm(r0, &(0x7f00000085c0)=@resolve_route={0x4, 0x8, 0xfa00, {r1, 0x5}}, 0x10) [ 92.375347] binder: BINDER_SET_CONTEXT_MGR already set [ 92.398964] binder: 10486:10513 Acquire 1 refcount change on invalid ref 0 ret -22 [ 92.407842] FAULT_INJECTION: forcing a failure. [ 92.407842] name failslab, interval 1, probability 0, space 0, times 0 [ 92.419396] CPU: 1 PID: 10515 Comm: syz-executor2 Not tainted 4.16.0-rc6+ #361 [ 92.420841] binder: 10486:10504 ioctl 40046207 0 returned -16 [ 92.426761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 92.426804] Call Trace: [ 92.426823] dump_stack+0x194/0x24d [ 92.426841] ? arch_local_irq_restore+0x53/0x53 [ 92.442946] binder: 10486:10519 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 92.444648] ? __lock_acquire+0x664/0x3e00 [ 92.444686] should_fail+0x8c0/0xa40 [ 92.444703] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 92.473589] ? find_held_lock+0x35/0x1d0 [ 92.477654] ? find_held_lock+0x35/0x1d0 [ 92.481709] ? __lock_is_held+0xb6/0x140 [ 92.485774] ? check_same_owner+0x320/0x320 [ 92.490106] ? __ip_dev_find+0x1c6/0x5f0 [ 92.494163] ? rcu_note_context_switch+0x710/0x710 [ 92.499093] ? trace_hardirqs_off+0x10/0x10 [ 92.503415] should_failslab+0xec/0x120 [ 92.507384] __kmalloc+0x63/0x760 [ 92.510835] ? sock_kmalloc+0x112/0x190 [ 92.514921] sock_kmalloc+0x112/0x190 [ 92.518711] ? copy_overflow+0x30/0x30 [ 92.522603] ip_mc_join_group+0x318/0x5e0 [ 92.526745] ? ip_mc_inc_group+0xce0/0xce0 [ 92.530970] ? kasan_check_write+0x14/0x20 [ 92.535194] ? _copy_from_user+0x99/0x110 [ 92.539336] do_ip_setsockopt.isra.12+0x27f2/0x3210 [ 92.544343] ? ip_ra_control+0x5c0/0x5c0 [ 92.548397] ? trace_hardirqs_off+0x10/0x10 [ 92.552715] ? perf_trace_lock+0x900/0x900 [ 92.556955] ? find_held_lock+0x35/0x1d0 [ 92.561026] ? avc_has_perm+0x35e/0x680 [ 92.565009] ? lock_release+0xa40/0xa40 [ 92.568980] ? __lock_is_held+0xb6/0x140 [ 92.573040] ? avc_has_perm+0x43e/0x680 [ 92.577014] ? avc_has_perm_noaudit+0x520/0x520 [ 92.581687] ? iterate_fd+0x3f0/0x3f0 [ 92.585484] ? lock_downgrade+0x980/0x980 [ 92.589629] ? proc_fail_nth_write+0x9b/0x1d0 [ 92.594114] ? map_files_get_link+0x3a0/0x3a0 [ 92.598597] ? handle_mm_fault+0x35b/0xb10 [ 92.602833] ? sock_has_perm+0x2a4/0x420 [ 92.606884] ? selinux_secmark_relabel_packet+0xc0/0xc0 [ 92.612249] ? selinux_netlbl_socket_setsockopt+0x10c/0x460 [ 92.617951] ? selinux_netlbl_sock_rcv_skb+0x730/0x730 [ 92.623228] ip_setsockopt+0x3a/0xa0 [ 92.626933] tcp_setsockopt+0x82/0xd0 [ 92.630730] sock_common_setsockopt+0x95/0xd0 [ 92.635225] SyS_setsockopt+0x189/0x360 [ 92.639195] ? SyS_recv+0x40/0x40 [ 92.642633] ? SyS_write+0x184/0x220 [ 92.646340] ? SyS_read+0x220/0x220 [ 92.649960] ? do_syscall_64+0xb7/0x940 [ 92.653935] ? SyS_recv+0x40/0x40 [ 92.657376] do_syscall_64+0x281/0x940 [ 92.661249] ? __do_page_fault+0xc90/0xc90 [ 92.665472] ? _raw_spin_unlock_irq+0x27/0x70 [ 92.669960] ? finish_task_switch+0x1c1/0x7e0 [ 92.674448] ? syscall_return_slowpath+0x550/0x550 [ 92.679373] ? syscall_return_slowpath+0x2ac/0x550 [ 92.684296] ? prepare_exit_to_usermode+0x350/0x350 [ 92.689306] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 92.694674] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 92.699517] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 92.704703] RIP: 0033:0x454239 [ 92.707881] RSP: 002b:00007f97129c2c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 92.715575] RAX: ffffffffffffffda RBX: 00007f97129c36d4 RCX: 0000000000454239 [ 92.722832] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000013 [ 92.730089] RBP: 000000000072bea0 R08: 000000000000000c R09: 0000000000000000 [ 92.737349] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000014 2018/03/21 23:55:39 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000ed4ff0)=[{&(0x7f000093cfc7)="390000001100094701bb61e1c30500ff070000000200000045efffff08009b0019001a000f000000220001070000000004e9ff0006000d0005", 0x39}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x4100, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-net\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x3, 0x6, 0x10000, 0x6, 0x60}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x4}}, 0x2, 0x7f}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000240)={r2, 0x5b, 0x3000000000000, 0x8001, 0x0, 0x7, 0x0, 0x100, {r3, @in={{0x2, 0x4e23, @broadcast=0xffffffff}}, 0x7fff, 0x0, 0x100, 0x2, 0x1}}, &(0x7f0000000300)=0xb0) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000340)={r4, 0x1, 0x2, 0x4, 0xd7e4, 0x7ff, 0x9, 0x66a9, {r3, @in6={{0xa, 0x4e21, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}}, 0x40, 0xf726, 0x94d, 0x0, 0x5}}, &(0x7f0000000400)=0xb0) [ 92.744609] R13: 000000000000053d R14: 00000000006f8e58 R15: 0000000000000000 2018/03/21 23:55:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = semget$private(0x0, 0x2, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) semtimedop(r2, &(0x7f0000000040)=[{0x0, 0x54d, 0x1800}, {0x7, 0x7773, 0x800}, {0x2, 0xfffffffffffffd1b, 0x800}], 0x3, &(0x7f00000000c0)={r3, r4+30000000}) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f0000000080)={"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"}) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={0x0, 0x7f}, &(0x7f0000000480)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r2, 0x8001}, 0x8) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:39 executing program 1: clock_gettime(0x0, &(0x7f0000000200)) setitimer(0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000fe0)) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x71f, 0x80000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000140)) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @multicast2}, &(0x7f0000000280)=0xc) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f00000002c0)={0x0, 0x2, 0x6, 0x1, 0x1f}, 0x14) ptrace$getregs(0xe, r1, 0xdb, &(0x7f00000000c0)=""/77) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000340)=""/72) 2018/03/21 23:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:39 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x2, 0x200000) ioctl$KDSKBMETA(r0, 0x4b63, &(0x7f00000000c0)=0x2) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x3, r0}) getsockname$inet6(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000180)={0x2, 0x2, 0x80000001, 0x1}, 0x10) ioctl(r1, 0x1000, &(0x7f0000000040)="bbb8a28b06b3efaa41") r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r1, r2) 2018/03/21 23:55:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:39 executing program 0: r0 = openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/user\x00', 0x2, 0x0) r1 = fcntl$getown(r0, 0x9) timer_create(0x5, &(0x7f0000000840)={0x0, 0x601d, 0x0, @tid=r1}, &(0x7f00000008c0)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x40000, 0x0) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000780)=r1) clock_nanosleep(0x2, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000558ff0)) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f00007a3fe0)={{}, {0x0, r3+30000000}}, &(0x7f00006dcfe0)) vmsplice(r0, &(0x7f0000000700)=[{&(0x7f00000000c0)="525ff595275399eab777f8911d1746903d211c02ccfa82bff7364c729b8537c9fe31e17d6939ee27a9da7cae31c6be64c9ca5dc62bd30c70bdf9413252ad762bed043f02386729b9a61f7828027613e25f6c53898b55c067051f704d7dba", 0x5e}, {&(0x7f0000000200)="415e1475a6ce10384868e17a7e38802419fad86a3aaf4ebcae13b3242555aab83f069736af55e0a900d41b031611d8679e5233c170b56d6913bfde57341cdd8749a5cebf5c59ec707b0ef6df382cfedf9d8a", 0x52}, {&(0x7f0000000280)="b7417cb341c727363f78d492270423b93642a752cf21b3b4ee9153c168f0ddf76e68ebd92e8e29300c73e1703f01520a6ca7872578f7fad91f242835255c468385e463ef800013e09c4258cb49374069386fd4d481f60c27ab2c00d9e8d8b64fbd19fed441a69677fb93c6641b76b932006fbbc5f8eba7bade463978b1ce377aae3ba96a49cec573a939560539f6d06777654b95a0b8c866071dae2d3d85d4e835f7d45c5746c1255cf0ad5558e92b8e81091fcfcd9d86320ed087c35cfaefc1e736c199fbe399095f11b66f8810ae109ae2731efae0307375cc5a65e2d551a2cf", 0xe1}, {&(0x7f0000000380)="1db1880b9d209d9933e4a2f88eb7940d9a752c58020b97ebd830df5119f0511ffbbab7102be0705f9c5990d3e98cdfeee3b57e61b0eed14cf0518160c36031d32fe590c15f47d0ab64d9a19c72dd4c5edc300165ff6afc98c782f07e7a916fb265b8e718e93fe0cc24d8354751732f980348dc8e92a2f43e0fc38b0717c67a60b8db307bc90f82b3d6db5ca424695ab16461aefa1cfeaea4e6bb09a24df95599a201378834b961a2285fe52156b23b7dccf98cb77c1317f2d31663b0f30061aec39a0b96ceeb637c018c331bfb3ccee28bd350d7de3da380eb7674", 0xdb}, {&(0x7f0000000480)="8903c91705190f21b8459985f53d7858fbd65e6b747792cad01d767f39e5d6d9e4a65231183c138220ebf8476a22d78a0af88b813c2ab10d13337ff9a0382b84e478fc12b9e57ad5bc72ea2c364455f8e8018967639c328e636194789631fb0e99da9c9df669a38706998a8bf6e8b80f1841dad3030093d7701f3749b60c620d284bb6719b0e58991b4884e16d51b0dbd47edf2e74aec651153ebf6aaf1917ff92f0e3d9ca7013cd0a76866614e6443d596ecc30da8ee5695b62441bc7b954128c5534dff38ade0790df1fe3e80e130ef4817b129afb10a759e197c884a569a63a152afdcd0d6d53be6be33b0b57cce963d53530b9a633", 0xf7}, {&(0x7f0000000580)="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", 0xfb}, {&(0x7f0000000680)="9f0f48fd7aa6c6126f9363c48d1160357042c4aec218c17e67ec34c69f04d12c86c68117eac3a5047da04200e7caf88be18d500b1a1d3075836a6111713a34f1b5fe53f6fa3a1226fd4eafedf2d6fe7faf8e7d1bd0a569e83a47db", 0x5b}], 0x7, 0x4) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffb) r5 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000000)={0x73, 0x79, 0x7a}, 0x0, 0x0, r4) keyctl$restrict_keyring(0x1d, r5, 0x0, 0x0) 2018/03/21 23:55:39 executing program 7: fcntl$getown(0xffffffffffffffff, 0x9) r0 = syz_open_pts(0xffffffffffffffff, 0x101400) ioctl$TCFLSH(r0, 0x540b, 0x2) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f00000000c0)=0x0) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, r1, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x1) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r4, 0x400454c8, 0x1) io_setup(0x7e5, &(0x7f0000000040)) dup2(r2, r3) 2018/03/21 23:55:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f0000000100)={@dev, @multicast1}, &(0x7f0000000140)=0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x10100, 0x0) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000080)=[0x81, 0xffffffffffffff01]) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$KDGKBLED(r1, 0x4b64, &(0x7f00000000c0)) 2018/03/21 23:55:39 executing program 1: pipe(&(0x7f00004a8000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x10001) r2 = getpid() ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000080)=0x4) sched_setaffinity(r2, 0x24d, &(0x7f0000001200)) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000000), &(0x7f0000000040)=0x4) readv(r0, &(0x7f0000dc0000)=[{&(0x7f000094a000)=""/4096, 0x1000}], 0x1) writev(r1, &(0x7f000000b000)=[{&(0x7f00000000c0)="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", 0x1001}], 0x1) 2018/03/21 23:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r2, 0x3, &(0x7f0000000100)=""/63) r3 = dup2(r0, r1) setsockopt$sock_int(r3, 0x1, 0x2a, &(0x7f0000000080)=0x7ff, 0x4) openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) [ 92.848124] binder: 10545:10553 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 92.884126] binder: BINDER_SET_CONTEXT_MGR already set [ 92.890528] binder: 10545:10561 ioctl 40046207 0 returned -16 [ 92.905045] binder: 10545:10564 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r2) 2018/03/21 23:55:39 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) dup2(r0, r1) 2018/03/21 23:55:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f000015ffa8)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f000007ff6f)="9fa0291e41797c3d71854a9fe2cd8586", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00001cffc8)={0x0, 0x0, &(0x7f000021e000), 0x0, &(0x7f000021efe8)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) r2 = dup3(r1, r0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000008c0)={&(0x7f00000afff4)={0x10}, 0xc, &(0x7f0000119ff0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5000000021000000ffffffffffffffffff010000000000000000000000000001ff02000000000000000000000000000100000000000000000000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000020000000000"], 0x50}, 0x1}, 0x10) recvmsg(r1, &(0x7f0000214fc8)={&(0x7f0000101000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x14, &(0x7f0000140fd0)=[{&(0x7f0000214f7d)=""/131, 0x83}], 0x1, &(0x7f0000214000)=""/155, 0x9b}, 0x0) 2018/03/21 23:55:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = request_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000080)='/dev/binder#\x00', 0xfffffffffffffffc) r2 = request_key(&(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000200)='/dev/binder#\x00', 0xfffffffffffffff9) keyctl$search(0xa, r1, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, r2) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:39 executing program 2: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x0, 0x800) accept$nfc_llcp(r0, &(0x7f00000000c0), &(0x7f0000000140)=0x60) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 2018/03/21 23:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:39 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x4, 0xfffffffffffffffd, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000052cfc8)={&(0x7f0000db7000)={0x10}, 0xc, &(0x7f000097cff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="ff4e3f18ce19500397e6d7bf000059732a650668d056ba3a4b695177868300d92520a0d63b3b1b3865a9c13696d6167cee596e65407dbb59a45c6730415c7a32ce40f6314ce4f7e864e70e31864f14744cdeff7c57ee904dbe28b4e0a2772ebac89f0ba6ff75574324f1a78a99d2515567b56c88eb0da5371621940abd2138e09dfda53fa858f68cc215a1a0925c5c4b67bbf8f5085d6f42072e158c640dc7cc8a2a455a2cb10853d1ed0da21cfa61571566d00811e37ca892b409608eed9ed0fee0d6723fe25e7fabe92e74454ee81d720e7bfe5a56381e1d6af36fd088b2ed85a0653f7e3454ae9ae6ea0366c3e8df709e3412975bc745760ac7d924c26e1bc5bab950f56bc72abc15b3e9acb306e19ec4b9aa393ccf90a625240f5a6bbf670b70435b4c4c7058213d8cd7e5df9334612bf0"], 0x14}, 0x1}, 0x0) r1 = accept4$netrom(0xffffffffffffff9c, &(0x7f0000000040)=@full, &(0x7f00000000c0)=0x48, 0x80800) accept4$netrom(r1, &(0x7f0000000100)=@full, &(0x7f0000000180)=0x48, 0x0) 2018/03/21 23:55:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast2=0xe0000002}, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0xc2800, 0x0) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000080)=""/116) 2018/03/21 23:55:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x4, 0x0) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x4) r3 = dup2(r0, r1) ioctl$KDSIGACCEPT(r3, 0x4b4e, 0x15) 2018/03/21 23:55:39 executing program 0: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0xc00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0x5, 0x802) setsockopt$inet_tcp_int(r0, 0x6, 0x15, &(0x7f000039c000)=0x9, 0x4) 2018/03/21 23:55:39 executing program 7: fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) process_vm_readv(r0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/97, 0x61}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/107, 0x6b}, {&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/197, 0xc5}, {&(0x7f0000000340)=""/163, 0xa3}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/209, 0xd1}, {&(0x7f0000001500)=""/166, 0xa6}], 0x7, 0x0) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r1, r2) [ 93.022760] binder: 10584:10596 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:39 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000100)) r1 = socket(0xa, 0x2, 0x11bb8c6b) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000001c0)={{{@in=@multicast1}}, {{@in=@dev}, 0x0, @in6=@loopback}}, &(0x7f0000000000)=0xe8) sendmsg$netrom(r0, &(0x7f0000001700)={&(0x7f0000000140)=@full={{0x3, {"98aa020ca54afb"}}, [{"5ce1556db42a9f"}, {"e77e8ef6e1ba45"}, {"ac44fa9e11c176"}, {"9dd97c5dffe04b"}, {"08601baa6d91bd"}, {"45773cbc005606"}, {"4e48809d3b8d41"}, {"7020b598a7eb64"}]}, 0x48, &(0x7f0000000680), 0x0, &(0x7f0000001580)}, 0x0) 2018/03/21 23:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:39 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440000000aa06b1d3138d35dfe497ef02806b281753f4abf544e298188d26b29d5ea1347d27e60d660e18f7588bb20c0ff67d6500728edd2275eb338a018bbfefbb52ae34b6e26fdadc770cb6ebaecb2b672ed1f0776f8206f4b404fc9d8499d58024307d9a501bb25d399e6d88ec5f48752260f5f69f9199db3596fe22b17e39f491d7e7fe7ec6668a7ec37ad11ec29c95ff391df1efd590d989dddafd8c62a7a5ddebda5002f2fc81188f91cee3eab606d9e84c1368bcaa07dada7fffe11a37e2257817ef60c8c3a7d98c37cc38e7175c58fe2a1277360efcfe096c"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x100000001, 0x43c000) connect$vsock_dgram(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @any=0xffffffff}, 0x10) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x7, 0xb000}, 0x4) 2018/03/21 23:55:39 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x1, 0x200000) 2018/03/21 23:55:39 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x791e749a, 0x109800) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000040)=ANY=[@ANYBLOB="736563757269747900000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000b358d87377b78c8a82a977119df1dd150687999642a64c2765b644d55caf5009e7689e8e3d2dc53913886240fbc1859c23adb23dccd25e246e529cf7bbdebc66c6706a618a388db8a90ba251040f04efc800eda74b0337afbff6a0e1b6028d71d9d36b2787edfc47f0e073cd87eb18fa383f4c42cf39"], 0x48) r1 = socket(0x2, 0x3, 0x9) getsockopt(r1, 0xff, 0x0, &(0x7f0000b6c000), &(0x7f00003b7000)) [ 93.072929] binder: BINDER_SET_CONTEXT_MGR already set [ 93.090306] binder: 10584:10610 ioctl 40046207 0 returned -16 2018/03/21 23:55:39 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x14, 0x80800) r2 = accept4(r0, &(0x7f0000000200)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000180)=0x80, 0x80800) setsockopt$inet_mreqn(r0, 0x0, 0x2000027, &(0x7f0000000040)={@empty, @empty, r3}, 0xc) recvfrom$packet(r2, &(0x7f0000000000)=""/64, 0x40, 0x40000002, &(0x7f00000001c0)={0x11, 0x10, r1, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0xfffffdea) 2018/03/21 23:55:39 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000008000)={&(0x7f000000c000)={0x10, 0x34000}, 0xc, &(0x7f0000007ff0)={&(0x7f0000000000)={0x18, 0x28, 0x821, 0xffffffffffffffff, 0x0, {0x3}, [@nested={0x4}]}, 0x18}, 0x1}, 0x0) 2018/03/21 23:55:39 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x8000000002, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x5d34e16}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {0x0}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000140)={r2, 0x2}) r3 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r4 = dup2(r3, r1) openat$rtc(0xffffffffffffff9c, &(0x7f0000000280)='/dev/rtc\x00', 0x250000, 0x0) ioctl$GIO_UNISCRNMAP(r4, 0x4b69, &(0x7f0000000180)=""/248) 2018/03/21 23:55:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:39 executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00003dd000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f0000b27f0a)=""/246) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000040)=""/4096) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f0000000000)={0x4, 0x17, 0x80000001, 0x87, "ee75865a3cd2412851daf616228359c917c0f3657b7dc013ad93fd2a7c4412a9"}) ioctl$EVIOCGREP(r0, 0x40047459, &(0x7f0000d1df52)=""/174) [ 93.144783] binder: 10623:10630 Acquire 1 refcount change on invalid ref -1442840576 ret -22 [ 93.164475] binder: 10623:10630 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 93.176846] binder: BINDER_SET_CONTEXT_MGR already set [ 93.188606] binder: 10623:10630 ioctl 40046207 0 returned -16 [ 93.205010] binder: 10638:10639 ioctl 4b69 20000180 returned -22 [ 93.208697] binder: 10623:10637 Acquire 1 refcount change on invalid ref -1442840576 ret -22 [ 93.213118] binder: 10623:10641 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 93.260358] binder: 10638:10649 ioctl 4b69 20000180 returned -22 2018/03/21 23:55:40 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x10000, 0x0) sendmsg$rds(r2, &(0x7f0000000800)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000200)=""/191, 0xbf}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000100)=""/52, 0x34}], 0x5, &(0x7f0000000700)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000003c0)=""/232, 0xe8}, &(0x7f00000004c0), 0x60}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000500)=""/30, 0x1e}, &(0x7f0000000540), 0x30}}, @fadd={0x58, 0x114, 0x6, {{0x400, 0x5}, &(0x7f0000000580)=0xfff, &(0x7f00000005c0)=0xffffffffffffffff, 0x101, 0x3, 0x5, 0x7, 0x51, 0x5}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000600)=""/165, 0xa5}, &(0x7f00000006c0), 0x1}}], 0xe8, 0x1}, 0x4040004) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f0000000840)=""/163) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000000a00)={'filter\x00', 0x0, 0x4, 0xa7, [], 0x2, &(0x7f0000000900)=[{}, {}], &(0x7f0000000940)=""/167}, &(0x7f0000000a80)=0x78) dup2(r0, r1) 2018/03/21 23:55:40 executing program 1: mknod(&(0x7f0000001f80)='./file0\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa00000400, 0xffffffffffffffff, 0x5, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f000000a000)) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x6, 0x48080) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) 2018/03/21 23:55:40 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x17}, @loopback=0x7f000001}, 0x3e5) 2018/03/21 23:55:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00006a4ff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mtu(r2, 0x0, 0xa, &(0x7f0000000080), &(0x7f00000000c0)=0x4) dup3(r4, r3, 0x0) prlimit64(0x0, 0x7, &(0x7f0000d41000), &(0x7f0000000000)) inotify_init() syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="b9870300000f329a1a00c0fee400c4c31120660d4ab981030000b806000000ba000000000f30c4e2392db636fb66ed0f3266b817018ed0c4e161f1c70f01cf66b8dc008ec8", 0x45}], 0x1, 0x0, &(0x7f00000001c0), 0x0) 2018/03/21 23:55:40 executing program 6: syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r0 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000200)="e55d5f1a8868b1b4cabddb38ceaa7403134b8eaf9d408a040201c5e034a38f47cb6cc5700d75ec99e7886d822036949d26b210d5da9753af21eb0eb970737cf16521eee09a980969bfce28af803c9d3503e411480d3727877c32766a1a21b022d9d3788dc72398ba77fd74fe8f4c8fff16614b6c2b8b", 0x76, 0xfffffffffffffffb) add_key$user(&(0x7f0000000080)='user\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="280131ea83c8be89fae32f", 0xb, r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x2000, 0x0) timerfd_gettime(r1, &(0x7f0000000340)) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f00000002c0)={0x910}) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TUNSETGROUP(r1, 0x400454ce, r4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="a1ecfc7046d5ee6e"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:40 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x1e, 0x1, [0x7]}, &(0x7f0000000200)=0xa) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000240)={r3, 0x8002}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000100)={r4, 0x101}, &(0x7f0000000140)=0x8) dup2(r0, r1) 2018/03/21 23:55:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f0000000300)=0x200, 0x4) timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') ptrace$setregset(0x4205, r1, 0x206, &(0x7f00000002c0)={&(0x7f00000001c0)="2138abd8b943df661ea12dc2cb9ca58aab3f6010c42dbd235e027e9b20fb908a38e03f04ff8331658b982c916423fbe42fa660c593f4939dcb89922036f0dc4d6edfa34c6b53c22b9ab3eb2be5cfeef93a75abbd3c0809416ef6d9ce82b3bdd528f7051483c91e5948fbc8c6ebd0dadbadee6c523adb77cd7c20495096f432db8660fd15812779a196bc78fb4dc97aad9efb697ed53a3acdf169d9d362df9d78ca68cacc653741a9ecd3d95291cdc094491f70dc50fe57b25423f69781eacae5a29e4e959bf53c4cffde467dcc73b2543bcb3c0d9e86bb22dc2b9d1088e0a775227543ee8078f1", 0xe7}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0xb, "9cc4ed1f1af03129bb66ef"}, &(0x7f0000000080)=0x13) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r2, 0x7}, &(0x7f0000000100)=0x8) 2018/03/21 23:55:40 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0xffff) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2800, 0x0) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x28c5f876, 0x0) fcntl$setsig(r1, 0xa, 0x33) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000100)={0x9, @random="6bc49d6f1902"}) dup2(r0, r1) 2018/03/21 23:55:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x2}, 0x8) 2018/03/21 23:55:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0x3}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x2, 0xe9}, &(0x7f0000000340)=0x8) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x4e22}, 0x1c) r4 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000db4ffc)=0x214, 0x0) shutdown(r0, 0x4) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x101000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r5, 0x50, &(0x7f0000000140)}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x3) sendmsg$nl_generic(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ee4e38667d2b5ce0fc212474383997f5b0046b338c793cd6422ac6c688d8184ebb2688cd8cf93e4e217fbb730c01560925ce557639d3db5beb110d1fbec57f3f3d08080ff2f5cd8a0cf1f123"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x1c) [ 93.684411] binder: 10653:10662 unknown command 1895623841 [ 93.694667] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 93.695106] binder: 10653:10662 ioctl c0306201 20012000 returned -22 [ 93.714415] binder: 10653:10675 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 93.753380] binder: 10653:10675 unknown command 1895623841 [ 93.760699] binder: 10653:10675 ioctl c0306201 20012000 returned -22 2018/03/21 23:55:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001540)='mountstats\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000040)=0x7600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002780)={r1, 0x0, 0x0, 0x1000, &(0x7f0000001740), &(0x7f0000001780)=""/4096, 0x200, 0x101}, 0x28) write(r1, &(0x7f0000001700)="d096737d56f86e03117887c72f8e1e40f69f87aaa77e93632e455c", 0x1b) connect$bt_rfcomm(r1, &(0x7f0000001580)={0x1f, {0x5910, 0x2, 0x1, 0x3, 0xff, 0x3f}, 0xf656}, 0xa) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000001600)=@assoc_value={0x0}, &(0x7f0000001640)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000001680)={r2, 0xffff, 0x0, 0x3, 0x1}, &(0x7f00000016c0)=0x18) process_vm_readv(0x0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/93, 0x5d}, {&(0x7f0000000100)=""/180, 0xb4}, {&(0x7f00000001c0)=""/69, 0x45}, {&(0x7f0000000240)=""/221, 0xdd}], 0x4, &(0x7f0000001500)=[{&(0x7f0000000380)=""/137, 0x89}, {&(0x7f0000000440)=""/175, 0xaf}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x3, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$ax25_int(r1, 0x101, 0x9, &(0x7f00000015c0)=0x8, 0x4) 2018/03/21 23:55:40 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', r1}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x28, &(0x7f0000000100)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000180)={r3, 0x1, 0x18}, 0xc) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x10800, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000080)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r5 = dup2(r0, r2) fdatasync(r5) 2018/03/21 23:55:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:40 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000500)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f00000003c0)=0x4, 0x4) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000009c0)) r2 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x0, 0x189003) getsockopt$EBT_SO_GET_INIT_INFO(r2, 0x0, 0x82, &(0x7f0000000240)={'broute\x00'}, &(0x7f00000002c0)=0x78) socketpair(0x8, 0x800, 0x9, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fchmodat(r2, &(0x7f0000000380)='./file0\x00', 0x1) sigaltstack(&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000400)) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f00000000c0)=0x3) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000100)) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000180)={{0x2, 0x293}, 'port0\x00', 0x2, 0x40000, 0x2, 0x6, 0x7ff, 0xd3, 0x100000000, 0x0, 0x2, 0x1f}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000440)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x3}) r5 = dup2(r0, r0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x7fff, @loopback={0x0, 0x1}, 0x2}}, [0x800, 0x3, 0xfff, 0x4, 0x100000000, 0x2, 0x68d200000, 0xfffffffffffffff9, 0x9, 0x80000001, 0x4c56, 0x1, 0xb2, 0x5, 0x9]}, &(0x7f0000000040)=0x100) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000700)={r6, @in={{0x2, 0x4e20, @broadcast=0xffffffff}}, [0x95fe, 0x61, 0x683, 0x1, 0x6, 0x400, 0x7fff, 0x0, 0x282210e1, 0x1, 0x1f, 0x9, 0x6, 0x1, 0x7]}, &(0x7f0000000800)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000540)={r6, 0x7, 0x30}, &(0x7f00000006c0)=0xc) getpeername$ax25(r5, &(0x7f0000000300), &(0x7f0000000340)=0x10) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f0000000580)={0x0, 0x2000003}) connect(r2, &(0x7f0000000480)=@pppoe={0x18, 0x0, {0x3, @random="df21745d879f", 'eql\x00'}}, 0x80) 2018/03/21 23:55:40 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000040)="01", 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r0, &(0x7f0000034f6b)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r0, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0x74, &(0x7f000002ff48)={0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}}}, &(0x7f0000023ffc)=0x1f7) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x10001, 0x400000) 2018/03/21 23:55:40 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x6, 0x80002) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x49de, 0x3, 0x9}) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000040)=0x9, 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x6, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x15}}, @in6={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}, 0x3}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000300)={r3, 0x2, 0xe9}, &(0x7f0000000340)=0x8) bind$inet6(r1, &(0x7f00001fefe4)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x1000000c4, 0x20000001, &(0x7f0000faafe4)={0xa, 0x4e22}, 0x1c) r4 = accept4(r1, &(0x7f0000218fa8)=@alg, &(0x7f0000db4ffc)=0x214, 0x0) shutdown(r0, 0x4) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x101000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r5, 0x50, &(0x7f0000000140)}, 0x10) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x3) sendmsg$nl_generic(r4, &(0x7f0000000800)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f00000007c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="ee4e38667d2b5ce0fc212474383997f5b0046b338c793cd6422ac6c688d8184ebb2688cd8cf93e4e217fbb730c01560925ce557639d3db5beb110d1fbec57f3f3d08080ff2f5cd8a0cf1f123"], 0x1}, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000380)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x1c) 2018/03/21 23:55:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x22a}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:40 executing program 2: r0 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x4699, 0x40800) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000000c0)=""/53) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) [ 93.849011] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 93.858806] binder: 10694:10704 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:40 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x4, 0x141000) clock_gettime(0x0, &(0x7f0000002f40)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000002e00)=[{{&(0x7f0000000140)=@nl=@proc, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/195, 0xc3}, {&(0x7f00000002c0)=""/249, 0xf9}], 0x2, &(0x7f0000000400)=""/9, 0x9, 0x1000}, 0x3}, {{&(0x7f0000000440)=@alg, 0x80, &(0x7f0000001740)=[{&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/54, 0x36}, {&(0x7f0000001500)=""/72, 0x48}, {&(0x7f0000001580)=""/39, 0x27}, {&(0x7f00000015c0)}, {&(0x7f0000001600)=""/40, 0x28}, {&(0x7f0000001640)=""/212, 0xd4}], 0x7, &(0x7f00000017c0)=""/82, 0x52, 0xe7f}, 0x40}, {{&(0x7f0000001840)=@hci={0x0, 0x0}, 0x80, &(0x7f0000002b80)=[{&(0x7f00000018c0)=""/39, 0x27}, {&(0x7f0000001900)=""/228, 0xe4}, {&(0x7f0000001a00)=""/77, 0x4d}, {&(0x7f0000001a80)=""/253, 0xfd}, {&(0x7f0000001b80)=""/4096, 0x1000}], 0x5, &(0x7f0000002c00)=""/16, 0x10, 0xfff}, 0x6}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000002c40)=""/34, 0x22}], 0x1, 0x0, 0x0, 0x2}, 0x200}, {{&(0x7f0000002cc0)=@ax25, 0x80, &(0x7f0000002d80)=[{&(0x7f0000002d40)=""/37, 0x25}], 0x1, &(0x7f0000002dc0)=""/52, 0x34}, 0x1}], 0x5, 0x2, &(0x7f0000002f80)={r1, r2+10000000}) fstat(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$key(r0, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f00000015c0)=ANY=[@ANYBLOB="0000e4ffffff6dd407000000"], 0x18}, 0x1}, 0x80) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f00000031c0)=0xfffffffffffffffd, 0x8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003040)={{{@in6=@loopback={0x0, 0x1}, @in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x0, 0x4e20, 0x0, 0xa, 0x0, 0x20, 0xff, r3, r4}, {0x3, 0x0, 0x999, 0x9, 0x7e8b, 0x10001, 0x2, 0x1ff}, {0x1000, 0x5798, 0x3f1000000000000, 0xbbf}, 0x2, 0x6e6bb0, 0x1, 0x1, 0x2, 0x3}, {{@in=@local={0xac, 0x14, 0x14, 0xaa}, 0x4d4, 0xff}, 0xa, @in=@multicast1=0xe0000001, 0x3503, 0x5, 0x3, 0x0, 0x100, 0xef, 0x400}}, 0xe8) r5 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x4000000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x7fff, 0x20080) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000008000000080000000400000086"]) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0xfffffffffffffffe, 0xffffffffffffffcb) dup2(r5, r6) 2018/03/21 23:55:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:40 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0xcf, 0x694400) getsockname$packet(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x14) r1 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x100000000000000, 0x800000000000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000100), 0x4) ioctl(r1, 0x440000000000127d, &(0x7f000002cfff)) 2018/03/21 23:55:40 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x31, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x1000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x4) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000040)={0x0, 0xb85}) 2018/03/21 23:55:40 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000eb8000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KDGKBLED(r0, 0xc0046d00, &(0x7f0000000000)) 2018/03/21 23:55:40 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) getpeername$packet(r0, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001100)=0x14) recvfrom$packet(r0, &(0x7f0000000080)=""/4096, 0x1000, 0x2, &(0x7f0000001140)={0x11, 0xf7, r2, 0x1, 0x0, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) tkill(r1, 0x1000000000016) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x80) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:40 executing program 2: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) accept$packet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) [ 93.941351] binder: BINDER_SET_CONTEXT_MGR already set [ 93.966882] binder: 10694:10715 ioctl 40046207 0 returned -16 2018/03/21 23:55:40 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x14b3, 0x313801) setsockopt$inet6_dccp_buf(r1, 0x21, 0x8f, &(0x7f0000000180)="032739ac4db1c2138f1d5fd45079d861f766051c127361f8564bd2f06c9e021b168b8182334ba15109c6b49d052578e986828d4a134969165fa35935151fd3a5e38d093304b0801c2577e3542cab891e7bda3e74d9af81a5c422cb00e11b3f7302e60368073fd828c1c2fd49c887e4284c9ddbe518f7e47c4dfe3ee23b823a1a745b1d7da4168081727eb368aadf6148ae0400ebe5954f97232d1614296406c7b81ec6db32994bb5d14180500ff84c4924f45265cab28fcc50697000c75a25fd5bbb751faec761fc88ffe8", 0xcb) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r2) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f00000000c0)) 2018/03/21 23:55:40 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0x0, 0x802) dup2(r0, r1) 2018/03/21 23:55:40 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) [ 93.994069] *** Guest State *** [ 93.997707] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 94.006617] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 94.015553] CR3 = 0x00000000fffbc000 [ 94.019328] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 94.025375] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 94.032275] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 2018/03/21 23:55:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getpeername(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @loopback}}}, &(0x7f0000000000)=0x80) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f0000000180)=0x6, 0x4) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x4000000027, &(0x7f00000000c0)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}, r2}, 0xc) 2018/03/21 23:55:40 executing program 0: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x82, 0x0) read$eventfd(r0, &(0x7f0000000280), 0x153) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000140)="10000000f0ffffffff00000000855da0", 0x10}]) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000000)=0x3, 0x8) [ 94.039051] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 94.047056] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.055083] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.062582] binder: 10747:10752 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 94.063205] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.063236] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.063248] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 2018/03/21 23:55:40 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/102, 0x66}, {&(0x7f0000000140)=""/43, 0x2b}, {&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000240)=""/20, 0x14}, {&(0x7f0000000280)=""/108, 0x6c}], 0x5, 0x0) r2 = dup2(r0, r1) r3 = timerfd_create(0x5, 0x800) flistxattr(r3, &(0x7f0000000380)=""/146, 0x92) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f0000000040)=""/99) [ 94.094979] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 94.103056] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 94.111084] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 94.119135] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 94.122118] binder: BINDER_SET_CONTEXT_MGR already set [ 94.127157] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 94.127168] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 94.127176] Interruptibility = 00000000 ActivityState = 00000000 [ 94.127179] *** Host State *** [ 94.127189] RIP = 0xffffffff811cda36 RSP = 0xffff8801d2ff73b8 [ 94.127213] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 94.127222] FSBase=00007f0f31c83700 GSBase=ffff8801db200000 TRBase=fffffe0000003000 [ 94.127231] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 94.127242] CR0=0000000080050033 CR3=00000001d6c45001 CR4=00000000001626f0 [ 94.127252] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff85e01630 [ 94.127260] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 94.127263] *** Control State *** [ 94.127269] PinBased=0000003f CPUBased=b599edfe SecondaryExec=000000c2 [ 94.127273] EntryControls=0000d1ff ExitControls=0023efff [ 94.127283] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 94.127288] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 94.127294] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 94.127299] reason=80000021 qualification=0000000000000000 2018/03/21 23:55:40 executing program 1: socketpair(0x4, 0x6, 0x5, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000080)={0x1, [0x100000000]}, 0x6) r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='/exe\x00\x00\x00\x00\x00\x00') syz_open_dev$random(&(0x7f0000000140)='/dev/random\x00', 0x0, 0x294841) sendfile(r1, r2, &(0x7f0000000100)=0x800000000, 0x9) 2018/03/21 23:55:40 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000080)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x5) read(r0, &(0x7f0000000040), 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001400)='/dev/rfkill\x00', 0x24000, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0xa, &(0x7f0000001440), 0x1) 2018/03/21 23:55:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:41 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000001f88)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x70, 0x800) connect$unix(r1, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0) 2018/03/21 23:55:41 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x1, r1}) setsockopt$inet_tcp_buf(r2, 0x6, 0xb, &(0x7f0000000280)="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", 0x130) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000022c0)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f00000023c0)=0xe8) write$rdma_cm(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="0c000000080000fa", @ANYPTR=&(0x7f00000005c0)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005a70720f27bd1847873ec09e1306000000000000000000000000000000000000000000000000000000fc3b54e8138dae41141cb24e4bc61ae2ed9dc6fc55a92071f0021a64c9fabcf8c4213dde00c190b29e49aa7af5ba74f07ad3bd96416db68d18bc3ffc67aa752e66f22fdce126774c9d9799253595e9700fd75df4105a7ab068d4ae9d72cb7bfc2a685d90a5a7647c880ea1383aa71edf615c76e96dc7f11541bd2102897432d3830345be73b749313abc8a"]], 0x10) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000400)={@loopback={0x0, 0x1}, r3}, 0x14) dup2(r0, r2) ioctl$TIOCEXCL(r2, 0x540c) setns(r2, 0x44000000) ioctl(r2, 0x9, &(0x7f0000000180)="b0598040ff8f9303f43e56042bb4694ead1351477626d5d5ff34224cc7bb09359ba8ca6765aa1a7ee208d6a227d883a129eeb672360cc94ae4e1a7923846467f6839cd07f56009c92bf9dda9f68d9f21245178526c2547ccb0ad8b61c87a46ec6ac46927b6c6615fc896e35e05b289830bd3ae3415776f6578d22b345aea3d9e69a9f2d9e0b44768a56a1d3418ab8bae90cbcfd26db46d9ba5ca") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080)="9d66cc9d035fce8715393e8f502bf0cbff78f34f0f6432c62a21e6e2f87dc67c82879cf3f60eeb5478cb3a2639eb8458ce9f2b55", &(0x7f00000000c0)="66aec2632a773751f547b19a83ed60565b205d30353d95c65c869ba4f6", 0x3}, 0x20) [ 94.127304] IDTVectoring: info=00000000 errcode=00000000 [ 94.127307] TSC Offset = 0xffffffcb4052264f [ 94.127313] EPT pointer = 0x00000001c12d601e [ 94.261793] binder: 10747:10756 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:41 executing program 2: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x4200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r0, 0x4) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$read(0xb, r2, &(0x7f0000000100)=""/85, 0x55) 2018/03/21 23:55:41 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = getpgrp(0xffffffffffffffff) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) r3 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@generic, &(0x7f0000000100)=0x80, 0x80800) connect$bt_l2cap(r3, &(0x7f0000000140)={0x1f, 0x2000000, {0x7, 0x3, 0x2, 0x3, 0x3, 0x9}, 0x2, 0x6}, 0xe) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000200)=0x7ff, 0x4) r4 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x7f, 0x10000) ioctl$TIOCSTI(r4, 0x5412, 0x7ff) statx(r4, &(0x7f0000000240)='./file0\x00', 0x800, 0x800, &(0x7f0000000280)) r5 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r5) sendfile(r0, r5, &(0x7f0000000040), 0x5) syz_open_dev$audion(&(0x7f0000000380)='/dev/audio#\x00', 0x363b, 0x200000) [ 94.382381] binder: 10747:10763 ioctl 40046207 0 returned -16 [ 94.382942] *** Guest State *** [ 94.391810] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 94.400699] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 94.409610] CR3 = 0x00000000fffbc000 [ 94.413382] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 94.419427] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 94.425469] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 94.432181] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 94.440187] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.448207] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.456208] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.464226] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.472228] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.480226] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 94.488235] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 94.496246] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 94.504242] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 94.512241] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 94.518671] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 94.526146] Interruptibility = 00000000 ActivityState = 00000000 [ 94.532410] *** Host State *** [ 94.535640] RIP = 0xffffffff811cda36 RSP = 0xffff8801b0ce73b8 [ 94.541646] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 94.548089] FSBase=00007f0f31c83700 GSBase=ffff8801db300000 TRBase=fffffe0000034000 [ 94.555909] GDTBase=fffffe0000032000 IDTBase=fffffe0000000000 [ 94.561833] CR0=0000000080050033 CR3=00000001c60bf003 CR4=00000000001626e0 [ 94.568891] Sysenter RSP=fffffe0000033200 CS:RIP=0010:ffffffff85e01630 [ 94.575588] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 94.581684] *** Control State *** [ 94.585178] PinBased=0000003f CPUBased=b599edfe SecondaryExec=000000c2 [ 94.591867] EntryControls=0000d1ff ExitControls=0023efff [ 94.597346] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 94.604295] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 [ 94.610987] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 94.617600] reason=80000021 qualification=0000000000000000 [ 94.623957] IDTVectoring: info=00000000 errcode=00000000 [ 94.629432] TSC Offset = 0xffffffcb0afd621e 2018/03/21 23:55:41 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) r2 = getpid() migrate_pages(r2, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x5) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ptrace$peekuser(0x3, r2, 0x8) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:41 executing program 0: syz_open_dev$tun(&(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x1) r0 = socket(0x1e, 0x7, 0x7a7) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000540ff0)=@req={0x3fc, 0x0, 0x1}, 0x10) r1 = socket(0x1e, 0x4, 0x0) dup2(r0, r1) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) 2018/03/21 23:55:41 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x510, 0xffffffff, 0x0, 0x0, 0xe8, 0xffffffff, 0xffffffff, 0x478, 0x478, 0x478, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ip={@multicast2=0xe0000002, @multicast2=0xe0000002, 0xffffff00, 0xffffff00, 'syz_tun\x00', 'bcsf0\x00', {}, {}, 0x0, 0x3}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={0x28, 'icmp\x00', 0x0, {0xb, 0x3, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x1f0, 0x250, 0x0, {}, [@common=@inet=@policy={0x158, 'policy\x00', 0x0, {[{@ipv4=@local={0xac, 0x14, 0x14, 0xaa}, [0x0, 0xff000000, 0xff000000, 0xffffff00], @ipv4=@loopback=0x7f000001, [0xffffffff, 0xff, 0x0, 0xffffffff], 0x4d6, 0x3506, 0x3f, 0x0, 0x7, 0x1}, {@ipv4=@multicast2=0xe0000002, [0xffffffff, 0xffffffff, 0xff, 0xff], @ipv6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0x11}}, [0xffffffff, 0x0, 0x0, 0xffffffff], 0x4d2, 0x3503, 0x2b, 0x0, 0x6, 0x11}, {@ipv4, [0xffffff00, 0x0, 0xffffffff, 0xffffffff], @ipv4=@remote={0xac, 0x14, 0x14, 0xbb}, [0x0, 0xffffffff, 0x0, 0xffffffff], 0x4d5, 0x401, 0x2c, 0x1, 0x7, 0x10}, {@ipv6, [0xffffff00, 0x0, 0xff], @ipv4=@multicast1=0xe0000001, [0xffffff00, 0xffffffff, 0xffffffff, 0x516cdfdd20f769a2], 0x4d2, 0x3504, 0x67, 0x1, 0x1, 0x13}], 0x4, 0x3}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffb, 0x7, [0x2c, 0x1a, 0x2d, 0x12, 0x0, 0xa, 0x2e, 0x2e, 0x3c, 0x39, 0x4, 0x1e, 0x39, 0x30, 0x3, 0x34], 0x1, 0x6, 0x7}}}, {{@ip={@multicast1=0xe0000001, @loopback=0x7f000001, 0x0, 0xff000000, 'yam0\x00', 'rose0\x00', {0xff}, {}, 0x2, 0x0, 0x1}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@osf={0x50, 'osf\x00', 0x0, {'syz0\x00', 0x1, 0xecb81781da58d792}}, @common=@addrtype={0x30, 'addrtype\x00', 0x0, {0x40, 0x401, 0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{[], 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x570) dup2(r0, r1) 2018/03/21 23:55:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000100), &(0x7f00000000c0)=0x4) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2=0xe0000002, @dev={0xac, 0x14, 0x14, 0x13}}, 0xc) r1 = syz_open_dev$mouse(&(0x7f0000000180)='/dev/input/mouse#\x00', 0xf98, 0xd0c40) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)=0x3) 2018/03/21 23:55:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e0000000000"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:41 executing program 1: io_setup(0x1, &(0x7f0000000100)=0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x101000, 0x0) socketpair(0xf, 0x80000, 0x8f3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$netlink(0x10, 0x3, 0x1f) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10) socketpair(0x9, 0xa, 0x4, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) io_submit(r0, 0x4, &(0x7f0000000640)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xe9, r1, &(0x7f0000000180)="da58657e78293502c70fbe8638bd82b007980f448610217817a9694a33dc6c8b2ad56c255065b5c391eb2c877c00504089072f906607b32e795f600639ed0a3fcb284a799e32dfabfbe8f6ec", 0x4c, 0x7fff, 0x0, 0x1, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6, 0x9, r3, &(0x7f0000000280)="4bc96b4589a224ef334f3b559b5e1ee3cfd057a7abafce9161c9b44f0122cb4aa1842fd78f3cf61d4e576f7fe9d84adad94c439dd0396b1356bcafc077bc1015f0aa4534a6dcdf6f567b2aa6ff6964dc10ff41a91958ab40264ddb433311bcd78b4891e3658e10cd1465aa482c89237477571241dfd7f34be7ef24984376893408c17002629940cc", 0x88, 0x841, 0x0, 0x1, r4}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x6, r5, &(0x7f0000000400)="9317d683", 0x4, 0x6, 0x0, 0x1, r6}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0xf, 0x9, r7, &(0x7f0000000500)="cbb1a54f7550560390b2b4117532e383ec7a59367f56fcbb68610b621e2cd2b588fb6508781aeaebaaef48f3d15a15cd42b3c2ccd34e4fab9cf901283f2470e104b35ba39a02b3334751b2a3c313cc11fdd4713ba083cf1c398a3c5e744becb141a17236e6ce0be5927cb6ca16fafd45053a0ace4e4ba40d20426a0f01340d22ad8344fa69bfd05aa817f5d11bfea3b52c", 0x91, 0x4c0b1477, 0x0, 0x0, r8}]) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='/exe\x00\x00\x00\x00\x00\x00') fgetxattr(r9, &(0x7f00000000c0)=@known='user.syz\x00', &(0x7f0000000000)=""/119, 0x77) 2018/03/21 23:55:41 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r0) [ 94.633781] EPT pointer = 0x00000001b8e5101e 2018/03/21 23:55:41 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) munlockall() setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f0000000100)={0x0, {{0x2, 0x4e21, @loopback=0x7f000001}}}, 0x88) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x1000, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000080)={{0x100, 0x10001}, {0x2, 0x100}, 0x3f, 0x4, 0x3}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) ioprio_set$uid(0x0, r3, 0x7ff) 2018/03/21 23:55:41 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$describe(0x6, r2, &(0x7f0000000180)=""/96, 0x60) capset(&(0x7f0000000080)={0x399f1336, r1}, &(0x7f00000000c0)={0xbc, 0x7fff, 0x9, 0xfffffffffffff606, 0x32, 0x9}) r3 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r3) [ 94.683344] binder: 10803:10810 unknown command 14 [ 94.694460] binder: 10803:10810 ioctl c0306201 20008fd0 returned -22 [ 94.701830] binder: BINDER_SET_CONTEXT_MGR already set [ 94.717761] binder: 10803:10810 ioctl 40046207 0 returned -16 [ 94.732940] binder: 10803:10826 unknown command 14 [ 94.750910] binder: 10803:10826 ioctl c0306201 20008fd0 returned -22 [ 94.753103] *** Guest State *** [ 94.760926] CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffffff7 [ 94.769844] CR4: actual=0x0000000000002050, shadow=0x0000000000000000, gh_mask=ffffffffffffe871 [ 94.778744] CR3 = 0x00000000fffbc000 [ 94.782520] RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 94.788555] RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 94.794593] Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 94.801310] CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 94.809363] DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.817410] SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.825471] ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.833508] FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.841536] GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 94.849540] GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 94.857583] LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 94.865615] IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 94.873651] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 94.881674] EFER = 0x0000000000000000 PAT = 0x0007040600070406 [ 94.888119] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 94.895600] Interruptibility = 00000000 ActivityState = 00000000 [ 94.901865] *** Host State *** [ 94.905099] RIP = 0xffffffff811cda36 RSP = 0xffff8801b14ef3b8 [ 94.911116] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 94.917550] FSBase=00007f0f31c83700 GSBase=ffff8801db200000 TRBase=fffffe0000003000 [ 94.925388] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 94.931317] CR0=0000000080050033 CR3=00000001cc805006 CR4=00000000001626f0 [ 94.938363] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff85e01630 [ 94.945073] EFER = 0x0000000000000d01 PAT = 0x0000000000000000 [ 94.951169] *** Control State *** [ 94.954650] PinBased=0000003f CPUBased=b599edfe SecondaryExec=000000c2 [ 94.961351] EntryControls=0000d1ff ExitControls=0023efff [ 94.966828] ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 94.973785] VMEntry: intr_info=80000000 errcode=00000000 ilen=00000000 2018/03/21 23:55:41 executing program 0: socketpair$unix(0x1, 0xa00000000002, 0x0, &(0x7f0000886ff8)={0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={0xffffffffffffff9c, 0x50, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)=r1, 0x4) unshare(0x7ff7fff) r2 = dup3(r0, r0, 0x0) connect$nfc_raw(r2, &(0x7f0000000040)={0x27, 0x1, 0x0, 0x7}, 0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x80, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0xfff, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xf}}, @in6={0xa, 0x4e23, 0x3, @ipv4={[], [0xff, 0xff], @rand_addr=0x5}, 0x3}, @in6={0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x73dfad99}, @in6={0xa, 0x4e20, 0x6, @loopback={0x0, 0x1}, 0xd9}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)=ANY=[@ANYRES32=r3, @ANYBLOB="03000000"], &(0x7f0000000180)=0x8) 2018/03/21 23:55:41 executing program 7: r0 = creat(&(0x7f0000000180)='./file0\x00', 0x8) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f00000001c0)={0x1, [0x9]}) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x1, 0x220000) ioctl$KDSETMODE(r1, 0x4b3a, 0x7fff) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000002c0)=0x7, 0x4) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0) r3 = dup2(r2, r2) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000080)=0x0) fcntl$setownex(r3, 0xf, &(0x7f00000000c0)={0x3, r4}) ioctl$KVM_S390_INTERRUPT_CPU(r3, 0x4010ae94, &(0x7f0000000040)={0x8, 0x1, 0xe64b}) accept4$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x14, 0x80000) 2018/03/21 23:55:41 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0x0, 0x100000) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:41 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) set_robust_list(&(0x7f0000000100)={&(0x7f0000000040)={&(0x7f0000000000)}, 0x8, &(0x7f0000000080)}, 0x18) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:41 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0)={0x1d}, 0x10) io_setup(0x1000, &(0x7f00000000c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="050000008cf46cfde19a4e3bcfbdbedee32e68b3a251fd2cfd09684d9c7afae320bbf22a2ce3cb58fa63c42a238cb85f1023fa813c9a0e46", 0x38}]) 2018/03/21 23:55:41 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc\x00', 0x10841, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {r3, r4+30000000}}, &(0x7f0000040000)) timer_gettime(r2, &(0x7f0000000180)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x28, &(0x7f0000000100)}, 0x10) fadvise64(r0, 0x0, 0x1, 0x2) link(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 2018/03/21 23:55:41 executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000040)=[0x101, 0xffffffffffffffff]) poll(&(0x7f0000000080), 0x20000000000001b0, 0x7) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) [ 94.980582] VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 94.987195] reason=80000021 qualification=0000000000000000 [ 94.993540] IDTVectoring: info=00000000 errcode=00000000 [ 94.999036] TSC Offset = 0xffffffcad91ea143 [ 95.003384] EPT pointer = 0x00000001cd18d01e 2018/03/21 23:55:41 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$getflags(r0, 0x40b) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x20, 0x9, 0x1, 0x0, 0x0, 0x1, 0x53, 0x0, 0x800, 0x10, 0x3, 0x0, 0x4, 0x7, 0xc4c0, 0x8, 0x5, 0xa9, 0x100000001, 0xd3c3, 0x5, 0xffffffffffffff7f, 0xb621, 0x8, 0x100000001, 0xd9cc00000000000, 0x0, 0x8e, 0x5, 0x7ff, 0x4, 0x80, 0x100000000, 0x3, 0x2, 0x7, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x3d6e, 0x3f, 0x6, 0x282b, 0x0, 0x3}, r2, 0x6, r3, 0x2) r4 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000b81000), &(0x7f00005fb000)=0xfffffffffffffeee) [ 95.046124] binder: 10843:10852 unknown command 1074553742 [ 95.058635] binder: 10843:10852 ioctl c0306201 20008fd0 returned -22 [ 95.089883] binder: BINDER_SET_CONTEXT_MGR already set [ 95.110592] binder: 10843:10852 ioctl 40046207 0 returned -16 [ 95.156561] binder: 10864:10865 ioctl 8904 20000080 returned -22 [ 95.167567] binder: 10864:10865 ioctl 4010ae94 20000040 returned -22 [ 95.180403] binder: 10864:10865 ioctl 8904 20000080 returned -22 [ 95.182513] binder: 10864:10867 ioctl 4010ae94 20000040 returned -22 2018/03/21 23:55:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x14, 0x80000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bpq0\x00', r1}) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:42 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0xffffffffffffffff, &(0x7f0000ec5000)={0x0, 0xf, 0x1000}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) wait4(r1, 0x0, 0x8, &(0x7f0000000080)) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) fallocate(r0, 0x2, 0x100000001, 0x0) 2018/03/21 23:55:42 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r1 = dup2(r0, r0) r2 = gettid() move_pages(r2, 0xa, &(0x7f00000000c0)=[&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000180)=[0x8, 0x81], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4) getsockname$llc(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x10) 2018/03/21 23:55:42 executing program 1: mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) mount(&(0x7f0000df7000)='./file0\x00', &(0x7f0000000000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000000180)='v') ioctl$sock_proto_private(r0, 0x89e4, &(0x7f00000001c0)="5f2e8e122abf332ae310b365450eab03d0375eabb776febc2ab8bf6b974ac76dce52734a9fc29c2f73915e44413700d6e4a0d954e49df44e5312abb9c3521f42ba600a518ef84f1948b1f68ffe578693f6ba6740ee92448a256863754b7f47340694eb0d1a15c8a29f9098da7724fbe7de3b763f2225338e62805cc2cf2e92039edd6389eca6af24bf2550d20f574da98b3cd99455dcd28cdd5f61782f70211a4936b37755fdbe345d472ecd5c5656affec1406c3be93195418fa52c6c2e74dd77e915becfc56eeb61d2461d340a72dfd8ee840d111cf10c9c") 2018/03/21 23:55:42 executing program 0: r0 = socket$inet(0x2, 0x4000000805, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) fcntl$getflags(r0, 0x40b) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x20, 0x9, 0x1, 0x0, 0x0, 0x1, 0x53, 0x0, 0x800, 0x10, 0x3, 0x0, 0x4, 0x7, 0xc4c0, 0x8, 0x5, 0xa9, 0x100000001, 0xd3c3, 0x5, 0xffffffffffffff7f, 0xb621, 0x8, 0x100000001, 0xd9cc00000000000, 0x0, 0x8e, 0x5, 0x7ff, 0x4, 0x80, 0x100000000, 0x3, 0x2, 0x7, 0x0, 0x3, 0x6, @perf_bp={&(0x7f0000000000), 0xe}, 0x200, 0x3d6e, 0x3f, 0x6, 0x282b, 0x0, 0x3}, r2, 0x6, r3, 0x2) r4 = dup3(r0, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000b81000), &(0x7f00005fb000)=0xfffffffffffffeee) 2018/03/21 23:55:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/access\x00', 0x2, 0x0) 2018/03/21 23:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:42 executing program 7: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x400000) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000080)={0x8001, 0x3, 0x1000}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$KVM_SET_FPU(r0, 0x41a0ae8d, &(0x7f0000000240)={[], 0x5, 0x9, 0x10001, 0x0, 0xffffffffffffffd0, 0x107001, 0xd000, [], 0x734}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000400)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x200}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000180)={r3, 0x0, 0xb4, "9ed55404071f0f31e90605d712758fbd2169ba4880aeae440c0adb5925a315fb1d02f4231d2169c90565b5cfbc728fb9a47771de2f62eb39fb0738197eeaae725dedb28ed2150030992adb95e76b2d11abf4d07e12fe9a2aaff30dd213bf6e440e199f441a630c2ea5ad2b7bf1613557e4188fd9198c7ccd3971a5b35348643a76f9654c100a717fa16a74ed1ef5dcbf9852293d869745ef20d3c5d7edf0957d6e8ee50b8d7d28653eda3de317959a6f76458433"}, 0xbc) dup2(r1, r2) 2018/03/21 23:55:42 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x801, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000fff)={0x10000}) getsockopt(r0, 0x0, 0x53, &(0x7f0000001000)=""/8, &(0x7f0000000ffc)=0x8) 2018/03/21 23:55:42 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x0, 0x4000) accept$nfc_llcp(r0, &(0x7f0000000080), &(0x7f0000000100)=0x60) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @multicast1=0xe0000001}, 0xc) [ 95.628682] binder: 10875:10885 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:42 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:42 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x0, @broadcast=0xffffffff}}, 0x1e) r2 = dup2(r0, r0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f00000003c0)={0x3, 0x6, 0x9, 0x101, "d30adbefb823c89792d416ec3c5e92bfd8254043694952300f87da3d1286a3e523a124589f47e163efafba40", 0x81}) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() sendmsg$unix(r2, &(0x7f0000000340)={&(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000000c0)=[{&(0x7f0000000180)="5d58abbdba08c7382bfef76b43931c22f8d498d52b3c3c88ba8503151216359e025dede0c3fc35f5cb5289ddd1b40c8a6bc1a8561551d1c1abe4f742c64a715e2a1fb171cd03a02162d70f111234eff3e9ee1f5497a24ca970261b23b7c6e94481a91a0d442555d639d46f734e6c9deac4509c7d33cb37cc09828b9fba086bca264568cd901ad975ec988e582dd971ac7e7160c90f9aa12913e8ff5e9cb20c77d9c94ce513dfb875ead88326ac55e049", 0xb0}], 0x1, &(0x7f0000000300)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}], 0x20, 0x4000000}, 0x10) semget$private(0x0, 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r2, 0x800442d4, &(0x7f0000000380)=0x81) 2018/03/21 23:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:42 executing program 0: ioctl$KVM_SET_IDENTITY_MAP_ADDR(0xffffffffffffffff, 0x4008ae48, &(0x7f0000000200)=0x4) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x68) r0 = memfd_create(&(0x7f0000000000)='#GPL\\\x00', 0x3) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000040)=""/189) 2018/03/21 23:55:42 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000040), 0x4) r1 = dup2(0xffffffffffffffff, r0) ioctl$RNDZAPENTCNT(r1, 0x5204, &(0x7f0000000080)=0x9) ioctl$DRM_IOCTL_MODESET_CTL(r1, 0x40086408, &(0x7f00000000c0)={0x8, 0xdcb8}) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f0000000100)=@nl=@unspec, 0x80, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1}, 0x9a}, {{&(0x7f0000000180)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/71, 0x47}], 0x1, 0x0, 0x0, 0x5}, 0xfffffffffffff001}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/44, 0x2c}], 0x1, &(0x7f0000000340)=""/250, 0xfa, 0x9}, 0x272}, {{&(0x7f0000000440)=@nfc, 0x80, &(0x7f0000000640)=[{&(0x7f00000004c0)=""/185, 0xb9}, {&(0x7f0000000580)=""/129, 0x81}], 0x2, &(0x7f0000000680)=""/120, 0x78, 0x81a}, 0x662d}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000700)=""/80, 0x50}, {&(0x7f0000000780)=""/106, 0x6a}], 0x2, &(0x7f0000000840)=""/79, 0x4f, 0x7}, 0x8000}], 0x5, 0x100, &(0x7f0000000a00)={0x0, 0x989680}) 2018/03/21 23:55:42 executing program 2: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10000, 0x0) setns(r0, 0x4000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) [ 95.674513] binder: BINDER_SET_CONTEXT_MGR already set [ 95.694184] binder: 10875:10898 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 95.699371] binder: 10875:10890 ioctl 40046207 0 returned -16 2018/03/21 23:55:42 executing program 5: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) shutdown(r3, 0x1) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r1, r2) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000040)={0x0}) connect$l2tp(r1, &(0x7f0000000300)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x1, 0x0, 0x1, {0xa, 0x4e22, 0xffffffffffffffd1, @empty, 0x9}}}, 0x3a) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x84, 0x0, &(0x7f0000000180)=[@exit_looper={0x630d}, @register_looper={0x630b}, @acquire={0x40046305, 0x1}, @acquire={0x40046305, 0x3}, @exit_looper={0x630d}, @increfs_done={0x40106308, r4}, @acquire={0x40046305, 0x4}, @reply_sg={0x40486312, {{0x2, 0x0, 0x4, 0x0, 0x10, 0x0, 0x0, 0x28, 0x28, &(0x7f00000000c0)=[@ptr={0x70742a85, 0x0, &(0x7f0000000080), 0x1, 0x0, 0x2a}], &(0x7f0000000100)=[0x30, 0x30, 0x48, 0x48, 0x78]}, 0xa917}}], 0x17, 0x0, &(0x7f0000000240)="ecf4cbafe35c59ffd31591736405ae02b9744f249a64ff"}) 2018/03/21 23:55:42 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) dup2(r0, r1) 2018/03/21 23:55:42 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000001c0)={0x56, 0x4, 0x9, {0x1000, 0x800}, {0x5, 0x80}, @ramp={0xd, 0xfffffffffffffffc, {0x100000001, 0x10001, 0x200, 0x5}}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000100)}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000080)={0x0, 0xe4, 0x8004, 0x299, 0x8000, 0x7, 0x1, 0x5, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r3, 0x7, "a6cbdcd66e9caa"}, &(0x7f0000000180)=0xf) getsockopt$inet_opts(r2, 0x0, 0xd, &(0x7f0000001040)=""/4096, &(0x7f0000000040)=0xfffffffffffffde9) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f0000000200)) 2018/03/21 23:55:42 executing program 1: r0 = socket(0xa, 0x2, 0x0) setsockopt(r0, 0x0, 0x2, &(0x7f0000000000)="2f05eb9f", 0x4) pipe(&(0x7f0000000140)) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x111000) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000080)) 2018/03/21 23:55:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/21 23:55:42 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x10010800, 0x0) ioctl$sock_ipx_SIOCAIPXPRISLT(r1, 0x89e1, &(0x7f0000000080)=0x6) accept4$inet(r1, &(0x7f0000000040), &(0x7f0000000100)=0x10, 0x80800) 2018/03/21 23:55:42 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x80000000, 0x10000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[{0x3, 0x7}, {0x8}], 0x2) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r1, r2) 2018/03/21 23:55:42 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) rt_sigpending(&(0x7f0000000000), 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xfffffffffffffc01) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000000280)={0x0, 0x0}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) dup3(r3, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SMI(r3, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000400)=[@text64={0x40, &(0x7f00000001c0)="b9880a0000b800000000ba000000000f30b8010000000f01d9b9960a00000f32430fc72ec46219a8f5460f01cbc46225079d8000c0feb9800000c00f32b9800000c00f3235000400000f30460f01f8", 0x4f}], 0x1, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000100)={0x90001}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text16={0x10, &(0x7f0000000000)="0f226066b87df9eab10f23c00f21f8663500000d000f23f8b88e000f00d00f236fbaa10066b8ca4f000066eff966b9800000c00f326635002000000f300fe8d39a0f0043000f01df", 0x48}], 0x1, 0x0, &(0x7f00000000c0), 0x1d8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:42 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x7, 0xfffffffffffffffc}, 0x4) r1 = socket$inet(0x2, 0x80000, 0xfffffffffffffffc) dup2(r1, r0) lseek(r1, 0x0, 0x0) 2018/03/21 23:55:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x800, 0x80000000, 0x1, 0x5, 0x200}, 0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) [ 96.249943] binder: 10921:10933 ioctl 40304580 200001c0 returned -22 [ 96.260189] binder: 10921:10933 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 96.274970] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:43 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) dup2(r0, r0) socket$inet_icmp(0x2, 0x2, 0x1) 2018/03/21 23:55:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syncfs(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140)=0x7, 0x24) r2 = dup2(r0, r1) ioctl$GIO_FONT(r2, 0x4b60, &(0x7f0000000040)=""/230) 2018/03/21 23:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 1: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x78dc, 0xd02) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = getuid() ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x4, 0x90000000, r1, 0x8, r2, 0x112, 0x80}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000ea3000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0xc08c5102, &(0x7f0000000080)={0x20, "9a9c0493093120c0cf294987c1851bb962950e4ccaaa0dd532a8c4a3f99afff9"}) 2018/03/21 23:55:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000400)='/dev/admmidi#\x00', 0x8, 0x4000) getsockopt$llc_int(r1, 0x10c, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x4) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_access\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:43 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000100)='/dev/snd/midiC#D#\x00', 0x8, 0x2) ioctl$EVIOCGABS20(r0, 0x80184560, &(0x7f0000000200)=""/134) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r1, r2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x40, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x8) [ 96.296815] binder: 10921:10946 ioctl 40304580 200001c0 returned -22 [ 96.313451] binder: 10921:10933 ioctl 40046207 0 returned -16 [ 96.316170] binder: 10921:10944 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:43 executing program 2: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) dup2(r0, r0) socket$inet_icmp(0x2, 0x2, 0x1) 2018/03/21 23:55:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) accept4$llc(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x10, 0x800) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) ptrace$peekuser(0x3, r1, 0x200) bind$llc(r0, &(0x7f0000000080)={0x1a, 0x33f, 0x3, 0x8, 0x20, 0x7, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) 2018/03/21 23:55:43 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r1, 0xa, 0x3) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r1, r2) [ 96.404141] binder: 10964:10968 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 96.420955] binder: BINDER_SET_CONTEXT_MGR already set [ 96.446133] binder: 10964:10968 ioctl 40046207 0 returned -16 2018/03/21 23:55:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) dup2(r0, r0) socket$inet_icmp(0x2, 0x2, 0x1) 2018/03/21 23:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(0xffffffffffffffff, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=ANY=[@ANYBLOB="5673a54000000800"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000000)={0x0, 0x0, @rand_addr}, &(0x7f0000000040)=0x10) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/status\x00', 0x0, 0x0) ioctl$GIO_CMAP(r3, 0x4b70, &(0x7f0000000240)) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x2, 0x0) r5 = dup3(r0, r1, 0x80000) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0xfecb410a500aa716, r5}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001040)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000080)=0x1008) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x80, 0x140, 0xbf, 0x3, 0x1f, r6}, &(0x7f0000000140)=0x20) 2018/03/21 23:55:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001b00)=0x0) getresuid(&(0x7f0000001b40), &(0x7f0000001b80)=0x0, &(0x7f0000001bc0)) r4 = getegid() r5 = gettid() getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000003280)={{{@in6=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000003380)=0xe8) r7 = getegid() ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000033c0)=0x0) fstat(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = gettid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000003500)={{{@in6=@mcast2, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in6=@mcast1}}, &(0x7f0000003600)=0xe8) fstat(r0, &(0x7f0000003640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000036c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000003700)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000003800)=0xe8) fstat(r0, &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getpid() fstat(r0, &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000004040)='./file0\x00', &(0x7f0000004080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = getpgrp(0x0) stat(&(0x7f0000004100)='./file0\x00', &(0x7f0000004140)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000041c0)=[0xffffffffffffffff]) fcntl$getownex(r0, 0x10, &(0x7f0000004200)={0x0, 0x0}) r24 = getuid() getgroups(0x4, &(0x7f0000004240)=[0x0, 0x0, 0x0, 0x0]) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000004500)={0x0}, &(0x7f0000004540)=0xc) fstat(r0, &(0x7f0000004580)={0x0, 0x0, 0x0, 0x0, 0x0}) r28 = getegid() r29 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0}) r31 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006240)={0x0}, &(0x7f0000006280)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000062c0)={0x0, 0x0}, &(0x7f0000006300)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006340)={0x0, 0x0, 0x0}, &(0x7f0000006380)=0xc) r35 = fcntl$getown(r0, 0x9) lstat(&(0x7f00000063c0)='./file0\x00', &(0x7f0000006400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000006480)={0x0, 0x0, 0x0}, &(0x7f00000064c0)=0xc) r38 = gettid() fstat(r0, &(0x7f0000006500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000006580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f00000066c0)=[{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000480)=[{&(0x7f0000000100)="3cf2b866f9e3e22caed753206d3de29899ec2329ffac507fc71cd3daab6c06b484b63dbb96c6099b4893d4621cc1af79a19216a3cf0ffa5bf5c9c35b2bcc4fc02ecdce38eb45f22eb722365ad44ea76068316db61ebafe9c2ff7e2001a8e64699d3155743ae5e4ca22d31d7536cdd1286117711ff19b9c4b95f96e02bc540e8088c7427c18ea1e19f1fb2958907d08aeaf7ec752fda7bd52365d55ab2d16fbe71d80cb80b8fe17cfd3c27090b6a6518584c3576dad200db7036f2dd48a7210b626ecc899e8cc859127dad20dde8049c0b0a2846d5b34ef27fc28c259b25441eb3506f717ddf44d89cd25ee1edc3380037e326961f98ac7b9", 0xf8}, {&(0x7f0000000200)="df2cc928cd2b88ba491ada2ed828b730c1a947754d5f72d5c0700acb18d089b22c4b01a7f440669cd9691d31b5d2c7b50dfdf76a143383706d4fe3f97dcc387508524978295103018308d03c73a28c6ff0fb609356e53ad83fd01c0f23aa641bc33aa7d89482fa28b99004bb937e3e6a807c51ebbf2041276b2f6a65e52a907501ff9d3d714237", 0x87}, {&(0x7f00000002c0)="b4a41db62c69d20270cfe3e13e8d95129b2c51718bd610ef77aefae03764a563b0946c16d4f6bfc42f00587a1d18b8c0e6d0c4b50a24825c453c5910d731f1eae19e5770f0c72f43d8c9f2913e915ff7609717727e91cf37ef3ac7e9ca1604ed810f144b37625961e480bfc6475ba571393e5af84010c03ba9377d43db667168eecbc73a14687f1138c7c13022b938c9fc9e04bebc2b571a87fba57a5e2356ff83a4498a6c464f3a1c792cd45e1fe3225335c4ef89d3d4323cee4272cc7ea388452ff6bd9b6b8412", 0xc8}, {&(0x7f00000003c0)="b76c5bc34ab75f7e0db29856598c7a51b58c92d7f23f38b4ff3bd281b73c317789712d6e1d52b83d553b5a9a12442be9589f44d67ee201f574012ebe64d71ec14db613d44de497c39e78acf62c2d2d3d1fa3100c5bcdfee01f7f29ae0c6bc4c5555a4968d15c826b920846cbd9c0dfbd64c1174e6d2dfbcbb58fd8dd41f792120d8272eea211db7c", 0x88}], 0x4, &(0x7f00000004c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x40, 0x4}, {&(0x7f0000000500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001a40)=[{&(0x7f0000000580)="678294b7058efa7ca6e3c827252a37552acb038050f14f8903c79ebddf160fd97f3d8496539cabd878560e82d1b1c92495e597fd64f80844662a00a8c45ab79471869409a8ec71bb17096417fbff47834dbdaec2f30e6f6f46f0fee70582cff6b0f0224bb0dc9455e2f4150c64928d563569c91702d4ef9e14ff6898634a03cccfc584ad033dd86bcad7c9488670eaf2270210a80f3b95fe8b23b543cec6fb734039a3c7b72196ea9eba155755b4d43741051ce7278ec19304dee94b2cea0d03c9e4457146129c59d854712262", 0xcd}, {&(0x7f0000000680)="fe1046b04b5512ca7c84033fba9d9761b1df204edf4095d0844fb9b3b757b5f933670cd8eca601e20f1501b0196e0861bd4107746a32d6c24c7adb3eac", 0x3d}, {&(0x7f00000006c0)="563fa25e4159e605e6759abf9b890df6eeed5f4f4e5fc68c4b5f6035b9899e7d6d80ca466cc76e1c8f3c1709b605e369c83ba326b5ceec9fbff20e7d2fed2ad46f03cbd3e0f5ee29ab370373afd6503a5a3fc45e7dea6b2a8cb24bac6267d6d049090b186f3383789ec4779c2ddf0802964b1361c1e39ffe796afc3856671b07938d381614bfca7d6aadc9eabbec9cbc34da7bfbd742e5fe7e08ca09c63d88febdb80eacbeb63240d802456104ccb7d4c286d0975fa86179434e26dcd12983e0e949d64b9b82a2be9c0d874771c4db9fb67859ab58f5773e6a6ac15a8121bc930b62df9e8525fd01e28697", 0xeb}, {&(0x7f00000007c0)="974e1a5472df", 0x6}, {&(0x7f0000000800)="0619e420861f225d7d174e28e0e7ef14df2ef82c1c96e2ad9a2efa7d5e866d370238a469a88ce92dc984d9ab7ec63d9045f2d99acdd14fd8", 0x38}, {&(0x7f0000000840)="1ab91086b47c9dc69cf402571ddc92152e1ef9a01de1dd9658e1358b575b86d853a2d685608be584e9a5521bcc9ad4008890850bc7decddcbab48f7aea69417de5a9c9478faec2d02e50161b851eff90d2262b31ab5f26dba743e095fde11bc2d39b0414cc", 0x65}, {&(0x7f00000008c0)="ab3b3882b72e01b6ebe33f82982abdca51546ec4f9c8f1cbc058f56da930f76e92c695baf75b6d685f442bf8f099af627d5117584d8e74347386acb90e5af89fbf7a2967e5518ff834c592de7b695368300c3cf68d769e50e8b7064c9c83653d4693ec8040ac7c5c4c23529678fc456094da772564096d89682452f2c52c605bf2cb52047108040ffc6cf98ea536b98d140221eeabcba3ca60e58a8b9e141cd1dac25dea8684062f805e4d201c5fa0239fa9ab0a0407364a9b76ec6001", 0xbd}, {&(0x7f0000000980)="14b359a55b10c903ea712f934434c7b972eb6b5e3f11b755a8cbef76efd45927a55a271914c5337308bfeb657410b3561ddf5f6b6720d18b0168590dca52e6794bc59a99515dc4eb0bf031d667d8f5c20ee657733bf5660551f1462303e0151429f5dd07b9705b30c79c0962008518647be7318b0d56243a766bf6903e59b17c4e60f7bb1490a4f6", 0x88}, {&(0x7f0000000a40)="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", 0x1000}], 0x9, &(0x7f0000001c00)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x88, 0x24040800}, {&(0x7f0000001cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000003200)=[{&(0x7f0000001d40)="29497c611cb57a34bb1e18106f0542c9c19014a2b60a8571ecc9d6dbd8d677bf68ab1f4a55d1e5d41ea6ffd54f39b689bb96c4d27d30fdeeec0b9ffcb27ffab1c5e470699efd6e14be0f5911f391d138d367935d715b66cb66cfbc394d4646c8291fbd1ac4ff369f412bebe7e414bab0d9c8fb5b16842405ea2646d056e4dc2e8b6801697db13693f04418bb8cf41a6387018db966b7b0647b8723d28b37b88c5d98c82dc9047e566a22ec8b3238f7e75fcc7b16ac511ea124c3", 0xba}, {&(0x7f0000001e00)="f562ea932d732e11f3ce6eb0f63d1057c9087c00d646e70d9aa8cd351324d3bf11d0e2d419f18ad16e3dced87f3a71a2d604ad1b38ab3ad0ca9bdd9750924a0f9cdaa1086e664993503ad9a0dba90f069d3e5114ff9563f0665367b34d38c520c73f0e57884739a22554f57b45adc1105e74b62ad2a3d45ffd016470adfc04a8634df4d69dd119977c6bf4118d049ac51837a8036d3e4126673e7592c6caef711af0b5c838a77c66935b5f9a40a506b1", 0xb0}, {&(0x7f0000001ec0)="b0719bc4c3480cac66276e", 0xb}, {&(0x7f0000001f00)="51e5570bc1a6de10d72117edb15195c0e8770c876f546b1518e3593fd67378", 0x1f}, {&(0x7f0000001f40)="a6685d25f8140fda5bde925d047555a49ba4988fdeeca9b928fb39886737bc42be96b7e9b33d972f716206f672594cea1143761635fcb6c6e0959f67a141f1d1562e02f30e1b820e94aa8d61eb91dccf7d8ac5bb9810e4225c1aa9e580b3130668e577e88a94d6e4c5cbfc25a234bf542df278f22a20c213c7f5d04fea5ea22b22fd3e2176e2b6cd00295f215379c6d4c5d2fb6e10e3962b260989f0fe546bd60323548f3b056bc42dc1987927c51563d8866094cd33a72d2737d7a58d402a22f0e2f1d24ce9a05ddce27330b1deda5f765dba76594c4a327019cd4c631781de88abcb191cbb0e181af18085cd6e56", 0xef}, {&(0x7f0000002040)="9ce0c7586ab18d071f06d9bcf191736771be4c53c4d4b415516dfee6cc891a8178a0308c8c728035c2a9f82dc1afa2ebe26cc2ae9c076db85e9a7bb3531ea156794691b2ae98aeb49668f11cb92aa2cfed71017f36653477162990acbafc7dc570918af49cd4e8c6440e09e90f63670736172253613ead26da7113086d3f463f60ccd7b505ab8336e46c", 0x8a}, {&(0x7f0000002100)="9be4b4b61886a5655831b5e136a6c78cfbb66b339ffd14685df05176cd5e72452738d7a5a8a7155f9bb40569f5e2082b70f741dab03f8d3a76d6355f0b59e80b72d4b13e7a8ecffa17c6f86800d7b34f9c46c76141f6f167b0da07b04395c06976fea29f84b443bd92ee6f87669412fa2527df523ed69ebdf01b0c197f622e82d116babc7f737e9972022df9fc3193de56b6a9aa10742c8b94eb3cf28be334c8d53ea30b3641d8d809f205db955cea9e3372e4ae9b53088672e4131a1f8608fcd2a404f8623bed70c286bac5a247ba86dda1a1af565cc56d944e488db7ed9c08d3aaa3e522958a9e03", 0xe9}, {&(0x7f0000002200)="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", 0x1000}], 0x8, &(0x7f00000038c0)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x118}, {&(0x7f0000003a00)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000003c40)=[{&(0x7f0000003a80)="cb962f106232ca747d477f2f0b1c4433fbaf06b5c3d155b9dc7e6adc76e77f9fd3700fc9ea9225e5708667345f31c20a0cd999b47eca3429c11cd27260b5f908fd34d5adb443e92742d177d4c83ee37bd1441ff26b4a76aa67955b7058ebfa1e8c9118747b5162dcd280df598fdcae55d5d8ca29c34e90d647095d", 0x7b}, {&(0x7f0000003b00)="c9d30b76ac1e025778411729476d7f681a617e44dbfa5b87fd975141d269617b7e92c0c573ed8cd61be62eeaa26f477987ee1081a97f0df19e0af1694cada271abf9d5bb8d14faf4abe3d29d448e98ef29ca4c10be3654ee19e5dfc518e4a0d3d0da43f557840824d853178053cba61bc5ce7e4a129551500c0a5ad5b7206d6146aae849af903bdee68dbadf124ef6e3aaa2d1a18dc02681b4b0c90c78bae144afa3b7a27ec0fc3ed23b77f7c99ce4b4608f7dff416163fad308c2f7395465db69bfa4e448", 0xc5}, {&(0x7f0000003c00)="f89193e5024b6f9e07796aec470c8acbb94210a137fb1ed834092d13e5f21df981f6ced5341c1c4128fe0459", 0x2c}], 0x3, &(0x7f0000003c80), 0x0, 0x1}, {&(0x7f0000003cc0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003f80)=[{&(0x7f0000003d40)="80b61e590b100f7213df4c36bda913dc347248586cf827cd95bd446f7abc58e999ee5779201cbf28af36840808c9c5bf082944dd06175cfc1ee6f7a69f52126a4d4ac54710092068072fb1acf977d7b2061a7f4c4d8cd85cd1dafa1098aa80f9", 0x60}, {&(0x7f0000003dc0)="35c5a8e91f51f734290a12ed2c0a10ff9adb915923fa2cd4d626c5e53b5213c8c1db30cec0b30c7d4f8162751431a93f13154b2994e28b81b5e1d8d744026a58d13b7af8b81b0bdb5adae0fc4d", 0x4d}, {&(0x7f0000003e40)="14124fd0d4198a86916b6651d2734370", 0x10}, {&(0x7f0000003e80)="3b59f471e00ff046efe5ee494596c37d3113d32675b88bd1062e54f9f43683761cedfe83b68de9b62b29f5783c29c3eba8e1cbd7b0aa549ff89329a89ed7ca6336e6ec85f043de8fcb57c0824f6d5a4fd2d8d54539332fb1be9673a31bda6847f60db0e24e1066351838b99fd3badd0d49e46b926a904492f460f3c4e44c9a41b959577938ce9fc551367b0067402514ee0b5f9af6af108d5872c24ae229b33881a4c6cdf08618487979b20cff3e5248904da5807193c99e8a85907fedcf84ec27b2ac3f51e5cf431ea04dd34bd4bd47cecccfd9b11c592af1f20d6feaed36530d0af70d6780cf104e", 0xe9}], 0x4, &(0x7f0000004280)=[@cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r23, r24, r25}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}], 0xa8, 0x1}, {&(0x7f0000004340)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000044c0)=[{&(0x7f00000043c0)="a6c07f2734b53a7ccb69682b3b7e9f4fc60fdd8f62e6f313af4fc083860b850d4d41e6b3b9adfb07cbdb39689eac61d31d5ff81d38ba969b18632ad260659754117bdc811e5e7f20ff1bd1add5fb474b02859f7e55720ca579cb9462adca88c235d19ca5ed96cb69ac0cce30a818d2a6544b5088161461f33e0ea95e38dc75e270b2b82096990558d8ec37e0e1ce052368c9bf76046c83a199e353de417bdfa8f951fc18de48ee370f49e6d5cc0a2ed2e8dabbe88f3c43297496a25505e10022f6bd69b5ba4e5e000a4d190b490447722a655d4271a25b9fe3a4dcec630aacb29e2edc612368febe9556bdb9281ddf8495bc85a844", 0xf5}], 0x1, &(0x7f0000004600)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x80, 0x40000}, {&(0x7f0000004680)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000004900)=[{&(0x7f0000004700)="7d0f77a455dcd2a38be4bc3ea5f4fcc5fdcfe89bf17d879e546db0ef31ee1494cb49dc6e3157f5455504dd86badebea5a079e69c6819555b1aa4c9e2e3c07bd5a55683fadfb0d43f765e753a0d329a18309d2358cdba4ab74677fdfd2dab5e711af846ab8811b773e3e6f16e2777e6b3abe92a3cee286766d3daf789f4585b05503a6a26d83cdd90ba799f6a94b46368c78b6c7c63f5d6b3e8882448ffa06fc9093e72021d2ad0e3ff366474f6397f9a4f4a79c5af6596f00b5dbb73587db440bfef8ab28e", 0xc5}, {&(0x7f0000004800)="73ee9edde8188d356c4d2710dd0b6bfce43048663e245d59f812c4ab2fc3e0ebba6f51ca48e2bc447c21955b3f6bf747b1d333ec90d36fa69b8b9ad75675a183c080c85311d4a7889bf55cb7fb8c3b90d9f2", 0x52}, {&(0x7f0000004880)="adc252e8b4eb9be9136222387ce63beae4e5d7af94bbffff17eafcc15e7090837cd680ed9b340360d9b0186815dfa0b04ef0300261895f047e01ab8b0ea8150bd70d2a9292366857baf3e61e7589a7dd94523f273bf33957", 0x58}], 0x3, &(0x7f00000049c0)=[@cred={0x20, 0x1, 0x2, r29, r30, r31}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x68, 0x4}, {&(0x7f0000004a40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004ac0)="d7785af61708c3e00569975f033f1053b7fc664848eace4cd89b1c51ceb0589d3879ea9d713849baa80cbb0168f055dc63540780029f39352966601a1ac3adcd130a30cd2d05c5b85512ba0d22a1be9237b6de4e9c249e363d9842729e82fdae02d6140bf8407aa9e533966a630e443a4dae4f483bce66d34633ef187220dd4b243d991ec5d3811e6a57fdc8c7b5aaa7b1e6653bee9f7f269d084a7a40f2af", 0x9f}, {&(0x7f0000004b80)="63bac24c6e624ddde7fdf4f57f710104595ad44e17f26553b0cb0af08f621e0448387b8472e33a970f8367d3f385cfa7881cc1cd828dfe3f9c1777ce9dff179dc44f37c30fa093648740c700d04e2e38b0e664c5bf0b379d9ea5aa02305115366c88ba594af7101e92458ae16d20304b608a126afaefb54e2ce17e12ae293a90a525ceaf1cc4c5d6cdf478571feac2c411b6c82d2cb2e9243dc01f6a307bc159c64ade34ea275d7e2906d0e4230120cf313400b02c3c292c4c4c3aa771ec3757e61c753ea7815aaa9615f7b25d72886190fe677ee6de5891fec1cbd6", 0xdc}, {&(0x7f0000004c80)="5517591a4c2d6b16cd116a90491185e4897ae81e85d834244c674d134144e84a05e61cddadecc1d26cb67078f015cb8d869d52053d", 0x35}], 0x3, &(0x7f0000004d00)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0x48}, {&(0x7f0000004d80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000061c0)=[{&(0x7f0000004e00)="fb8ff284e79285dd1f3d13107b151d041303a15ff14dddb84da2af50e154b84228892f53ad3a5b72736dd5160eabc9373d38", 0x32}, {&(0x7f0000004e40)="cf2952a62fe3f2d5a571d26dc5d4a777f516e7b79a8bb3d1ee0856de0444af8570720d19ca799d694522f81f6f035dbbf85497fe74ef8f445b3526c0d35c0e1a8fc8684e5e460b8cf7aa995af8cec3d9992a274c09740d4193c4ac4f7ab7c5a334bd2f65600df459f5c6e8e4a70afbab014b2e70a0c8a087644d0029bb2b8d99a91ed91cec66a140337285aa0cbe52f893abb54b8b9ded7a5e215a36e3027a81bcc56a79d18bf810", 0xa8}, {&(0x7f0000004f00)="e217731379905cb15dfd7efd751ce9f51cf395d42528d74cd9d0b91414917e022e75d49d274f88cc853044798918241c45aee7a636a36a4ccd747d9f64b019c5905df7c34b7dc3ab102926aff08d38df49aec1998b33ac080faa8965d229c6dab5bac79f579ef007a4d719121d89e428d8a5604aa44e0012d7b53a278af26e0580247b045c4c49c0aad0286b0c01f185e9f8efbe32966bdfb95cbe7f262ce300e029f1247144871883c19955562a1f3d347ac819fe0e39233d9147f82a5c6e7542befea3f25649598cdf8124d3cb27ea3e400392cdbfbcb7135c9c52b1c5c4246c6b5936ede65ff4fd0d0713c420693a426ace0ddf2229c8ac", 0xf9}, {&(0x7f0000005000)="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", 0x1000}, {&(0x7f0000006000)="bfad313c90701c02c43a5af3e2f2555791311e5ab10499cebfdc580f46275ac3332267ba1ddcaa80ef30994c0b803f74ed1ac187be98f20cbb178e81cb7e579c2436b36d6eadc8d5f9644bebae9eb632d9a2f717ac563bc22af4b7ceeb8482cb", 0x60}, {&(0x7f0000006080)="9ff8b5a2a3d9741996974c1f92aa8bc54d9ccf4a6432b6108f937cbaefa707f3ba3c29054a92d240d5371646bfd79f165e2cabb2170352dd7694c6962ec460f80d427aa3f31aa54c84a649a9b393c9eedabb4154da9aadafe8902fced6dfd22d91b7ea7c9107eb4f5076298a3743eb857a04d0d90d1374e63dc73610c1643a9526ce1e9450bc0a35e7e2238d8a4aed85cb7c4105522d5b8b0a8c01f46a24994116a053764472511c675bd64f7b79b90b127e21774032a774d2bf37de7b60433b83a5e3a0549357b4b7ea0272af856ef6b7605dbbab47dc19d268b63ab9b309673b346fb380533b1814e74026d67d82fe5c7a2c9c0a64", 0xf6}, {&(0x7f0000006180)="02cdb07b82b58fef95", 0x9}], 0x7, &(0x7f0000006600)=[@cred={0x20, 0x1, 0x2, r32, r33, r34}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}], 0xa8, 0x20008080}], 0x9, 0x40000) 2018/03/21 23:55:43 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x10) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000080)=0xaf, 0x4) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000140)={r1, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x10) setsockopt$inet_sctp_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f0000000100)=0x1, 0x4) 2018/03/21 23:55:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x4, 0x40) 2018/03/21 23:55:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x80000000}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r2, 0x101, 0x30}, 0xc) timer_create(0x7, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x3c) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x4, 0x1, 0x7, 0x47, 0x8f, "dad81797edc7a26ac0b62bbb4bf762a3096b3a71fa57c78e9a1b4efaed54c9dbd9e2e8f64fcc7b00c5859e5e9c26c28da1eafe52cc22bf2d6148f5c1ec48bc"}, 0x60) dup2(r0, r0) 2018/03/21 23:55:43 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000040)) dup2(r0, r0) socket$inet_icmp(0x2, 0x2, 0x1) 2018/03/21 23:55:43 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x40082, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000080), 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x80, 0x0, 0x7, 0x2000, 0xffffffffffff7fff, 0x1, 0xffff, 0x0}, &(0x7f0000000100)=0x20) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x26, 0x20}, 0xc) dup2(r1, r0) 2018/03/21 23:55:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x40000000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r0) r1 = getpgid(0xffffffffffffffff) ioprio_get$pid(0x2, r1) [ 96.564110] device bridge0 entered promiscuous mode [ 96.572382] binder: 10999:11008 unknown command 1084584790 [ 96.595627] binder: 10999:11008 ioctl c0306201 20012000 returned -22 [ 96.598922] binder: 10999:11016 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) ioctl$KDSIGACCEPT(r0, 0x4b4e, 0x34) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:43 executing program 2: getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x14) r1 = accept$inet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, @local}, &(0x7f00000000c0)=0x10) setsockopt$inet_int(r1, 0x0, 0x17, &(0x7f0000000180), 0x4) sendto$inet(r1, &(0x7f0000000280)="a5a90685ab8937fde65c30d7fe25b06a1ade681d1f13dc97a158cabf8828c41dc146c47ec755b1d8cc1c1286293b4c90d6cdef46ec10c4e4bb6c8f53a6574623df924717dead4fc2be59473456d7e300ca36bdb4dc6d39d9d75e18ddeccac23647d775b9641244572c6ce8d54d38298c2badf996809a0468668e7959bda4937a82c045cf69bd47237d4a363c39003e549c7cfe2ee00ced4accebef3228249cb11f8fd2", 0xa3, 0x4, &(0x7f0000000340)={0x2, 0x4e21}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr=0x6, r0}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) accept4$inet(r1, &(0x7f0000000200)={0x0, 0x0, @local}, &(0x7f0000000240)=0x10, 0x80800) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000001c0)=0x0) ptrace$cont(0x18, r3, 0xffffffffffffffff, 0x0) [ 96.635899] binder: BINDER_SET_CONTEXT_MGR already set [ 96.644317] binder: 10999:11016 unknown command 1084584790 [ 96.653715] binder: 10999:11016 ioctl c0306201 20012000 returned -22 [ 96.658676] device bridge0 left promiscuous mode [ 96.665265] binder: 10999:11008 ioctl 40046207 0 returned -16 2018/03/21 23:55:43 executing program 1: r0 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x3, 0x151000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x5, &(0x7f00000001c0)={0x0, 0x1, 0x4, @tid=0xffffffffffffffff}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000240), &(0x7f0000000280)) sendmsg$nl_xfrm(r1, &(0x7f0000b2f000)={&(0x7f000000f000)={0x10}, 0xc, &(0x7f0000beeff0)={&(0x7f0000000080)=ANY=[@ANYBLOB="38010000100013070000000000000000e0000002000000000000000000000000000000000000000000000000000000004e2000004e2000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffffe0000001000000003200000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000002100000000000000000000000000000000000000000000000000000000000000000000000000000000000000b10000000000000000000000000000000000d2810000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000006872be"], 0x138}, 0x1}, 0x0) 2018/03/21 23:55:43 executing program 0: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000080)) 2018/03/21 23:55:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x7ff, 0x301080) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000040)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r2, 0x12, 0x2, &(0x7f0000000100)=""/154, &(0x7f00000001c0)=0x9a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) [ 96.683129] binder: 10999:11019 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 96.721861] netlink: 72 bytes leftover after parsing attributes in process `syz-executor1'. [ 96.748545] binder: 11038:11041 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 96.758221] binder: BINDER_SET_CONTEXT_MGR already set [ 96.764489] binder: 11038:11041 ioctl 40046207 0 returned -16 2018/03/21 23:55:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r1, r0) 2018/03/21 23:55:43 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xce6f0a294b6b90ea, 0x80) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x101) sendmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000002c0), 0x78, &(0x7f0000000300)}}, {{0x0, 0x0, &(0x7f0000000680), 0x59, &(0x7f00000006c0)}}], 0x2, 0x0) 2018/03/21 23:55:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f000099e000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r0, &(0x7f0000de1fff), 0xfffffffffffffd43, 0x20008005, &(0x7f0000db4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) recvfrom(r0, &(0x7f0000000100)=""/101, 0x6478c8501c739c9d, 0x120, 0x0, 0x101) sendto$inet(r0, &(0x7f0000000000)='-', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) recvmmsg(r0, &(0x7f0000003380)=[{{&(0x7f0000001e80)=@nfc, 0x80, &(0x7f0000002300)=[{&(0x7f0000002240)=""/182, 0xb6}], 0x1, &(0x7f0000002380)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003480)={0x77359400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000980)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000a00)=0x80) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000a40)=0x100000001, &(0x7f0000000a80)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r3, 0xffffffffffffff81) r4 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r6 = gettid() kcmp(r5, r6, 0x7, r4, r0) r7 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@nat={'nat\x00', 0x19, 0x5, 0x1278, [0x20000b00, 0x0, 0x0, 0x20000e00, 0x20001b78], 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x1, 0x86dd, 'dummy0\x00', 'ip_vti0\x00', 'sit0\x00', 'bcsf0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf8, 0x130, 0x180, [@ip={'ip\x00', 0x20, {{@empty, @rand_addr=0xff, 0xffffffff, 0xffffffff, 0x5d30, 0x5c, 0x39, 0x20, 0x4e21, 0x4e21, 0x4e20, 0x4e21}}}, @connbytes={'connbytes\x00', 0x18, {{0x7fff, 0x200}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, 0x39}}}}, {{{0xb, 0x4c, 0x6007, 'bcsf0\x00', 'ip_vti0\x00', 'irlan0\x00', 'nr0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xe0, 0x118, 0x150, [@time={'time\x00', 0x18, {{0x4, 0x1, 0x86d4, 0x4fb0, 0x2473, 0x9, 0x2}}}, @cgroup0={'cgroup\x00', 0x8, {{0xcb68, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}]}, @snat={'snat\x00', 0x10, {{@random="9808db4de9e6"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x7d7311b44bba61bb, 0x6, 'gretap0\x00', 'irlan0\x00', 'ip6tnl0\x00', 'bond0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x928, 0xa88, 0xac0, [@among={'among\x00', 0x858, {{0x4, 0xd93, 0x4, {[0xffff, 0x0, 0x3f, 0x380000, 0x80, 0x8, 0x400, 0x401, 0x37c, 0x200, 0x100000001, 0x6, 0x10000, 0x8001, 0x1, 0x200, 0x1000, 0x0, 0x0, 0x8, 0x3, 0xd0, 0xf3a2, 0x100, 0x2, 0x100000000, 0x64f, 0x1, 0xfffffffffffffffb, 0x7, 0x100, 0xe, 0xffff, 0x4, 0x4, 0x4, 0x2, 0x9, 0x308d, 0x2c, 0x7fff, 0x8, 0x0, 0x100000001, 0x80, 0x4c34, 0x9, 0x4, 0xffffffffffffff80, 0x4, 0x2be6, 0x40, 0x1f, 0x1, 0x3f, 0x8, 0xfffffffffffffff9, 0x6, 0x9, 0x2, 0x1f, 0x8, 0x80, 0x8000, 0x0, 0x7, 0x3, 0xc1, 0x5, 0x7f, 0x1cff, 0x6, 0x1000, 0x64, 0x80, 0x9, 0x5, 0x4, 0x5, 0xfffffffffffffffe, 0x4, 0x3, 0x3, 0xf4c, 0x6, 0x2, 0x3, 0xffffffffc6f75ea4, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x40, 0xf04f, 0x85, 0x101, 0xc8b, 0x1, 0x2, 0x0, 0x5, 0x1, 0xf4a, 0x9, 0xffffffffffffffc7, 0x7, 0xfffffffffffffffc, 0xffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x9, 0x1, 0x5, 0x5, 0x9, 0x1127, 0x6, 0x10000, 0x9, 0x9, 0x80000001, 0x9, 0xfe7, 0xffffffff, 0x0, 0x3, 0xa36, 0x100000001, 0x9d, 0x7, 0x67a5, 0x5a32, 0x100, 0x1, 0x2, 0x3f, 0x3c00000000000, 0x4, 0xebe9, 0x3, 0xb6, 0xfffffffffffffff7, 0x2, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffb, 0x5320, 0x80, 0x5, 0x9, 0x4, 0x8001, 0x1, 0x4, 0x1, 0x412, 0x120, 0x3ff, 0x1, 0x81, 0x101, 0xd900, 0x6, 0xe5aa, 0x8000, 0x8, 0x7, 0x46f, 0x1fb, 0xffffffffffff0000, 0x7, 0x3, 0x3, 0x7fff, 0x1, 0x8000000, 0x7, 0xfc0000000000, 0xffffffffffff19dc, 0x35ee, 0x5, 0x20, 0x4, 0x7, 0x20, 0xff, 0x20, 0xfffffffffffff8cd, 0x2, 0xf3bc, 0x5, 0x1, 0xf0, 0x5, 0x9, 0xfffffffffffffff7, 0x2, 0x7fffffff, 0x7f, 0xace, 0xfff, 0x9, 0x8, 0x18de000, 0x6, 0x7ff, 0x6, 0x2, 0x40, 0x7, 0x9, 0x3, 0x2158, 0x4, 0x1000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x101, 0x6, 0x9, 0xb6, 0x6, 0xfb, 0x9, 0x3, 0x99, 0x7, 0xba0, 0xffffffff80000000, 0x200, 0xfe, 0x2, 0xf089, 0x8000, 0x9, 0x400, 0x8, 0xffffffffffffff82, 0x6, 0x2, 0x7f52, 0x63, 0x7ff, 0x2, 0x7b7c, 0x3, 0x5, 0x2, 0x101, 0xf6eb], 0x2, [{[0x17, 0xfffffffffffffffd], @multicast1=0xe0000001}, {[0xa00000, 0xd], @loopback=0x7f000001}]}, {[0x1, 0x1, 0x7, 0x8, 0x5, 0x0, 0x401, 0x9f, 0x100000000, 0x8, 0x66, 0x200, 0x2, 0x0, 0x2, 0x2, 0x9, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x4, 0x5, 0x6eed, 0x9, 0x5, 0x80000000, 0x8, 0x808d, 0x7f, 0x5, 0xfffffffffffffffb, 0x40, 0x4, 0xffffffffffff0001, 0x6, 0x40, 0x4b8f, 0x2, 0x2, 0x8, 0x4, 0x7fff, 0x4, 0x81, 0x3, 0x7f, 0xe0fd, 0x3, 0x7f, 0xf57, 0xffffffffffffff00, 0x50b, 0x100000000, 0x3b5, 0x7, 0x400, 0x800, 0xb9f, 0x10001, 0x800, 0x4, 0xffffffff80000000, 0x7, 0x970d, 0xfffffffffffffff9, 0x1, 0x380000, 0x5, 0x3, 0x1, 0x80000001, 0x1, 0x7fff, 0x7fffffff, 0x9, 0x401, 0x401, 0x200000002000000, 0x336a4b4e, 0x7, 0x9, 0x2, 0x101, 0x0, 0x3, 0x57, 0x6, 0x8, 0x400, 0x7, 0x9, 0x1000, 0x7, 0x5, 0x1, 0x1, 0x3, 0xff, 0x5, 0x6, 0x4, 0x8e94, 0x4, 0x2, 0xfffffffffffffffd, 0x3, 0x800, 0x4a, 0x789, 0x8, 0x4c, 0x632a, 0x8, 0x8133, 0xdeb9, 0x401, 0xfffffffffffffffc, 0x80000000, 0x5, 0x1000, 0x401, 0xf7, 0x7, 0x1, 0x0, 0x3, 0x7, 0x77, 0x401, 0x8, 0x6, 0x4, 0x0, 0x5, 0x8, 0x7eec, 0xff, 0xffffffffffff7fff, 0x3, 0x440, 0xe4, 0xa5, 0x6, 0x5, 0xfffffffffffffffe, 0x80000001, 0x5, 0x46d5, 0x659, 0x71, 0x8000, 0x200, 0x3, 0x80, 0x1ab7e000000000, 0xfffffffffffffff9, 0xffffffffffffffff, 0x3, 0x7ff, 0x1, 0x10001, 0x40, 0x3, 0xdddc, 0x6, 0x2, 0x8, 0x5, 0x3, 0x100000001, 0x20, 0x4, 0x6, 0x2, 0x100, 0x2, 0x5, 0xe41, 0x1, 0x9, 0x3, 0x200, 0x3, 0x2, 0x8000000000000000, 0x3ff, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffc1, 0x8, 0x9, 0x3, 0x80000000, 0x5, 0x6, 0x800, 0x400, 0x19, 0x1, 0x401, 0x5, 0x3, 0x80000000, 0x8, 0xff, 0x1, 0x7, 0x4, 0x8, 0x0, 0x7, 0x7, 0x9, 0x7f9df0cb, 0x4, 0xfffffffffffffe00, 0x0, 0x543, 0x2, 0x8000, 0x8, 0x7ff, 0x7, 0x3, 0x3, 0x4, 0x7, 0xf8c4, 0x81, 0x1, 0x280, 0x1f, 0x8, 0x42c, 0x5, 0x0, 0x1b81, 0x1bb, 0x3f, 0x8, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x2, 0x4, 0x3, 0xa64a, 0x8, 0x4, 0x9], 0x3, [{[0x101, 0x7fff], @rand_addr=0x7de2}, {[0xffffffffffff0000, 0x2], @local={0xac, 0x14, 0x14, 0xaa}}, {[0xc5, 0x5]}]}}}}, @realm={'realm\x00', 0x10, {{0x3, 0x8, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:auth_cache_t:s0\x00'}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}}, {{{0x3, 0x1, 0x86dd, 'nr0\x00', 'gre0\x00', 'syzkaller1\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0xff], 0xe8, 0x250, 0x288, [@vlan={'vlan\x00', 0x8, {{0x4, 0x3, 0xf7, 0x7, 0x2}}}, @ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0xe6a1, 0xffffffff, 0xff, 0x5, 0x4, 0x0, 0x34, 0x4e20, 0x4e23, 0x4e24, 0x4e23}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffffffffffff8, 'system_u:object_r:selinux_config_t:s0\x00'}}}, @arpreply={'arpreply\x00', 0x10, {{@random="525bc6bd7b75"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x11, 0x22eb, 'dummy0\x00', 'ip6gre0\x00', 'tunl0\x00', 'bond0\x00', @random="d1f40eec6d1f", [0x3548218a9c8329dd, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb8, 0x168, 0x1a0, [@limit={'limit\x00', 0x20, {{0x80000000, 0x3, 0x9, 0x1, 0x0, 0x400}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffc}}}, @common=@nflog={'nflog\x00', 0x50, {{0xcdcd, 0x35, 0x54f1, 0x0, 0x0, "65b4573cc120687b363e407740fb8ec0187c93312666e97403ebda8ac421f620a5d47e6be5fa61724eb36266a8bf48d64ffa101ed1a46b657008521bfb48c248"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5}]}, 0x12f0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000008c0)=[0x0]) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000900)={{0x10001, r8, r9, r10, r11, 0x0, 0x7}, 0x8e2, 0xffffffff, 0x80, 0x9, r6, r3, 0xfffffffffffffffd}) r12 = dup2(r0, r4) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000058040000fffffffff000000028020000f0000000ffffffffffffffff880300008803000088030000ffffffff04000000", @ANYPTR=&(0x7f0000001e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000291300000000000000000000000000000000000000000000000000000060d87653b55e3b7fa53a4f85dbffa88dda77102665e075e4b89075f27db0094e74904fbbb4c47bc69a8c8ec3061544435637ebb36deb69df4b9dbdad6b9bbab4411977f5716fe0ab9de5f72adf81c4c365afac082f2d52fcc0d1c6712bc288093f4a03fd080b6695790e8f9f7ade125f71e1a5fab153a30bdf539e900a728bd88a1da8c0e85733050000003c174018e4e71f7c1aafd7cd28a8db3e7a7f8d3c0bc7452fef588658"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00000000fe80000000000000000000000000001affffffffff000000ffffffffffffffff000000ffff000000ffffffffffffffff697036746e6c3000000000000000000067726530000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00010120000000000000000000000000000000c800380100000000000000000000000000000000000000000000000070004e464c4f4700000000000000000000000000000000000000000000000000ec0c00000600010001000000e7b0e0f21ae4c30d108c7e3f267d5c1476dcb03d737cdc9bac16a0c1661cec0246c30aac89dc740fc6c56ae90b41d539d70a8e33feba4405b2711de9b9dddbce00000000fe800000000000000000000000000013ff02000000000000000000000000000100000000ffffffff000000ffffffffff00000000ffffffff00000000000000ff696662300000000000000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200230442000000000000000000000000000000380160010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000040000000001090004008f00ff000300bc0000000004070000000600e5000100f8ff08003f0010002800686c00000000000000000000000000000000000000000000000000000000030100000000000028004e4651554555450000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) migrate_pages(r3, 0xe1be, &(0x7f00000000c0)=0x3, &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f00000005c0)=0x6, 0x4) 2018/03/21 23:55:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) bind$rds(r0, &(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x6}, 0x10) accept4$netrom(r0, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000300)=0x0) ptrace$poke(0x4, r2, &(0x7f0000000340), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="c2630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) r3 = add_key(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000100)="fc86eaed08a9535395186b3aab15ad79f3d6ebdbb30dea5f4ea46b7eb7", 0x1d, 0xfffffffffffffffc) keyctl$clear(0x7, r3) r4 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x3fffc, 0x0) sendmsg$nl_crypto(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)=@del={0xf0, 0x11, 0x103, 0x70bd25, 0x25dfdbfd, {{'pcrypt(rfc4106(gcm(aes)))\x00'}, [], [], 0x400, 0x2400}, [{0x8, 0x1, 0xfff}, {0x8, 0x1, 0x1}]}, 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$DRM_IOCTL_SET_MASTER(r4, 0x641e) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f0000000380)={{{@in6=@ipv4, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000480)=0xe8) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000004c0)={r5, @rand_addr=0x3ff, @rand_addr=0x5}, 0xc) 2018/03/21 23:55:43 executing program 1: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x3f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x200140) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000080)="69b60080bc301f96cf") ioctl$KDGKBSENT(r0, 0x4b48, &(0x7f00000000c0)={0x2, 0x10000, 0x8}) r1 = syz_open_procfs(0x0, &(0x7f00005aeff6)='net/kcm\x00\b\x00') ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000180)=@add_del={0x2, &(0x7f0000000140)='ip6tnl0\x00', 0xa9}) ioctl$TIOCLINUX2(r1, 0x541c, &(0x7f0000000100)={0x2, 0xffffffff, 0x8001, 0xda4, 0x5, 0x8}) socket$kcm(0x29, 0x2, 0x0) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000001400)=""/164, 0xa4}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000140), 0x0) getpeername$packet(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000240)={r2, 0x1, 0x6, @random="576de8605bd1"}, 0x10) 2018/03/21 23:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 1: r0 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f000000ef31)='b'}) r1 = mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="11634899b7ed11386c56f040", @ANYRES64=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, &(0x7f0000011f9d)}) socketpair(0x0, 0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000380)=""/176, &(0x7f0000000300)=0xb0) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000080)=[@acquire_done={0x40106309}, @free_buffer={0x40086303, r1}], 0x0, 0x0, &(0x7f00000000c0)}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x3}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={r4, @in6={{0xa, 0x4e24, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x5}}, 0x8, 0x6, 0xc000000000, 0x20, 0xe9}, 0x98) 2018/03/21 23:55:43 executing program 0: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00006a3000)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x4000) ppoll(&(0x7f0000000300)=[{r1}, {r2}], 0x2, &(0x7f00000025c0)={0x0, 0x989680}, &(0x7f0000002600), 0x8) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000040)) 2018/03/21 23:55:43 executing program 7: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40200, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000080)=0x2, 0x4) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r1, r2) 2018/03/21 23:55:43 executing program 2: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x6, 0xffffffffffffffff, 0x1}) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000080)={0x2, 0xffb6}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) [ 96.875363] binder: 11053:11065 unknown command 1074553794 [ 96.902672] binder: BINDER_SET_CONTEXT_MGR already set [ 96.913494] binder: 11053:11065 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = syz_open_dev$mouse(&(0x7f00000002c0)='/dev/input/mouse#\x00', 0x4, 0x20000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000300)={0x9, {{0xa, 0x4e23, 0xbb0, @empty, 0x6}}}, 0x88) [ 96.932483] binder: 11072:11080 unknown command -1723309295 [ 96.937233] binder: 11072:11074 ioctl 40046207 0 returned -16 [ 96.947385] binder: BINDER_SET_CONTEXT_MGR already set [ 96.958501] binder: 11053:11079 unknown command 1074553794 [ 96.964501] binder: 11053:11079 ioctl c0306201 20008fd0 returned -22 [ 96.972245] binder: 11072:11080 ioctl c0306201 20000040 returned -22 2018/03/21 23:55:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffe03, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x10000005, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x101000, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000592000/0x3000)=nil, 0x3000, 0x3, 0x32, r0, 0x1) tkill(r1, 0x1000000000016) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r2, 0x29, 0x44, &(0x7f0000000000)={'ah\x00'}, &(0x7f0000000080)=0x1e) [ 96.991047] binder: 11053:11065 ioctl 40046207 0 returned -16 [ 96.999377] binder: 11072:11074 BC_ACQUIRE_DONE u0000000000000000 no match [ 97.026568] binder: 11072:11074 BC_FREE_BUFFER u000000002000c000 no match 2018/03/21 23:55:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ab6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_int(r1, 0x0, 0x1f, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7ff, 0x40) ioctl$KDGETLED(r3, 0x4b31, &(0x7f0000000080)) dup2(r0, r2) 2018/03/21 23:55:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000980)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000a00)=0x80) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000a40)=0x100000001, &(0x7f0000000a80)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r3, 0xffffffffffffff81) r4 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r6 = gettid() kcmp(r5, r6, 0x7, r4, r0) r7 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@nat={'nat\x00', 0x19, 0x5, 0x1278, [0x20000b00, 0x0, 0x0, 0x20000e00, 0x20001b78], 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x1, 0x86dd, 'dummy0\x00', 'ip_vti0\x00', 'sit0\x00', 'bcsf0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf8, 0x130, 0x180, [@ip={'ip\x00', 0x20, {{@empty, @rand_addr=0xff, 0xffffffff, 0xffffffff, 0x5d30, 0x5c, 0x39, 0x20, 0x4e21, 0x4e21, 0x4e20, 0x4e21}}}, @connbytes={'connbytes\x00', 0x18, {{0x7fff, 0x200}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, 0x39}}}}, {{{0xb, 0x4c, 0x6007, 'bcsf0\x00', 'ip_vti0\x00', 'irlan0\x00', 'nr0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xe0, 0x118, 0x150, [@time={'time\x00', 0x18, {{0x4, 0x1, 0x86d4, 0x4fb0, 0x2473, 0x9, 0x2}}}, @cgroup0={'cgroup\x00', 0x8, {{0xcb68, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}]}, @snat={'snat\x00', 0x10, {{@random="9808db4de9e6"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x7d7311b44bba61bb, 0x6, 'gretap0\x00', 'irlan0\x00', 'ip6tnl0\x00', 'bond0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x928, 0xa88, 0xac0, [@among={'among\x00', 0x858, {{0x4, 0xd93, 0x4, {[0xffff, 0x0, 0x3f, 0x380000, 0x80, 0x8, 0x400, 0x401, 0x37c, 0x200, 0x100000001, 0x6, 0x10000, 0x8001, 0x1, 0x200, 0x1000, 0x0, 0x0, 0x8, 0x3, 0xd0, 0xf3a2, 0x100, 0x2, 0x100000000, 0x64f, 0x1, 0xfffffffffffffffb, 0x7, 0x100, 0xe, 0xffff, 0x4, 0x4, 0x4, 0x2, 0x9, 0x308d, 0x2c, 0x7fff, 0x8, 0x0, 0x100000001, 0x80, 0x4c34, 0x9, 0x4, 0xffffffffffffff80, 0x4, 0x2be6, 0x40, 0x1f, 0x1, 0x3f, 0x8, 0xfffffffffffffff9, 0x6, 0x9, 0x2, 0x1f, 0x8, 0x80, 0x8000, 0x0, 0x7, 0x3, 0xc1, 0x5, 0x7f, 0x1cff, 0x6, 0x1000, 0x64, 0x80, 0x9, 0x5, 0x4, 0x5, 0xfffffffffffffffe, 0x4, 0x3, 0x3, 0xf4c, 0x6, 0x2, 0x3, 0xffffffffc6f75ea4, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x40, 0xf04f, 0x85, 0x101, 0xc8b, 0x1, 0x2, 0x0, 0x5, 0x1, 0xf4a, 0x9, 0xffffffffffffffc7, 0x7, 0xfffffffffffffffc, 0xffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x9, 0x1, 0x5, 0x5, 0x9, 0x1127, 0x6, 0x10000, 0x9, 0x9, 0x80000001, 0x9, 0xfe7, 0xffffffff, 0x0, 0x3, 0xa36, 0x100000001, 0x9d, 0x7, 0x67a5, 0x5a32, 0x100, 0x1, 0x2, 0x3f, 0x3c00000000000, 0x4, 0xebe9, 0x3, 0xb6, 0xfffffffffffffff7, 0x2, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffb, 0x5320, 0x80, 0x5, 0x9, 0x4, 0x8001, 0x1, 0x4, 0x1, 0x412, 0x120, 0x3ff, 0x1, 0x81, 0x101, 0xd900, 0x6, 0xe5aa, 0x8000, 0x8, 0x7, 0x46f, 0x1fb, 0xffffffffffff0000, 0x7, 0x3, 0x3, 0x7fff, 0x1, 0x8000000, 0x7, 0xfc0000000000, 0xffffffffffff19dc, 0x35ee, 0x5, 0x20, 0x4, 0x7, 0x20, 0xff, 0x20, 0xfffffffffffff8cd, 0x2, 0xf3bc, 0x5, 0x1, 0xf0, 0x5, 0x9, 0xfffffffffffffff7, 0x2, 0x7fffffff, 0x7f, 0xace, 0xfff, 0x9, 0x8, 0x18de000, 0x6, 0x7ff, 0x6, 0x2, 0x40, 0x7, 0x9, 0x3, 0x2158, 0x4, 0x1000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x101, 0x6, 0x9, 0xb6, 0x6, 0xfb, 0x9, 0x3, 0x99, 0x7, 0xba0, 0xffffffff80000000, 0x200, 0xfe, 0x2, 0xf089, 0x8000, 0x9, 0x400, 0x8, 0xffffffffffffff82, 0x6, 0x2, 0x7f52, 0x63, 0x7ff, 0x2, 0x7b7c, 0x3, 0x5, 0x2, 0x101, 0xf6eb], 0x2, [{[0x17, 0xfffffffffffffffd], @multicast1=0xe0000001}, {[0xa00000, 0xd], @loopback=0x7f000001}]}, {[0x1, 0x1, 0x7, 0x8, 0x5, 0x0, 0x401, 0x9f, 0x100000000, 0x8, 0x66, 0x200, 0x2, 0x0, 0x2, 0x2, 0x9, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x4, 0x5, 0x6eed, 0x9, 0x5, 0x80000000, 0x8, 0x808d, 0x7f, 0x5, 0xfffffffffffffffb, 0x40, 0x4, 0xffffffffffff0001, 0x6, 0x40, 0x4b8f, 0x2, 0x2, 0x8, 0x4, 0x7fff, 0x4, 0x81, 0x3, 0x7f, 0xe0fd, 0x3, 0x7f, 0xf57, 0xffffffffffffff00, 0x50b, 0x100000000, 0x3b5, 0x7, 0x400, 0x800, 0xb9f, 0x10001, 0x800, 0x4, 0xffffffff80000000, 0x7, 0x970d, 0xfffffffffffffff9, 0x1, 0x380000, 0x5, 0x3, 0x1, 0x80000001, 0x1, 0x7fff, 0x7fffffff, 0x9, 0x401, 0x401, 0x200000002000000, 0x336a4b4e, 0x7, 0x9, 0x2, 0x101, 0x0, 0x3, 0x57, 0x6, 0x8, 0x400, 0x7, 0x9, 0x1000, 0x7, 0x5, 0x1, 0x1, 0x3, 0xff, 0x5, 0x6, 0x4, 0x8e94, 0x4, 0x2, 0xfffffffffffffffd, 0x3, 0x800, 0x4a, 0x789, 0x8, 0x4c, 0x632a, 0x8, 0x8133, 0xdeb9, 0x401, 0xfffffffffffffffc, 0x80000000, 0x5, 0x1000, 0x401, 0xf7, 0x7, 0x1, 0x0, 0x3, 0x7, 0x77, 0x401, 0x8, 0x6, 0x4, 0x0, 0x5, 0x8, 0x7eec, 0xff, 0xffffffffffff7fff, 0x3, 0x440, 0xe4, 0xa5, 0x6, 0x5, 0xfffffffffffffffe, 0x80000001, 0x5, 0x46d5, 0x659, 0x71, 0x8000, 0x200, 0x3, 0x80, 0x1ab7e000000000, 0xfffffffffffffff9, 0xffffffffffffffff, 0x3, 0x7ff, 0x1, 0x10001, 0x40, 0x3, 0xdddc, 0x6, 0x2, 0x8, 0x5, 0x3, 0x100000001, 0x20, 0x4, 0x6, 0x2, 0x100, 0x2, 0x5, 0xe41, 0x1, 0x9, 0x3, 0x200, 0x3, 0x2, 0x8000000000000000, 0x3ff, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffc1, 0x8, 0x9, 0x3, 0x80000000, 0x5, 0x6, 0x800, 0x400, 0x19, 0x1, 0x401, 0x5, 0x3, 0x80000000, 0x8, 0xff, 0x1, 0x7, 0x4, 0x8, 0x0, 0x7, 0x7, 0x9, 0x7f9df0cb, 0x4, 0xfffffffffffffe00, 0x0, 0x543, 0x2, 0x8000, 0x8, 0x7ff, 0x7, 0x3, 0x3, 0x4, 0x7, 0xf8c4, 0x81, 0x1, 0x280, 0x1f, 0x8, 0x42c, 0x5, 0x0, 0x1b81, 0x1bb, 0x3f, 0x8, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x2, 0x4, 0x3, 0xa64a, 0x8, 0x4, 0x9], 0x3, [{[0x101, 0x7fff], @rand_addr=0x7de2}, {[0xffffffffffff0000, 0x2], @local={0xac, 0x14, 0x14, 0xaa}}, {[0xc5, 0x5]}]}}}}, @realm={'realm\x00', 0x10, {{0x3, 0x8, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:auth_cache_t:s0\x00'}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}}, {{{0x3, 0x1, 0x86dd, 'nr0\x00', 'gre0\x00', 'syzkaller1\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0xff], 0xe8, 0x250, 0x288, [@vlan={'vlan\x00', 0x8, {{0x4, 0x3, 0xf7, 0x7, 0x2}}}, @ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0xe6a1, 0xffffffff, 0xff, 0x5, 0x4, 0x0, 0x34, 0x4e20, 0x4e23, 0x4e24, 0x4e23}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffffffffffff8, 'system_u:object_r:selinux_config_t:s0\x00'}}}, @arpreply={'arpreply\x00', 0x10, {{@random="525bc6bd7b75"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x11, 0x22eb, 'dummy0\x00', 'ip6gre0\x00', 'tunl0\x00', 'bond0\x00', @random="d1f40eec6d1f", [0x3548218a9c8329dd, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb8, 0x168, 0x1a0, [@limit={'limit\x00', 0x20, {{0x80000000, 0x3, 0x9, 0x1, 0x0, 0x400}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffc}}}, @common=@nflog={'nflog\x00', 0x50, {{0xcdcd, 0x35, 0x54f1, 0x0, 0x0, "65b4573cc120687b363e407740fb8ec0187c93312666e97403ebda8ac421f620a5d47e6be5fa61724eb36266a8bf48d64ffa101ed1a46b657008521bfb48c248"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5}]}, 0x12f0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000008c0)=[0x0]) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000900)={{0x10001, r8, r9, r10, r11, 0x0, 0x7}, 0x8e2, 0xffffffff, 0x80, 0x9, r6, r3, 0xfffffffffffffffd}) r12 = dup2(r0, r4) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000058040000fffffffff000000028020000f0000000ffffffffffffffff880300008803000088030000ffffffff04000000", @ANYPTR=&(0x7f0000001e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000291300000000000000000000000000000000000000000000000000000060d87653b55e3b7fa53a4f85dbffa88dda77102665e075e4b89075f27db0094e74904fbbb4c47bc69a8c8ec3061544435637ebb36deb69df4b9dbdad6b9bbab4411977f5716fe0ab9de5f72adf81c4c365afac082f2d52fcc0d1c6712bc288093f4a03fd080b6695790e8f9f7ade125f71e1a5fab153a30bdf539e900a728bd88a1da8c0e85733050000003c174018e4e71f7c1aafd7cd28a8db3e7a7f8d3c0bc7452fef588658"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00000000fe80000000000000000000000000001affffffffff000000ffffffffffffffff000000ffff000000ffffffffffffffff697036746e6c3000000000000000000067726530000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00010120000000000000000000000000000000c800380100000000000000000000000000000000000000000000000070004e464c4f4700000000000000000000000000000000000000000000000000ec0c00000600010001000000e7b0e0f21ae4c30d108c7e3f267d5c1476dcb03d737cdc9bac16a0c1661cec0246c30aac89dc740fc6c56ae90b41d539d70a8e33feba4405b2711de9b9dddbce00000000fe800000000000000000000000000013ff02000000000000000000000000000100000000ffffffff000000ffffffffff00000000ffffffff00000000000000ff696662300000000000000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200230442000000000000000000000000000000380160010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000040000000001090004008f00ff000300bc0000000004070000000600e5000100f8ff08003f0010002800686c00000000000000000000000000000000000000000000000000000000030100000000000028004e4651554555450000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) migrate_pages(r3, 0xe1be, &(0x7f00000000c0)=0x3, &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f00000005c0)=0x6, 0x4) 2018/03/21 23:55:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_bt_cmtp_CMTPCONNADD(r0, 0x400443c8, &(0x7f0000000040)={r0, 0x7}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x13}, @loopback=0x7f000001, r1}, 0xc) [ 97.035199] binder: 11072:11090 ioctl c0306201 20004000 returned -14 [ 97.041831] binder: BINDER_SET_CONTEXT_MGR already set [ 97.060249] binder_alloc: binder_alloc_mmap_handler: 11072 2000c000-2000e000 already mapped failed -16 [ 97.068557] binder: 11072:11098 ioctl 40046207 0 returned -16 2018/03/21 23:55:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = dup2(r0, r1) setsockopt$sock_void(r2, 0x1, 0x40, 0x0, 0x0) ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000040)) 2018/03/21 23:55:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 97.099646] binder: 11111:11117 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 97.106539] binder: 11072:11120 unknown command -1723309295 [ 97.128516] binder: 11072:11120 ioctl c0306201 20000040 returned -22 [ 97.130092] binder: 11072:11074 BC_ACQUIRE_DONE u0000000000000000 no match [ 97.140404] binder: BINDER_SET_CONTEXT_MGR already set [ 97.148796] binder: 11072:11074 BC_FREE_BUFFER u000000002000c000 no match [ 97.158080] binder: 11111:11129 ioctl 40046207 0 returned -16 2018/03/21 23:55:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000314f8c)="6d6f756e74696e666f004388f750c83d14c4a3a9ac1488a477660ae763891738ac656bb3e891941f02f1265047502f6c2dd9f655ef7131eabf3110d638f0d2e6a49a2bc4a08d63e2da7af47e6c37972352875f125bcf3ea7f04b7b505b6a06beedb2a86e30a86bc0d37a6438b99a45ea22b1f4fb") open(&(0x7f0000000000)='./file0\x00', 0xc0, 0x0) mount(&(0x7f0000f28ff8)='./file0\x00', &(0x7f0000802ff8)='./file0\x00', &(0x7f00000000c0)="0076095cc6ff78b3ce4d944febc21b8598f8b8533bec909d33ea412eebd822b185440b66766ac724932628338f3ee82a6538aafe", 0x1002, &(0x7f0000000080)) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) readv(r0, &(0x7f000005a000)=[{&(0x7f0000d1d000)=""/203, 0x52e}], 0x1) mount(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00007fb000)='./file0\x00', &(0x7f0000000040)='nfs4\x00', 0x0, &(0x7f0000d1cfff)="d6") 2018/03/21 23:55:43 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(0xffffffffffffffff, 0xae47, 0xd000) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r0, 0xae80, 0x0) 2018/03/21 23:55:43 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl(r0, 0x0, &(0x7f0000000040)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240)=""/143, 0x8f) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r1) 2018/03/21 23:55:43 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x12, 0xffffffffffffffff}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x100000000001a) socket$inet6_sctp(0xa, 0x4, 0x84) 2018/03/21 23:55:43 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, &(0x7f0000000100)={{0x2, 0x4e24}, {0x0, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x14}}, 0x4, {0x2, 0x4e22, @rand_addr=0x101}, 'ip6_vti0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000180)='/dev/binder#\x00', 0x0, 0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:43 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000980)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000a00)=0x80) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000a40)=0x100000001, &(0x7f0000000a80)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r3, 0xffffffffffffff81) r4 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r6 = gettid() kcmp(r5, r6, 0x7, r4, r0) r7 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@nat={'nat\x00', 0x19, 0x5, 0x1278, [0x20000b00, 0x0, 0x0, 0x20000e00, 0x20001b78], 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x1, 0x86dd, 'dummy0\x00', 'ip_vti0\x00', 'sit0\x00', 'bcsf0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf8, 0x130, 0x180, [@ip={'ip\x00', 0x20, {{@empty, @rand_addr=0xff, 0xffffffff, 0xffffffff, 0x5d30, 0x5c, 0x39, 0x20, 0x4e21, 0x4e21, 0x4e20, 0x4e21}}}, @connbytes={'connbytes\x00', 0x18, {{0x7fff, 0x200}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, 0x39}}}}, {{{0xb, 0x4c, 0x6007, 'bcsf0\x00', 'ip_vti0\x00', 'irlan0\x00', 'nr0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xe0, 0x118, 0x150, [@time={'time\x00', 0x18, {{0x4, 0x1, 0x86d4, 0x4fb0, 0x2473, 0x9, 0x2}}}, @cgroup0={'cgroup\x00', 0x8, {{0xcb68, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}]}, @snat={'snat\x00', 0x10, {{@random="9808db4de9e6"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x7d7311b44bba61bb, 0x6, 'gretap0\x00', 'irlan0\x00', 'ip6tnl0\x00', 'bond0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x928, 0xa88, 0xac0, [@among={'among\x00', 0x858, {{0x4, 0xd93, 0x4, {[0xffff, 0x0, 0x3f, 0x380000, 0x80, 0x8, 0x400, 0x401, 0x37c, 0x200, 0x100000001, 0x6, 0x10000, 0x8001, 0x1, 0x200, 0x1000, 0x0, 0x0, 0x8, 0x3, 0xd0, 0xf3a2, 0x100, 0x2, 0x100000000, 0x64f, 0x1, 0xfffffffffffffffb, 0x7, 0x100, 0xe, 0xffff, 0x4, 0x4, 0x4, 0x2, 0x9, 0x308d, 0x2c, 0x7fff, 0x8, 0x0, 0x100000001, 0x80, 0x4c34, 0x9, 0x4, 0xffffffffffffff80, 0x4, 0x2be6, 0x40, 0x1f, 0x1, 0x3f, 0x8, 0xfffffffffffffff9, 0x6, 0x9, 0x2, 0x1f, 0x8, 0x80, 0x8000, 0x0, 0x7, 0x3, 0xc1, 0x5, 0x7f, 0x1cff, 0x6, 0x1000, 0x64, 0x80, 0x9, 0x5, 0x4, 0x5, 0xfffffffffffffffe, 0x4, 0x3, 0x3, 0xf4c, 0x6, 0x2, 0x3, 0xffffffffc6f75ea4, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x40, 0xf04f, 0x85, 0x101, 0xc8b, 0x1, 0x2, 0x0, 0x5, 0x1, 0xf4a, 0x9, 0xffffffffffffffc7, 0x7, 0xfffffffffffffffc, 0xffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x9, 0x1, 0x5, 0x5, 0x9, 0x1127, 0x6, 0x10000, 0x9, 0x9, 0x80000001, 0x9, 0xfe7, 0xffffffff, 0x0, 0x3, 0xa36, 0x100000001, 0x9d, 0x7, 0x67a5, 0x5a32, 0x100, 0x1, 0x2, 0x3f, 0x3c00000000000, 0x4, 0xebe9, 0x3, 0xb6, 0xfffffffffffffff7, 0x2, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffb, 0x5320, 0x80, 0x5, 0x9, 0x4, 0x8001, 0x1, 0x4, 0x1, 0x412, 0x120, 0x3ff, 0x1, 0x81, 0x101, 0xd900, 0x6, 0xe5aa, 0x8000, 0x8, 0x7, 0x46f, 0x1fb, 0xffffffffffff0000, 0x7, 0x3, 0x3, 0x7fff, 0x1, 0x8000000, 0x7, 0xfc0000000000, 0xffffffffffff19dc, 0x35ee, 0x5, 0x20, 0x4, 0x7, 0x20, 0xff, 0x20, 0xfffffffffffff8cd, 0x2, 0xf3bc, 0x5, 0x1, 0xf0, 0x5, 0x9, 0xfffffffffffffff7, 0x2, 0x7fffffff, 0x7f, 0xace, 0xfff, 0x9, 0x8, 0x18de000, 0x6, 0x7ff, 0x6, 0x2, 0x40, 0x7, 0x9, 0x3, 0x2158, 0x4, 0x1000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x101, 0x6, 0x9, 0xb6, 0x6, 0xfb, 0x9, 0x3, 0x99, 0x7, 0xba0, 0xffffffff80000000, 0x200, 0xfe, 0x2, 0xf089, 0x8000, 0x9, 0x400, 0x8, 0xffffffffffffff82, 0x6, 0x2, 0x7f52, 0x63, 0x7ff, 0x2, 0x7b7c, 0x3, 0x5, 0x2, 0x101, 0xf6eb], 0x2, [{[0x17, 0xfffffffffffffffd], @multicast1=0xe0000001}, {[0xa00000, 0xd], @loopback=0x7f000001}]}, {[0x1, 0x1, 0x7, 0x8, 0x5, 0x0, 0x401, 0x9f, 0x100000000, 0x8, 0x66, 0x200, 0x2, 0x0, 0x2, 0x2, 0x9, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x4, 0x5, 0x6eed, 0x9, 0x5, 0x80000000, 0x8, 0x808d, 0x7f, 0x5, 0xfffffffffffffffb, 0x40, 0x4, 0xffffffffffff0001, 0x6, 0x40, 0x4b8f, 0x2, 0x2, 0x8, 0x4, 0x7fff, 0x4, 0x81, 0x3, 0x7f, 0xe0fd, 0x3, 0x7f, 0xf57, 0xffffffffffffff00, 0x50b, 0x100000000, 0x3b5, 0x7, 0x400, 0x800, 0xb9f, 0x10001, 0x800, 0x4, 0xffffffff80000000, 0x7, 0x970d, 0xfffffffffffffff9, 0x1, 0x380000, 0x5, 0x3, 0x1, 0x80000001, 0x1, 0x7fff, 0x7fffffff, 0x9, 0x401, 0x401, 0x200000002000000, 0x336a4b4e, 0x7, 0x9, 0x2, 0x101, 0x0, 0x3, 0x57, 0x6, 0x8, 0x400, 0x7, 0x9, 0x1000, 0x7, 0x5, 0x1, 0x1, 0x3, 0xff, 0x5, 0x6, 0x4, 0x8e94, 0x4, 0x2, 0xfffffffffffffffd, 0x3, 0x800, 0x4a, 0x789, 0x8, 0x4c, 0x632a, 0x8, 0x8133, 0xdeb9, 0x401, 0xfffffffffffffffc, 0x80000000, 0x5, 0x1000, 0x401, 0xf7, 0x7, 0x1, 0x0, 0x3, 0x7, 0x77, 0x401, 0x8, 0x6, 0x4, 0x0, 0x5, 0x8, 0x7eec, 0xff, 0xffffffffffff7fff, 0x3, 0x440, 0xe4, 0xa5, 0x6, 0x5, 0xfffffffffffffffe, 0x80000001, 0x5, 0x46d5, 0x659, 0x71, 0x8000, 0x200, 0x3, 0x80, 0x1ab7e000000000, 0xfffffffffffffff9, 0xffffffffffffffff, 0x3, 0x7ff, 0x1, 0x10001, 0x40, 0x3, 0xdddc, 0x6, 0x2, 0x8, 0x5, 0x3, 0x100000001, 0x20, 0x4, 0x6, 0x2, 0x100, 0x2, 0x5, 0xe41, 0x1, 0x9, 0x3, 0x200, 0x3, 0x2, 0x8000000000000000, 0x3ff, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffc1, 0x8, 0x9, 0x3, 0x80000000, 0x5, 0x6, 0x800, 0x400, 0x19, 0x1, 0x401, 0x5, 0x3, 0x80000000, 0x8, 0xff, 0x1, 0x7, 0x4, 0x8, 0x0, 0x7, 0x7, 0x9, 0x7f9df0cb, 0x4, 0xfffffffffffffe00, 0x0, 0x543, 0x2, 0x8000, 0x8, 0x7ff, 0x7, 0x3, 0x3, 0x4, 0x7, 0xf8c4, 0x81, 0x1, 0x280, 0x1f, 0x8, 0x42c, 0x5, 0x0, 0x1b81, 0x1bb, 0x3f, 0x8, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x2, 0x4, 0x3, 0xa64a, 0x8, 0x4, 0x9], 0x3, [{[0x101, 0x7fff], @rand_addr=0x7de2}, {[0xffffffffffff0000, 0x2], @local={0xac, 0x14, 0x14, 0xaa}}, {[0xc5, 0x5]}]}}}}, @realm={'realm\x00', 0x10, {{0x3, 0x8, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:auth_cache_t:s0\x00'}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}}, {{{0x3, 0x1, 0x86dd, 'nr0\x00', 'gre0\x00', 'syzkaller1\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0xff], 0xe8, 0x250, 0x288, [@vlan={'vlan\x00', 0x8, {{0x4, 0x3, 0xf7, 0x7, 0x2}}}, @ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0xe6a1, 0xffffffff, 0xff, 0x5, 0x4, 0x0, 0x34, 0x4e20, 0x4e23, 0x4e24, 0x4e23}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffffffffffff8, 'system_u:object_r:selinux_config_t:s0\x00'}}}, @arpreply={'arpreply\x00', 0x10, {{@random="525bc6bd7b75"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x11, 0x22eb, 'dummy0\x00', 'ip6gre0\x00', 'tunl0\x00', 'bond0\x00', @random="d1f40eec6d1f", [0x3548218a9c8329dd, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb8, 0x168, 0x1a0, [@limit={'limit\x00', 0x20, {{0x80000000, 0x3, 0x9, 0x1, 0x0, 0x400}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffc}}}, @common=@nflog={'nflog\x00', 0x50, {{0xcdcd, 0x35, 0x54f1, 0x0, 0x0, "65b4573cc120687b363e407740fb8ec0187c93312666e97403ebda8ac421f620a5d47e6be5fa61724eb36266a8bf48d64ffa101ed1a46b657008521bfb48c248"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5}]}, 0x12f0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000008c0)=[0x0]) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000900)={{0x10001, r8, r9, r10, r11, 0x0, 0x7}, 0x8e2, 0xffffffff, 0x80, 0x9, r6, r3, 0xfffffffffffffffd}) r12 = dup2(r0, r4) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000058040000fffffffff000000028020000f0000000ffffffffffffffff880300008803000088030000ffffffff04000000", @ANYPTR=&(0x7f0000001e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000291300000000000000000000000000000000000000000000000000000060d87653b55e3b7fa53a4f85dbffa88dda77102665e075e4b89075f27db0094e74904fbbb4c47bc69a8c8ec3061544435637ebb36deb69df4b9dbdad6b9bbab4411977f5716fe0ab9de5f72adf81c4c365afac082f2d52fcc0d1c6712bc288093f4a03fd080b6695790e8f9f7ade125f71e1a5fab153a30bdf539e900a728bd88a1da8c0e85733050000003c174018e4e71f7c1aafd7cd28a8db3e7a7f8d3c0bc7452fef588658"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00000000fe80000000000000000000000000001affffffffff000000ffffffffffffffff000000ffff000000ffffffffffffffff697036746e6c3000000000000000000067726530000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00010120000000000000000000000000000000c800380100000000000000000000000000000000000000000000000070004e464c4f4700000000000000000000000000000000000000000000000000ec0c00000600010001000000e7b0e0f21ae4c30d108c7e3f267d5c1476dcb03d737cdc9bac16a0c1661cec0246c30aac89dc740fc6c56ae90b41d539d70a8e33feba4405b2711de9b9dddbce00000000fe800000000000000000000000000013ff02000000000000000000000000000100000000ffffffff000000ffffffffff00000000ffffffff00000000000000ff696662300000000000000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200230442000000000000000000000000000000380160010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000040000000001090004008f00ff000300bc0000000004070000000600e5000100f8ff08003f0010002800686c00000000000000000000000000000000000000000000000000000000030100000000000028004e4651554555450000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) migrate_pages(r3, 0xe1be, &(0x7f00000000c0)=0x3, &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f00000005c0)=0x6, 0x4) 2018/03/21 23:55:43 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x6, {0x2, 0x4e20, @loopback=0x7f000001}, {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, {0x2, 0x4e24, @multicast2=0xe0000002}, 0x4, 0x7, 0x800, 0xc0, 0x6, &(0x7f0000000040)='bcsf0\x00', 0x10001, 0x101, 0x3}) 2018/03/21 23:55:43 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x1) dup2(r0, r1) 2018/03/21 23:55:43 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2018/03/21 23:55:44 executing program 0: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = accept(0xffffffffffffff9c, &(0x7f0000000980)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, &(0x7f0000000a00)=0x80) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000a40)=0x100000001, &(0x7f0000000a80)=0x2) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000080)=0x0) ptrace$peekuser(0x3, r3, 0xffffffffffffff81) r4 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000040)=0x0) r6 = gettid() kcmp(r5, r6, 0x7, r4, r0) r7 = shmget$private(0x0, 0x1000, 0x1, &(0x7f0000ffc000/0x1000)=nil) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000001d80)=@nat={'nat\x00', 0x19, 0x5, 0x1278, [0x20000b00, 0x0, 0x0, 0x20000e00, 0x20001b78], 0x0, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x2, [{{{0x0, 0x1, 0x86dd, 'dummy0\x00', 'ip_vti0\x00', 'sit0\x00', 'bcsf0\x00', @empty, [0xff, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xf8, 0x130, 0x180, [@ip={'ip\x00', 0x20, {{@empty, @rand_addr=0xff, 0xffffffff, 0xffffffff, 0x5d30, 0x5c, 0x39, 0x20, 0x4e21, 0x4e21, 0x4e20, 0x4e21}}}, @connbytes={'connbytes\x00', 0x18, {{0x7fff, 0x200}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}]}, @common=@LED={'LED\x00', 0x28, {{'syz1\x00', 0x0, 0x2, 0x39}}}}, {{{0xb, 0x4c, 0x6007, 'bcsf0\x00', 'ip_vti0\x00', 'irlan0\x00', 'nr0\x00', @empty, [0xff, 0x0, 0x0, 0x0, 0x0, 0xff], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0xff, 0xff, 0xff, 0x0, 0xff], 0xe0, 0x118, 0x150, [@time={'time\x00', 0x18, {{0x4, 0x1, 0x86d4, 0x4fb0, 0x2473, 0x9, 0x2}}}, @cgroup0={'cgroup\x00', 0x8, {{0xcb68, 0x1}}}]}, [@snat={'snat\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0x10}}}]}, @snat={'snat\x00', 0x10, {{@random="9808db4de9e6"}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff, 0x2, [{{{0x9, 0x7d7311b44bba61bb, 0x6, 'gretap0\x00', 'irlan0\x00', 'ip6tnl0\x00', 'bond0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0xff, 0x0, 0xff, 0xff], 0x928, 0xa88, 0xac0, [@among={'among\x00', 0x858, {{0x4, 0xd93, 0x4, {[0xffff, 0x0, 0x3f, 0x380000, 0x80, 0x8, 0x400, 0x401, 0x37c, 0x200, 0x100000001, 0x6, 0x10000, 0x8001, 0x1, 0x200, 0x1000, 0x0, 0x0, 0x8, 0x3, 0xd0, 0xf3a2, 0x100, 0x2, 0x100000000, 0x64f, 0x1, 0xfffffffffffffffb, 0x7, 0x100, 0xe, 0xffff, 0x4, 0x4, 0x4, 0x2, 0x9, 0x308d, 0x2c, 0x7fff, 0x8, 0x0, 0x100000001, 0x80, 0x4c34, 0x9, 0x4, 0xffffffffffffff80, 0x4, 0x2be6, 0x40, 0x1f, 0x1, 0x3f, 0x8, 0xfffffffffffffff9, 0x6, 0x9, 0x2, 0x1f, 0x8, 0x80, 0x8000, 0x0, 0x7, 0x3, 0xc1, 0x5, 0x7f, 0x1cff, 0x6, 0x1000, 0x64, 0x80, 0x9, 0x5, 0x4, 0x5, 0xfffffffffffffffe, 0x4, 0x3, 0x3, 0xf4c, 0x6, 0x2, 0x3, 0xffffffffc6f75ea4, 0x7, 0x8, 0x5, 0xffffffffffffffff, 0x0, 0x40, 0xf04f, 0x85, 0x101, 0xc8b, 0x1, 0x2, 0x0, 0x5, 0x1, 0xf4a, 0x9, 0xffffffffffffffc7, 0x7, 0xfffffffffffffffc, 0xffff, 0x0, 0x1, 0x3, 0x2, 0x0, 0x9, 0x1, 0x5, 0x5, 0x9, 0x1127, 0x6, 0x10000, 0x9, 0x9, 0x80000001, 0x9, 0xfe7, 0xffffffff, 0x0, 0x3, 0xa36, 0x100000001, 0x9d, 0x7, 0x67a5, 0x5a32, 0x100, 0x1, 0x2, 0x3f, 0x3c00000000000, 0x4, 0xebe9, 0x3, 0xb6, 0xfffffffffffffff7, 0x2, 0xfffffffffffffffd, 0x1, 0xfffffffffffffffb, 0x5320, 0x80, 0x5, 0x9, 0x4, 0x8001, 0x1, 0x4, 0x1, 0x412, 0x120, 0x3ff, 0x1, 0x81, 0x101, 0xd900, 0x6, 0xe5aa, 0x8000, 0x8, 0x7, 0x46f, 0x1fb, 0xffffffffffff0000, 0x7, 0x3, 0x3, 0x7fff, 0x1, 0x8000000, 0x7, 0xfc0000000000, 0xffffffffffff19dc, 0x35ee, 0x5, 0x20, 0x4, 0x7, 0x20, 0xff, 0x20, 0xfffffffffffff8cd, 0x2, 0xf3bc, 0x5, 0x1, 0xf0, 0x5, 0x9, 0xfffffffffffffff7, 0x2, 0x7fffffff, 0x7f, 0xace, 0xfff, 0x9, 0x8, 0x18de000, 0x6, 0x7ff, 0x6, 0x2, 0x40, 0x7, 0x9, 0x3, 0x2158, 0x4, 0x1000, 0x4, 0x8, 0x1, 0x5, 0x4, 0x101, 0x6, 0x9, 0xb6, 0x6, 0xfb, 0x9, 0x3, 0x99, 0x7, 0xba0, 0xffffffff80000000, 0x200, 0xfe, 0x2, 0xf089, 0x8000, 0x9, 0x400, 0x8, 0xffffffffffffff82, 0x6, 0x2, 0x7f52, 0x63, 0x7ff, 0x2, 0x7b7c, 0x3, 0x5, 0x2, 0x101, 0xf6eb], 0x2, [{[0x17, 0xfffffffffffffffd], @multicast1=0xe0000001}, {[0xa00000, 0xd], @loopback=0x7f000001}]}, {[0x1, 0x1, 0x7, 0x8, 0x5, 0x0, 0x401, 0x9f, 0x100000000, 0x8, 0x66, 0x200, 0x2, 0x0, 0x2, 0x2, 0x9, 0x0, 0x1, 0x6, 0x9, 0x7, 0x0, 0x4, 0x5, 0x6eed, 0x9, 0x5, 0x80000000, 0x8, 0x808d, 0x7f, 0x5, 0xfffffffffffffffb, 0x40, 0x4, 0xffffffffffff0001, 0x6, 0x40, 0x4b8f, 0x2, 0x2, 0x8, 0x4, 0x7fff, 0x4, 0x81, 0x3, 0x7f, 0xe0fd, 0x3, 0x7f, 0xf57, 0xffffffffffffff00, 0x50b, 0x100000000, 0x3b5, 0x7, 0x400, 0x800, 0xb9f, 0x10001, 0x800, 0x4, 0xffffffff80000000, 0x7, 0x970d, 0xfffffffffffffff9, 0x1, 0x380000, 0x5, 0x3, 0x1, 0x80000001, 0x1, 0x7fff, 0x7fffffff, 0x9, 0x401, 0x401, 0x200000002000000, 0x336a4b4e, 0x7, 0x9, 0x2, 0x101, 0x0, 0x3, 0x57, 0x6, 0x8, 0x400, 0x7, 0x9, 0x1000, 0x7, 0x5, 0x1, 0x1, 0x3, 0xff, 0x5, 0x6, 0x4, 0x8e94, 0x4, 0x2, 0xfffffffffffffffd, 0x3, 0x800, 0x4a, 0x789, 0x8, 0x4c, 0x632a, 0x8, 0x8133, 0xdeb9, 0x401, 0xfffffffffffffffc, 0x80000000, 0x5, 0x1000, 0x401, 0xf7, 0x7, 0x1, 0x0, 0x3, 0x7, 0x77, 0x401, 0x8, 0x6, 0x4, 0x0, 0x5, 0x8, 0x7eec, 0xff, 0xffffffffffff7fff, 0x3, 0x440, 0xe4, 0xa5, 0x6, 0x5, 0xfffffffffffffffe, 0x80000001, 0x5, 0x46d5, 0x659, 0x71, 0x8000, 0x200, 0x3, 0x80, 0x1ab7e000000000, 0xfffffffffffffff9, 0xffffffffffffffff, 0x3, 0x7ff, 0x1, 0x10001, 0x40, 0x3, 0xdddc, 0x6, 0x2, 0x8, 0x5, 0x3, 0x100000001, 0x20, 0x4, 0x6, 0x2, 0x100, 0x2, 0x5, 0xe41, 0x1, 0x9, 0x3, 0x200, 0x3, 0x2, 0x8000000000000000, 0x3ff, 0x0, 0x5, 0x0, 0x6, 0xffffffffffffffc1, 0x8, 0x9, 0x3, 0x80000000, 0x5, 0x6, 0x800, 0x400, 0x19, 0x1, 0x401, 0x5, 0x3, 0x80000000, 0x8, 0xff, 0x1, 0x7, 0x4, 0x8, 0x0, 0x7, 0x7, 0x9, 0x7f9df0cb, 0x4, 0xfffffffffffffe00, 0x0, 0x543, 0x2, 0x8000, 0x8, 0x7ff, 0x7, 0x3, 0x3, 0x4, 0x7, 0xf8c4, 0x81, 0x1, 0x280, 0x1f, 0x8, 0x42c, 0x5, 0x0, 0x1b81, 0x1bb, 0x3f, 0x8, 0x400, 0x1f, 0x5, 0x1, 0x0, 0x2, 0x4, 0x3, 0xa64a, 0x8, 0x4, 0x9], 0x3, [{[0x101, 0x7fff], @rand_addr=0x7de2}, {[0xffffffffffff0000, 0x2], @local={0xac, 0x14, 0x14, 0xaa}}, {[0xc5, 0x5]}]}}}}, @realm={'realm\x00', 0x10, {{0x3, 0x8, 0x1}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x8, 'system_u:object_r:auth_cache_t:s0\x00'}}}, @common=@STANDARD={'\x00', 0x8, {0xfffffffffffffffc}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xfffffffffffffffd}}}}, {{{0x3, 0x1, 0x86dd, 'nr0\x00', 'gre0\x00', 'syzkaller1\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [0x0, 0x0, 0x0, 0xff, 0x0, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0xff], 0xe8, 0x250, 0x288, [@vlan={'vlan\x00', 0x8, {{0x4, 0x3, 0xf7, 0x7, 0x2}}}, @ip={'ip\x00', 0x20, {{@dev={0xac, 0x14, 0x14, 0xb}, @rand_addr=0xe6a1, 0xffffffff, 0xff, 0x5, 0x4, 0x0, 0x34, 0x4e20, 0x4e23, 0x4e24, 0x4e23}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0xfffffffffffffff8, 'system_u:object_r:selinux_config_t:s0\x00'}}}, @arpreply={'arpreply\x00', 0x10, {{@random="525bc6bd7b75"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, 0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x11, 0x22eb, 'dummy0\x00', 'ip6gre0\x00', 'tunl0\x00', 'bond0\x00', @random="d1f40eec6d1f", [0x3548218a9c8329dd, 0xff, 0xff], @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0xff, 0xff, 0xff, 0x0, 0xff], 0xb8, 0x168, 0x1a0, [@limit={'limit\x00', 0x20, {{0x80000000, 0x3, 0x9, 0x1, 0x0, 0x400}}}]}, [@arpreply={'arpreply\x00', 0x10, {{@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, 0xfffffffffffffffc}}}, @common=@nflog={'nflog\x00', 0x50, {{0xcdcd, 0x35, 0x54f1, 0x0, 0x0, "65b4573cc120687b363e407740fb8ec0187c93312666e97403ebda8ac421f620a5d47e6be5fa61724eb36266a8bf48d64ffa101ed1a46b657008521bfb48c248"}}}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x5}]}, 0x12f0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@remote}}, &(0x7f0000000700)=0xe8) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000008c0)=[0x0]) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000900)={{0x10001, r8, r9, r10, r11, 0x0, 0x7}, 0x8e2, 0xffffffff, 0x80, 0x9, r6, r3, 0xfffffffffffffffd}) r12 = dup2(r0, r4) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000058040000fffffffff000000028020000f0000000ffffffffffffffff880300008803000088030000ffffffff04000000", @ANYPTR=&(0x7f0000001e00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000291300000000000000000000000000000000000000000000000000000060d87653b55e3b7fa53a4f85dbffa88dda77102665e075e4b89075f27db0094e74904fbbb4c47bc69a8c8ec3061544435637ebb36deb69df4b9dbdad6b9bbab4411977f5716fe0ab9de5f72adf81c4c365afac082f2d52fcc0d1c6712bc288093f4a03fd080b6695790e8f9f7ade125f71e1a5fab153a30bdf539e900a728bd88a1da8c0e85733050000003c174018e4e71f7c1aafd7cd28a8db3e7a7f8d3c0bc7452fef588658"], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f000000000000000000000000000000000000000000000000000280052454a454354000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffff00000000fe80000000000000000000000000001affffffffff000000ffffffffffffffff000000ffff000000ffffffffffffffff697036746e6c3000000000000000000067726530000000000000000000000000000000000000000000ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002b00010120000000000000000000000000000000c800380100000000000000000000000000000000000000000000000070004e464c4f4700000000000000000000000000000000000000000000000000ec0c00000600010001000000e7b0e0f21ae4c30d108c7e3f267d5c1476dcb03d737cdc9bac16a0c1661cec0246c30aac89dc740fc6c56ae90b41d539d70a8e33feba4405b2711de9b9dddbce00000000fe800000000000000000000000000013ff02000000000000000000000000000100000000ffffffff000000ffffffffff00000000ffffffff00000000000000ff696662300000000000000000000000007465716c30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200230442000000000000000000000000000000380160010000000000000000000000000000000000000000000000004800647374000000000000000000000000000000000000000000000000000000040000000001090004008f00ff000300bc0000000004070000000600e5000100f8ff08003f0010002800686c00000000000000000000000000000000000000000000000000000000030100000000000028004e4651554555450000000000000000000000000000000000000000000000ffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x4b8) migrate_pages(r3, 0xe1be, &(0x7f00000000c0)=0x3, &(0x7f0000001f00)) setsockopt$inet_sctp_SCTP_NODELAY(r12, 0x84, 0x3, &(0x7f00000005c0)=0x6, 0x4) 2018/03/21 23:55:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f0000000000)={0x5, 0x1, 0x3}) ioctl$KVM_DIRTY_TLB(r2, 0x4010aeaa, &(0x7f0000000080)={0x100, 0x2}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r0, 0x4, 0x46000) r1 = dup3(r0, r0, 0x80000) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r1, 0x800443d3, &(0x7f00000002c0)={{0xdb65, 0x7f, 0x8, 0x2, 0x9, 0x2}, 0x4, 0xccd, 0x5}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r2 = syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x3ff, 0x8000) ioctl$KVM_GET_NR_MMU_PAGES(r2, 0xae45, 0x6) r3 = open(&(0x7f0000000080)='./file0\x00', 0x20000040000, 0x4) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0x1ff, 0xcc9, 0x0, 0x7, 0x0, 0x5, {0x0, @in6={{0xa, 0x4e21, 0x4, @loopback={0x0, 0x1}, 0x2}}, 0x6, 0x4, 0x0, 0x9, 0xc6}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f00000001c0)={r4, 0x2bd}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r3, 0x404c534a, &(0x7f0000000240)={0x81, 0x8, 0x4}) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000300)={0x2, r1, 0x1}) getpeername$netlink(r5, &(0x7f0000000340), &(0x7f0000000380)=0xc) pipe(&(0x7f0000000040)) 2018/03/21 23:55:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = dup2(r0, r1) r3 = inotify_add_watch(r2, &(0x7f0000000040)='./file0\x00', 0x40) inotify_rm_watch(r2, r3) 2018/03/21 23:55:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2018/03/21 23:55:44 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffff9c, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x864, @remote={0xfe, 0x80, [], 0xbb}}}, 0x1, 0x401}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r2, 0x6d9, 0x5, 0xb396, 0x6748, 0xa0bd}, &(0x7f00000001c0)=0x14) r3 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r3) [ 97.245869] binder: BINDER_SET_CONTEXT_MGR already set [ 97.257785] SELinux: unknown mount option [ 97.262209] NFS: security options invalid: -22 [ 97.268951] binder: 11139:11149 ioctl 40046207 0 returned -16 2018/03/21 23:55:44 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff7fffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) rt_sigreturn() r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f0000a4c000)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14, 0x1d, 0xffffffffffffffff, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80}}, 0x20) [ 97.329407] binder: 11171:11173 ioctl c04c5349 20000000 returned -22 [ 97.338720] binder: 11171:11173 ioctl 4010aeaa 20000080 returned -22 2018/03/21 23:55:44 executing program 1: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x80000001, 0x6, 0x6, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000140)) openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x4402, 0x0) r1 = gettid() setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x7, 0x4) r2 = getpgrp(0x0) kcmp(r1, r2, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) 2018/03/21 23:55:44 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2018/03/21 23:55:44 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)=0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timer_settime(r2, 0xba131525f0be655d, &(0x7f0000000080)={{r3, r4+10000000}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:44 executing program 0: r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000fc4ff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) connect$inet(r0, &(0x7f0000adf000)={0x2, 0x4e20, @loopback=0x7f000001}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x101000, 0x0) sendmsg$alg(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000685101020002002c000000000000000010097fcbb10a1e91b148d636c974c8797d6b847022f666e72837"], 0x2ae}, 0x0) 2018/03/21 23:55:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = dup2(r0, r1) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0xf9, 0x0, [0x3f, 0x4, 0xffffffff, 0x6]}) 2018/03/21 23:55:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x2, 0x7, 0x3f, 0x0, 0x20000000, 0x200, 0x3, 0x1f, 0xfffffffffffffffe, 0x3, 0x3, 0x584f, 0x0, 0x9, 0x8, 0x162475cb, 0x10001, 0x1ff, 0x4}) 2018/03/21 23:55:44 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) flistxattr(r0, &(0x7f0000000040)=""/121, 0x79) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) 2018/03/21 23:55:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0xa00, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x9) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x48000, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0x1001, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r3 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000005fd4), 0xfffffef9, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="00000005000000"], 0x0, 0x0, &(0x7f0000000f4d)}) [ 97.371112] binder: 11171:11181 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 97.399495] binder: 11171:11173 ioctl c04c5349 20000000 returned -22 [ 97.400841] binder: 11171:11181 ioctl 4010aeaa 20000080 returned -22 2018/03/21 23:55:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 97.473167] binder: 11196:11205 unknown command 83886080 [ 97.487675] binder: 11196:11205 ioctl c0306201 20008fd0 returned -22 [ 97.509323] binder: BINDER_SET_CONTEXT_MGR already set [ 97.514997] binder: 11196:11205 ioctl 40046207 0 returned -16 [ 97.520460] binder: 11196:11213 unknown command 83886080 [ 97.526550] binder: 11196:11213 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:44 executing program 1: r0 = socket$inet(0x2, 0x805, 0x8) sendmmsg$inet_sctp(r0, &(0x7f000093eee8)=[{&(0x7f00001f6000)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10, &(0x7f00000013c0)=[{&(0x7f0000001340)='.', 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x3, 0x15, 0xb12e}}, @init={0x18, 0x84, 0x0, {0xc3, 0x8, 0x8}}, @init={0x18, 0x84, 0x0, {0x800, 0x1ff, 0x2, 0x29}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x0, 0x8, 0xfffffffffffffffa}}, @init={0x18, 0x84, 0x0, {0x6, 0x8, 0x0, 0x7}}, @init={0x18, 0x84, 0x0, {0x7da0fe2b, 0x1f, 0xc1b, 0x1}}, @init={0x18, 0x84, 0x0, {0x1, 0x9, 0x2, 0x9}}], 0x150, 0x40}, {&(0x7f0000000000)=@in={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10, &(0x7f000093e000), 0x0, &(0x7f000093ef10)=[@sndinfo={0x20, 0x84, 0x2}], 0x30}], 0x2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000240)=""/164) 2018/03/21 23:55:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x9, 0x40000) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) setsockopt$inet_mreqn(r0, 0x0, 0x20000000026, &(0x7f0000000000)={@multicast2=0xe0000002, @remote={0xac, 0x14, 0x14, 0xbb}}, 0xfffffffffffffe8e) socket$inet_dccp(0x2, 0x6, 0x0) bind(r0, &(0x7f00000000c0)=@nl=@kern={0x10, 0x0, 0x0, 0x80}, 0x80) 2018/03/21 23:55:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = dup2(r0, r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'syzkaller1\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000080)={@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xb}}, 0x9, r3}) sendmsg(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="8a9b80f60ad928af0c65642e2d5cf01161698052b227231a55653f9e42674c972431743069186cc88192694dabb29ed3be917060e8113be68e1f00427cd0bbf371fc8069a07ee6145902c08e9a50b3127bdcdfec1c41e1ff81b32f7e69023df6cde19a2cf815bf9923c279056101", 0x6e}, {&(0x7f0000000180)="281287b24070a3506b07ef6d002c6d32876c065e516fb8d8050333ef05b8a6b6954fc930e9e1b9225635776621ae3a299fa27f72eb820fa544fa610ed0dc70021fbe2365b75d26dae49a615ada1fa8c4bab5a1686009a2d47b2b", 0x5a}, {&(0x7f0000000200)="73d51a4bfd5d8310937b8b6527318d3eec12275a2a41389c3c1056413454a397ca9dc1eb59805882ae316fb9093862b13123d69aee5de1c368e815740a223e", 0x3f}, {&(0x7f0000000240)="a2", 0x1}, {&(0x7f0000000280)="60076ccf62688e457dbc8cb984ca1ee1361a48ee46bbc2ec978425353a3cd58faa610866f3d137ea202076230c2970a8d19042928d42b988538259e4774f73cffc6f0584580536980de95a5f3a4b9ff90ab462eeb8b9de692d9ae91d559dcdf4d33ab7a9abdc5c73f8b4a8e4e85b89e1a929abb9fd4c27abb9c0bc1dbf33e73df7a51622a15b5d80279946bd147d18349c941741361080845b85d3fda353f77e652f74d2a4e3bcd3cc7c39a27bc8bc8dc9e5b6d749e18d1fd7639d70c7bbd2b7f6e71fa7398d868678a19da661846c853c", 0xd1}, {&(0x7f0000000380)="594a51f051ba01f5e94a2eb8371bc40f873aeacdec548e8388b5f0dc8e250b5ada9cddd90f25cd1721347ef5c6", 0x2d}, {&(0x7f00000003c0)="aade35c74b02cd2831cc275e40f893a99d9438bcc1672655aed7f93aff95b69196e996bfd84ac067bcfbd6ac3a41c10f197b9e1b13a3a5d12c2f4ba4eb70221142310fffd24e4cb51cbba6ffbdfd6a7c650f5d81b443fd721888bc2a5c00638b071416dcd334ce6d392b85a235f226476a21c117a5de0562025397862e48731a8993cb3932b6caba0239ee7b275839780fb6a1876fb782e727e10ec89094117c813382181002388b033d00e049c55fff5b6ce8647de09546829aa41723e59f5098f647ec31f8", 0xc6}], 0x7, &(0x7f0000000540)=[{0x28, 0x18e, 0x7, "f1668b8aac91a35e083b02d50504163a03734687316817"}, {0xf8, 0x119, 0x7f, "b59c536526f3fb4d48701237c2b7bda98727f141dc42b07b482f0ae7d79bc62dd067a4a141a93d5516b9300fc321e899b3949bea20952ad7ee2dd2f9ec000d9f63fe8698989894c11991c7ac0ed41ddc07835d53223fd9ce03d4ab1a2474dd718adb1e5dc7d01e05d74bc877ebc632ff892b9d52da0b931bac794ecfd8c96bb8f3a273675b31e0542fae5ef2f902c6fe7c850e7c072fffd8b5ac17d585c18539249f7a89614a24c73ffc68bcd7207ca0dd46612cadc29a48736a39ec61813d9d22a958dbcdd51dff17a9064944d775943e2b6af52df8cc0f4a0a95436f97ebb8e3e390d18472e6"}, {0xa8, 0x19f, 0x3, "ed463b27ba88cecb5b2f0b6a8f02bd874f6ddbdec61d5c8e2058181c21b3bce1031fb9f3c5e18f2146f8efad139439979bf068986e5e1368cb76c9280ec7e612836f0481ff15dbea8e9cdec9a358b1eee67668bdc6d9559b22ecb4777426bd9f1cf32da5861dfaeaf429b7db49e8e6a079e2097265264105a256027c9ec064c7a26c83843852ed87ae6125d75270c224b2950f0da822"}, {0x60, 0x195, 0x3, "79069da7972bacd1b3677751111be6bb16a8d30d3b55df4579465eb5a02d4e59e9701a1eeeb965038c89ae252550888015c09550aad64d2ffb10c0fc656a386a1def22ddd89791c2f124756be6"}, {0xd0, 0x105, 0x4, "1dd20bf9ddac5e0ff1c06e3b2cf4744db2786eb10a4f541720c95337bdc15acf982fecb45462bde2bc55405ca7b3a310bafc304007530d79fa67a624be0855f2e495249c6eb836dd0b0759fefae8c0fa6ed5d263109deb169aaa08f4459c0d52a6346321fb324c25e181b24dd8c00b387651da6a707306102e2bef5c43c78112e56a941ef9642ed084cae10d2c54116d46f84426dc167a81d27b47a621eba01c494c466d7c48b152848ffc0db5c1edd0fc8712b8365d0b8134575b"}, {0x108, 0x104, 0x7, "414655e5c600df8a85449816743d0d4a65638decf5c645b0a31aa81a56b8dd981dc9d29f9e5859de2b4e444d49b58a2cf0142b13c82b641fb5215a5da60ec920244e2093afb35b90fa5f864535a634561da5eb5b77ad988fb7cdd1bbafdf26304c53c3bf510d2ad5745ae3042874fdc1d1547966e8059a17d13cf1ce7bb02a280c169e180f3dd73d1077ec3983b51a96826ef355c4d77ccb8c1fb92aa08f4c0f3ba78a3252c16590c311f73c5d11c365df8281ba01c048d0a966e0635192738e27517726ca21f0d1ec650e7901937e285791ff1f381d384021952088376f070c0cee99ea85547a5c820c7a3cfa13ef9e1f6b2e"}, {0x110, 0x11, 0xffffffffffff8000, "3876d679feaed9dd78480d6ed8d36549dbd9e2c037ef396606cc8ae7ef18f0dccdae2c06f96f7aff989d2ac809402e0a4e5b427b67aeab007b68fdc433c76958271ee082d660413102c74d4d072e5a7641723569074ec65b2e9e35b5658aafed920cbdd33ab5611eb3ada68636be3c68d45672a44b3f66cdc0261f3031332385bdbe36beb1d105f4bdf5aad383906cd59f94f3af7ceedeb3fda0b632090c8faef842e17ee4163312a8bf006c6ca20e41575e8fbfabfba6f822511ee1906b4ac518c89c643d10411cef844d779b6081d27ae134cb728d7046afd94158f20f252fede18e6e0b26921b3228e18f8e5d09d218a9f80533948d48c0f88f5e"}, {0x20, 0x10c, 0x6, "a96e8f2e966e895a2c5fde6dac7ce7a8"}], 0x530, 0x1}, 0x48810) 2018/03/21 23:55:44 executing program 7: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x100) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000140)=0x7) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x15, 0x8}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r1, 0x8e}, 0x8) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) io_setup(0xff, &(0x7f0000000180)=0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000240)='.,cpusetsystem\'\x00') io_getevents(r3, 0x4, 0x2, &(0x7f00000001c0)=[{}, {}], &(0x7f0000000200)={0x0, 0x1c9c380}) r4 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r2, r4) 2018/03/21 23:55:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:44 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x2e) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:44 executing program 0: mmap(&(0x7f0000000000/0xd25000)=nil, 0xd25000, 0x0, 0x32, 0xffffffffffffffff, 0x0) futex(&(0x7f0000d12000), 0x85, 0x0, &(0x7f0000003ff0), &(0x7f0000000000), 0x3ffffffe) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000040)={0x5}, &(0x7f0000000080), &(0x7f0000000100)={r0, r1+10000000}, 0x8) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/vga_arbiter\x00', 0x100, 0x0) getsockopt$inet_buf(r2, 0x0, 0x2e, &(0x7f0000000500)=""/154, &(0x7f00000005c0)=0x9a) [ 98.060872] binder: 11226:11237 unknown command 0 [ 98.073991] binder: 11226:11237 ioctl c0306201 20008fd0 returned -22 [ 98.082239] QAT: Invalid ioctl [ 98.092131] binder: BINDER_SET_CONTEXT_MGR already set 2018/03/21 23:55:44 executing program 0: r0 = socket$netlink(0x10, 0x3, 0xf) sendmsg$nl_route(r0, &(0x7f0000000000)={&(0x7f0000002ff4)={0x10}, 0xc, &(0x7f000000b000)={&(0x7f000003d000)=ANY=[@ANYBLOB="2400f0ff1700210000000000000000000200000000000000"], 0x5}, 0x1}, 0x0) 2018/03/21 23:55:44 executing program 2: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x5, 0x40) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f00000000c0)=0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) ioctl$sock_inet_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 2018/03/21 23:55:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x7fb9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = dup2(r0, r1) ioctl$TIOCSCTTY(r2, 0x540e, 0x80000000) 2018/03/21 23:55:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:44 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000004, 0x32, r0, 0x3) getcwd(&(0x7f0000002000)=""/4096, 0xff1d) r1 = getpgid(0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000100)=0x3, 0x4) capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x6, 0x100, 0x2, 0x9, 0x0, 0x8001}) 2018/03/21 23:55:44 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000480)='/dev/vcs#\x00', 0x1000, 0x2000) getsockopt$ax25_buf(r0, 0x101, 0x19, &(0x7f00000004c0)=""/185, &(0x7f0000000580)=0xb9) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r1, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) ptrace$getregset(0x4204, r2, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/15, 0xf}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000000440)=0xe8) r4 = getegid() getresuid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) getgroups(0x4, &(0x7f0000000880)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000b80)=""/138, 0x8a) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000008c0)={{{@in=@loopback, @in6=@ipv4={[], [], @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000009c0)=0xe8) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r0, &(0x7f0000000b40)={&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)}, {&(0x7f0000000180)="fc5bb8326a6c7fe81f5150a6c6454b9b1491732c7dbfe6141a64f13bf5786042fc4745c4ee1299fdd9", 0x29}, {&(0x7f00000001c0)="33ef1b62b5a087e6b336d4f3390169065c8003264e45f370ea7afe14fe07d343d9a4a8dc1b5d1b1e8483857a6f642603c669edfc18edd1b6ba793a51615ca16c3397885e749069f8c3215185e956c6b7b82549d8a4db0e1d0f3424bbbfa16f9e03e2583e28ffd70554da291f38372fe3efa1ce51c153a1565565", 0x7a}, {&(0x7f0000000240)="227d975aed73e7e5889d36aa9552a5596ea0665d48caf24166a27991f65dfe71485af319b420ee656c58bd974781de19cf15e4e95cae4155124aa47754ee670c7a245b556635c2e25cda17111faf8f421e3df8da75786262a3b34591550384cb7279b4b1bcdbb5b1c37922913e5c", 0x6e}, {&(0x7f00000002c0)="50e347fbccdd94b97860cfac08f30fb5d8067cabee51ba5cc3e404c7a7b18668946ad8fadfaee6094089f816d0b9152c63c356796434bb3ec5e4991ca5d00e9947021975bce6b1088a0e4c49d69a7e0e40e1a8b50b5f5ead2cd330b216ddecd8413770bc7295f2685ff5e59efe6fb5e7506bc04ea3ff979911dc3c7b14a4a4dbaf770e1ed0acc2391660fccfa5d47cf08bd86b5c03b11b1efeca0b7fd84c9fb349b4844920327feb7f53be1cd00ff806c4de3ea110d833e6510fe1ac727354909e4841bcebe9b68b503f350d8f42932b5a1b8307a99cf8d09a8e059d55443733ee84a612258c11e7f3a1b5e461cd315eb661", 0xf2}, {&(0x7f00000005c0)="e0f10e3dae2bda24a94b13fc279a1d3869dd28beaaf0d4697f31dc5c33525ddfb42a73e1fc8c61a4837b613be2e89a75843a61b960b2462cecbc8176e03504ea7ef9b6d8565dd2fe2f64e173a4b8a88f47646de53a219ccc86124ff7b99952bf3b01314d1d1b8179c795819328a5d3e4aa83c0a1a97418f4a02876eab1e9b1a4ac8ef8a808e7db98d4d263efe9ba711dcfa726e5de054d27f612b8a2e282bae7c37988de97327e80522a4feb54b2dc32c5f0ad340ccf80c6f8129d000fea21b7e1a990f47be84b813d2194e15d8b96f6c65ab1d8c25f2df0e1962e13320de6449f4427df8b27448ae8b862cc6389ff72a977eeba233ce4", 0xf7}], 0x6, &(0x7f0000000ac0)=[@cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r2, r5, r6}, @cred={0x20, 0x1, 0x2, r2, r7, r8}], 0x60, 0x81}, 0x40001) tkill(r2, 0x1000000000016) socket$inet6_sctp(0xa, 0x0, 0x84) 2018/03/21 23:55:44 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000100)=""/115, &(0x7f0000000180)=0x73) r2 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05630440000000004653cab4d72be7ff2a0d9cb0f490d38f684378e732d6634088fbce61bff4452af1157c40ee473fd1c5dceae86eb18d0b47c8e4490b2a98036147459d4b022c37edd45253e62f0bf7b04a458c9a176791b93b3f00"], 0x0, 0x0, &(0x7f0000012fc7)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c40000040"], 0x0, 0x0, &(0x7f0000000f4d)}) 2018/03/21 23:55:44 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x6, 0x3, [0x0, 0xfffffffeffffffff, 0x3f]}, &(0x7f00000000c0)=0xe) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0x66}, 0x8) r3 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r3, r1) [ 98.111827] binder: 11226:11237 ioctl 40046207 0 returned -16 [ 98.118510] binder: 11226:11246 unknown command 0 [ 98.123599] binder: 11226:11246 ioctl c0306201 20008fd0 returned -22 2018/03/21 23:55:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000fcbff7)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080)=0x2) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) signalfd4(r3, &(0x7f0000000100)={0x5}, 0xfffffe53, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000280)="660f72e706b8030000000f23c80f21f8350400d0000f23f8c4e16015a191a70000f3f080b67ba2ccb900b9bc0900000f3266baf80cb8b4f92b88ef66bafc0cec2e650f22a6b90e0a00000f320f06f26e", 0x50}], 0xaaaabbf, 0x0, &(0x7f0000000040), 0x1000010c) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000300)={"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"}) 2018/03/21 23:55:44 executing program 0: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x20, 0x0) mkdirat(r0, &(0x7f0000000180)='./file0\x00', 0x8) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr\x00') fchdir(r1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000200)=0x1) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) socket$inet(0x2, 0x80000, 0xffffffffffffffff) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000001c0)) 2018/03/21 23:55:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000200)='/dev/snd/midiC#D#\x00', 0x7, 0x40000) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e21, 0xfffffffffffffe0e, @mcast2={0xff, 0x2, [], 0x1}, 0x518}}, 0xfff, 0xc87, 0x4, 0x5, 0x4a}, &(0x7f0000000300)=0x98) getpeername$packet(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000400)=0x14) bind$packet(r1, &(0x7f0000000440)={0x11, 0x10, r3, 0x1, 0xfec, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000340)={r2, 0x8001}, &(0x7f0000000380)=0x8) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x3, 0x0) ioctl$PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000080)=0x4140) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000140)={r5, 0x1, 0x5}, 0x8) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000180)) 2018/03/21 23:55:44 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0xfffffffffffffec9, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000003, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000280)=0x8000000000, 0x4) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000200)) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x0, 0x0) r3 = dup2(r0, r1) io_setup(0x400, &(0x7f0000000040)=0x0) io_cancel(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xe, 0x0, r1, &(0x7f0000000080)="f20afa5c3a45a414d1fbab9d56312cabbc8ccbdd65334e7f83e398e125ac6c6050b0ea1c52ec916e86ded153ac1a732d4f2aa511349a9cd19c6853a00935a39fee4d12bc1af855427ebc9c01db17ded68b6322de88032a22d621af2299322dc7430b8ba1d4d1507ba11e9ef2108aaf03140f1136a86fc233f3869013e7712a8ad210e923fc47bbb2dbadea64f0bfefada6fef1", 0x93, 0x4c2, 0x0, 0x1, r3}, &(0x7f0000000180)) 2018/03/21 23:55:44 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x0, 0x0) ioctl(r0, 0x4400000000001267, &(0x7f0000000000)="ceef7f61a933b2af67a487627eccbdc9141b41b1f894113d2e10762f8692d7814e173bee73d5921e3acb649a2c662385e617511028b8780b38976ae81aae70a300113d923576a0ff014e3d66b0e37aed29e8092c34896df21cd76c10b57cc5fedae1992985f8f3e6618590fa8368e470b52530b8d659c2925f461f439553468f32e133f862d0b9b1a4fb93725d053415e20416ddace99019df05f4cfb20eae19b5e71d270d118000000000000000") r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x501000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000140)={0xd01, 0x7, 0x8, 'queue1\x00', 0x1}) 2018/03/21 23:55:44 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x10000, 0x0) connect$rds(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r0, r2) [ 98.172391] binder: 11255:11261 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 [ 98.183479] binder: BINDER_SET_CONTEXT_MGR already set [ 98.189893] binder: 11255:11261 ioctl 40046207 0 returned -16 [ 98.198137] binder: 11255:11268 BC_REQUEST_DEATH_NOTIFICATION invalid ref 4194304 2018/03/21 23:55:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"27fbb892acd460c58fb0e734766dbaa418fdd69005820a89dfa2c2438608e32411898816d513f1ca56a1838d2aefc7a9c68adef2172d6913b186244411154ab25e93c40b9a534e7f381b905dccd7f12bebb48e2b6f23c68090953bbf23878287fdb25c4291e4a8941d5f0db700c118ef96c03698365000f6c1a47ff1509df406cbcfa4d28beaaf9f31eed2f03e909604a9718f57a431d4679eaf691ede713598ef52612add4fd4d4900e88b57ffb0e460e4bc63ec25ee84ac9fe02c010c966d4f73d7a3518f890f359e1327b4ac4c405e452ac12999a68b637061627bd1c43c3162741721bc0ecdc06d0ea923c190a69813721bc225b90569fe1030d19bdb0a48ae8b38181301856ae22e1c3f87c082fdfdddf5367a4e283d53a2a47964f4c98c891c42704f497b074b1ebf79545aa608598edd8d0733d41596c110a0fd5519f0566b53a091c8e6d77b5b1f8d025a9f5897f9c9b8d208664a1076b7b17ef15593b00b51604eddcd2d16d117df3589f88627510b7fea06ac0dfad32d663a02607ca9e096c50c0d7f7856d645a8968139b1e1e5930f6d9418dee04979c734fc1f6e3ef1ed9e7a0c7cc3a221650eb1625a1540d482969f6663ef7cfbccad341a5e72ea71004864ca25a763446beddc25657e18626cdd9bc3735b4bc2f20d9f910c396e2bb2f357154345337f8e29286afcc22b9566e5f7f5fdf6a8a50722356314d128a48a32f40ec0c1ecf3655747f59654cb3d5cbe37a8cd95b99d9e92df322dcaaa28a59cfb36bd69ffd7f40377f8d626a323c85211dd052f8581d5d062c1015f48b5f32972ca44afcf0b9bfcbc32b86295cebb2f240a281cdf4d198bd26e1d1f041124970eee61615893be1e9d2942e561190bb990f77bc7493b19785d77db012ea8be6cbf06bc061623b5dc52a4aed91a990219ab9d4897da9b2766fd31a722ee329f383455979a87f626474647aadab711b8efdad20586175e239d76d9e2354b04fda0d118b849d0487bc8bec303ba865404754874364fff626965bd2c822278558b1b8895b692487ac6eb170feb93426395f6009d8f2e3bc56d654c71e9e1e83e433bd3454efeef340cf6d329d3f99d9c90b02188ab60b2190461eda5450a3c7e9eec4736de5bb8d1423aef2f8072f56b423f3386aa2ddb5243c5c7a43a389aba557460efad722e2eb59761195924d1647828e2883442c00fed27c7c67b66eddde6de20b9651a3aeb7ca15c655c0aed0947aed5272bb513fd1d230356a5cbf1b3894b030bfec6e608b47dd2f370349ffc35c5a0832c42d736d4a3317c9505347e49a3d28274c3e2fa2829c18c8a4f2cb7fb7140aa9fb8114fb7a538abdb6ad61881f7cd980f1c572f2d59277f6019965684e7a78d16a32d0daea5db2f3fbdab1d291082b7ec8d26450afff6f6de74081b54f8bf9164a6ebc231fbe7266e1"}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:45 executing program 6: socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f000000e000)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000015000)="240000002000039c59000000e10000a50a0705000000c497271d856806000200d100737a", 0x24}], 0x1}, 0x0) 2018/03/21 23:55:45 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@broadcast, @in6=@ipv4={[], [], @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000140)=0xe8) get_thread_area(&(0x7f0000000180)={0xfffffffffffffffb, 0x71ec4be17d93c8a0, 0x0, 0x9, 0xc9, 0x40, 0x8, 0x1, 0x20, 0x2}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001, r1}, 0xc) 2018/03/21 23:55:45 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x802) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) r2 = dup(r1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000100)=r3, 0x4) dup2(r0, r1) 2018/03/21 23:55:45 executing program 0: r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/commit_pending_bools\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f00000001c0), &(0x7f0000000200)=0x4) bind$pptp(r0, &(0x7f0000000180)={0x18, 0x2, {0x3, @dev={0xac, 0x14, 0x14, 0xe}}}, 0x1e) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = gettid() setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f00000000c0)={0x77359400}, 0x10) r3 = dup(r1) listen$netrom(r1, 0x7ff) accept4$ax25(r3, &(0x7f0000000000), &(0x7f0000000080)=0x10, 0x0) shutdown(r1, 0x0) timer_create(0x0, &(0x7f0000000140)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) tkill(r2, 0x1000000000016) 2018/03/21 23:55:45 executing program 6: mkdir(&(0x7f00000001c0)='./file0\x00', 0x72) creat(&(0x7f0000000080)='./file0/file0\x00', 0x0) rename(&(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000200)='./file0/file0\x00') 2018/03/21 23:55:45 executing program 7: r0 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000000340)={&(0x7f00000000c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000140)=""/131, 0x83}], 0x1, &(0x7f0000000240)=""/218, 0xda, 0x40}, 0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0x80000000, 0xf477, 0x1, 0xfffffffffffffffb, 0x81, 0x6, 0x6, 0x40000000, r2}, 0x20) r3 = dup3(r0, r0, 0x80000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000000)={0xfff, 0x8001}) dup2(0xffffffffffffffff, r0) 2018/03/21 23:55:45 executing program 1: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x202240, 0x0) mknodat(r0, &(0x7f0000000140)='./file0\x00', 0x1000, 0x7fffffff) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') readv(r1, &(0x7f0000001180)=[{&(0x7f0000000080)=""/168, 0xa8}], 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000180)={r0, 0xb43, 0x81, "a7c73a326cc967cab97d4cf0761aa089a9ab7f13f9061cdb0c005d909dabce65872a94d22477bbfe2d28b3c57060ed7187db7f46b26ab5078f1918f356495fa06e74ac6869018aa3b1969c1d9fab1b40912aa71e56df8d3ae02ed0d9a0e2fc7a140030a8d16eaf457bbcbf44afcb2042b5ef250e1af5627001312c2343a13a0baba0d11d02699b4cf654f3d9d87ac2f34320bdeea08c9ccf310994aab1eacfa6281cd5cb48de6c5828a34b64d09c4ed2847b8051884f96b0215481bc34963e068d3806fb6110b67acdd6fd01e4e77ab55bd3ad31db1145"}) 2018/03/21 23:55:45 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x30000, 0x0) getpeername$netlink(r0, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) 2018/03/21 23:55:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, &(0x7f0000000200)={"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"}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2018/03/21 23:55:45 executing program 6: r0 = socket$inet(0xa, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x2, 0xb30, [0x20000880, 0x0, 0x0, 0x20001240, 0x20001380], 0x0, &(0x7f0000000040), &(0x7f0000000880)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x1, 0x800, 'bpq0\x00', 'ifb0\x00', "747269646665300000002f19ffbf00", 'vlan0\x00', @link_local={0x1, 0x80, 0xc2}, [], @random="f02a8c974b41", [], 0x8f0, 0x958, 0x990, [@among={'among\x00', 0x858, {{0x40000000, 0x7, 0x1ff, {[0xffffffffffffffff, 0x4, 0x3, 0x1, 0x1, 0x100000000, 0x5, 0x96, 0x1, 0xfb5, 0x5, 0x1, 0xff, 0xd4, 0x1, 0x8, 0x8, 0x8001, 0x6, 0x9, 0x8, 0x4, 0x3, 0x100000000, 0x1, 0x4, 0x8, 0x77, 0x9e, 0x7, 0x3, 0x2b2835b8, 0x10001, 0x4, 0x3ff, 0xffffffffffffffe0, 0x9, 0x99, 0x40, 0x2000000000000000, 0x2, 0x0, 0x0, 0xffffffffffffff80, 0x2, 0x4, 0x9, 0x8, 0x392, 0x0, 0xffffffffffff9503, 0x9, 0xfffffffffffffeff, 0x80000000, 0x5, 0x6, 0x1, 0x1, 0x5, 0xfff, 0xffff, 0xfffffffffffffe01, 0x7, 0x4, 0x7fff, 0x9, 0x100, 0xffffffffffffff00, 0x9, 0x2, 0x9, 0x800, 0x2, 0x100000001, 0x0, 0x1, 0x0, 0x9, 0x3f, 0x4, 0x1, 0xac, 0x1, 0x40, 0xffffffffffffff36, 0xe4a, 0x7, 0x0, 0x3, 0x3ff, 0x5d, 0x81, 0x2, 0x3, 0x7, 0x101, 0x400, 0x6, 0x3, 0xed, 0x80000, 0x1000, 0x2, 0xfffffffffffffffb, 0xe01, 0xb39e, 0x0, 0x2, 0x6, 0x900c, 0x0, 0x9, 0x4, 0x3, 0x0, 0xfff, 0x8, 0x73b, 0x8, 0x3, 0x2, 0xffffffffffffffbe, 0xfffffffffffffffc, 0x3, 0xdcc, 0xfff, 0x0, 0x7ff, 0x4, 0x3, 0x2, 0x9, 0x100000000, 0x5, 0x6, 0x40, 0x6, 0x7fff, 0x1, 0xfffffffffffffefe, 0xdc, 0xfff, 0x40, 0x8, 0xff, 0x8, 0x400, 0x9, 0x3, 0x7, 0x1631, 0x6, 0x0, 0xffffffff, 0xfffffffffffffffb, 0x7f, 0x1, 0x20, 0x7e4, 0x200, 0x100000001, 0x1, 0x7fffffff, 0xfffffffffffffffd, 0x4f, 0xff, 0x8, 0x5, 0x100000001, 0x1, 0xffffffffffffffe4, 0x7, 0x80000000, 0x9, 0xcb, 0x81, 0x400, 0x8, 0x65, 0xcac, 0x5, 0x2, 0x10001, 0x80, 0xfff, 0x6, 0x1f6, 0x0, 0x200000, 0x73, 0x1, 0x3, 0x0, 0x0, 0x8001, 0x8000, 0x400, 0xd40d, 0x8, 0x1ff, 0x0, 0x10000, 0x1000, 0x3ff, 0xdd, 0x100000001, 0xb537, 0x10001, 0x0, 0x2, 0x8, 0x7, 0x7, 0x9, 0x10000, 0x0, 0xfffffffffffffff8, 0x3f, 0x0, 0x3, 0x9, 0x800000000000, 0x5, 0x228e, 0xfffffffffffffff8, 0x5, 0x100, 0xfffffffffffffffb, 0x8001, 0x80000000, 0x7, 0x2, 0x6, 0x0, 0x5, 0xdc, 0xb2d, 0x3ff, 0xed83, 0x2, 0xffffffffffffffff, 0xa68, 0xf88, 0x6, 0x8, 0xf53, 0x3, 0x100000001, 0x8, 0x0, 0x89, 0x9, 0x0, 0xb99c, 0x6, 0x2], 0x3, [{[0x3, 0x8]}, {[], @multicast2=0xe0000002}, {[0x3, 0x5afea8ec], @dev={0xac, 0x14, 0x14, 0x19}}]}, {[0x0, 0x5, 0x1, 0x7fe0000000000, 0x7, 0x1d, 0xffff, 0x7, 0x5d, 0x0, 0x95a, 0x400, 0xbc1, 0x7, 0x1, 0x4, 0x0, 0x8, 0x9, 0x40, 0x3, 0xfffffffffffffff7, 0x3, 0x3ff, 0x5, 0x7, 0xfffffffffffffe0a, 0xf48, 0x3, 0x5c, 0x401, 0x5, 0x3975, 0x8, 0x9, 0x8000, 0x0, 0x80000001, 0x4, 0x9, 0x8, 0xfffffffffffffff8, 0x3, 0xff, 0x7, 0x0, 0x0, 0x8000, 0x2, 0x9, 0x1, 0xfffffffffffff000, 0x9, 0x4, 0x4, 0x6, 0x3, 0x5, 0x100000000, 0x101, 0x8, 0x3, 0x2, 0x7b7, 0x9, 0x3, 0xfffffffffffffffa, 0x80, 0x1d0, 0x1babe598, 0x1000, 0xfffffffffffffeff, 0x3, 0x7d6e, 0x1, 0x4, 0x8, 0x3, 0x9c33, 0x3, 0x33, 0x731cddf8, 0x10000, 0x4, 0x3, 0xffffffffffffffb1, 0x5, 0x36, 0x80000000000, 0x2, 0xfffffffffffffffe, 0x30b, 0x380319d, 0x9, 0x0, 0x6, 0x1f, 0x7, 0x800, 0x3, 0x2, 0x6, 0x1, 0x7f, 0x80000001, 0x6263, 0x40000, 0x3, 0x7, 0x1, 0xfffffffffffeffff, 0x7fffffff, 0xb534942, 0x0, 0x7ff, 0x3ff, 0x5, 0x7, 0x8, 0x40, 0x1f, 0x9868, 0x163, 0xc12, 0x3, 0x7fffffff, 0x4, 0x4, 0x80, 0xfffffffffffffa47, 0x80000000, 0x4, 0x6, 0x6, 0x27ef, 0xfe43, 0x1, 0x1000, 0x48000000000000, 0x31a, 0x7f, 0x8, 0x3d844144, 0x1, 0xfe, 0x37, 0xe5, 0x144c, 0xffffffffffffffff, 0xffffffff, 0x0, 0xffff, 0x0, 0x9, 0x7, 0x8, 0x9, 0x3, 0x0, 0x7, 0x1, 0x400, 0xf82, 0x3, 0x0, 0x7, 0xffffffffffff8001, 0x4, 0x3, 0x7, 0x6510, 0x0, 0x2, 0x6, 0xfff, 0xfff, 0x8, 0x5, 0x1000, 0x6, 0x68e5, 0x1, 0x100, 0x6, 0x3, 0x10001, 0x7, 0x3, 0x0, 0x7, 0x5, 0x1, 0x1, 0x5, 0x6f, 0xffffffff, 0x0, 0xaa, 0x1, 0x376, 0xda, 0x5, 0x4, 0xfffffffffffffffe, 0x401, 0x3ff, 0x7, 0xffffffffffffff3a, 0xb4, 0x5, 0x7, 0x2, 0xc2f, 0x6, 0x6122, 0x101, 0x4, 0x1, 0x0, 0x2, 0xdf, 0x1, 0x3, 0x1, 0x10001, 0x7f, 0x9, 0x7, 0x8, 0x12c3, 0x7, 0xfffffffffffffff7, 0x100, 0x8, 0x11, 0x6, 0x3ff, 0x88a, 0x0, 0x6, 0x1, 0x0, 0x89db, 0x8, 0x9, 0x9e6, 0x7e0, 0x6, 0x3, 0x2, 0x4, 0x7, 0x2, 0x7, 0x5c9, 0x3f, 0x893], 0x2, [{[0xffffffffffffff01, 0x6], @multicast1=0xe0000001}, {[0xfffffffffffffffd, 0x7], @broadcast=0xffffffff}]}}}}]}, [@common=@CLASSIFY={'CLASSIFY\x00', 0x8}, @snat={'snat\x00', 0x10}]}, @arpreply={'arpreply\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe, 0x1, [{{{0x19, 0x0, 0x0, 'vcan0\x00', 'bcsh0\x00', 'bcsf0\x00', 'sit0\x00', @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], @random="dda1fdb6139e", [], 0xd8, 0xd8, 0x110, [@realm={'realm\x00', 0x10}, @pkttype={'pkttype\x00', 0x8}]}}, @snat={'snat\x00', 0x10, {{@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xba8) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x10000, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 2018/03/21 23:55:45 executing program 4: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f0000fd7000)) timer_settime(0x0, 0x0, &(0x7f0000d07000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) ioctl$KVM_GET_LAPIC(r0, 0x8400ae8e, &(0x7f0000000480)={"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"}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0xffffffffffffffff, 0x32, 0xffffffffffffffff, 0x0) tkill(r1, 0x1000000000016) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f00000000c0)=0x50faa1fe, &(0x7f0000000100)=0x2) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'syz_tun\x00', {0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_void(r2, 0x1, 0x1b, 0x0, 0x0) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) r9 = getegid() r10 = getegid() ioprio_set$uid(0x3, r3, 0x7fff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000440)={r11}) setgroups(0x7, &(0x7f00000003c0)=[r4, r5, r6, r7, r8, r9, r10]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000880)={0x4, 0x101, 0xbb1}) 2018/03/21 23:55:45 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = shmget(0x0, 0x1000, 0x20, &(0x7f0000ffd000/0x1000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f00007e6000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f000045afc8)={@multicast2=0xe0000002, @loopback=0x7f000001, 0x0, 0x2, [@remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}]}, 0x18) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f00003fdff5)={@multicast2=0xe0000002, @loopback=0x7f000001, @rand_addr}, 0xc) 2018/03/21 23:55:45 executing program 2: setxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@known='security.capability\x00', &(0x7f00000003c0)='/dev/ppp\x00', 0x9, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x78, &(0x7f0000000240)=[@in={0x2, 0x4e22, @multicast2=0xe0000002}, @in6={0xa, 0x4e21, 0x478}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e21, @multicast1=0xe0000001}, @in={0x2, 0x4e22, @loopback=0x7f000001}, @in6={0xa, 0x4e21, 0x3, @mcast2={0xff, 0x2, [], 0x1}, 0x9}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x9}, &(0x7f0000000180)=0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r2, 0x9f26}, 0x8) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000440)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ppp\x00', 0x141, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r3, 0x4040ae70, &(0x7f0000000080)={0x8001, 0x5, 0x5, 0x203}) ioctl$PPPIOCGL2TPSTATS(r3, 0x80487436, &(0x7f00000002c0)="5193863ae22e910451360fb4b7ccc82b7cbc5061302fd87cf4f6be485d422a018a5186aab37ffdcaaea2a0d1be4c2c183bf1e4397d076c7d4108e3fc952b09465291b0523c5cfe3c170cafe4eb646a222d70bd85f54d061f1f7779c0d8") 2018/03/21 23:55:45 executing program 0: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000890000)='/selinux/enforce\x00', 0x80081, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000080)={@multicast1=0xe0000001, @rand_addr=0x6, @rand_addr=0x6}, 0xc) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x10000) pwrite64(r1, &(0x7f0000000040)="ad99b739cbbad9ad29d879c6", 0xc, 0x80000000) 2018/03/21 23:55:45 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/16) r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000140), 0x4) dup2(r1, r2) 2018/03/21 23:55:45 executing program 7: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56a6d999, 0x1deabe10, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x0, 0x0, 0x2, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x57, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000f5b000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) dup2(r0, r1) [ 98.477953] BUG: unable to handle kernel paging request at ffffc900460ed4cc [ 98.485143] IP: ebt_among_mt_check+0x1f8/0x390 [ 98.489737] PGD 1dad2f067 P4D 1dad2f067 PUD 0 [ 98.494362] Oops: 0000 [#1] SMP KASAN [ 98.498155] Dumping ftrace buffer: [ 98.501681] (ftrace buffer empty) [ 98.505375] Modules linked in: [ 98.508559] CPU: 0 PID: 11339 Comm: syz-executor6 Not tainted 4.16.0-rc6+ #361 [ 98.515903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 98.525258] RIP: 0010:ebt_among_mt_check+0x1f8/0x390 [ 98.530347] RSP: 0018:ffff8801b47cf198 EFLAGS: 00010246 [ 98.535700] RAX: 0000000000000007 RBX: ffffc900060ed0c8 RCX: ffffffff851bf706 [ 98.542958] RDX: 0000000000000000 RSI: ffffc90003ce0000 RDI: ffffc900460ed4cc [ 98.550215] RBP: ffff8801b47cf1d0 R08: 0000000000000000 R09: 0000000000000000 [ 98.557472] R10: ffffffff88613400 R11: 0000000000000000 R12: ffffc900460ed0c8 [ 98.564731] R13: ffffffff851bf540 R14: 0000000000000858 R15: ffffffff87701900 [ 98.571991] FS: 00007fa93defd700(0000) GS:ffff8801db200000(0000) knlGS:0000000000000000 [ 98.580205] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.586074] CR2: ffffc900460ed4cc CR3: 00000001badb9006 CR4: 00000000001606f0 [ 98.593333] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 98.600588] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 98.607846] Call Trace: [ 98.610434] ? ebt_mac_wormhash_check_integrity+0x1e0/0x1e0 [ 98.616137] xt_check_match+0x235/0x9c0 [ 98.620104] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 98.625289] ? xt_check_target+0x990/0x990 [ 98.629543] ? mutex_unlock+0xd/0x10 [ 98.633245] ? xt_find_match+0x17b/0x1e0 [ 98.637307] ebt_check_entry+0xbc3/0x1e00 [ 98.641471] ? ebt_standard_compat_to_user+0x180/0x180 [ 98.646744] ? __is_insn_slot_addr+0x1fc/0x330 [ 98.651327] ? print_irqtrace_events+0x270/0x270 [ 98.656086] ? find_held_lock+0x35/0x1d0 [ 98.660158] ? __lock_acquire+0x664/0x3e00 [ 98.664395] ? is_bpf_text_address+0xa4/0x120 [ 98.668888] translate_table+0xcf5/0x2290 [ 98.673055] ? ebt_do_table+0x1f40/0x1f40 [ 98.677206] ? check_same_owner+0x320/0x320 [ 98.681517] ? rcu_pm_notify+0xc0/0xc0 [ 98.685414] ? rcu_read_lock_sched_held+0x108/0x120 [ 98.690422] do_replace_finish+0x79a/0x2620 [ 98.694759] ? ebt_register_table+0xe60/0xe60 [ 98.699251] ? find_held_lock+0x35/0x1d0 [ 98.703315] ? __might_fault+0x110/0x1d0 [ 98.707364] ? lock_downgrade+0x980/0x980 [ 98.711505] ? lock_release+0xa40/0xa40 [ 98.715464] ? check_same_owner+0x320/0x320 [ 98.719776] ? __check_object_size+0x8b/0x530 [ 98.724270] ? __might_sleep+0x95/0x190 [ 98.728245] ? kasan_check_write+0x14/0x20 [ 98.732469] ? _copy_from_user+0x99/0x110 [ 98.736613] do_replace+0x333/0x4b0 [ 98.740237] ? compat_copy_everything_to_user+0x1470/0x1470 [ 98.745959] ? ns_capable_common+0xcf/0x160 [ 98.750281] do_ebt_set_ctl+0xd4/0x110 [ 98.754162] nf_setsockopt+0x67/0xc0 [ 98.757871] ip_setsockopt+0x97/0xa0 [ 98.761583] udp_setsockopt+0x45/0x80 [ 98.765377] ipv6_setsockopt+0xa0/0x130 [ 98.769344] tcp_setsockopt+0x82/0xd0 [ 98.773145] sock_common_setsockopt+0x95/0xd0 [ 98.777636] SyS_setsockopt+0x189/0x360 [ 98.781609] ? SyS_recv+0x40/0x40 [ 98.785060] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 98.790590] ? do_syscall_64+0xb7/0x940 [ 98.794556] ? SyS_recv+0x40/0x40 [ 98.798002] do_syscall_64+0x281/0x940 [ 98.801880] ? __do_page_fault+0xc90/0xc90 [ 98.806109] ? trace_event_raw_event_sys_exit+0x260/0x260 [ 98.811636] ? syscall_return_slowpath+0x550/0x550 [ 98.816557] ? syscall_return_slowpath+0x2ac/0x550 [ 98.821485] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 98.826848] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 98.831692] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 98.836871] RIP: 0033:0x454239 [ 98.840051] RSP: 002b:00007fa93defcc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 98.847752] RAX: ffffffffffffffda RBX: 00007fa93defd6d4 RCX: 0000000000454239 [ 98.855017] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000013 [ 98.862275] RBP: 000000000072bea0 R08: 0000000000000ba8 R09: 0000000000000000 [ 98.869529] R10: 0000000020000080 R11: 0000000000000246 R12: 00000000ffffffff [ 98.876790] R13: 00000000000004ec R14: 00000000006f86c0 R15: 0000000000000000 [ 98.884081] Code: 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 0f b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 69 01 00 00 <45> 8b ac 24 04 04 00 00 41 81 fd a9 aa aa 0a 77 8f e8 b2 21 55 [ 98.903327] RIP: ebt_among_mt_check+0x1f8/0x390 RSP: ffff8801b47cf198 [ 98.909891] CR2: ffffc900460ed4cc [ 98.913340] ---[ end trace 2bf5b2fc848f0098 ]--- [ 98.918082] Kernel panic - not syncing: Fatal exception [ 98.923884] Dumping ftrace buffer: [ 98.927412] (ftrace buffer empty) [ 98.931107] Kernel Offset: disabled [ 98.934721] Rebooting in 86400 seconds..